ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000000c0)={r4, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r0, r1, 0x0, 0xedc0) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, r5) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:51:15 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e00000027f0000010100000002000000e0000001000000005b63bdebbca9a6645ef37b0bea26fec51fa930572436fffd60fab08f075eebd822bca4042f821d63bed65715bca939cfe2e6143d41b064671ecdb150c863330dce9aa5bc3807f6d71441e8477684045b44663ad584690af2089c7f46a90bf1d148cc67d0f32b2a1a3137f08e3a0474218eceece5a88b86c79b31fa998669"], 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x0, 0x0) readv(r4, &(0x7f0000000380)=[{&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000440)=""/135, 0x87}], 0x2) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="bc0800002400ffffff0300000000000000fffff7", @ANYRES32=r6, @ANYBLOB="0000000bf1ffffff000000000800010063627100a408020004040600030000000500000000700300fdffffffffff00001f0000000500000000020000010000000000100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000040000000ed000000010001000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f000d000300000004000000070000000900000005000000030000000200000087d40000020000000800000000010d4a77d4944b4a00007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff04000800000004040600d90b0000ff00000005000000040000001ba2cc3b00000080010000003f000000ff0f0000bd52c97303000000be060000fffffffffffeffff7f000000ff0000008100000000db040009000000070000000300000000000000060000008f5e0000010000000002000006000000010100000200000007000000000000e0318900000104000000efff000600000004000000080000000400000002000000c00000000800000008000000f7ffffff05000000810000004d00000001000080eb0700001f000000090000000800000001000000000000000000000002000000ffff00000100000002000000000000e0a000000040000000ff000000f7ffffff0500000009000000070000000600000028080000030000000600000004000000be00000003000000070000000500000038080000faffffffffffffff47b5554d001000008100000007000000ffffffff040000000100000002000000566b00002000000004000000020000008b01000001000000ffff000004000000ff0f0000050000002000000003000000e40d000007000000f8ffffff200000003f000000387f00000700000007000000c10a000009000000040000000400000000000000008000000100008009000000370b000000000000ff07000006000000bb7900000400000002000000ffffff7f0300000000000000090000000700000005000000000000807f0000000900000008000000fad4ffffff01000001010000010000003f0000000400000020f2ffff01000100ffff0000010000000200000008000000fbfffffff9ffffff040000004d000000060000000200000002000000070000004e0d0000000200000800000035000000300e00000700000000040000020000000180000020000000f2ffffff070000000500000000010000fffffeff0900000000080000070000000800000009000000ff7f0000090000000400000004000000000000000600000005000000010000000900000008000000ff0700000300000000800000bf16000002000006000000ffee00000001000000000000000010f7006305000000000000000000007f00000010080000000000000100008002000000080000000101000003000000ffffff7ffffffffff7ffffff0600000003000000a6060000ff0300000700000001800000090000000200000000000000040000000080ffff00020000070000000500000001000100000000800000af06060000002b0a000005000000010000000500000009000000040000000500000002000000ffffff7ff30000000800000002000000ffff0000ff070000810000004000000075fc000009000000fbffffff0500000000000000810000000100000080000000d05e0000020000001f00000000000000ff010000451e00002d00000000000000ff0000001000030008001000ff070000010000001800010039031c020101000001000000000000060500000010000200e002807104000000ff03000018000100080d1e02800000000700000024709a02ff7f000010000500010000000000000007000000100003001f000300070000000101000018000100e701040009000000040000000104000000000000f2275eef7138e6d8404ee35c1c03d0a7e3015b89e6e440ebafa27d5b8188804cd5beea2fda73c030f26439c9e4f2e27a824bfb4415f2af99b482560d1a447df28d8d838ad1a39caf40dc9ec5f134529d47c0604f66f8714f8ee51165c4b029a7dc7e2f90de64a234d9098b06231c71bc79c43de912eb17614cf75d8c49152a801ac9a1326f0e334e0534faa8d8704d03c25495230a2ed4feb5298d99c124310dd8d4054c8be6bdb8bcede3d1552b08c169755c508c65ff8e1c50711a38d9a451eb650df96535fcc7669eb1f0f7fc5135a05b389610d33df49e9d1d3808c8fa0524b1caa582c913fedb22de15fbc7e7890faa48e6205a74bf817d48ea3dc9cddb6acc14b94522ccce95a27379b1ced543ad45de5016647e86154fd92670b9fc95ff90ea60fcf349981185b11322c4a48276eea082e4be45b9125653ba5f8ad8500d0d768b2de6b9e198568ecd526a1ba44c9180104fa91e55e31181b4acad815ef766bc8604c30c715da309a185645439aaabb542625905dc77193d45cde1978dc9c67cea6b01d2d4a28b13fc1e71d1f2a38537c44b629790b1305371c9e705771da5555c743b5b4adea2b95aa708f41e7a713277f5422f2bb669861730554e266f4ae61e0377f517b23ae4821e04e500cf998be043bab81fa38368a555f4a381eab2a692e0ed4ca80bcb7570518078eb76bd313b23d0708cd26017f5a64a703da88679bbb758ac9b2b3ad70bbd679e7e24852925d96c941ac4cce3c9863a529c9f3f024c93fbd7e61e29fcbd6368d915afa0e54e02c6053d"], 0x8d0}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x7, r6, 0x1, 0xdd, 0x6, @local}, 0x14) readv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000440)=""/135, 0x87}], 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x2, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6548}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c080}, 0x4040) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x102, 0x0) ioctl$PPPIOCSCOMPRESS(r7, 0x4010744d) [ 359.688834][T12611] binder: 12607:12611 unknown command 5 [ 359.695216][T12611] binder: 12607:12611 ioctl c0306201 20000280 returned -22 [ 359.752446][T12614] binder: 12607:12614 ioctl 8927 20000080 returned -22 [ 359.757396][T12613] dlm: non-version read from control device 135 [ 359.797081][T12616] binder: 12600:12616 unknown command 1090151173 [ 359.803668][T12616] binder: 12600:12616 ioctl c0306201 20000280 returned -22 [ 359.827379][T12618] dlm: non-version read from control device 135 [ 359.834849][T12614] binder: 12607:12614 unknown command 4 [ 359.840683][T12614] binder: 12607:12614 ioctl c0306201 20000280 returned -22 [ 359.881271][T12617] binder: 12607:12617 ioctl 8927 20000080 returned -22 19:51:16 executing program 0: syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x7, @remote, 0x3}}, 0x2, 0x2, 0x1, 0x5, 0x63, 0x3ff, 0x8}, 0x9c) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$midi(r2, 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x8000) read$midi(0xffffffffffffffff, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'U+', 0x5}, 0x16, 0x2) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="05630de899f672692dfaff13b76d06980439fa39ba8af2e601c6e2c331db3457b058c969408c61101f1249d0287451527164b5e45c37d8f48c92d5fe607803ad9ebeca523603a85837221296fe33dc24e679c5d4f2fa92bdb2238d1b648ca9266ae00818409c364125e666656a0c17ffda8c35accdd6f1b0ecc67e0d1f8310f1f8ff9e3d508bf860b0ac719c072eede8549a76fe7d6acd0a327c9558"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = dup2(r1, r5) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="044304400300000005630440000000000963104000f87b000000000000000000000000000000056304400100"], 0x0, 0x0, 0x0}) [ 360.040949][T12624] dlm: non-version read from control device 135 19:51:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = syz_open_procfs(0x0, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r0, r1, 0x0, 0xedc0) [ 360.119040][T12625] dlm: non-version read from control device 135 [ 360.276877][T12627] binder: 12626:12627 unknown command -401775867 [ 360.283702][T12627] binder: 12626:12627 ioctl c0306201 20000200 returned -22 [ 360.377509][T12629] binder: 12626:12629 unknown command 1074021124 [ 360.384217][T12629] binder: 12626:12629 ioctl c0306201 20000080 returned -22 19:51:17 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="056304400000000000634040e70a0beac5fe1f74777bc8ad39128aaf779da3a651ea41367849648583f3fd83f68056eb7c5326edd40bb2a3eefc46ec666b5c71719ea6cf"], 0x0, 0x0, 0x0}) 19:51:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@void, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @multicast, @dev={0xac, 0x14, 0x14, 0x21}, @local, @loopback}}, 0x1c) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:51:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = syz_open_procfs(0x0, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r0, r1, 0x0, 0xedc0) 19:51:17 executing program 1: pipe(&(0x7f0000000080)) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r2, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r3, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000000c0)={r4, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r0, r1, 0x0, 0xedc0) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, r5) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) [ 361.370298][T12644] binder: 12641:12644 unknown command 1090151173 [ 361.377808][T12644] binder: 12641:12644 ioctl c0306201 20000280 returned -22 19:51:17 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e00000027f0000010100000002000000e0000001000000005b63bdebbca9a6645ef37b0bea26fec51fa930572436fffd60fab08f075eebd822bca4042f821d63bed65715bca939cfe2e6143d41b064671ecdb150c863330dce9aa5bc3807f6d71441e8477684045b44663ad584690af2089c7f46a90bf1d148cc67d0f32b2a1a3137f08e3a0474218eceece5a88b86c79b31fa998669"], 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x0, 0x0) readv(r4, &(0x7f0000000380)=[{&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000440)=""/135, 0x87}], 0x2) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="bc0800002400ffffff0300000000000000fffff7", @ANYRES32=r6, @ANYBLOB="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"], 0x8d0}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x7, r6, 0x1, 0xdd, 0x6, @local}, 0x14) readv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000440)=""/135, 0x87}], 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x2, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6548}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c080}, 0x4040) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x102, 0x0) ioctl$PPPIOCSCOMPRESS(r7, 0x4010744d) 19:51:17 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="057f0440000000ff129d4002"], 0x0, 0x0, 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) 19:51:17 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x1, 0x100) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x101302, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000140), &(0x7f0000000180)=0x4) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x444500, 0x0) r5 = dup2(r0, r4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000100)={0x8001, 0x101}) 19:51:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = syz_open_procfs(0x0, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r0, r1, 0x0, 0xedc0) 19:51:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e00000027f0000010100000002000000e0000001000000005b63bdebbca9a6645ef37b0bea26fec51fa930572436fffd60fab08f075eebd822bca4042f821d63bed65715bca939cfe2e6143d41b064671ecdb150c863330dce9aa5bc3807f6d71441e8477684045b44663ad584690af2089c7f46a90bf1d148cc67d0f32b2a1a3137f08e3a0474218eceece5a88b86c79b31fa998669"], 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x0, 0x0) readv(r4, &(0x7f0000000380)=[{&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000440)=""/135, 0x87}], 0x2) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="bc0800002400ffffff0300000000000000fffff7", @ANYRES32=r6, @ANYBLOB="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"], 0x8d0}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x7, r6, 0x1, 0xdd, 0x6, @local}, 0x14) readv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000440)=""/135, 0x87}], 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x2, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6548}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c080}, 0x4040) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x102, 0x0) ioctl$PPPIOCSCOMPRESS(r7, 0x4010744d) [ 361.719208][T12654] binder: 12648:12654 unknown command 1074036485 [ 361.726213][T12654] binder: 12648:12654 ioctl c0306201 20000280 returned -22 [ 361.799401][T12655] binder_alloc: 12648: binder_alloc_buf, no vma [ 361.825688][ T1487] tipc: TX() has been purged, node left! [ 361.859673][T12659] dlm: non-version read from control device 135 19:51:18 executing program 1: pipe(&(0x7f0000000080)) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r2, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r3, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000000c0)={r4, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r0, r1, 0x0, 0xedc0) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, r5) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) [ 361.939069][T12654] binder: 12648:12654 unknown command 1074036485 [ 361.945754][T12654] binder: 12648:12654 ioctl c0306201 20000280 returned -22 [ 361.973374][T12655] binder: BINDER_SET_CONTEXT_MGR already set [ 361.980111][T12655] binder: 12648:12655 ioctl 40046207 0 returned -16 [ 361.991834][T12661] dlm: non-version read from control device 135 [ 362.018127][T12663] binder_alloc: 12647: binder_alloc_buf, no vma 19:51:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') read$midi(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000100)) sendfile(r0, r1, 0x0, 0xedc0) [ 362.043308][T12661] dlm: non-version read from control device 135 19:51:18 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r2, 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = dup2(r2, r5) write$midi(r6, &(0x7f0000000080)="a2347da92d0ed2884674827459c4c16f730f51aa3d57fb4cb2ba439031532bae9871dddda295b5e4788d14acea9cd88c77f3c546426a3e1aba", 0x39) r7 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="056304400000000000634040"], 0x0, 0x0, 0x0}) 19:51:18 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r4, r3) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) r5 = dup3(r4, r0, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0x1f) [ 362.972418][T12676] binder: 12674:12676 ioctl ae03 1f returned -22 19:51:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') read$midi(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xedc0) [ 363.092466][T12675] binder_alloc: 12672: binder_alloc_buf, no vma [ 363.192482][T12678] binder_alloc: 12672: binder_alloc_buf, no vma 19:51:19 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000d4000000d4000000030000000b0000000000000e0400000001007320d1691340e79bd300001000000000000008030400000f00000004000084070000000f00000005000000390000000600000002000000000000000a00000000000000070000000700000001000000000001000700000000000001000000001b002a0203000000020000055370000003000000050000003bb600000600000005000015040000000000000002000004ffff00000600000005000000020000000500000002000000000400000400000000000007000000000d00000000000008030000088433a9f00857c25c561d5ce8d6894a3a2ff04ae41c4b2f85a59aaaab12b6a63ce581e168d6b11fe6d76e37063ae3ea3363917893ab532bd6405416eae179333092bbe22fc9c814797d5a8efe41ea565cb15829945fe28a9d41dc2057380730b21f6c4480138ec011fad4856caaf5e36fa67323489931ecc1e0d2f528df408fae4a94aed235d99609804d6fa6f8305edd7848c6bc1c95961c3e3c1dc8d4bfccbb52e9ce06f8b0b1e58621d4206c3b8c98369a544cd71355f929298067753d2c3ddc6811564c0a8b92a4e40de27e8076"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:51:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r3, 0xf2b, 0x0, 0x0, {}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xfff}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_OPMODE_NOTIF]}, 0x2c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003f40)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xf}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r3, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x2}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40000) [ 363.575673][T12685] binder: 12682:12685 unknown command 1090151173 [ 363.582332][T12685] binder: 12682:12685 ioctl c0306201 20000280 returned -22 19:51:20 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/adsp1\x00', 0x42b01, 0x0) write$dsp(r0, &(0x7f00000000c0)='+', 0x1) ioctl$SNDCTL_DSP_CHANNELS(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0xc0045002, 0x73b000) 19:51:20 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630c400000000000634040"], 0x0, 0x0, 0x0}) 19:51:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') read$midi(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xedc0) 19:51:20 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) [ 364.014224][T12692] binder: 12691:12692 unknown command 1074553605 [ 364.021134][T12692] binder: 12691:12692 ioctl c0306201 20000280 returned -22 19:51:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e00000027f0000010100000002000000e0000001000000005b63bdebbca9a6645ef37b0bea26fec51fa930572436fffd60fab08f075eebd822bca4042f821d63bed65715bca939cfe2e6143d41b064671ecdb150c863330dce9aa5bc3807f6d71441e8477684045b44663ad584690af2089c7f46a90bf1d148cc67d0f32b2a1a3137f08e3a0474218eceece5a88b86c79b31fa998669"], 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x0, 0x0) readv(r4, &(0x7f0000000380)=[{&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000440)=""/135, 0x87}], 0x2) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="bc0800002400ffffff0300000000000000fffff7", @ANYRES32=r6, @ANYBLOB="0000000bf1ffffff000000000800010063627100a408020004040600030000000500000000700300fdffffffffff00001f0000000500000000020000010000000000100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000040000000ed000000010001000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f000d000300000004000000070000000900000005000000030000000200000087d40000020000000800000000010d4a77d4944b4a00007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff04000800000004040600d90b0000ff00000005000000040000001ba2cc3b00000080010000003f000000ff0f0000bd52c97303000000be060000fffffffffffeffff7f000000ff0000008100000000db040009000000070000000300000000000000060000008f5e0000010000000002000006000000010100000200000007000000000000e0318900000104000000efff000600000004000000080000000400000002000000c00000000800000008000000f7ffffff05000000810000004d00000001000080eb0700001f000000090000000800000001000000000000000000000002000000ffff00000100000002000000000000e0a000000040000000ff000000f7ffffff0500000009000000070000000600000028080000030000000600000004000000be00000003000000070000000500000038080000faffffffffffffff47b5554d001000008100000007000000ffffffff040000000100000002000000566b00002000000004000000020000008b01000001000000ffff000004000000ff0f0000050000002000000003000000e40d000007000000f8ffffff200000003f000000387f00000700000007000000c10a000009000000040000000400000000000000008000000100008009000000370b000000000000ff07000006000000bb7900000400000002000000ffffff7f0300000000000000090000000700000005000000000000807f0000000900000008000000fad4ffffff01000001010000010000003f0000000400000020f2ffff01000100ffff0000010000000200000008000000fbfffffff9ffffff040000004d000000060000000200000002000000070000004e0d0000000200000800000035000000300e00000700000000040000020000000180000020000000f2ffffff070000000500000000010000fffffeff0900000000080000070000000800000009000000ff7f0000090000000400000004000000000000000600000005000000010000000900000008000000ff0700000300000000800000bf16000002000006000000ffee00000001000000000000000010f7006305000000000000000000007f00000010080000000000000100008002000000080000000101000003000000ffffff7ffffffffff7ffffff0600000003000000a6060000ff0300000700000001800000090000000200000000000000040000000080ffff00020000070000000500000001000100000000800000af06060000002b0a000005000000010000000500000009000000040000000500000002000000ffffff7ff30000000800000002000000ffff0000ff070000810000004000000075fc000009000000fbffffff0500000000000000810000000100000080000000d05e0000020000001f00000000000000ff010000451e00002d00000000000000ff0000001000030008001000ff070000010000001800010039031c020101000001000000000000060500000010000200e002807104000000ff03000018000100080d1e02800000000700000024709a02ff7f000010000500010000000000000007000000100003001f000300070000000101000018000100e701040009000000040000000104000000000000f2275eef7138e6d8404ee35c1c03d0a7e3015b89e6e440ebafa27d5b8188804cd5beea2fda73c030f26439c9e4f2e27a824bfb4415f2af99b482560d1a447df28d8d838ad1a39caf40dc9ec5f134529d47c0604f66f8714f8ee51165c4b029a7dc7e2f90de64a234d9098b06231c71bc79c43de912eb17614cf75d8c49152a801ac9a1326f0e334e0534faa8d8704d03c25495230a2ed4feb5298d99c124310dd8d4054c8be6bdb8bcede3d1552b08c169755c508c65ff8e1c50711a38d9a451eb650df96535fcc7669eb1f0f7fc5135a05b389610d33df49e9d1d3808c8fa0524b1caa582c913fedb22de15fbc7e7890faa48e6205a74bf817d48ea3dc9cddb6acc14b94522ccce95a27379b1ced543ad45de5016647e86154fd92670b9fc95ff90ea60fcf349981185b11322c4a48276eea082e4be45b9125653ba5f8ad8500d0d768b2de6b9e198568ecd526a1ba44c9180104fa91e55e31181b4acad815ef766bc8604c30c715da309a185645439aaabb542625905dc77193d45cde1978dc9c67cea6b01d2d4a28b13fc1e71d1f2a38537c44b629790b1305371c9e705771da5555c743b5b4adea2b95aa708f41e7a713277f5422f2bb669861730554e266f4ae61e0377f517b23ae4821e04e500cf998be043bab81fa38368a555f4a381eab2a692e0ed4ca80bcb7570518078eb76bd313b23d0708cd26017f5a64a703da88679bbb758ac9b2b3ad70bbd679e7e24852925d96c941ac4cce3c9863a529c9f3f024c93fbd7e61e29fcbd6368d915afa0e54e02c6053d"], 0x8d0}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x7, r6, 0x1, 0xdd, 0x6, @local}, 0x14) readv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000440)=""/135, 0x87}], 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x2, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6548}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c080}, 0x4040) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x102, 0x0) ioctl$PPPIOCSCOMPRESS(r7, 0x4010744d) [ 364.135255][T12686] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 364.146230][T12688] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 364.174330][T12689] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 19:51:20 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x9d}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfb, &(0x7f0000002880)=""/251}, 0x48) [ 364.341006][T12707] dlm: non-version read from control device 135 [ 364.394131][T12706] binder: 12705:12706 unknown command 1090151173 [ 364.397814][T12707] dlm: non-version read from control device 135 [ 364.400879][T12706] binder: 12705:12706 ioctl c0306201 20000280 returned -22 19:51:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') read$midi(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xedc0) 19:51:21 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) [ 364.781541][T12688] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 19:51:21 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x9d}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfb, &(0x7f0000002880)=""/251}, 0x48) [ 364.945342][T12719] binder: 12716:12719 unknown command 1090151173 [ 364.951932][T12719] binder: 12716:12719 ioctl c0306201 20000280 returned -22 19:51:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') read$midi(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xedc0) 19:51:21 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x9d}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfb, &(0x7f0000002880)=""/251}, 0x48) [ 365.111764][T12689] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 365.122022][T12686] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 19:51:21 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:51:22 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/adsp1\x00', 0x42b01, 0x0) write$dsp(r0, &(0x7f00000000c0)='+', 0x1) ioctl$SNDCTL_DSP_CHANNELS(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0xc0045002, 0x73b000) 19:51:22 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:51:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e00000027f0000010100000002000000e0000001000000005b63bdebbca9a6645ef37b0bea26fec51fa930572436fffd60fab08f075eebd822bca4042f821d63bed65715bca939cfe2e6143d41b064671ecdb150c863330dce9aa5bc3807f6d71441e8477684045b44663ad584690af2089c7f46a90bf1d148cc67d0f32b2a1a3137f08e3a0474218eceece5a88b86c79b31fa998669"], 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x0, 0x0) readv(r4, &(0x7f0000000380)=[{&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000440)=""/135, 0x87}], 0x2) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="bc0800002400ffffff0300000000000000fffff7", @ANYRES32=r6, @ANYBLOB="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"], 0x8d0}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x7, r6, 0x1, 0xdd, 0x6, @local}, 0x14) readv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000440)=""/135, 0x87}], 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x2, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6548}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c080}, 0x4040) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x102, 0x0) ioctl$PPPIOCSCOMPRESS(r7, 0x4010744d) 19:51:22 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x9d}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfb, &(0x7f0000002880)=""/251}, 0x48) 19:51:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') read$midi(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xedc0) 19:51:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0563044000000000006340400102a91ffae26eda4f283bfd2afe42d426489188f5c8613a672acbd98b457b1ed23cd9715d9a5984c75c56db9e146d7a98b7a5f595f203355c82e899e8af79f67cd8c7ea5fc4c91193faf8172574ffd786347f4f912d3bbde9003da949c9c5d0506fee2582162409d8a021489f58bb4fa8ee79b513b8c888488ebc5b0d431857ec41b86f75558aa61101ecc30b57efa27a108c77946650fafb1f2f1a2d1a181777845da5b18250413967f2d6f3a238f1ba33e35a8dd84ac939f05cb8beb479b7d9e0b74e2637027e6eed37ad3e5f07bfdf09d1759f"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/136, 0x200000, 0x800, 0x2489, 0x1}, 0x20) sendmsg$nl_netfilter(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000001840)={0x12c0, 0x13, 0x8, 0x101, 0x70bd2b, 0x25dfdbff, {0xa, 0x0, 0x1}, [@nested={0x182, 0x18, 0x0, 0x1, [@typed={0x14, 0x79, 0x0, 0x0, @ipv6=@ipv4={[], [], @multicast2}}, @generic="a8ff323fbb2765da4ea97f3fd55d58200787025eecd4882f8c577c83e01696777ae90279415f023e3424ac4d86686291e6433dfbc70b315ddfc46b450fe4aad456cce91311b3d6d4f030e1758eade5ee7457db869261d08d53f2878c5bc643ec82675748564df070aa8dec525b63be9307c7a22680c0930abc360861c9c09011dc29a350c77f2c41447c1d74c76c092e48b76b491355c69704e81a0fcb79141bde479321007bcbd437e867ff2b82cc71f5d6b326c0777e2a35343d8b09c69b41081c0123ac1b", @typed={0xfffffec0, 0x30, 0x0, 0x0, @u64=0x2}, @generic="78ef2a27f3b3167f9cbdcf09577f9eb17b485c234dd1b99a9821b621f5eb6ef82df5ac4217f9a3e682432e8bc847016f17c321078771fcf10d1d616197d18b5099e4e378b75f35169c18bdc49e7b3372ac701f4c6481651694443af107d6f0b418e80f0025faa90276c1a8029b55afe48ced7bd4e12c735b754d69258d10fa02700865cba96e1a0874ca9eb0", @typed={0xc, 0x16, 0x0, 0x0, @u64=0x8}]}, @generic="1325e249bfeed668", @typed={0x11, 0x19, 0x0, 0x0, @str='/dev/binder#\x00'}, @nested={0x110a, 0x87, 0x0, 0x1, [@typed={0x14, 0x40, 0x0, 0x0, @ipv6=@private2}, @typed={0xc, 0x3, 0x0, 0x0, @str='keyring\x00'}, @generic="2e03062f625acc6631a1b1dde387b978e160eae176dd6b045221a399b2fdf1c28e1b9c061b59761de313853c5182dedcb53c0bfc22e3913b74d5920b72c5", @typed={0x4, 0x44}, @generic="188a16c0fcb52894ce2eb01c329e6e2e3da8185cfa287a016aad1a457d9ac34277aeb6cfabc7602dceeb4dcd7f15acdcd8e8f6a27ad3e50a8a2688da47344da09288518c1a948a13e7fd28f3ab6547c604d14cc3f89d450b2f8dbfe16c4e97725ce437f5454b1ece7fbc8abde98712b2258b0c378352a6f31b5aa78c244df3ea49abf0483a29018e228f77298a85bbf0b17a56b599f4859bbc7e634bb8880a11405bb22a8e7c877430032bd22f46415d4347d29132c004ddef9b73717761d2d20e3cbb896873f5081b2a7383d288", @typed={0x0, 0x11, 0x0, 0x0, @str='keyring\x00'}]}]}, 0x12c0}, 0x1, 0x0, 0x0, 0x10000}, 0x50) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, r0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 366.161356][T12744] binder: 12732:12744 unknown command 1090151173 [ 366.168973][T12744] binder: 12732:12744 ioctl c0306201 20000280 returned -22 [ 366.172058][T12745] dlm: non-version read from control device 135 [ 366.241636][T12745] dlm: non-version read from control device 135 19:51:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') read$midi(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xedc0) 19:51:23 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/adsp1\x00', 0x42b01, 0x0) write$dsp(r0, &(0x7f00000000c0)='+', 0x1) ioctl$SNDCTL_DSP_CHANNELS(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0xc0045002, 0x73b000) 19:51:23 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:51:23 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05670440"], 0x0, 0x0, 0x0}) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f00000004c0)={0xfaec, 0x10001}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05630440cff402a8002d0f07870040ce00634040010000000887220204714d5ff093d9dc95c5feb4371aab42e34cad614b3233b2a3095c1f2f836744e65b"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setgid(r6) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x6000, 0x10, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x8000, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x400}}, {@allow_other='allow_other'}], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x65, 0x37, 0x37, 0x39, 0x30, 0x63, 0x62], 0x2d, [0x39, 0x65, 0x34, 0x33], 0x2d, [0x36, 0x66, 0x30, 0x34], 0x2d, [0x61, 0x38, 0x31, 0x66], 0x2d, [0x6d, 0x36, 0x6960a06a77cbeb46, 0x33, 0x63, 0x43, 0x39, 0x33]}}}, {@dont_measure='dont_measure'}, {@uid_gt={'uid>', r7}}]}}) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) r9 = dup2(r8, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000480)=[@increfs_done={0x40106308, 0x3}], 0x0, 0x0, 0x0}) ioctl$TIOCSISO7816(r9, 0xc0285443, &(0x7f0000000040)={0x6, 0x0, 0x87e, 0x3ff, 0x7f}) [ 366.817074][T12760] binder: 12756:12760 unknown command 1074030341 [ 366.824143][T12760] binder: 12756:12760 ioctl c0306201 20000200 returned -22 [ 366.887174][T12763] binder: BINDER_SET_CONTEXT_MGR already set [ 366.893499][T12763] binder: 12756:12763 ioctl 40046207 0 returned -16 19:51:23 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/adsp1\x00', 0x42b01, 0x0) write$dsp(r0, &(0x7f00000000c0)='+', 0x1) ioctl$SNDCTL_DSP_CHANNELS(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0xc0045002, 0x73b000) [ 366.941973][T12764] binder: 12756:12764 unknown command 118435072 [ 366.948875][T12764] binder: 12756:12764 ioctl c0306201 20000280 returned -22 [ 367.014881][T12765] binder: 12759:12765 unknown command 1090151173 [ 367.021711][T12765] binder: 12759:12765 ioctl c0306201 20000280 returned -22 19:51:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000001c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:51:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') read$midi(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xedc0) [ 367.127082][T12763] binder: BINDER_SET_CONTEXT_MGR already set [ 367.133600][T12763] binder: 12756:12763 ioctl 40046207 0 returned -16 [ 367.142062][T12764] binder: 12756:12764 unknown command 118435072 [ 367.148799][T12764] binder: 12756:12764 ioctl c0306201 20000280 returned -22 19:51:23 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:51:23 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3a8b7590, 0x400080) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="37645b01"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05ffff6edfcd4c64dea1403452f870348f22d65e7c2f040583976d5cd089749aee50c29776e852db74785de8380108859fad00d21ef33aae40e58344eea5543179cd110e89c1ec004924e1f3014118d8a9ae94f1d5a410ab185ca694442199a4ae681d31fd53375bd3cf65861f47b1f990e45ad360cde8077061f18a8b297561f362cf5df3a74c47d6fd2f5399dfeb27ce7987f5a038010000008cf40802d9a5b1df56d4665d029781a0972293"], 0x0, 0x0, 0x0}) dup2(r6, r5) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_SYNC(r4, 0x4) r7 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000540)={0x8, 0x0, &(0x7f0000000400)=[@acquire={0x40046305, 0x3}], 0xffffffffffffffbb, 0x0, 0x0}) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=[&(0x7f00000000c0)='/dev/binder#\x00'], &(0x7f0000000380)=[&(0x7f0000000140)='/dev/binder#\x00', &(0x7f0000000180)='/dev/binder#\x00', &(0x7f00000001c0)='*\x00', &(0x7f0000000240)='\x00']) 19:51:23 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/adsp1\x00', 0x42b01, 0x0) write$dsp(r0, &(0x7f00000000c0)='+', 0x1) ioctl$SNDCTL_DSP_CHANNELS(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0xc0045002, 0x73b000) 19:51:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') read$midi(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 367.724186][T12786] binder: 12784:12786 unknown command 22766647 [ 367.730833][T12786] binder: 12784:12786 ioctl c0306201 20000200 returned -22 [ 367.733403][T12787] binder: 12782:12787 unknown command 1090151173 [ 367.744825][T12787] binder: 12782:12787 ioctl c0306201 20000280 returned -22 19:51:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000001c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 367.790315][T12789] binder: BINDER_SET_CONTEXT_MGR already set [ 367.796815][T12789] binder: 12784:12789 ioctl 40046207 0 returned -16 19:51:24 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/adsp1\x00', 0x42b01, 0x0) write$dsp(r0, &(0x7f00000000c0)='+', 0x1) ioctl$SNDCTL_DSP_CHANNELS(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0xc0045002, 0x73b000) [ 367.841272][T12794] binder: 12784:12794 ioctl 4 0 returned -22 [ 367.923714][T12789] binder: 12784:12789 unknown command 22766647 [ 367.930528][T12789] binder: 12784:12789 ioctl c0306201 20000200 returned -22 [ 367.968482][T12794] binder: BINDER_SET_CONTEXT_MGR already set [ 367.974708][T12794] binder: 12784:12794 ioctl 40046207 0 returned -16 19:51:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') read$midi(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 368.014702][T12796] binder: BINDER_SET_CONTEXT_MGR already set [ 368.021051][T12796] binder: 12784:12796 ioctl 40046207 0 returned -16 19:51:24 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) [ 368.067940][T12789] binder: 12784:12789 ioctl 4 0 returned -22 19:51:24 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) connect$vsock_stream(r3, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @local}, 0x10) read$midi(r3, 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000100)='pids.current\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@empty, @in=@dev}}, {{@in6=@private2}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630408"], 0x0, 0x0, 0x0}) r5 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0xffffffffffffff83, 0x0, &(0x7f0000000580)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs={0x40046307, 0x1}, @clear_death={0x400c630f, 0x3}, @acquire_done={0x40106309, 0x2}, @dead_binder_done], 0xfffffffffffffe64, 0x0, 0x0}) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000040), 0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f00000000c0)) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, r0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000480)={@ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/17, 0x11, 0x2, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/10, 0xa, 0x0, 0x28}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000003c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 19:51:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000001c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 368.405159][T12811] binder: 12809:12811 unknown command 1090151173 [ 368.412023][T12811] binder: 12809:12811 ioctl c0306201 20000280 returned -22 19:51:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') read$midi(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 368.553281][T12814] binder: 12813:12814 unknown command 134505221 [ 368.560115][T12814] binder: 12813:12814 ioctl c0306201 20000200 returned -22 19:51:25 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) [ 368.625508][T12816] binder: 12813:12816 ioctl c0306201 20000540 returned -14 19:51:25 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/adsp1\x00', 0x42b01, 0x0) write$dsp(r0, &(0x7f00000000c0)='+', 0x1) ioctl$SNDCTL_DSP_CHANNELS(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0xc0045002, 0x73b000) [ 368.683690][T12814] binder: 12813:12814 ioctl 127a 200000c0 returned -22 19:51:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000001c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:51:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000001c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:51:25 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) dup2(r1, r0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x161200, 0x5b531d3343a9885) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 368.952934][T12833] binder: 12826:12833 unknown command 1090151173 [ 368.959803][T12833] binder: 12826:12833 ioctl c0306201 20000280 returned -22 19:51:25 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000d4000000d4000000030000000b0000000000000e0400000001007320d1691340e79bd300001000000000000008030400000f00000004000084070000000f00000005000000390000000600000002000000000000000a00000000000000070000000700000001000000000001000700000000000001000000001b002a0203000000020000055370000003000000050000003bb600000600000005000015040000000000000002000004ffff00000600000005000000020000000500000002000000000400000400000000000007000000000d00000000000008030000088433a9f00857c25c561d5ce8d6894a3a2ff04ae41c4b2f85a59aaaab12b6a63ce581e168d6b11fe6d76e37063ae3ea3363917893ab532bd6405416eae179333092bbe22fc9c814797d5a8efe41ea565cb15829945fe28a9d41dc2057380730b21f6c4480138ec011fad4856caaf5e36fa67323489931ecc1e0d2f528df408fae4a94aed235d99609804d6fa6f8305edd7848c6bc1c95961c3e3c1dc8d4bfccbb52e9ce06f8b0b1e58621d4206c3b8c98369a544cd71355f929298067753d2c3ddc6811564c0a8b92a4e40de27e8076"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:51:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000001c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:51:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@delchain={0x138, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x108, 0x2, [@TCA_CGROUP_ACT={0x104, 0x1, [@m_ipt={0x100, 0x0, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x74, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TARG={0x5d, 0x6, {0x0, 'filter\x00', 0x0, 0x0, "cca0a5c101286b2969b026f8ee3aacf2c1d7ad2a0515f28434765d60f40654f6ddee9e5fc9b3d6e9b60effc2cf5a00fbbd28f3"}}]}, {0x7d, 0x6, "7dcb4968a5f4c02a49058ed0699479c2f86c851a20be127273a65244d3873fe332a414fdf40eb82c030ddd2c773bfabc3583b15ae748e101cdba5249c30154590f1e20a754b2838bcb191503350a47754dd4bd9a4e17311bbc37007fbfbf64571762b68395e1aa3308f7a455212d4ea47458660b440c27bf10"}}}]}]}}]}, 0x138}}, 0x0) 19:51:26 executing program 2: futex(0x0, 0x400000085, 0x0, 0x0, &(0x7f0000000080), 0x92030001) [ 369.514175][T12854] binder: 12849:12854 unknown command 1090151173 [ 369.520857][T12854] binder: 12849:12854 ioctl c0306201 20000280 returned -22 [ 369.642689][T12857] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 369.680632][T12861] futex_wake_op: syz-executor.2 tries to shift op by 48; fix this program [ 369.775116][T12861] futex_wake_op: syz-executor.2 tries to shift op by 48; fix this program 19:51:26 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000d4000000d4000000030000000b0000000000000e0400000001007320d1691340e79bd300001000000000000008030400000f00000004000084070000000f00000005000000390000000600000002000000000000000a00000000000000070000000700000001000000000001000700000000000001000000001b002a0203000000020000055370000003000000050000003bb600000600000005000015040000000000000002000004ffff00000600000005000000020000000500000002000000000400000400000000000007000000000d00000000000008030000088433a9f00857c25c561d5ce8d6894a3a2ff04ae41c4b2f85a59aaaab12b6a63ce581e168d6b11fe6d76e37063ae3ea3363917893ab532bd6405416eae179333092bbe22fc9c814797d5a8efe41ea565cb15829945fe28a9d41dc2057380730b21f6c4480138ec011fad4856caaf5e36fa67323489931ecc1e0d2f528df408fae4a94aed235d99609804d6fa6f8305edd7848c6bc1c95961c3e3c1dc8d4bfccbb52e9ce06f8b0b1e58621d4206c3b8c98369a544cd71355f929298067753d2c3ddc6811564c0a8b92a4e40de27e8076"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) [ 369.854917][T12868] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:51:26 executing program 2: futex(0x0, 0x400000085, 0x0, 0x0, &(0x7f0000000080), 0x92030001) 19:51:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000001c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:51:26 executing program 5: io_setup(0x200, &(0x7f0000000180)=0x0) r1 = memfd_create(&(0x7f0000000000)=':\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) io_getevents(r0, 0x0, 0x1, &(0x7f0000d83f60)=[{}], 0x0) 19:51:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@delchain={0x138, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x108, 0x2, [@TCA_CGROUP_ACT={0x104, 0x1, [@m_ipt={0x100, 0x0, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x74, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TARG={0x5d, 0x6, {0x0, 'filter\x00', 0x0, 0x0, "cca0a5c101286b2969b026f8ee3aacf2c1d7ad2a0515f28434765d60f40654f6ddee9e5fc9b3d6e9b60effc2cf5a00fbbd28f3"}}]}, {0x7d, 0x6, "7dcb4968a5f4c02a49058ed0699479c2f86c851a20be127273a65244d3873fe332a414fdf40eb82c030ddd2c773bfabc3583b15ae748e101cdba5249c30154590f1e20a754b2838bcb191503350a47754dd4bd9a4e17311bbc37007fbfbf64571762b68395e1aa3308f7a455212d4ea47458660b440c27bf10"}}}]}]}}]}, 0x138}}, 0x0) [ 370.290347][T12871] binder: 12869:12871 unknown command 1090151173 [ 370.297318][T12871] binder: 12869:12871 ioctl c0306201 20000280 returned -22 [ 370.381837][T12883] futex_wake_op: syz-executor.2 tries to shift op by 48; fix this program [ 370.613493][T12885] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:51:27 executing program 5: io_setup(0x200, &(0x7f0000000180)=0x0) r1 = memfd_create(&(0x7f0000000000)=':\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) io_getevents(r0, 0x0, 0x1, &(0x7f0000d83f60)=[{}], 0x0) 19:51:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@delchain={0x138, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x108, 0x2, [@TCA_CGROUP_ACT={0x104, 0x1, [@m_ipt={0x100, 0x0, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x74, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TARG={0x5d, 0x6, {0x0, 'filter\x00', 0x0, 0x0, "cca0a5c101286b2969b026f8ee3aacf2c1d7ad2a0515f28434765d60f40654f6ddee9e5fc9b3d6e9b60effc2cf5a00fbbd28f3"}}]}, {0x7d, 0x6, "7dcb4968a5f4c02a49058ed0699479c2f86c851a20be127273a65244d3873fe332a414fdf40eb82c030ddd2c773bfabc3583b15ae748e101cdba5249c30154590f1e20a754b2838bcb191503350a47754dd4bd9a4e17311bbc37007fbfbf64571762b68395e1aa3308f7a455212d4ea47458660b440c27bf10"}}}]}]}}]}, 0x138}}, 0x0) 19:51:27 executing program 2: futex(0x0, 0x400000085, 0x0, 0x0, &(0x7f0000000080), 0x92030001) 19:51:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@delchain={0x138, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x108, 0x2, [@TCA_CGROUP_ACT={0x104, 0x1, [@m_ipt={0x100, 0x0, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x74, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TARG={0x5d, 0x6, {0x0, 'filter\x00', 0x0, 0x0, "cca0a5c101286b2969b026f8ee3aacf2c1d7ad2a0515f28434765d60f40654f6ddee9e5fc9b3d6e9b60effc2cf5a00fbbd28f3"}}]}, {0x7d, 0x6, "7dcb4968a5f4c02a49058ed0699479c2f86c851a20be127273a65244d3873fe332a414fdf40eb82c030ddd2c773bfabc3583b15ae748e101cdba5249c30154590f1e20a754b2838bcb191503350a47754dd4bd9a4e17311bbc37007fbfbf64571762b68395e1aa3308f7a455212d4ea47458660b440c27bf10"}}}]}]}}]}, 0x138}}, 0x0) 19:51:27 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000d4000000d4000000030000000b0000000000000e0400000001007320d1691340e79bd300001000000000000008030400000f00000004000084070000000f00000005000000390000000600000002000000000000000a00000000000000070000000700000001000000000001000700000000000001000000001b002a0203000000020000055370000003000000050000003bb600000600000005000015040000000000000002000004ffff00000600000005000000020000000500000002000000000400000400000000000007000000000d00000000000008030000088433a9f00857c25c561d5ce8d6894a3a2ff04ae41c4b2f85a59aaaab12b6a63ce581e168d6b11fe6d76e37063ae3ea3363917893ab532bd6405416eae179333092bbe22fc9c814797d5a8efe41ea565cb15829945fe28a9d41dc2057380730b21f6c4480138ec011fad4856caaf5e36fa67323489931ecc1e0d2f528df408fae4a94aed235d99609804d6fa6f8305edd7848c6bc1c95961c3e3c1dc8d4bfccbb52e9ce06f8b0b1e58621d4206c3b8c98369a544cd71355f929298067753d2c3ddc6811564c0a8b92a4e40de27e8076"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) [ 370.924080][T12895] futex_wake_op: syz-executor.2 tries to shift op by 48; fix this program [ 370.985122][T12897] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 371.069358][T12903] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:51:27 executing program 2: futex(0x0, 0x400000085, 0x0, 0x0, &(0x7f0000000080), 0x92030001) 19:51:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@delchain={0x138, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x108, 0x2, [@TCA_CGROUP_ACT={0x104, 0x1, [@m_ipt={0x100, 0x0, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x74, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TARG={0x5d, 0x6, {0x0, 'filter\x00', 0x0, 0x0, "cca0a5c101286b2969b026f8ee3aacf2c1d7ad2a0515f28434765d60f40654f6ddee9e5fc9b3d6e9b60effc2cf5a00fbbd28f3"}}]}, {0x7d, 0x6, "7dcb4968a5f4c02a49058ed0699479c2f86c851a20be127273a65244d3873fe332a414fdf40eb82c030ddd2c773bfabc3583b15ae748e101cdba5249c30154590f1e20a754b2838bcb191503350a47754dd4bd9a4e17311bbc37007fbfbf64571762b68395e1aa3308f7a455212d4ea47458660b440c27bf10"}}}]}]}}]}, 0x138}}, 0x0) 19:51:27 executing program 5: io_setup(0x200, &(0x7f0000000180)=0x0) r1 = memfd_create(&(0x7f0000000000)=':\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) io_getevents(r0, 0x0, 0x1, &(0x7f0000d83f60)=[{}], 0x0) [ 371.341753][T12915] futex_wake_op: syz-executor.2 tries to shift op by 48; fix this program [ 371.405120][T12916] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 371.470077][T12919] binder: 12911:12919 unknown command 1090151173 [ 371.476845][T12919] binder: 12911:12919 ioctl c0306201 20000280 returned -22 19:51:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@delchain={0x138, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x108, 0x2, [@TCA_CGROUP_ACT={0x104, 0x1, [@m_ipt={0x100, 0x0, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x74, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TARG={0x5d, 0x6, {0x0, 'filter\x00', 0x0, 0x0, "cca0a5c101286b2969b026f8ee3aacf2c1d7ad2a0515f28434765d60f40654f6ddee9e5fc9b3d6e9b60effc2cf5a00fbbd28f3"}}]}, {0x7d, 0x6, "7dcb4968a5f4c02a49058ed0699479c2f86c851a20be127273a65244d3873fe332a414fdf40eb82c030ddd2c773bfabc3583b15ae748e101cdba5249c30154590f1e20a754b2838bcb191503350a47754dd4bd9a4e17311bbc37007fbfbf64571762b68395e1aa3308f7a455212d4ea47458660b440c27bf10"}}}]}]}}]}, 0x138}}, 0x0) 19:51:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@delchain={0x138, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x108, 0x2, [@TCA_CGROUP_ACT={0x104, 0x1, [@m_ipt={0x100, 0x0, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x74, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TARG={0x5d, 0x6, {0x0, 'filter\x00', 0x0, 0x0, "cca0a5c101286b2969b026f8ee3aacf2c1d7ad2a0515f28434765d60f40654f6ddee9e5fc9b3d6e9b60effc2cf5a00fbbd28f3"}}]}, {0x7d, 0x6, "7dcb4968a5f4c02a49058ed0699479c2f86c851a20be127273a65244d3873fe332a414fdf40eb82c030ddd2c773bfabc3583b15ae748e101cdba5249c30154590f1e20a754b2838bcb191503350a47754dd4bd9a4e17311bbc37007fbfbf64571762b68395e1aa3308f7a455212d4ea47458660b440c27bf10"}}}]}]}}]}, 0x138}}, 0x0) 19:51:28 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000d4000000d4000000030000000b0000000000000e0400000001007320d1691340e79bd300001000000000000008030400000f00000004000084070000000f00000005000000390000000600000002000000000000000a00000000000000070000000700000001000000000001000700000000000001000000001b002a0203000000020000055370000003000000050000003bb600000600000005000015040000000000000002000004ffff00000600000005000000020000000500000002000000000400000400000000000007000000000d00000000000008030000088433a9f00857c25c561d5ce8d6894a3a2ff04ae41c4b2f85a59aaaab12b6a63ce581e168d6b11fe6d76e37063ae3ea3363917893ab532bd6405416eae179333092bbe22fc9c814797d5a8efe41ea565cb15829945fe28a9d41dc2057380730b21f6c4480138ec011fad4856caaf5e36fa67323489931ecc1e0d2f528df408fae4a94aed235d99609804d6fa6f8305edd7848c6bc1c95961c3e3c1dc8d4bfccbb52e9ce06f8b0b1e58621d4206c3b8c98369a544cd71355f929298067753d2c3ddc6811564c0a8b92a4e40de27e8076"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) [ 371.978424][T12927] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:51:28 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xff0e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x1000) connect$inet6(r2, &(0x7f0000000140), 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 19:51:28 executing program 5: io_setup(0x200, &(0x7f0000000180)=0x0) r1 = memfd_create(&(0x7f0000000000)=':\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) io_getevents(r0, 0x0, 0x1, &(0x7f0000d83f60)=[{}], 0x0) [ 372.240511][T12940] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 372.419200][T12948] binder: 12933:12948 unknown command 1090151173 [ 372.425950][T12948] binder: 12933:12948 ioctl c0306201 20000280 returned -22 19:51:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000000c0)=0x7) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:51:29 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xff0e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x1000) connect$inet6(r2, &(0x7f0000000140), 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 19:51:29 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xff0e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x1000) connect$inet6(r2, &(0x7f0000000140), 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 19:51:29 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/40, 0x28}], 0x1, 0x1f) sysfs$2(0x2, 0x0, &(0x7f0000000040)=""/106) 19:51:29 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)=""/135, 0x87}, {&(0x7f0000000480)=""/81, 0x51}, {0x0}, {0x0}, {&(0x7f0000000640)=""/209, 0xd1}, {&(0x7f0000000740)=""/76, 0x4c}], 0xa}, 0x0) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x400000000000085, 0x0) 19:51:29 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xff0e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x1000) connect$inet6(r2, &(0x7f0000000140), 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 19:51:29 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:51:29 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xff0e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x1000) connect$inet6(r2, &(0x7f0000000140), 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 19:51:29 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/40, 0x28}], 0x1, 0x1f) sysfs$2(0x2, 0x0, &(0x7f0000000040)=""/106) 19:51:29 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xff0e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x1000) connect$inet6(r2, &(0x7f0000000140), 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 19:51:30 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)=""/135, 0x87}, {&(0x7f0000000480)=""/81, 0x51}, {0x0}, {0x0}, {&(0x7f0000000640)=""/209, 0xd1}, {&(0x7f0000000740)=""/76, 0x4c}], 0xa}, 0x0) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x400000000000085, 0x0) [ 373.536442][T12977] binder: 12973:12977 unknown command 1090151173 [ 373.543176][T12977] binder: 12973:12977 ioctl c0306201 20000280 returned -22 19:51:30 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/40, 0x28}], 0x1, 0x1f) sysfs$2(0x2, 0x0, &(0x7f0000000040)=""/106) 19:51:30 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xff0e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x1000) connect$inet6(r2, &(0x7f0000000140), 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 19:51:30 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/40, 0x28}], 0x1, 0x1f) sysfs$2(0x2, 0x0, &(0x7f0000000040)=""/106) 19:51:30 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000d4000000d4000000030000000b0000000000000e0400000001007320d1691340e79bd300001000000000000008030400000f00000004000084070000000f00000005000000390000000600000002000000000000000a00000000000000070000000700000001000000000001000700000000000001000000001b002a0203000000020000055370000003000000050000003bb600000600000005000015040000000000000002000004ffff00000600000005000000020000000500000002000000000400000400000000000007000000000d00000000000008030000088433a9f00857c25c561d5ce8d6894a3a2ff04ae41c4b2f85a59aaaab12b6a63ce581e168d6b11fe6d76e37063ae3ea3363917893ab532bd6405416eae179333092bbe22fc9c814797d5a8efe41ea565cb15829945fe28a9d41dc2057380730b21f6c4480138ec011fad4856caaf5e36fa67323489931ecc1e0d2f528df408fae4a94aed235d99609804d6fa6f8305edd7848c6bc1c95961c3e3c1dc8d4bfccbb52e9ce06f8b0b1e58621d4206c3b8c98369a544cd71355f929298067753d2c3ddc6811564c0a8b92a4e40de27e8076"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:51:30 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)=""/135, 0x87}, {&(0x7f0000000480)=""/81, 0x51}, {0x0}, {0x0}, {&(0x7f0000000640)=""/209, 0xd1}, {&(0x7f0000000740)=""/76, 0x4c}], 0xa}, 0x0) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x400000000000085, 0x0) 19:51:30 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/40, 0x28}], 0x1, 0x1f) sysfs$2(0x2, 0x0, &(0x7f0000000040)=""/106) 19:51:30 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x4240a2a0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r1, 0x0, r4, 0x0, 0x30007, 0x0) 19:51:30 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000340)={0x0, @bt={0x7, 0x9, 0x1, 0x1, 0x2bfb, 0xf3d, 0x219, 0xf5, 0x1, 0xf6a, 0x5, 0x9, 0x7, 0xfffffff8, 0x14, 0x27, {0xab, 0xfffffff8}, 0x9, 0x81}}) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) r3 = fcntl$getown(r0, 0x9) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_INFO(r6, 0x80386433, &(0x7f0000000300)=""/4) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r7, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r1, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=0x3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x4, 0x5}, 0x0, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x5, 0x6}, &(0x7f0000000140)=0x800, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x1f}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r3, r7, 0x0, 0xd, &(0x7f0000000040)='/dev/binder#\x00', r8}, 0x30) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:51:30 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/40, 0x28}], 0x1, 0x1f) sysfs$2(0x2, 0x0, &(0x7f0000000040)=""/106) [ 374.173160][T12998] binder: 12992:12998 unknown command 1090151173 [ 374.180093][T12998] binder: 12992:12998 ioctl c0306201 20000280 returned -22 19:51:30 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/40, 0x28}], 0x1, 0x1f) sysfs$2(0x2, 0x0, &(0x7f0000000040)=""/106) [ 374.268383][T13002] binder_alloc: 12999: binder_alloc_buf, no vma [ 374.323884][T13002] binder: 12999:13002 ioctl 80386433 20000300 returned -22 [ 374.372878][ T33] audit: type=1326 audit(1590522690.806:9): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12999 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f86a code=0x0 19:51:30 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)=""/135, 0x87}, {&(0x7f0000000480)=""/81, 0x51}, {0x0}, {0x0}, {&(0x7f0000000640)=""/209, 0xd1}, {&(0x7f0000000740)=""/76, 0x4c}], 0xa}, 0x0) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x400000000000085, 0x0) 19:51:30 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:51:30 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) recvfrom(r0, 0x0, 0x0, 0x40002000, 0x0, 0x0) 19:51:31 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x4240a2a0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r1, 0x0, r4, 0x0, 0x30007, 0x0) 19:51:31 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) r1 = dup2(r0, r0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x7}, 0x4) r2 = socket$nl_xfrm(0x11, 0x3, 0x6) dup2(r2, r1) [ 374.744457][T13020] binder: 13013:13020 unknown command 1090151173 [ 374.751253][T13020] binder: 13013:13020 ioctl c0306201 20000280 returned -22 19:51:31 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f0000003000018006000200000000000c00070000000000000000000600010000000000060001000000000006000400000000004000028014000100ff0200000000000000ffff00ebff0001f3ff02000000000006000f000000000006000e0000000000080004000000000006000e000000000024000180060002000000000008000b007369700008000b0073697000060002"], 0xa8}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b43026c262369250004", 0x1f}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 19:51:31 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x4240a2a0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r1, 0x0, r4, 0x0, 0x30007, 0x0) 19:51:31 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) recvfrom(r0, 0x0, 0x0, 0x40002000, 0x0, 0x0) 19:51:31 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) [ 374.969194][T13025] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 374.977891][T13025] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.5'. [ 375.052363][T13002] binder: 12999:13002 ioctl 80386433 20000300 returned -22 [ 375.090815][ T33] audit: type=1326 audit(1590522691.526:10): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12999 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f86a code=0x0 19:51:31 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) r1 = dup2(r0, r0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x7}, 0x4) r2 = socket$nl_xfrm(0x11, 0x3, 0x6) dup2(r2, r1) 19:51:31 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x802) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x1}) 19:51:31 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) recvfrom(r0, 0x0, 0x0, 0x40002000, 0x0, 0x0) 19:51:31 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x4240a2a0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r1, 0x0, r4, 0x0, 0x30007, 0x0) 19:51:32 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) r1 = dup2(r0, r0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x7}, 0x4) r2 = socket$nl_xfrm(0x11, 0x3, 0x6) dup2(r2, r1) 19:51:32 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f0000003000018006000200000000000c00070000000000000000000600010000000000060001000000000006000400000000004000028014000100ff0200000000000000ffff00ebff0001f3ff02000000000006000f000000000006000e0000000000080004000000000006000e000000000024000180060002000000000008000b007369700008000b0073697000060002"], 0xa8}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b43026c262369250004", 0x1f}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 19:51:32 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) recvfrom(r0, 0x0, 0x0, 0x40002000, 0x0, 0x0) 19:51:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000002c0)="77788ad7d9e8a00c848d01899c1085fcef895164011e70ab03780885caa6f945124856e2d4471b28df6a898126549f51afffc20a6e4666d2d93a2e18a64247b073dcb90de6db2384b6a916616c6bccbe73d4e97f6602d3c105680a7ed35af85f7201c875b9259a0019e938f175d6a84a1fb8f8d58a5e7e30", &(0x7f0000000580)="35f1ec185dd6aa632387ee7408f300665e7ab2f895a0d1d4aee46fc6d928d1b10a2c7f83f883f5b200f40fe333128973503fab2a1c1d46db0ddbba64caddf68664ec01a501c00ed32ae2eb026ebab982b74c84bb664ea20c674411240948c39adb7d794cdfd855c7d20e0fbec1bfb04d1ca8b50b3955ed5dee2a16d980742abfcd506254bce81991f20b0e5e4c6c8af88b7e6c68e29de72f33cbb601f5da5a9db1d93efcb654d38b13de015a10be3f61e73a03e00198e7e15c1f5bfdf82936219e55a843fc", 0x1f2a2165b37915f8}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@private0}}, &(0x7f0000000140)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) write$P9_RGETATTR(r5, &(0x7f0000000200)={0xa0, 0x19, 0x2, {0xa4, {0x1, 0x3, 0x6}, 0x80, r6, r7, 0x2, 0xe94e, 0x7, 0x800, 0x1, 0x0, 0x1, 0x7, 0x2, 0x200, 0x506c0fe8, 0x7, 0xfffffffffffffffb, 0x7fffffff}}, 0xa0) 19:51:32 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:51:32 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x401, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc040563d, &(0x7f0000000480)={0x0, 0x0, "02000000d33b6c388a05f15c77179b2e6f020e943bbeb8b59456e6e057980025"}) 19:51:32 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x98f905, 0x8, [], @p_u32=&(0x7f00000001c0)}}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x67, 0x1, 0x4, 0x20000, 0x8, {0x0, 0xea60}, {0x3, 0x1, 0x80, 0xe5, 0x4b, 0x1, "650f44e0"}, 0x401, 0x2, @planes=&(0x7f0000000000)={0x4, 0x5e, @userptr=0x61d, 0x5}, 0x64}) [ 376.168352][T13055] binder_alloc: 13053: binder_alloc_buf, no vma [ 376.317099][T13061] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 376.326612][T13061] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.5'. 19:51:32 executing program 2: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) r1 = dup2(r0, r0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x7}, 0x4) r2 = socket$nl_xfrm(0x11, 0x3, 0x6) dup2(r2, r1) [ 376.499716][T13065] binder: 13056:13065 unknown command 1090151173 [ 376.506719][T13065] binder: 13056:13065 ioctl c0306201 20000280 returned -22 19:51:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r5, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x7f) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmsg$AUDIT_ADD_RULE(r4, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)={0x448, 0x3f3, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x1, 0x1c, [0x2, 0x8, 0x400, 0xe6b5, 0x1000, 0x7, 0x101, 0x8, 0x1, 0x8001, 0x10001, 0x2, 0x2, 0xfff, 0x5, 0x399, 0x9, 0x2, 0x9, 0x83, 0x81, 0x2, 0x200, 0x80000000, 0x0, 0xece, 0x7f, 0x3ff, 0x9, 0x0, 0x71, 0x400, 0x2, 0x5, 0xfffffff8, 0x0, 0x2, 0xff, 0xffffff7f, 0x8, 0x2000000, 0x9, 0xfffffffd, 0x101, 0x79, 0x1000, 0x8, 0x9, 0xa3d, 0xaf, 0x0, 0x1, 0x3fc9, 0x8, 0x0, 0x80000001, 0x1, 0x8f5, 0x3, 0x2, 0xfff, 0x7fffffff, 0x5580, 0x8], [0x800, 0x3, 0x3579, 0x60, 0x1f, 0x4, 0x7f, 0x80, 0x2, 0x9, 0x2, 0x2, 0x4, 0x9, 0x3f, 0x7, 0x2, 0xff, 0xa5, 0x6, 0xfffffff8, 0x5, 0x711, 0x0, 0x100, 0xfffffff7, 0x1, 0x5, 0xfffffffd, 0xe, 0x80, 0x0, 0x8001, 0x399, 0x704, 0x1, 0x7, 0x328, 0x3, 0x7, 0x64, 0x1, 0x287, 0x3, 0x368, 0x7, 0xff, 0x0, 0xcd, 0x31, 0x7, 0x80000001, 0x0, 0x3, 0x80000000, 0x850, 0x9, 0x80000000, 0xed8, 0x1000, 0x0, 0x9, 0x80000000, 0x3f], [0x100, 0x971e, 0x0, 0x44ac3b90, 0x2, 0x6, 0x2d, 0x100, 0x2, 0x0, 0x401, 0x8, 0x7, 0x800, 0x101, 0x8, 0x6, 0x6, 0x200, 0x7932, 0x7f, 0x4, 0x0, 0x9, 0x0, 0x3, 0x9a, 0xc2, 0x1, 0x7, 0x400, 0x1f06, 0x7, 0x191c, 0x3, 0x2, 0x4, 0x3, 0x1ff, 0x5, 0x2, 0x2, 0x2, 0x47dd, 0x9, 0x1, 0x6, 0x8, 0x6, 0x7f, 0x80000000, 0x1, 0x1, 0x1, 0x9, 0x6, 0x4, 0x1f, 0x8, 0x7, 0xfffffff7, 0x40, 0x8, 0xa814], [0x3ff, 0x1000, 0x4, 0x8635, 0x10001, 0x8000, 0x1, 0x9, 0x80000000, 0x7fff, 0x0, 0x800, 0x4, 0x8, 0xf800, 0x400, 0x6, 0x7, 0xfffffffa, 0xd2, 0x0, 0x0, 0x5, 0x40f, 0x0, 0x4, 0x8001, 0xe9, 0x9, 0x400, 0x8, 0x1, 0x6, 0x1, 0xffffff7f, 0x8, 0x7, 0xe63, 0x1, 0xa08, 0x2, 0x1, 0x2, 0x6, 0x3, 0x80000000, 0xb8, 0x10000, 0x9, 0x20, 0x3, 0x4, 0x3, 0x1, 0x5, 0x1, 0x46, 0x6, 0x6, 0x8000, 0x0, 0x6, 0xfff, 0x2e3c], 0x25, ['-\x00', '/dev/binder#\x00', 'cpuset(\'.wlan1wlan1.^\x00']}, ["", "", "", "", "", "", "", ""]}, 0x448}, 0x1, 0x0, 0x0, 0x400}, 0x1) r6 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:51:33 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x98f905, 0x8, [], @p_u32=&(0x7f00000001c0)}}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x67, 0x1, 0x4, 0x20000, 0x8, {0x0, 0xea60}, {0x3, 0x1, 0x80, 0xe5, 0x4b, 0x1, "650f44e0"}, 0x401, 0x2, @planes=&(0x7f0000000000)={0x4, 0x5e, @userptr=0x61d, 0x5}, 0x64}) 19:51:33 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x401, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc040563d, &(0x7f0000000480)={0x0, 0x0, "02000000d33b6c388a05f15c77179b2e6f020e943bbeb8b59456e6e057980025"}) [ 376.949105][T13072] binder_alloc: 13071: binder_alloc_buf, no vma 19:51:33 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x98f905, 0x8, [], @p_u32=&(0x7f00000001c0)}}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x67, 0x1, 0x4, 0x20000, 0x8, {0x0, 0xea60}, {0x3, 0x1, 0x80, 0xe5, 0x4b, 0x1, "650f44e0"}, 0x401, 0x2, @planes=&(0x7f0000000000)={0x4, 0x5e, @userptr=0x61d, 0x5}, 0x64}) 19:51:33 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f0000003000018006000200000000000c00070000000000000000000600010000000000060001000000000006000400000000004000028014000100ff0200000000000000ffff00ebff0001f3ff02000000000006000f000000000006000e0000000000080004000000000006000e000000000024000180060002000000000008000b007369700008000b0073697000060002"], 0xa8}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b43026c262369250004", 0x1f}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 19:51:33 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:51:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) unshare(0x600) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@local}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:51:33 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x98f905, 0x8, [], @p_u32=&(0x7f00000001c0)}}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x67, 0x1, 0x4, 0x20000, 0x8, {0x0, 0xea60}, {0x3, 0x1, 0x80, 0xe5, 0x4b, 0x1, "650f44e0"}, 0x401, 0x2, @planes=&(0x7f0000000000)={0x4, 0x5e, @userptr=0x61d, 0x5}, 0x64}) 19:51:33 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x401, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc040563d, &(0x7f0000000480)={0x0, 0x0, "02000000d33b6c388a05f15c77179b2e6f020e943bbeb8b59456e6e057980025"}) [ 377.342103][T13083] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 377.351070][T13083] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.5'. 19:51:33 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x98f905, 0x8, [], @p_u32=&(0x7f00000001c0)}}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x67, 0x1, 0x4, 0x20000, 0x8, {0x0, 0xea60}, {0x3, 0x1, 0x80, 0xe5, 0x4b, 0x1, "650f44e0"}, 0x401, 0x2, @planes=&(0x7f0000000000)={0x4, 0x5e, @userptr=0x61d, 0x5}, 0x64}) 19:51:34 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x98f905, 0x8, [], @p_u32=&(0x7f00000001c0)}}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x67, 0x1, 0x4, 0x20000, 0x8, {0x0, 0xea60}, {0x3, 0x1, 0x80, 0xe5, 0x4b, 0x1, "650f44e0"}, 0x401, 0x2, @planes=&(0x7f0000000000)={0x4, 0x5e, @userptr=0x61d, 0x5}, 0x64}) [ 377.532362][T13092] binder: 13082:13092 unknown command 1090151173 [ 377.539764][T13092] binder: 13082:13092 ioctl c0306201 20000280 returned -22 19:51:34 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r4, 0x0, 0x0) r5 = dup2(r0, r4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:51:34 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x401, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc040563d, &(0x7f0000000480)={0x0, 0x0, "02000000d33b6c388a05f15c77179b2e6f020e943bbeb8b59456e6e057980025"}) 19:51:34 executing program 3: rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000000)) r0 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x5) ftruncate(r0, 0x1000000) [ 378.077760][T13100] binder_alloc: 13099: binder_alloc_buf, no vma 19:51:34 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x98f905, 0x8, [], @p_u32=&(0x7f00000001c0)}}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x67, 0x1, 0x4, 0x20000, 0x8, {0x0, 0xea60}, {0x3, 0x1, 0x80, 0xe5, 0x4b, 0x1, "650f44e0"}, 0x401, 0x2, @planes=&(0x7f0000000000)={0x4, 0x5e, @userptr=0x61d, 0x5}, 0x64}) [ 378.182654][T13102] binder: BINDER_SET_CONTEXT_MGR already set [ 378.189106][T13102] binder: 13099:13102 ioctl 40046207 0 returned -16 19:51:34 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f0000003000018006000200000000000c00070000000000000000000600010000000000060001000000000006000400000000004000028014000100ff0200000000000000ffff00ebff0001f3ff02000000000006000f000000000006000e0000000000080004000000000006000e000000000024000180060002000000000008000b007369700008000b0073697000060002"], 0xa8}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b43026c262369250004", 0x1f}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 19:51:34 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x800) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r2) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x8891, @mcast2, 0x1}, 0x1c) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) 19:51:34 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:51:34 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x4, 0x3, 0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd06, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 378.452059][T13112] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 378.461435][T13112] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.5'. 19:51:35 executing program 3: rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000000)) r0 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x5) ftruncate(r0, 0x1000000) [ 378.621064][T13116] binder: BINDER_SET_CONTEXT_MGR already set [ 378.627661][T13116] binder: 13114:13116 ioctl 40046207 0 returned -16 19:51:35 executing program 2: sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_TUNER(r0, 0xc0285628, &(0x7f0000000480)={0x0, "b3e615f1c14bb1c8b3bae354e723632faaa09a85f249e4b45d52acdd63bdae61"}) [ 378.748503][T13120] binder: BINDER_SET_CONTEXT_MGR already set [ 378.757469][T13120] binder: 13114:13120 ioctl 40046207 0 returned -16 [ 378.783702][T13122] binder: 13115:13122 unknown command 1090151173 [ 378.791241][T13122] binder: 13115:13122 ioctl c0306201 20000280 returned -22 19:51:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="04fb363fbc84af0239af1796e192c27c3158501923b71d74a925806e4edb0dd27de3616ab0816869bbe5fe186db4a74cf6ca1869a4ca68d8fa2687819fbdd6cccef75ba6afcde9f7277d5cdf503fbe200c6e72e8c7c7a06afc808139418b8268d1b436d4058d5e1c3debc1b47957b166a33a09a29715b823cf9d42fc8c2f79dc5d605ab9ae23a3434838a864bd6401aa48510b1f77741dd67e80f32d6711af"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05630440010000800000000001731dfad1a0f3a2d9568cdb0eeeba14613fc80ec6b36899cfa8aa794ac6265461b20910cc81166d4b4ccea514422945730770afc41f08a461dc9dab48d251a82d4511767dde8cc708e7d6ae3caf6375678015c36b352e4a528777b288fcd60a95250653d879fc8c65376aec5746a88a3f57a4bfb41a3aa8189dd44c287782260e8eaee14330b4162edd53a76af2a4931d1be427b2279b2d1c3b7569befd337299f1c87c47fab13539d6ce48e03d46e07faf8db634ed5877a9"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000080)=0xfffffffffffffffe, 0x4) 19:51:35 executing program 3: rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000000)) r0 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x5) ftruncate(r0, 0x1000000) 19:51:35 executing program 2: sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_TUNER(r0, 0xc0285628, &(0x7f0000000480)={0x0, "b3e615f1c14bb1c8b3bae354e723632faaa09a85f249e4b45d52acdd63bdae61"}) 19:51:35 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:51:35 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x10000, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c562c84ed7a80ffe0060f000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed4e00000000000000", 0x48}], 0x1) [ 379.331135][T13133] binder: 13128:13133 ioctl c008640a 20000040 returned -22 [ 379.401848][T13133] binder: 13128:13133 unknown command 1060567812 [ 379.408833][T13133] binder: 13128:13133 ioctl c0306201 20000200 returned -22 [ 379.449490][T13138] binder: 13128:13138 unknown command 0 [ 379.455250][T13138] binder: 13128:13138 ioctl c0306201 20000280 returned -22 19:51:35 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x10000, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c562c84ed7a80ffe0060f000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed4e00000000000000", 0x48}], 0x1) 19:51:36 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x4, 0x3, 0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd06, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 19:51:36 executing program 3: rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000000)) r0 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x5) ftruncate(r0, 0x1000000) [ 379.543073][T13133] binder: 13128:13133 ioctl c008640a 20000040 returned -22 [ 379.576958][T13142] binder: 13128:13142 unknown command 1060567812 [ 379.583420][T13142] binder: 13128:13142 ioctl c0306201 20000200 returned -22 [ 379.622196][T13138] binder: BINDER_SET_CONTEXT_MGR already set [ 379.628499][T13138] binder: 13128:13138 ioctl 40046207 0 returned -16 [ 379.638528][T13133] binder: 13128:13133 unknown command 0 [ 379.644390][T13133] binder: 13128:13133 ioctl c0306201 20000280 returned -22 19:51:36 executing program 2: sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_TUNER(r0, 0xc0285628, &(0x7f0000000480)={0x0, "b3e615f1c14bb1c8b3bae354e723632faaa09a85f249e4b45d52acdd63bdae61"}) [ 379.693419][T13141] binder: 13139:13141 unknown command 1090151173 [ 379.700261][T13141] binder: 13139:13141 ioctl c0306201 20000280 returned -22 19:51:36 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x420c00) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000340)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f00000000c0)={{}, 0x41, 0x0, &(0x7f00000001c0)="b65661463a0d9951e9ab279318987e268b437dd512c8bf6ca16ce77f8f7cdddddcb20c6f743bacb66fe6b21280dae758fdc3289a2328df20cf2866fb482f03d40d"}) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000000080)=0x4) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000100)) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x1407, 0x1, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x60}, 0x8000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:51:36 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:51:36 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x10000, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c562c84ed7a80ffe0060f000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed4e00000000000000", 0x48}], 0x1) 19:51:36 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x4, 0x3, 0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd06, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 19:51:36 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0xfd, @tick, {}, {0x7f}, @addr}], 0x38) 19:51:36 executing program 2: sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_TUNER(r0, 0xc0285628, &(0x7f0000000480)={0x0, "b3e615f1c14bb1c8b3bae354e723632faaa09a85f249e4b45d52acdd63bdae61"}) 19:51:37 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r4, r3) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000080)={0x9d0000, 0x4, 0x1000, r4, 0x0, &(0x7f0000000040)={0x990a69, 0x20, [], @ptr=0x4}}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:51:37 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x10000, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c562c84ed7a80ffe0060f000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed4e00000000000000", 0x48}], 0x1) [ 380.792018][T13168] binder: 13162:13168 unknown command 1090151173 [ 380.799182][T13168] binder: 13162:13168 ioctl c0306201 20000280 returned -22 19:51:37 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x4, 0x3, 0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd06, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 19:51:37 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0xfd, @tick, {}, {0x7f}, @addr}], 0x38) [ 380.841387][T13172] binder: 13170:13172 ioctl c0205648 20000080 returned -22 [ 380.971682][T13172] binder: 13170:13172 ioctl c0205648 20000080 returned -22 19:51:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="0f018c6b4e260f650966b9800000c00f326635004000000f30b899028ed0b801008ed00fa10b6bc136f30f5e350fc769b8", 0x31}], 0x1, 0x0, 0x0, 0xfffffd86) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f00000000c0)=[@acquire={0x400c630e}, @request_death={0x40046306, 0x0, 0x40086303}], 0x0, 0x0, 0x0}) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(0xffffffffffffffff, 0x80184151, &(0x7f0000000040)={0x0, &(0x7f0000000140)}) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 19:51:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x2, 0x3, 0x3f0, 0x198, 0x0, 0x198, 0x198, 0x198, 0x358, 0x358, 0x358, 0x358, 0x358, 0x3, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'vcan0\x00', 'wg1\x00'}, 0x0, 0x158, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831866346c88621039b284c3ff45c42995560a99952bed40cf5a8b9fb6133db7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a7dbaae5592e8b15900000100", 0x8}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "631499f89a95e49806ea7f9eaecf0b0fd0691f86bb9a323cbbaffc30fb26"}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'team_slave_1\x00', 'netdevsim0\x00'}, 0x0, 0x98, 0x1c0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_cron_spool_t:s0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x450) 19:51:37 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:51:37 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0xfd, @tick, {}, {0x7f}, @addr}], 0x38) [ 381.321526][T13186] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 19:51:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x2, 0x3, 0x3f0, 0x198, 0x0, 0x198, 0x198, 0x198, 0x358, 0x358, 0x358, 0x358, 0x358, 0x3, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'vcan0\x00', 'wg1\x00'}, 0x0, 0x158, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831866346c88621039b284c3ff45c42995560a99952bed40cf5a8b9fb6133db7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a7dbaae5592e8b15900000100", 0x8}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "631499f89a95e49806ea7f9eaecf0b0fd0691f86bb9a323cbbaffc30fb26"}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'team_slave_1\x00', 'netdevsim0\x00'}, 0x0, 0x98, 0x1c0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_cron_spool_t:s0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x450) 19:51:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) [ 381.551467][T13195] binder: 13187:13195 unknown command 1090151173 [ 381.559230][T13195] binder: 13187:13195 ioctl c0306201 20000280 returned -22 [ 381.783131][T13202] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 19:51:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x2, 0x3, 0x3f0, 0x198, 0x0, 0x198, 0x198, 0x198, 0x358, 0x358, 0x358, 0x358, 0x358, 0x3, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'vcan0\x00', 'wg1\x00'}, 0x0, 0x158, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831866346c88621039b284c3ff45c42995560a99952bed40cf5a8b9fb6133db7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a7dbaae5592e8b15900000100", 0x8}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "631499f89a95e49806ea7f9eaecf0b0fd0691f86bb9a323cbbaffc30fb26"}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'team_slave_1\x00', 'netdevsim0\x00'}, 0x0, 0x98, 0x1c0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_cron_spool_t:s0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x450) 19:51:38 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0xfd, @tick, {}, {0x7f}, @addr}], 0x38) 19:51:38 executing program 0: shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f0000000080)=""/71) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r3, &(0x7f0000db0000/0x1000)=nil, 0x5000) shmat(r3, &(0x7f0000ffb000/0x3000)=nil, 0x5000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)) read$midi(r2, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xffffff7f, 0x4}) r4 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:51:38 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000006c0)={'batadv0\x00', &(0x7f00000005c0)=@ethtool_drvinfo={0x37, "00284d3b7f10f4e292c3a7b84fdd235710b8292562db827811901905eca306c8", "cc4644dde37f150d377abcf2ff14f5c3585e3ea82c4d214a50419058d1e33445", "c326c08ea1cbb40b7dd2ecba6debab665d00b8fd64cb0fb0deb53c87946062bb", "2decc83234a964013fb06a9c71cb604618bfe25614e2a97b99eb5744de4bbac3", "bbd9dcc48cc1fb5abcc7536560fcc3e3df480ef43397ab7b389c6ba95cb87850", "faa5e2c6771fc7b8628c3b94"}}) 19:51:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="0f018c6b4e260f650966b9800000c00f326635004000000f30b899028ed0b801008ed00fa10b6bc136f30f5e350fc769b8", 0x31}], 0x1, 0x0, 0x0, 0xfffffd86) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f00000000c0)=[@acquire={0x400c630e}, @request_death={0x40046306, 0x0, 0x40086303}], 0x0, 0x0, 0x0}) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(0xffffffffffffffff, 0x80184151, &(0x7f0000000040)={0x0, &(0x7f0000000140)}) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 19:51:38 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) [ 382.273622][T13213] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 19:51:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x2, 0x3, 0x3f0, 0x198, 0x0, 0x198, 0x198, 0x198, 0x358, 0x358, 0x358, 0x358, 0x358, 0x3, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'vcan0\x00', 'wg1\x00'}, 0x0, 0x158, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831866346c88621039b284c3ff45c42995560a99952bed40cf5a8b9fb6133db7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a7dbaae5592e8b15900000100", 0x8}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "631499f89a95e49806ea7f9eaecf0b0fd0691f86bb9a323cbbaffc30fb26"}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'team_slave_1\x00', 'netdevsim0\x00'}, 0x0, 0x98, 0x1c0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_cron_spool_t:s0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x450) 19:51:38 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) 19:51:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="0f018c6b4e260f650966b9800000c00f326635004000000f30b899028ed0b801008ed00fa10b6bc136f30f5e350fc769b8", 0x31}], 0x1, 0x0, 0x0, 0xfffffd86) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f00000000c0)=[@acquire={0x400c630e}, @request_death={0x40046306, 0x0, 0x40086303}], 0x0, 0x0, 0x0}) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(0xffffffffffffffff, 0x80184151, &(0x7f0000000040)={0x0, &(0x7f0000000140)}) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) [ 382.659581][T13234] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 19:51:39 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000006c0)={'batadv0\x00', &(0x7f00000005c0)=@ethtool_drvinfo={0x37, "00284d3b7f10f4e292c3a7b84fdd235710b8292562db827811901905eca306c8", "cc4644dde37f150d377abcf2ff14f5c3585e3ea82c4d214a50419058d1e33445", "c326c08ea1cbb40b7dd2ecba6debab665d00b8fd64cb0fb0deb53c87946062bb", "2decc83234a964013fb06a9c71cb604618bfe25614e2a97b99eb5744de4bbac3", "bbd9dcc48cc1fb5abcc7536560fcc3e3df480ef43397ab7b389c6ba95cb87850", "faa5e2c6771fc7b8628c3b94"}}) [ 382.767715][T13238] binder: 13221:13238 unknown command 1090151173 [ 382.776850][T13238] binder: 13221:13238 ioctl c0306201 20000280 returned -22 19:51:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="0f018c6b4e260f650966b9800000c00f326635004000000f30b899028ed0b801008ed00fa10b6bc136f30f5e350fc769b8", 0x31}], 0x1, 0x0, 0x0, 0xfffffd86) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f00000000c0)=[@acquire={0x400c630e}, @request_death={0x40046306, 0x0, 0x40086303}], 0x0, 0x0, 0x0}) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(0xffffffffffffffff, 0x80184151, &(0x7f0000000040)={0x0, &(0x7f0000000140)}) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 19:51:39 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001200)=0x14) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000004c0)={0x1c, 0x0, 0x27, 0x0, 0x4, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x10, 0x70bd27, 0x0, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x34}}, 0x84) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[@exit_looper, @exit_looper], 0x26, 0x0, 0x0}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05c2c58d0be00440ca3d3d6d60257bca1591f02eb62875a2196c48616bae6da17024aa618d883101a6da56"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r7 = accept$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000280)=0x1c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f00000002c0)) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f00000000c0)={0xfffffff, 0xffff, 0x1, r1, 0x0, &(0x7f0000000080)={0x9909d6, 0x2a, [], @string=&(0x7f0000000040)=0x33}}) sendto$inet(r8, &(0x7f0000000100)="ccf178d9e3f4c9364ef8c3341a34b89115343d4b627b140de1b7ea3dedfad56fe4ec5509978f951800e1a01ef2cb3a1cfa1bb87d87911c40a17fe6096aaa2cd0cf6f745891f697954a343056d343af25c942b666ef25c1e6d2371821a1dfd06284941322ced4f74bf9c48cb6e56d528c709501ecf7c59a54c325a4b6a6b7ebb9813625ebd026a0fdc62cf9", 0x8b, 0x8040, &(0x7f00000001c0)={0x2, 0x4e24, @private=0xa010101}, 0x10) [ 383.249213][T13248] binder: 13247:13248 ioctl c0306201 20000540 returned -14 19:51:39 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0xc}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x10) [ 383.334525][T13248] binder: 13247:13248 unknown command -1916419579 [ 383.341761][T13248] binder: 13247:13248 ioctl c0306201 20000200 returned -22 19:51:39 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:51:39 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000006c0)={'batadv0\x00', &(0x7f00000005c0)=@ethtool_drvinfo={0x37, "00284d3b7f10f4e292c3a7b84fdd235710b8292562db827811901905eca306c8", "cc4644dde37f150d377abcf2ff14f5c3585e3ea82c4d214a50419058d1e33445", "c326c08ea1cbb40b7dd2ecba6debab665d00b8fd64cb0fb0deb53c87946062bb", "2decc83234a964013fb06a9c71cb604618bfe25614e2a97b99eb5744de4bbac3", "bbd9dcc48cc1fb5abcc7536560fcc3e3df480ef43397ab7b389c6ba95cb87850", "faa5e2c6771fc7b8628c3b94"}}) [ 383.382507][T13250] binder: 13247:13250 ioctl c0205647 200000c0 returned -22 19:51:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="0f018c6b4e260f650966b9800000c00f326635004000000f30b899028ed0b801008ed00fa10b6bc136f30f5e350fc769b8", 0x31}], 0x1, 0x0, 0x0, 0xfffffd86) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f00000000c0)=[@acquire={0x400c630e}, @request_death={0x40046306, 0x0, 0x40086303}], 0x0, 0x0, 0x0}) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(0xffffffffffffffff, 0x80184151, &(0x7f0000000040)={0x0, &(0x7f0000000140)}) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) [ 383.489245][T13250] binder: 13247:13250 ioctl c0306201 20000540 returned -14 [ 383.508990][T13254] binder: 13247:13254 unknown command -1916419579 [ 383.516927][T13254] binder: 13247:13254 ioctl c0306201 20000200 returned -22 19:51:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="0f018c6b4e260f650966b9800000c00f326635004000000f30b899028ed0b801008ed00fa10b6bc136f30f5e350fc769b8", 0x31}], 0x1, 0x0, 0x0, 0xfffffd86) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f00000000c0)=[@acquire={0x400c630e}, @request_death={0x40046306, 0x0, 0x40086303}], 0x0, 0x0, 0x0}) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(0xffffffffffffffff, 0x80184151, &(0x7f0000000040)={0x0, &(0x7f0000000140)}) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) [ 383.549315][T13257] binder: 13247:13257 ioctl c0205647 200000c0 returned -22 19:51:40 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0xc}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x10) 19:51:40 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000006c0)={'batadv0\x00', &(0x7f00000005c0)=@ethtool_drvinfo={0x37, "00284d3b7f10f4e292c3a7b84fdd235710b8292562db827811901905eca306c8", "cc4644dde37f150d377abcf2ff14f5c3585e3ea82c4d214a50419058d1e33445", "c326c08ea1cbb40b7dd2ecba6debab665d00b8fd64cb0fb0deb53c87946062bb", "2decc83234a964013fb06a9c71cb604618bfe25614e2a97b99eb5744de4bbac3", "bbd9dcc48cc1fb5abcc7536560fcc3e3df480ef43397ab7b389c6ba95cb87850", "faa5e2c6771fc7b8628c3b94"}}) 19:51:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="0f018c6b4e260f650966b9800000c00f326635004000000f30b899028ed0b801008ed00fa10b6bc136f30f5e350fc769b8", 0x31}], 0x1, 0x0, 0x0, 0xfffffd86) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f00000000c0)=[@acquire={0x400c630e}, @request_death={0x40046306, 0x0, 0x40086303}], 0x0, 0x0, 0x0}) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(0xffffffffffffffff, 0x80184151, &(0x7f0000000040)={0x0, &(0x7f0000000140)}) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 19:51:40 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0xc}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x10) 19:51:40 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0xc}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x10) 19:51:41 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x3}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20000800) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f00000000c0)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) [ 384.704858][T13291] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 384.728073][T13291] device bond0 entered promiscuous mode [ 384.733949][T13291] device bond_slave_0 entered promiscuous mode [ 384.741644][T13291] device bond_slave_1 entered promiscuous mode [ 384.751235][T13291] 8021q: adding VLAN 0 to HW filter on device macvlan2 19:51:41 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0xc}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x10) 19:51:41 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000040)=0x80000000, 0x4) 19:51:41 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:51:41 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0xc}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x10) [ 385.128478][T13291] device bond0 left promiscuous mode [ 385.134910][T13291] device bond_slave_0 left promiscuous mode [ 385.141992][T13291] device bond_slave_1 left promiscuous mode 19:51:41 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000040)=0x80000000, 0x4) [ 385.274452][T13305] binder: 13301:13305 unknown command 1090151173 [ 385.281416][T13305] binder: 13301:13305 ioctl c0306201 20000280 returned -22 19:51:41 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000200)='./file0/bus\x00', 0x80000800) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x10) sendfile(r1, r2, 0x0, 0x1000000000e6) 19:51:41 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0xc}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x10) 19:51:42 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) [ 385.698693][T13295] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 385.720572][T13295] device bond0 entered promiscuous mode [ 385.726495][T13295] device bond_slave_0 entered promiscuous mode [ 385.733422][T13295] device bond_slave_1 entered promiscuous mode [ 385.741954][T13295] 8021q: adding VLAN 0 to HW filter on device macvlan2 19:51:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000040)=0x80000000, 0x4) 19:51:42 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000200)='./file0/bus\x00', 0x80000800) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x10) sendfile(r1, r2, 0x0, 0x1000000000e6) [ 386.025081][T13327] binder: 13322:13327 unknown command 1090151173 [ 386.031890][T13327] binder: 13322:13327 ioctl c0306201 20000280 returned -22 [ 386.158251][T13295] device bond0 left promiscuous mode [ 386.163818][T13295] device bond_slave_0 left promiscuous mode [ 386.170923][T13295] device bond_slave_1 left promiscuous mode 19:51:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000040)=0x80000000, 0x4) 19:51:43 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x3}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20000800) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f00000000c0)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) 19:51:43 executing program 4: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}, {&(0x7f0000000580)=""/85, 0x55}], 0x2}}], 0x1, 0x0, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000280)=""/11, 0xb}, {&(0x7f0000000dc0)=""/252, 0xfc}], 0x3, &(0x7f00000006c0)=""/13, 0xd}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 19:51:43 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:51:43 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000200)='./file0/bus\x00', 0x80000800) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x10) sendfile(r1, r2, 0x0, 0x1000000000e6) 19:51:43 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000000), 0x4) [ 387.224450][T13345] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 387.246507][T13345] device bond0 entered promiscuous mode [ 387.252175][T13345] device bond_slave_0 entered promiscuous mode [ 387.259182][T13345] device bond_slave_1 entered promiscuous mode [ 387.267851][T13345] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 387.324970][T13341] binder: 13338:13341 unknown command 1090151173 [ 387.333502][T13341] binder: 13338:13341 ioctl c0306201 20000280 returned -22 19:51:43 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000200)='./file0/bus\x00', 0x80000800) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x10) sendfile(r1, r2, 0x0, 0x1000000000e6) 19:51:43 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000000), 0x4) [ 387.568651][T13345] device bond0 left promiscuous mode [ 387.574212][T13345] device bond_slave_0 left promiscuous mode [ 387.581029][T13345] device bond_slave_1 left promiscuous mode 19:51:44 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) [ 388.043841][T13364] binder: 13359:13364 unknown command 1090151173 [ 388.051051][T13364] binder: 13359:13364 ioctl c0306201 20000280 returned -22 19:51:44 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x18, 0x140f, 0x82b, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x10}]}, 0x18}}, 0x0) 19:51:44 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:51:44 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000000), 0x4) 19:51:44 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x3}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20000800) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f00000000c0)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) 19:51:44 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="e7864432", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x7d, &(0x7f0000000000), &(0x7f00000000c0)=0x8) 19:51:44 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x18, 0x140f, 0x82b, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x10}]}, 0x18}}, 0x0) [ 388.585809][T13378] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 388.607210][T13378] device bond0 entered promiscuous mode [ 388.612983][T13378] device bond_slave_0 entered promiscuous mode [ 388.620015][T13378] device bond_slave_1 entered promiscuous mode [ 388.628646][T13378] 8021q: adding VLAN 0 to HW filter on device macvlan2 19:51:45 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) r3 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x8001, 0x100) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r4, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f00000001c0)={r5, 0x6, &(0x7f00000000c0)=[0x7, 0x1, 0x4, 0xffffffff, 0x80, 0x6], &(0x7f0000000100)=[0x3], 0x21, 0x4, 0x1f, &(0x7f0000000140)=[0x100, 0x4, 0x5, 0x401], &(0x7f0000000180)=[0x8000, 0x8, 0x6, 0x5, 0x6]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 388.766016][T13386] binder: 13370:13386 unknown command 1090151173 [ 388.772664][T13386] binder: 13370:13386 ioctl c0306201 20000280 returned -22 19:51:45 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x18, 0x140f, 0x82b, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x10}]}, 0x18}}, 0x0) 19:51:45 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="e7864432", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x7d, &(0x7f0000000000), &(0x7f00000000c0)=0x8) 19:51:45 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000d4000000d4000000030000000b0000000000000e0400000001007320d1691340e79bd300001000000000000008030400000f00000004000084070000000f00000005000000390000000600000002000000000000000a00000000000000070000000700000001000000000001000700000000000001000000001b002a0203000000020000055370000003000000050000003bb600000600000005000015040000000000000002000004ffff00000600000005000000020000000500000002000000000400000400000000000007000000000d00000000000008030000088433a9f00857c25c561d5ce8d6894a3a2ff04ae41c4b2f85a59aaaab12b6a63ce581e168d6b11fe6d76e37063ae3ea3363917893ab532bd6405416eae179333092bbe22fc9c814797d5a8efe41ea565cb15829945fe28a9d41dc2057380730b21f6c4480138ec011fad4856caaf5e36fa67323489931ecc1e0d2f528df408fae4a94aed235d99609804d6fa6f8305edd7848c6bc1c95961c3e3c1dc8d4bfccbb52e9ce06f8b0b1e58621d4206c3b8c98369a544cd71355f929298067753d2c3ddc6811564c0a8b92a4e40de27e8076"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:51:45 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="086310400200000000020000000000000000000009631040020000000000000000000000000000000f630c4000000000000000000000000009631040030000000000000000000000000040001ef2ff89e6cf0c6af5c120c77fb69c91aa6416605597bcc39469065a4ac9538d117575689d916390d8d06e59"], 0xffffffffffffffb7, 0x0, 0x0}) [ 389.048286][T13378] device bond0 left promiscuous mode [ 389.053865][T13378] device bond_slave_0 left promiscuous mode [ 389.060753][T13378] device bond_slave_1 left promiscuous mode 19:51:45 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x18, 0x140f, 0x82b, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x10}]}, 0x18}}, 0x0) [ 389.320916][T13402] binder: 13400:13402 ioctl c0306201 20000540 returned -14 19:51:45 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="e7864432", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x7d, &(0x7f0000000000), &(0x7f00000000c0)=0x8) [ 389.475367][T13405] binder: 13397:13405 unknown command 1090151173 [ 389.482377][T13405] binder: 13397:13405 ioctl c0306201 20000280 returned -22 19:51:46 executing program 0: syz_open_dev$binderN(0x0, 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="00000440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x8000, 0x0) socket(0xb, 0x800, 0x8) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000140)) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r3, r5) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x101002, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:51:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000000), 0x4) [ 389.732587][T13410] binder: 13409:13410 unknown command 1074003968 [ 389.739341][T13410] binder: 13409:13410 ioctl c0306201 20000200 returned -22 19:51:46 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x3}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20000800) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f00000000c0)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) 19:51:46 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[], 0x1c3) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000340)='/dev/vcsu#\x00', 0xfffffffffffffffe, 0x200000) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x2, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) socket$kcm(0x29, 0x5, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDISABIO(r4, 0x4b37) 19:51:46 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000d4000000d4000000030000000b0000000000000e0400000001007320d1691340e79bd300001000000000000008030400000f00000004000084070000000f00000005000000390000000600000002000000000000000a00000000000000070000000700000001000000000001000700000000000001000000001b002a0203000000020000055370000003000000050000003bb600000600000005000015040000000000000002000004ffff00000600000005000000020000000500000002000000000400000400000000000007000000000d00000000000008030000088433a9f00857c25c561d5ce8d6894a3a2ff04ae41c4b2f85a59aaaab12b6a63ce581e168d6b11fe6d76e37063ae3ea3363917893ab532bd6405416eae179333092bbe22fc9c814797d5a8efe41ea565cb15829945fe28a9d41dc2057380730b21f6c4480138ec011fad4856caaf5e36fa67323489931ecc1e0d2f528df408fae4a94aed235d99609804d6fa6f8305edd7848c6bc1c95961c3e3c1dc8d4bfccbb52e9ce06f8b0b1e58621d4206c3b8c98369a544cd71355f929298067753d2c3ddc6811564c0a8b92a4e40de27e8076"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) [ 389.804680][T13413] binder: 13409:13413 unknown command 0 [ 389.810677][T13413] binder: 13409:13413 ioctl c0306201 20000280 returned -22 [ 389.863390][T13410] binder: BINDER_SET_CONTEXT_MGR already set [ 389.869703][T13410] binder: 13409:13410 ioctl 40046207 0 returned -16 19:51:46 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="e7864432", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x7d, &(0x7f0000000000), &(0x7f00000000c0)=0x8) [ 389.940447][T13413] binder: 13409:13413 unknown command 1074003968 [ 389.947022][T13413] binder: 13409:13413 ioctl c0306201 20000200 returned -22 [ 390.008023][T13422] binder: BINDER_SET_CONTEXT_MGR already set [ 390.014332][T13422] binder: 13409:13422 ioctl 40046207 0 returned -16 [ 390.033625][T13410] binder: 13409:13410 unknown command 1986356271 [ 390.040672][T13410] binder: 13409:13410 ioctl c0306201 20000280 returned -22 [ 390.092179][T13423] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 390.113830][T13423] device bond0 entered promiscuous mode [ 390.119688][T13423] device bond_slave_0 entered promiscuous mode [ 390.126624][T13423] device bond_slave_1 entered promiscuous mode [ 390.132499][T13413] binder: BINDER_SET_CONTEXT_MGR already set [ 390.135005][T13423] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 390.139257][T13413] binder: 13409:13413 ioctl 40046207 0 returned -16 [ 390.411434][T13430] binder: 13418:13430 unknown command 1090151173 [ 390.418075][T13430] binder: 13418:13430 ioctl c0306201 20000280 returned -22 19:51:46 executing program 3: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x14, 0x0, 0x90) [ 390.577696][T13423] device bond0 left promiscuous mode [ 390.583169][T13423] device bond_slave_0 left promiscuous mode [ 390.590021][T13423] device bond_slave_1 left promiscuous mode 19:51:47 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x803) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r1, 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x9}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000002c0)={r5, 0x7ff}, &(0x7f0000000300)=0x8) ioctl$PPPIOCDISCONN(r0, 0x7439) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, r0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000001c0)=[@acquire={0x40046305, 0x1}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000100)={@ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/108, 0x6c, 0x0, 0x30}, @fda={0x66646185, 0x4, 0x1, 0x2}, @fda={0x66646185, 0x7, 0x2, 0x8}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0xeb200c51388f1541}], 0x0, 0x0, 0x0}) 19:51:47 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000d4000000d4000000030000000b0000000000000e0400000001007320d1691340e79bd300001000000000000008030400000f00000004000084070000000f00000005000000390000000600000002000000000000000a00000000000000070000000700000001000000000001000700000000000001000000001b002a0203000000020000055370000003000000050000003bb600000600000005000015040000000000000002000004ffff00000600000005000000020000000500000002000000000400000400000000000007000000000d00000000000008030000088433a9f00857c25c561d5ce8d6894a3a2ff04ae41c4b2f85a59aaaab12b6a63ce581e168d6b11fe6d76e37063ae3ea3363917893ab532bd6405416eae179333092bbe22fc9c814797d5a8efe41ea565cb15829945fe28a9d41dc2057380730b21f6c4480138ec011fad4856caaf5e36fa67323489931ecc1e0d2f528df408fae4a94aed235d99609804d6fa6f8305edd7848c6bc1c95961c3e3c1dc8d4bfccbb52e9ce06f8b0b1e58621d4206c3b8c98369a544cd71355f929298067753d2c3ddc6811564c0a8b92a4e40de27e8076"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:51:47 executing program 4: mknod(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', 0x0, 0x0, 0x0) setxattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@random={'security.', ',#system,j&-+*trusted/@\'!*@\x00'}, 0x0, 0x0, 0x0) unlink(&(0x7f0000000080)='./bus\x00') 19:51:47 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[], 0x1c3) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000340)='/dev/vcsu#\x00', 0xfffffffffffffffe, 0x200000) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x2, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) socket$kcm(0x29, 0x5, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDISABIO(r4, 0x4b37) [ 390.955395][T13446] binder_alloc: 13442: binder_alloc_buf, no vma [ 391.020478][T13446] binder: 13442:13446 ioctl 7439 0 returned -22 [ 391.099230][T13446] binder: 13442:13446 ioctl 7439 0 returned -22 [ 391.127458][T13453] binder: 13443:13453 unknown command 1090151173 [ 391.134060][T13453] binder: 13443:13453 ioctl c0306201 20000280 returned -22 19:51:47 executing program 4: mknod(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', 0x0, 0x0, 0x0) setxattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@random={'security.', ',#system,j&-+*trusted/@\'!*@\x00'}, 0x0, 0x0, 0x0) unlink(&(0x7f0000000080)='./bus\x00') 19:51:47 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000d4000000d4000000030000000b0000000000000e0400000001007320d1691340e79bd300001000000000000008030400000f00000004000084070000000f00000005000000390000000600000002000000000000000a00000000000000070000000700000001000000000001000700000000000001000000001b002a0203000000020000055370000003000000050000003bb600000600000005000015040000000000000002000004ffff00000600000005000000020000000500000002000000000400000400000000000007000000000d00000000000008030000088433a9f00857c25c561d5ce8d6894a3a2ff04ae41c4b2f85a59aaaab12b6a63ce581e168d6b11fe6d76e37063ae3ea3363917893ab532bd6405416eae179333092bbe22fc9c814797d5a8efe41ea565cb15829945fe28a9d41dc2057380730b21f6c4480138ec011fad4856caaf5e36fa67323489931ecc1e0d2f528df408fae4a94aed235d99609804d6fa6f8305edd7848c6bc1c95961c3e3c1dc8d4bfccbb52e9ce06f8b0b1e58621d4206c3b8c98369a544cd71355f929298067753d2c3ddc6811564c0a8b92a4e40de27e8076"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:51:47 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x58, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x0, 0x0, 0x0}) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000040)=""/24, &(0x7f0000000080)=0x18) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003f40)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xf}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003f40)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xf}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x800, 0x3}}]}, 0x40}, 0x1, 0x0, 0x0, 0x830}, 0x20000000) 19:51:47 executing program 3: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x14, 0x0, 0x90) 19:51:48 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[], 0x1c3) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000340)='/dev/vcsu#\x00', 0xfffffffffffffffe, 0x200000) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x2, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) socket$kcm(0x29, 0x5, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDISABIO(r4, 0x4b37) 19:51:48 executing program 4: mknod(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', 0x0, 0x0, 0x0) setxattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@random={'security.', ',#system,j&-+*trusted/@\'!*@\x00'}, 0x0, 0x0, 0x0) unlink(&(0x7f0000000080)='./bus\x00') [ 391.742681][T13465] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 391.800706][T13472] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 391.812404][T13467] binder: 13461:13467 unknown command 1090151173 [ 391.819330][T13467] binder: 13461:13467 ioctl c0306201 20000280 returned -22 19:51:48 executing program 3: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x14, 0x0, 0x90) [ 392.041154][T13472] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 19:51:48 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:51:48 executing program 4: mknod(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', 0x0, 0x0, 0x0) setxattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@random={'security.', ',#system,j&-+*trusted/@\'!*@\x00'}, 0x0, 0x0, 0x0) unlink(&(0x7f0000000080)='./bus\x00') 19:51:48 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[], 0x1c3) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000340)='/dev/vcsu#\x00', 0xfffffffffffffffe, 0x200000) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x2, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) socket$kcm(0x29, 0x5, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDISABIO(r4, 0x4b37) [ 392.257288][T13465] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 19:51:48 executing program 2: mknod(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', 0x0, 0x0, 0x0) setxattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@random={'security.', ',#system,j&-+*trusted/@\'!*@\x00'}, 0x0, 0x0, 0x0) unlink(&(0x7f0000000080)='./bus\x00') 19:51:48 executing program 3: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x14, 0x0, 0x90) 19:51:48 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r4, r3) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(0xffffffffffffffff, r3) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 392.578741][T13496] binder: 13488:13496 unknown command 1090151173 [ 392.585327][T13496] binder: 13488:13496 ioctl c0306201 20000280 returned -22 19:51:49 executing program 2: mknod(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', 0x0, 0x0, 0x0) setxattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@random={'security.', ',#system,j&-+*trusted/@\'!*@\x00'}, 0x0, 0x0, 0x0) unlink(&(0x7f0000000080)='./bus\x00') 19:51:49 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) [ 392.785328][T13502] binder_alloc: 13501: binder_alloc_buf, no vma [ 392.814115][T13502] binder: BINDER_SET_CONTEXT_MGR already set [ 392.820550][T13502] binder: 13501:13502 ioctl 40046207 0 returned -16 19:51:49 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[], 0x1c3) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000340)='/dev/vcsu#\x00', 0xfffffffffffffffe, 0x200000) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x2, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) socket$kcm(0x29, 0x5, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDISABIO(r4, 0x4b37) [ 392.880393][T13503] binder: BINDER_SET_CONTEXT_MGR already set [ 392.887250][T13503] binder: 13501:13503 ioctl 40046207 0 returned -16 19:51:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5420, 0x100000002071dffc) [ 392.934202][T13503] binder_alloc: 13501: binder_alloc_buf, no vma [ 392.980200][T13502] binder: BINDER_SET_CONTEXT_MGR already set [ 392.986352][T13502] binder: 13501:13502 ioctl 40046207 0 returned -16 19:51:49 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc040564a, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) [ 393.034125][T13508] binder: BINDER_SET_CONTEXT_MGR already set [ 393.040475][T13508] binder: 13501:13508 ioctl 40046207 0 returned -16 [ 393.175059][T13514] binder: 13504:13514 unknown command 1090151173 [ 393.182004][T13514] binder: 13504:13514 ioctl c0306201 20000280 returned -22 19:51:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@remote, @in=@dev}, {@in=@multicast1, 0x0, 0x33}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}}}]}, 0x13c}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) 19:51:49 executing program 2: mknod(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', 0x0, 0x0, 0x0) setxattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@random={'security.', ',#system,j&-+*trusted/@\'!*@\x00'}, 0x0, 0x0, 0x0) unlink(&(0x7f0000000080)='./bus\x00') 19:51:49 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) 19:51:50 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000d4000000d4000000030000000b0000000000000e0400000001007320d1691340e79bd300001000000000000008030400000f00000004000084070000000f00000005000000390000000600000002000000000000000a00000000000000070000000700000001000000000001000700000000000001000000001b002a0203000000020000055370000003000000050000003bb600000600000005000015040000000000000002000004ffff00000600000005000000020000000500000002000000000400000400000000000007000000000d00000000000008030000088433a9f00857c25c561d5ce8d6894a3a2ff04ae41c4b2f85a59aaaab12b6a63ce581e168d6b11fe6d76e37063ae3ea3363917893ab532bd6405416eae179333092bbe22fc9c814797d5a8efe41ea565cb15829945fe28a9d41dc2057380730b21f6c4480138ec011fad4856caaf5e36fa67323489931ecc1e0d2f528df408fae4a94aed235d99609804d6fa6f8305edd7848c6bc1c95961c3e3c1dc8d4bfccbb52e9ce06f8b0b1e58621d4206c3b8c98369a544cd71355f929298067753d2c3ddc6811564c0a8b92a4e40de27e8076"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:51:50 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc040564a, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) 19:51:50 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[], 0x1c3) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000340)='/dev/vcsu#\x00', 0xfffffffffffffffe, 0x200000) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x2, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) socket$kcm(0x29, 0x5, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDISABIO(r4, 0x4b37) 19:51:50 executing program 2: ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000180)={{0x1, 0x0, @reserved="32fcca736494bb18cb6efde338b7d8093b0f0a7a41b9e4f65588d22b285ff193"}}) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000640)="f1", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r1, r1}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 19:51:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@remote, @in=@dev}, {@in=@multicast1, 0x0, 0x33}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}}}]}, 0x13c}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) 19:51:50 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) 19:51:50 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc040564a, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) [ 394.036335][T13540] binder: 13530:13540 unknown command 1090151173 [ 394.043039][T13540] binder: 13530:13540 ioctl c0306201 20000280 returned -22 19:51:50 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000d4000000d4000000030000000b0000000000000e0400000001007320d1691340e79bd300001000000000000008030400000f00000004000084070000000f00000005000000390000000600000002000000000000000a00000000000000070000000700000001000000000001000700000000000001000000001b002a0203000000020000055370000003000000050000003bb600000600000005000015040000000000000002000004ffff00000600000005000000020000000500000002000000000400000400000000000007000000000d00000000000008030000088433a9f00857c25c561d5ce8d6894a3a2ff04ae41c4b2f85a59aaaab12b6a63ce581e168d6b11fe6d76e37063ae3ea3363917893ab532bd6405416eae179333092bbe22fc9c814797d5a8efe41ea565cb15829945fe28a9d41dc2057380730b21f6c4480138ec011fad4856caaf5e36fa67323489931ecc1e0d2f528df408fae4a94aed235d99609804d6fa6f8305edd7848c6bc1c95961c3e3c1dc8d4bfccbb52e9ce06f8b0b1e58621d4206c3b8c98369a544cd71355f929298067753d2c3ddc6811564c0a8b92a4e40de27e8076"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:51:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@remote, @in=@dev}, {@in=@multicast1, 0x0, 0x33}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}}}]}, 0x13c}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) 19:51:50 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[], 0x1c3) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000340)='/dev/vcsu#\x00', 0xfffffffffffffffe, 0x200000) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40000003, 0x0) splice(r2, 0x0, r1, 0x0, 0x1000000008, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x2, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) socket$kcm(0x29, 0x5, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDISABIO(r4, 0x4b37) 19:51:50 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc040564a, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) 19:51:50 executing program 2: ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000180)={{0x1, 0x0, @reserved="32fcca736494bb18cb6efde338b7d8093b0f0a7a41b9e4f65588d22b285ff193"}}) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000640)="f1", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r1, r1}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 19:51:50 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) [ 394.530449][T13551] binder: 13549:13551 unknown command 1090151173 [ 394.538737][T13551] binder: 13549:13551 ioctl c0306201 20000280 returned -22 19:51:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@remote, @in=@dev}, {@in=@multicast1, 0x0, 0x33}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}}}]}, 0x13c}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) 19:51:51 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:51:51 executing program 2: ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000180)={{0x1, 0x0, @reserved="32fcca736494bb18cb6efde338b7d8093b0f0a7a41b9e4f65588d22b285ff193"}}) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000640)="f1", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r1, r1}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 19:51:51 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x6, 0x1, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 19:51:51 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) 19:51:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipmr_getroute={0x1c, 0x1a, 0xf, 0x0, 0x0, {0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) [ 395.124944][T13569] binder: 13566:13569 unknown command 1090151173 [ 395.132810][T13569] binder: 13566:13569 ioctl c0306201 20000280 returned -22 19:51:51 executing program 2: ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000180)={{0x1, 0x0, @reserved="32fcca736494bb18cb6efde338b7d8093b0f0a7a41b9e4f65588d22b285ff193"}}) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000640)="f1", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r1, r1}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 19:51:51 executing program 4: r0 = userfaultfd(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}}) 19:51:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipmr_getroute={0x1c, 0x1a, 0xf, 0x0, 0x0, {0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) 19:51:51 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:51:51 executing program 4: r0 = userfaultfd(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}}) 19:51:51 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x95) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x3) write$P9_RRENAMEAT(r0, &(0x7f0000000140)={0x7}, 0x7) 19:51:52 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1400000019000755a84a5bd02310a00002000000", 0x14}], 0x1}, 0x0) 19:51:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipmr_getroute={0x1c, 0x1a, 0xf, 0x0, 0x0, {0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) [ 395.792257][T13585] binder: 13584:13585 unknown command 1090151173 [ 395.799926][T13585] binder: 13584:13585 ioctl c0306201 20000280 returned -22 19:51:52 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x95) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x3) write$P9_RRENAMEAT(r0, &(0x7f0000000140)={0x7}, 0x7) 19:51:52 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x6, 0x1, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 19:51:52 executing program 4: r0 = userfaultfd(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}}) 19:51:52 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:51:52 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1400000019000755a84a5bd02310a00002000000", 0x14}], 0x1}, 0x0) 19:51:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipmr_getroute={0x1c, 0x1a, 0xf, 0x0, 0x0, {0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) 19:51:52 executing program 4: r0 = userfaultfd(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}}) 19:51:52 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x95) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x3) write$P9_RRENAMEAT(r0, &(0x7f0000000140)={0x7}, 0x7) 19:51:52 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1400000019000755a84a5bd02310a00002000000", 0x14}], 0x1}, 0x0) 19:51:52 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x6, 0x1, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) [ 396.393453][T13609] binder: 13603:13609 unknown command 1090151173 [ 396.400288][T13609] binder: 13603:13609 ioctl c0306201 20000280 returned -22 19:51:53 executing program 5: unshare(0x2000400) r0 = socket(0x1e, 0x805, 0x0) listen(r0, 0x0) poll(&(0x7f0000000180)=[{r0}], 0x1, 0x0) 19:51:53 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x95) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x3) write$P9_RRENAMEAT(r0, &(0x7f0000000140)={0x7}, 0x7) 19:51:53 executing program 4: syz_emit_ethernet(0x2e, &(0x7f0000000080)={@local, @random="0982e32fef90", @void, {@ipv4={0x800, @generic={{0x8, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp={0x7, 0x8, 0x5, 0x0, 0x0, [0x0]}]}}}}}}, 0x0) 19:51:53 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x6, 0x1, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 19:51:53 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x1c3382, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x83, &(0x7f00000000c0)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r5, 0x3ff}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000200)=r6, 0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) r7 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0x4037e5e9) fallocate(r0, 0x10, 0x2800, 0x200200) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) futex(&(0x7f0000000000)=0x1, 0x3, 0x1, 0x0, 0x0, 0x0) 19:51:53 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:51:53 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1400000019000755a84a5bd02310a00002000000", 0x14}], 0x1}, 0x0) 19:51:53 executing program 5: unshare(0x2000400) r0 = socket(0x1e, 0x805, 0x0) listen(r0, 0x0) poll(&(0x7f0000000180)=[{r0}], 0x1, 0x0) 19:51:53 executing program 4: syz_emit_ethernet(0x2e, &(0x7f0000000080)={@local, @random="0982e32fef90", @void, {@ipv4={0x800, @generic={{0x8, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp={0x7, 0x8, 0x5, 0x0, 0x0, [0x0]}]}}}}}}, 0x0) [ 397.450167][T13635] binder: 13630:13635 unknown command 1090151173 [ 397.456842][T13635] binder: 13630:13635 ioctl c0306201 20000280 returned -22 19:51:54 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x1c3382, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x83, &(0x7f00000000c0)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r5, 0x3ff}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000200)=r6, 0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) r7 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0x4037e5e9) fallocate(r0, 0x10, 0x2800, 0x200200) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) futex(&(0x7f0000000000)=0x1, 0x3, 0x1, 0x0, 0x0, 0x0) 19:51:54 executing program 5: unshare(0x2000400) r0 = socket(0x1e, 0x805, 0x0) listen(r0, 0x0) poll(&(0x7f0000000180)=[{r0}], 0x1, 0x0) 19:51:54 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x1c3382, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x83, &(0x7f00000000c0)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r5, 0x3ff}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000200)=r6, 0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) r7 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0x4037e5e9) fallocate(r0, 0x10, 0x2800, 0x200200) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) futex(&(0x7f0000000000)=0x1, 0x3, 0x1, 0x0, 0x0, 0x0) 19:51:54 executing program 2: pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) io_setup(0x8000000000000002, &(0x7f0000000480)=0x0) r2 = socket$packet(0x11, 0x3, 0x300) io_submit(r1, 0x2, &(0x7f0000000600)=[&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0, 0x0, 0xfffffffffffffffc}]) 19:51:54 executing program 4: syz_emit_ethernet(0x2e, &(0x7f0000000080)={@local, @random="0982e32fef90", @void, {@ipv4={0x800, @generic={{0x8, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp={0x7, 0x8, 0x5, 0x0, 0x0, [0x0]}]}}}}}}, 0x0) 19:51:54 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:51:54 executing program 5: unshare(0x2000400) r0 = socket(0x1e, 0x805, 0x0) listen(r0, 0x0) poll(&(0x7f0000000180)=[{r0}], 0x1, 0x0) 19:51:54 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x1c3382, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x83, &(0x7f00000000c0)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r5, 0x3ff}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000200)=r6, 0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) r7 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0x4037e5e9) fallocate(r0, 0x10, 0x2800, 0x200200) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) futex(&(0x7f0000000000)=0x1, 0x3, 0x1, 0x0, 0x0, 0x0) 19:51:54 executing program 2: pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) io_setup(0x8000000000000002, &(0x7f0000000480)=0x0) r2 = socket$packet(0x11, 0x3, 0x300) io_submit(r1, 0x2, &(0x7f0000000600)=[&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0, 0x0, 0xfffffffffffffffc}]) 19:51:54 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x1c3382, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x83, &(0x7f00000000c0)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r5, 0x3ff}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000200)=r6, 0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) r7 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0x4037e5e9) fallocate(r0, 0x10, 0x2800, 0x200200) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) futex(&(0x7f0000000000)=0x1, 0x3, 0x1, 0x0, 0x0, 0x0) 19:51:54 executing program 4: syz_emit_ethernet(0x2e, &(0x7f0000000080)={@local, @random="0982e32fef90", @void, {@ipv4={0x800, @generic={{0x8, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp={0x7, 0x8, 0x5, 0x0, 0x0, [0x0]}]}}}}}}, 0x0) 19:51:54 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="91f3020d9a98d19cc7b16fb68c13"], 0x17) write$P9_RATTACH(r0, 0x0, 0x0) [ 398.440369][T13665] binder: 13654:13665 unknown command 1090151173 [ 398.447338][T13665] binder: 13654:13665 ioctl c0306201 20000280 returned -22 19:51:55 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x1c3382, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x83, &(0x7f00000000c0)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r5, 0x3ff}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000200)=r6, 0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) r7 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0x4037e5e9) fallocate(r0, 0x10, 0x2800, 0x200200) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) futex(&(0x7f0000000000)=0x1, 0x3, 0x1, 0x0, 0x0, 0x0) 19:51:55 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x1c3382, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x83, &(0x7f00000000c0)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r5, 0x3ff}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000200)=r6, 0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) r7 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0x4037e5e9) fallocate(r0, 0x10, 0x2800, 0x200200) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) futex(&(0x7f0000000000)=0x1, 0x3, 0x1, 0x0, 0x0, 0x0) 19:51:55 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="91f3020d9a98d19cc7b16fb68c13"], 0x17) write$P9_RATTACH(r0, 0x0, 0x0) 19:51:55 executing program 2: pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) io_setup(0x8000000000000002, &(0x7f0000000480)=0x0) r2 = socket$packet(0x11, 0x3, 0x300) io_submit(r1, 0x2, &(0x7f0000000600)=[&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0, 0x0, 0xfffffffffffffffc}]) 19:51:55 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000003000), 0xffffff92) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x2, {0x7, 0xd}}, 0x50) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 19:51:55 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:51:55 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="91f3020d9a98d19cc7b16fb68c13"], 0x17) write$P9_RATTACH(r0, 0x0, 0x0) 19:51:55 executing program 2: pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) io_setup(0x8000000000000002, &(0x7f0000000480)=0x0) r2 = socket$packet(0x11, 0x3, 0x300) io_submit(r1, 0x2, &(0x7f0000000600)=[&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0, 0x0, 0xfffffffffffffffc}]) 19:51:55 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xffffff8d, &(0x7f0000000240)={&(0x7f0000001780)=ANY=[@ANYBLOB="140000001000000000010600000000000000000a20000000000a01000000000004000000000000000900010073797a300000000070000000120a0100001000000000000000000000040004800900020073797a30000000000900010073797a3000000000080003400000000009000200000000200000000004000480040004800800034000000004140004800c0001fd309ee03f1638f7590314686d0a756600fb0000001100000200000000000008000000000a0000000000000000a1170da00cfe363d228b39185c3967c0f698bb93dc047affad1440288546596f39b277a62ec47361d0fde65bb4b0bd254bf5da013cfbe9be857df96f9f38bf9e1544d3b194cfc4fcb81023560d63dadb7f7b5fe922c47ae02620de710a4db843495f71813dcacf3d9504888c15b4e22a31a6c395c9a39382b8c4caead2e1a082fc5fe92b74779b4ee084b94c36f7fb4bc8aed985ffe0a72b4af5dbc995bd2e5f35bede651c5e1ffb82b3dc61655750ad2a74bc5d91fef0d85e72f5376bef86775d02163800068fbaea874c232478cd9425a992d4a65446d6606d9371f5ae606708e79e04e511125d06a1e8c6cd3b25f2d5514a98eabe1ebc344f55ff4e5a32f3123818b0964d4ecd1d69b4b97b47fe9945dee649e6359542c6f708e3d06e7c95dd28e458395c4e8471b55b01f8c84dcb8faf090a7878144a32642b299f3c40c0d1e9c7dc34299ddc8380c0b2ae6d76ed278b6361eda673bc119e2a441c8bf6b3212a9bbaf878b8cf45c2ca146c47c22d16a18ed72a4ccfb4193f79c5268a3ceefa88d852f52d110f42147deb82afc8b9aca5f32e960e627e7de12465b08b9fedd0ae33fd0b512960c21c43ada0824e8a95eedb89212da9361c6be09cf912df2bf717a68a47bec63cb38e09c21ff073e1512a99376daf70000000000000"], 0xb8}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 19:51:55 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x426, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:51:56 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000003000), 0xffffff92) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x2, {0x7, 0xd}}, 0x50) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) umount2(&(0x7f0000000040)='./file0\x00', 0x0) [ 399.531184][T13696] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 399.540879][T13696] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 399.558754][T13697] binder: 13686:13697 unknown command 1090151173 [ 399.565447][T13697] binder: 13686:13697 ioctl c0306201 20000280 returned -22 19:51:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) dup3(r2, r0, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="91f3020d9a98d19cc7b16fb68c13"], 0x17) write$P9_RATTACH(r0, 0x0, 0x0) 19:51:56 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x426, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:51:56 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xffffff8d, &(0x7f0000000240)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 19:51:56 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000d4000000d4000000030000000b0000000000000e0400000001007320d1691340e79bd300001000000000000008030400000f00000004000084070000000f00000005000000390000000600000002000000000000000a00000000000000070000000700000001000000000001000700000000000001000000001b002a0203000000020000055370000003000000050000003bb600000600000005000015040000000000000002000004ffff00000600000005000000020000000500000002000000000400000400000000000007000000000d00000000000008030000088433a9f00857c25c561d5ce8d6894a3a2ff04ae41c4b2f85a59aaaab12b6a63ce581e168d6b11fe6d76e37063ae3ea3363917893ab532bd6405416eae179333092bbe22fc9c814797d5a8efe41ea565cb15829945fe28a9d41dc2057380730b21f6c4480138ec011fad4856caaf5e36fa67323489931ecc1e0d2f528df408fae4a94aed235d99609804d6fa6f8305edd7848c6bc1c95961c3e3c1dc8d4bfccbb52e9ce06f8b0b1e58621d4206c3b8c98369a544cd71355f929298067753d2c3ddc6811564c0a8b92a4e40de27e8076"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:51:56 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000003000), 0xffffff92) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x2, {0x7, 0xd}}, 0x50) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 19:51:56 executing program 2: syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f009", 0x28, 0x3a, 0xff, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, [], @private1, @remote}}}}}}, 0x0) 19:51:56 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x426, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:51:56 executing program 5: socket$inet6_sctp(0xa, 0x0, 0x84) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c"], 0x100) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf31", 0x81, r1) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000004c0)='>', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\x00'}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x12700, 0x0) set_thread_area(&(0x7f0000000140)={0x80000000, 0x1000, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 400.356296][T13713] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 400.365977][T13713] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 19:51:57 executing program 2: syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f009", 0x28, 0x3a, 0xff, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, [], @private1, @remote}}}}}}, 0x0) [ 400.695904][T13725] binder: 13714:13725 unknown command 1090151173 [ 400.703155][T13725] binder: 13714:13725 ioctl c0306201 20000280 returned -22 19:51:57 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xffffff8d, &(0x7f0000000240)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) [ 400.784194][ C1] sd 0:0:1:0: [sg0] tag#556 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 400.794876][ C1] sd 0:0:1:0: [sg0] tag#556 CDB: Test Unit Ready [ 400.801641][ C1] sd 0:0:1:0: [sg0] tag#556 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.811450][ C1] sd 0:0:1:0: [sg0] tag#556 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.821275][ C1] sd 0:0:1:0: [sg0] tag#556 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.831232][ C1] sd 0:0:1:0: [sg0] tag#556 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.841195][ C1] sd 0:0:1:0: [sg0] tag#556 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.851215][ C1] sd 0:0:1:0: [sg0] tag#556 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.861215][ C1] sd 0:0:1:0: [sg0] tag#556 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.871037][ C1] sd 0:0:1:0: [sg0] tag#556 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.881054][ C1] sd 0:0:1:0: [sg0] tag#556 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.890904][ C1] sd 0:0:1:0: [sg0] tag#556 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.900769][ C1] sd 0:0:1:0: [sg0] tag#556 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.910629][ C1] sd 0:0:1:0: [sg0] tag#556 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 400.920449][ C1] sd 0:0:1:0: [sg0] tag#556 CDB[c0]: 00 00 00 00 00 00 00 00 19:51:57 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x426, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:51:57 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000003000), 0xffffff92) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x2, {0x7, 0xd}}, 0x50) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) umount2(&(0x7f0000000040)='./file0\x00', 0x0) [ 401.219058][T13732] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 401.229581][T13732] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 401.363371][T13728] sg_write: process 326 (syz-executor.5) changed security contexts after opening file descriptor, this is not allowed. [ 401.752400][ C0] sd 0:0:1:0: [sg0] tag#557 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 401.763061][ C0] sd 0:0:1:0: [sg0] tag#557 CDB: Test Unit Ready [ 401.769822][ C0] sd 0:0:1:0: [sg0] tag#557 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.779646][ C0] sd 0:0:1:0: [sg0] tag#557 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.789491][ C0] sd 0:0:1:0: [sg0] tag#557 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:51:57 executing program 2: syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f009", 0x28, 0x3a, 0xff, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, [], @private1, @remote}}}}}}, 0x0) 19:51:57 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() nanosleep(&(0x7f00000001c0)={0x77359400}, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x34, 0x3e9, 0x0, 0x0, 0x0, {0x97}}, 0x34}}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:51:58 executing program 5: socket$inet6_sctp(0xa, 0x0, 0x84) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c"], 0x100) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf31", 0x81, r1) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000004c0)='>', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\x00'}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x12700, 0x0) set_thread_area(&(0x7f0000000140)={0x80000000, 0x1000, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 19:51:58 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) [ 401.799415][ C0] sd 0:0:1:0: [sg0] tag#557 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.809253][ C0] sd 0:0:1:0: [sg0] tag#557 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.819101][ C0] sd 0:0:1:0: [sg0] tag#557 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.828967][ C0] sd 0:0:1:0: [sg0] tag#557 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.838809][ C0] sd 0:0:1:0: [sg0] tag#557 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.848631][ C0] sd 0:0:1:0: [sg0] tag#557 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.858431][ C0] sd 0:0:1:0: [sg0] tag#557 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.868280][ C0] sd 0:0:1:0: [sg0] tag#557 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.878146][ C0] sd 0:0:1:0: [sg0] tag#557 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.888056][ C0] sd 0:0:1:0: [sg0] tag#557 CDB[c0]: 00 00 00 00 00 00 00 00 19:51:58 executing program 2: syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f009", 0x28, 0x3a, 0xff, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, [], @private1, @remote}}}}}}, 0x0) 19:51:58 executing program 5: socket$inet6_sctp(0xa, 0x0, 0x84) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c"], 0x100) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf31", 0x81, r1) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000004c0)='>', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\x00'}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x12700, 0x0) set_thread_area(&(0x7f0000000140)={0x80000000, 0x1000, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 19:51:58 executing program 3: socket$inet6_sctp(0xa, 0x0, 0x84) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c"], 0x100) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf31", 0x81, r1) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000004c0)='>', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\x00'}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x12700, 0x0) set_thread_area(&(0x7f0000000140)={0x80000000, 0x1000, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 19:51:58 executing program 4: socket$inet6_sctp(0xa, 0x0, 0x84) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c"], 0x100) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf31", 0x81, r1) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000004c0)='>', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\x00'}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x12700, 0x0) set_thread_area(&(0x7f0000000140)={0x80000000, 0x1000, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 402.210100][T13762] binder: 13755:13762 unknown command 1090151173 [ 402.216923][T13762] binder: 13755:13762 ioctl c0306201 20000280 returned -22 19:51:58 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xffffff8d, &(0x7f0000000240)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) [ 402.548809][ C1] sd 0:0:1:0: [sg0] tag#559 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 402.559416][ C1] sd 0:0:1:0: [sg0] tag#559 CDB: Test Unit Ready [ 402.566139][ C1] sd 0:0:1:0: [sg0] tag#559 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 402.576035][ C1] sd 0:0:1:0: [sg0] tag#559 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 402.586078][ C1] sd 0:0:1:0: [sg0] tag#559 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 402.595966][ C1] sd 0:0:1:0: [sg0] tag#559 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 402.605806][ C1] sd 0:0:1:0: [sg0] tag#559 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 402.616506][ C1] sd 0:0:1:0: [sg0] tag#559 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 402.626911][ C1] sd 0:0:1:0: [sg0] tag#559 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 402.636884][ C1] sd 0:0:1:0: [sg0] tag#559 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 402.647736][ C1] sd 0:0:1:0: [sg0] tag#559 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 402.659402][ C1] sd 0:0:1:0: [sg0] tag#559 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 402.669331][ C1] sd 0:0:1:0: [sg0] tag#559 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 402.679280][ C1] sd 0:0:1:0: [sg0] tag#559 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 402.689170][ C1] sd 0:0:1:0: [sg0] tag#559 CDB[c0]: 00 00 00 00 00 00 00 00 [ 402.792944][T13779] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 402.802811][T13779] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 402.985458][ C0] sd 0:0:1:0: [sg0] tag#558 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 402.996174][ C0] sd 0:0:1:0: [sg0] tag#558 CDB: Test Unit Ready [ 403.002962][ C0] sd 0:0:1:0: [sg0] tag#558 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.012821][ C0] sd 0:0:1:0: [sg0] tag#558 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.022728][ C0] sd 0:0:1:0: [sg0] tag#558 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.032639][ C0] sd 0:0:1:0: [sg0] tag#558 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.042524][ C0] sd 0:0:1:0: [sg0] tag#558 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.053008][ C0] sd 0:0:1:0: [sg0] tag#558 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.063002][ C0] sd 0:0:1:0: [sg0] tag#558 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.072959][ C0] sd 0:0:1:0: [sg0] tag#558 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:51:59 executing program 2: socket$inet6_sctp(0xa, 0x0, 0x84) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c"], 0x100) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf31", 0x81, r1) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000004c0)='>', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\x00'}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x12700, 0x0) set_thread_area(&(0x7f0000000140)={0x80000000, 0x1000, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 403.083002][ C0] sd 0:0:1:0: [sg0] tag#558 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.093127][ C0] sd 0:0:1:0: [sg0] tag#558 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.103118][ C0] sd 0:0:1:0: [sg0] tag#558 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.112999][ C0] sd 0:0:1:0: [sg0] tag#558 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.124639][ C0] sd 0:0:1:0: [sg0] tag#558 CDB[c0]: 00 00 00 00 00 00 00 00 19:51:59 executing program 5: socket$inet6_sctp(0xa, 0x0, 0x84) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c"], 0x100) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf31", 0x81, r1) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000004c0)='>', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\x00'}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x12700, 0x0) set_thread_area(&(0x7f0000000140)={0x80000000, 0x1000, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 19:51:59 executing program 3: socket$inet6_sctp(0xa, 0x0, 0x84) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c"], 0x100) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf31", 0x81, r1) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000004c0)='>', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\x00'}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x12700, 0x0) set_thread_area(&(0x7f0000000140)={0x80000000, 0x1000, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 19:51:59 executing program 4: socket$inet6_sctp(0xa, 0x0, 0x84) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c"], 0x100) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf31", 0x81, r1) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000004c0)='>', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\x00'}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x12700, 0x0) set_thread_area(&(0x7f0000000140)={0x80000000, 0x1000, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 19:52:00 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) [ 403.924129][ C1] sd 0:0:1:0: [sg0] tag#560 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 403.934824][ C1] sd 0:0:1:0: [sg0] tag#560 CDB: Test Unit Ready [ 403.941538][ C1] sd 0:0:1:0: [sg0] tag#560 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.951335][ C1] sd 0:0:1:0: [sg0] tag#560 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.961156][ C1] sd 0:0:1:0: [sg0] tag#560 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.970967][ C1] sd 0:0:1:0: [sg0] tag#560 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.980777][ C1] sd 0:0:1:0: [sg0] tag#560 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 403.990610][ C1] sd 0:0:1:0: [sg0] tag#560 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.000691][ C1] sd 0:0:1:0: [sg0] tag#560 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.010516][ C1] sd 0:0:1:0: [sg0] tag#560 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.020398][ C1] sd 0:0:1:0: [sg0] tag#560 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.022949][T13815] binder: 13811:13815 unknown command 1090151173 [ 404.030228][ C1] sd 0:0:1:0: [sg0] tag#560 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.036757][T13815] binder: 13811:13815 ioctl c0306201 20000280 returned -22 [ 404.047029][ C1] sd 0:0:1:0: [sg0] tag#560 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.064501][ C1] sd 0:0:1:0: [sg0] tag#560 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.074319][ C1] sd 0:0:1:0: [sg0] tag#560 CDB[c0]: 00 00 00 00 00 00 00 00 [ 404.082165][ C1] sd 0:0:1:0: [sg0] tag#563 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 404.092830][ C1] sd 0:0:1:0: [sg0] tag#563 CDB: Test Unit Ready [ 404.099484][ C1] sd 0:0:1:0: [sg0] tag#563 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.109295][ C1] sd 0:0:1:0: [sg0] tag#563 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.119071][ C1] sd 0:0:1:0: [sg0] tag#563 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.120966][ C0] sd 0:0:1:0: [sg0] tag#561 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 404.128847][ C1] sd 0:0:1:0: [sg0] tag#563 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.139907][ C0] sd 0:0:1:0: [sg0] tag#561 CDB: Test Unit Ready [ 404.149562][ C1] sd 0:0:1:0: [sg0] tag#563 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.156145][ C0] sd 0:0:1:0: [sg0] tag#561 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.165828][ C1] sd 0:0:1:0: [sg0] tag#563 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.175476][ C0] sd 0:0:1:0: [sg0] tag#561 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.185129][ C1] sd 0:0:1:0: [sg0] tag#563 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.194842][ C0] sd 0:0:1:0: [sg0] tag#561 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.204487][ C1] sd 0:0:1:0: [sg0] tag#563 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.214209][ C0] sd 0:0:1:0: [sg0] tag#561 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.223866][ C1] sd 0:0:1:0: [sg0] tag#563 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.233555][ C0] sd 0:0:1:0: [sg0] tag#561 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.243184][ C1] sd 0:0:1:0: [sg0] tag#563 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.252865][ C0] sd 0:0:1:0: [sg0] tag#561 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.262609][ C1] sd 0:0:1:0: [sg0] tag#563 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.272307][ C0] sd 0:0:1:0: [sg0] tag#561 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.281999][ C1] sd 0:0:1:0: [sg0] tag#563 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.291663][ C0] sd 0:0:1:0: [sg0] tag#561 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.301399][ C1] sd 0:0:1:0: [sg0] tag#563 CDB[c0]: 00 00 00 00 00 00 00 00 [ 404.311193][ C0] sd 0:0:1:0: [sg0] tag#561 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.328549][ C0] sd 0:0:1:0: [sg0] tag#561 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.338449][ C0] sd 0:0:1:0: [sg0] tag#561 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.348423][ C0] sd 0:0:1:0: [sg0] tag#561 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.358250][ C0] sd 0:0:1:0: [sg0] tag#561 CDB[c0]: 00 00 00 00 00 00 00 00 [ 404.366025][ C0] sd 0:0:1:0: [sg0] tag#562 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 404.376658][ C0] sd 0:0:1:0: [sg0] tag#562 CDB: Test Unit Ready [ 404.383558][ C0] sd 0:0:1:0: [sg0] tag#562 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.393406][ C0] sd 0:0:1:0: [sg0] tag#562 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.403271][ C0] sd 0:0:1:0: [sg0] tag#562 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.413418][ C0] sd 0:0:1:0: [sg0] tag#562 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.423398][ C0] sd 0:0:1:0: [sg0] tag#562 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.433277][ C0] sd 0:0:1:0: [sg0] tag#562 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.443132][ C0] sd 0:0:1:0: [sg0] tag#562 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.453158][ C0] sd 0:0:1:0: [sg0] tag#562 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.462991][ C0] sd 0:0:1:0: [sg0] tag#562 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.472856][ C0] sd 0:0:1:0: [sg0] tag#562 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.482699][ C0] sd 0:0:1:0: [sg0] tag#562 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.492537][ C0] sd 0:0:1:0: [sg0] tag#562 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.502367][ C0] sd 0:0:1:0: [sg0] tag#562 CDB[c0]: 00 00 00 00 00 00 00 00 [ 404.510605][ C0] sd 0:0:1:0: [sg0] tag#564 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 404.521239][ C0] sd 0:0:1:0: [sg0] tag#564 CDB: Test Unit Ready [ 404.527912][ C0] sd 0:0:1:0: [sg0] tag#564 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.537759][ C0] sd 0:0:1:0: [sg0] tag#564 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.547578][ C0] sd 0:0:1:0: [sg0] tag#564 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.557609][ C0] sd 0:0:1:0: [sg0] tag#564 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.567752][ C0] sd 0:0:1:0: [sg0] tag#564 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.577574][ C0] sd 0:0:1:0: [sg0] tag#564 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.587403][ C0] sd 0:0:1:0: [sg0] tag#564 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.597284][ C0] sd 0:0:1:0: [sg0] tag#564 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.607320][ C0] sd 0:0:1:0: [sg0] tag#564 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.617164][ C0] sd 0:0:1:0: [sg0] tag#564 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19:52:01 executing program 4: socket$inet6_sctp(0xa, 0x0, 0x84) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c"], 0x100) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf31", 0x81, r1) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000004c0)='>', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\x00'}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x12700, 0x0) set_thread_area(&(0x7f0000000140)={0x80000000, 0x1000, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 19:52:01 executing program 2: socket$inet6_sctp(0xa, 0x0, 0x84) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c"], 0x100) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf31", 0x81, r1) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000004c0)='>', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\x00'}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x12700, 0x0) set_thread_area(&(0x7f0000000140)={0x80000000, 0x1000, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 404.626976][ C0] sd 0:0:1:0: [sg0] tag#564 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.637260][ C0] sd 0:0:1:0: [sg0] tag#564 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.647109][ C0] sd 0:0:1:0: [sg0] tag#564 CDB[c0]: 00 00 00 00 00 00 00 00 19:52:01 executing program 3: socket$inet6_sctp(0xa, 0x0, 0x84) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c"], 0x100) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf31", 0x81, r1) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000004c0)='>', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\x00'}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x12700, 0x0) set_thread_area(&(0x7f0000000140)={0x80000000, 0x1000, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 19:52:01 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:52:01 executing program 5: socket$kcm(0xa, 0x6, 0x0) r0 = socket$kcm(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket$kcm(0x11, 0x3, 0x300) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) sendmsg$kcm(r3, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r3, &(0x7f0000000280)={[{0x0, 'memory', 0xea}]}, 0xfa38) [ 405.012992][ C0] sd 0:0:1:0: [sg0] tag#566 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 405.023714][ C0] sd 0:0:1:0: [sg0] tag#566 CDB: Test Unit Ready [ 405.030530][ C0] sd 0:0:1:0: [sg0] tag#566 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.040448][ C0] sd 0:0:1:0: [sg0] tag#566 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.050342][ C0] sd 0:0:1:0: [sg0] tag#566 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.060368][ C0] sd 0:0:1:0: [sg0] tag#566 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.070255][ C0] sd 0:0:1:0: [sg0] tag#566 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.080166][ C0] sd 0:0:1:0: [sg0] tag#566 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.090087][ C0] sd 0:0:1:0: [sg0] tag#566 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.100338][ C0] sd 0:0:1:0: [sg0] tag#566 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.110259][ C0] sd 0:0:1:0: [sg0] tag#566 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.120174][ C0] sd 0:0:1:0: [sg0] tag#566 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.130173][ C0] sd 0:0:1:0: [sg0] tag#566 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.140273][ C0] sd 0:0:1:0: [sg0] tag#566 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.150321][ C0] sd 0:0:1:0: [sg0] tag#566 CDB[c0]: 00 00 00 00 00 00 00 00 19:52:01 executing program 2: socket$inet6_sctp(0xa, 0x0, 0x84) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c"], 0x100) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf31", 0x81, r1) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000004c0)='>', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\x00'}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x12700, 0x0) set_thread_area(&(0x7f0000000140)={0x80000000, 0x1000, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 19:52:01 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x178, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c00], 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"]}, 0x1f0) [ 405.478064][T13841] binder: 13829:13841 unknown command 1090151173 [ 405.484716][T13841] binder: 13829:13841 ioctl c0306201 20000280 returned -22 [ 406.591693][T13864] kvm [13862]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0xfe [ 406.626436][T13864] kvm [13862]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0xfe [ 406.678520][T13864] kvm [13862]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0xfe [ 406.726849][T13864] kvm [13862]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0xfe [ 406.772433][T13864] kvm [13862]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0xfe [ 406.805133][T13864] kvm [13862]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0xfe [ 406.829273][T13864] kvm [13862]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0xfe [ 406.856990][T13864] kvm [13862]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0xfe [ 406.881198][T13864] kvm [13862]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0xfe [ 406.904776][T13864] kvm [13862]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0xfe 19:52:02 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x178, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c00], 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000190000000000000008000064c2ff39c3a80000000000000000007465716c3000000000000000000000006970365f76746930000000000000000062637366300000000000000000000000ffffffffffff000000000000aaaaaaaaaa000000000000000000b8000000b8000000e80000006970000000000000000000000000000000000000000000000000000000000000200000000000001bac1414bbffffffff000000000000000000212d00000000002ef4ffffff0000004155444954000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000ea09ffff00000000000000000000000000000000000000000001000000ffffffff00000000"]}, 0x1f0) 19:52:02 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) memfd_create(&(0x7f00000001c0)='ppp\x12+\x00\x00net1proc\']\x00', 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socket$inet(0x2, 0x80001, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x2000}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffff81}]) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1fd}, &(0x7f0000000200), 0x0) 19:52:02 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x178, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c00], 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"]}, 0x1f0) 19:52:02 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:52:02 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x178, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c00], 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000190000000000000008000064c2ff39c3a80000000000000000007465716c3000000000000000000000006970365f76746930000000000000000062637366300000000000000000000000ffffffffffff000000000000aaaaaaaaaa000000000000000000b8000000b8000000e80000006970000000000000000000000000000000000000000000000000000000000000200000000000001bac1414bbffffffff000000000000000000212d00000000002ef4ffffff0000004155444954000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000ea09ffff00000000000000000000000000000000000000000001000000ffffffff00000000"]}, 0x1f0) 19:52:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xb20, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:52:03 executing program 2: r0 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x3b, &(0x7f0000000000), 0x20a154cc) [ 407.050422][ C1] clocksource: timekeeping watchdog on CPU1: Marking clocksource 'tsc' as unstable because the skew is too large: [ 407.062876][ C1] clocksource: 'acpi_pm' wd_now: fd8ecd wd_last: 5d4ebf mask: ffffff [ 407.073793][ C1] clocksource: 'tsc' cs_now: df60906047 cs_last: ddce597701 mask: ffffffffffffffff [ 407.085736][ C1] tsc: Marking TSC unstable due to clocksource watchdog [ 407.127154][ C1] sd 0:0:1:0: [sg0] tag#565 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=2s [ 407.137783][ C1] sd 0:0:1:0: [sg0] tag#565 CDB: Test Unit Ready [ 407.145189][ C1] sd 0:0:1:0: [sg0] tag#565 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.155174][ C1] sd 0:0:1:0: [sg0] tag#565 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.165871][ C1] sd 0:0:1:0: [sg0] tag#565 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.175754][ C1] sd 0:0:1:0: [sg0] tag#565 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.185619][ C1] sd 0:0:1:0: [sg0] tag#565 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.195507][ C1] sd 0:0:1:0: [sg0] tag#565 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.205955][ C1] sd 0:0:1:0: [sg0] tag#565 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.215778][ C1] sd 0:0:1:0: [sg0] tag#565 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.226425][ C1] sd 0:0:1:0: [sg0] tag#565 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.236260][ C1] sd 0:0:1:0: [sg0] tag#565 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.247052][ C1] sd 0:0:1:0: [sg0] tag#565 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.258128][ C1] sd 0:0:1:0: [sg0] tag#565 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.268965][ C1] sd 0:0:1:0: [sg0] tag#565 CDB[c0]: 00 00 00 00 00 00 00 00 [ 407.276734][ C1] sd 0:0:1:0: [sg0] tag#567 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 407.287406][ C1] sd 0:0:1:0: [sg0] tag#567 CDB: Test Unit Ready [ 407.293997][ C1] sd 0:0:1:0: [sg0] tag#567 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.304652][ C1] sd 0:0:1:0: [sg0] tag#567 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.314731][ C1] sd 0:0:1:0: [sg0] tag#567 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.324700][ C1] sd 0:0:1:0: [sg0] tag#567 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.334644][ C1] sd 0:0:1:0: [sg0] tag#567 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.344472][ C1] sd 0:0:1:0: [sg0] tag#567 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.354383][ C1] sd 0:0:1:0: [sg0] tag#567 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.364367][ C1] sd 0:0:1:0: [sg0] tag#567 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.374236][ C1] sd 0:0:1:0: [sg0] tag#567 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.384176][ C1] sd 0:0:1:0: [sg0] tag#567 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.394032][ C1] sd 0:0:1:0: [sg0] tag#567 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.403883][ C1] sd 0:0:1:0: [sg0] tag#567 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.413782][ C1] sd 0:0:1:0: [sg0] tag#567 CDB[c0]: 00 00 00 00 00 00 00 00 [ 407.421665][ C1] sd 0:0:1:0: [sg0] tag#568 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 407.432276][ C1] sd 0:0:1:0: [sg0] tag#568 CDB: Test Unit Ready [ 407.438980][ C1] sd 0:0:1:0: [sg0] tag#568 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.448935][ C1] sd 0:0:1:0: [sg0] tag#568 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.458814][ C1] sd 0:0:1:0: [sg0] tag#568 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.468660][ C1] sd 0:0:1:0: [sg0] tag#568 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.478649][ C1] sd 0:0:1:0: [sg0] tag#568 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.488509][ C1] sd 0:0:1:0: [sg0] tag#568 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.500671][ C1] sd 0:0:1:0: [sg0] tag#568 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.510595][ C1] sd 0:0:1:0: [sg0] tag#568 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.520688][ C1] sd 0:0:1:0: [sg0] tag#568 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.530588][ C1] sd 0:0:1:0: [sg0] tag#568 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.540404][ C1] sd 0:0:1:0: [sg0] tag#568 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.550260][ C1] sd 0:0:1:0: [sg0] tag#568 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 407.560308][ C1] sd 0:0:1:0: [sg0] tag#568 CDB[c0]: 00 00 00 00 00 00 00 00 [ 407.569364][ T52] TSC found unstable after boot, most likely due to broken BIOS. Use 'tsc=unstable'. [ 407.579186][ T52] sched_clock: Marking unstable (408012608104, -443331265)<-(407585922039, -16594354) 19:52:04 executing program 0: r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000) shmat(r0, &(0x7f0000b65000/0x1000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 19:52:04 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) [ 407.698853][T13880] clocksource: Switched to clocksource acpi_pm [ 407.966527][T13887] binder: 13884:13887 unknown command 1090151173 [ 407.973215][T13887] binder: 13884:13887 ioctl c0306201 20000280 returned -22 19:52:04 executing program 5: socket$kcm(0xa, 0x6, 0x0) r0 = socket$kcm(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket$kcm(0x11, 0x3, 0x300) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) sendmsg$kcm(r3, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r3, &(0x7f0000000280)={[{0x0, 'memory', 0xea}]}, 0xfa38) 19:52:04 executing program 0: r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000) shmat(r0, &(0x7f0000b65000/0x1000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 19:52:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xb20, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:52:04 executing program 2: r0 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x3b, &(0x7f0000000000), 0x20a154cc) 19:52:04 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) memfd_create(&(0x7f00000001c0)='ppp\x12+\x00\x00net1proc\']\x00', 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socket$inet(0x2, 0x80001, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x2000}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffff81}]) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1fd}, &(0x7f0000000200), 0x0) 19:52:04 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:52:04 executing program 0: r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000) shmat(r0, &(0x7f0000b65000/0x1000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 19:52:05 executing program 2: r0 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x3b, &(0x7f0000000000), 0x20a154cc) [ 408.784684][T13906] binder: 13899:13906 unknown command 1090151173 [ 408.791330][T13906] binder: 13899:13906 ioctl c0306201 20000280 returned -22 19:52:05 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) memfd_create(&(0x7f00000001c0)='ppp\x12+\x00\x00net1proc\']\x00', 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socket$inet(0x2, 0x80001, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x2000}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffff81}]) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1fd}, &(0x7f0000000200), 0x0) 19:52:05 executing program 0: r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000) shmat(r0, &(0x7f0000b65000/0x1000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 19:52:05 executing program 5: socket$kcm(0xa, 0x6, 0x0) r0 = socket$kcm(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000017c0)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000500000000000000095000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd917487960717142fa9ea4318123341c0a0e168c1886d0d4d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc8ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ececb0cd2b6d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888b2a858ab3f11afc9bd08c676d2b89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c2870f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e51723257c872c5255f22bd8b325d9b76e57f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d3545236c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e97f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a09c502f9a65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434ab422d2bcd7ce6dfc06b02e69d384146056d125cfa788237874dd913d033277e88d10acd06864eac44c42dae334bdc32f819a2aa24dba1c25be27940b4c4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc976d965ddabb01aff9f27dc1d9a4a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebd29413afc9d8a5edd7a19ca6a57b5a8fa7e1e6c2f2a287c5278a218dbe173ec6900a13db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822422cf2e9dde943d34c432e1001171792c65986146666a549092398af45ba38c41f47e0fffeac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a5628995b1531bd20360d33d8f9ffffff5f912a93e34bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc98f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09d314844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a37d0b92ef26ab708c0b19ed144be51c3b398f0e6bb7a300bb8b3b3fcba12953d58cff0f0378740fe66637bc63568bfc5ab87b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf049124f2dd226b7d932d7a64de4c4aa433fce840aff7c47da3a4c6966d881819dfd413dd83f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600ed5972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a265f4d4da448a7a0d19c5e43eaf65731609dfa2dde267551467eb657839cc77012cc449009981f22820e57a03432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735937bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bba5be6c74d71ec3b43e29895eff1d1017024fe3e8cc759b"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket$kcm(0x11, 0x3, 0x300) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) sendmsg$kcm(r3, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r3, &(0x7f0000000280)={[{0x0, 'memory', 0xea}]}, 0xfa38) 19:52:05 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:52:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xb20, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:52:05 executing program 2: r0 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x3b, &(0x7f0000000000), 0x20a154cc) 19:52:05 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) memfd_create(&(0x7f00000001c0)='ppp\x12+\x00\x00net1proc\']\x00', 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socket$inet(0x2, 0x80001, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x2000}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffff81}]) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1fd}, &(0x7f0000000200), 0x0) 19:52:05 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) memfd_create(&(0x7f00000001c0)='ppp\x12+\x00\x00net1proc\']\x00', 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socket$inet(0x2, 0x80001, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x2000}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffff81}]) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1fd}, &(0x7f0000000200), 0x0) [ 409.490161][T13922] binder: 13915:13922 unknown command 1090151173 [ 409.496989][T13922] binder: 13915:13922 ioctl c0306201 20000280 returned -22 19:52:06 executing program 2: socket$kcm(0xa, 0x6, 0x0) r0 = socket$kcm(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000017c0)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000500000000000000095000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd917487960717142fa9ea4318123341c0a0e168c1886d0d4d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc8ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ececb0cd2b6d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888b2a858ab3f11afc9bd08c676d2b89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c2870f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e51723257c872c5255f22bd8b325d9b76e57f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d3545236c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e97f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a09c502f9a65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434ab422d2bcd7ce6dfc06b02e69d384146056d125cfa788237874dd913d033277e88d10acd06864eac44c42dae334bdc32f819a2aa24dba1c25be27940b4c4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc976d965ddabb01aff9f27dc1d9a4a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebd29413afc9d8a5edd7a19ca6a57b5a8fa7e1e6c2f2a287c5278a218dbe173ec6900a13db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822422cf2e9dde943d34c432e1001171792c65986146666a549092398af45ba38c41f47e0fffeac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a5628995b1531bd20360d33d8f9ffffff5f912a93e34bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc98f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09d314844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a37d0b92ef26ab708c0b19ed144be51c3b398f0e6bb7a300bb8b3b3fcba12953d58cff0f0378740fe66637bc63568bfc5ab87b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf049124f2dd226b7d932d7a64de4c4aa433fce840aff7c47da3a4c6966d881819dfd413dd83f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600ed5972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a265f4d4da448a7a0d19c5e43eaf65731609dfa2dde267551467eb657839cc77012cc449009981f22820e57a03432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735937bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bba5be6c74d71ec3b43e29895eff1d1017024fe3e8cc759b"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket$kcm(0x11, 0x3, 0x300) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) sendmsg$kcm(r3, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r3, &(0x7f0000000280)={[{0x0, 'memory', 0xea}]}, 0xfa38) 19:52:06 executing program 5: socket$kcm(0xa, 0x6, 0x0) r0 = socket$kcm(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket$kcm(0x11, 0x3, 0x300) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) sendmsg$kcm(r3, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r3, &(0x7f0000000280)={[{0x0, 'memory', 0xea}]}, 0xfa38) 19:52:06 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) memfd_create(&(0x7f00000001c0)='ppp\x12+\x00\x00net1proc\']\x00', 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socket$inet(0x2, 0x80001, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x2000}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffff81}]) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1fd}, &(0x7f0000000200), 0x0) 19:52:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xb20, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:52:06 executing program 2: socket$kcm(0xa, 0x6, 0x0) r0 = socket$kcm(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket$kcm(0x11, 0x3, 0x300) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) sendmsg$kcm(r3, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r3, &(0x7f0000000280)={[{0x0, 'memory', 0xea}]}, 0xfa38) 19:52:07 executing program 4: socket$kcm(0xa, 0x6, 0x0) r0 = socket$kcm(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket$kcm(0x11, 0x3, 0x300) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) sendmsg$kcm(r3, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r3, &(0x7f0000000280)={[{0x0, 'memory', 0xea}]}, 0xfa38) 19:52:07 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) memfd_create(&(0x7f00000001c0)='ppp\x12+\x00\x00net1proc\']\x00', 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socket$inet(0x2, 0x80001, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x2000}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffff81}]) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1fd}, &(0x7f0000000200), 0x0) 19:52:07 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:52:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xb20, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:52:07 executing program 4: socket$kcm(0xa, 0x6, 0x0) r0 = socket$kcm(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket$kcm(0x11, 0x3, 0x300) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) sendmsg$kcm(r3, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r3, &(0x7f0000000280)={[{0x0, 'memory', 0xea}]}, 0xfa38) 19:52:07 executing program 2: socket$kcm(0xa, 0x6, 0x0) r0 = socket$kcm(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket$kcm(0x11, 0x3, 0x300) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) sendmsg$kcm(r3, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r3, &(0x7f0000000280)={[{0x0, 'memory', 0xea}]}, 0xfa38) 19:52:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xb20, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:52:08 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x14, r2, 0xc573de0d27bdfe6f, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) [ 411.596920][T13966] kvm_set_msr_common: 1276 callbacks suppressed [ 411.596965][T13966] kvm [13959]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0xfe [ 411.691221][T13966] kvm [13959]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0xfe [ 411.825379][T13966] kvm [13959]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0xfe 19:52:08 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) [ 411.868278][T13974] kvm [13969]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0xfe [ 411.918491][T13966] kvm [13959]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0xfe [ 411.943700][T13974] kvm [13969]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0xfe 19:52:08 executing program 4: socket$kcm(0xa, 0x6, 0x0) r0 = socket$kcm(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket$kcm(0x11, 0x3, 0x300) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) sendmsg$kcm(r3, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r3, &(0x7f0000000280)={[{0x0, 'memory', 0xea}]}, 0xfa38) [ 411.984675][T13966] kvm [13959]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0xfe [ 412.011197][T13974] kvm [13969]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0xfe [ 412.074898][T13966] kvm [13959]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0xfe [ 412.111253][T13974] kvm [13969]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0xfe 19:52:08 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x14, r2, 0xc573de0d27bdfe6f, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) [ 412.348064][T13983] binder: 13979:13983 unknown command 1090151173 [ 412.354898][T13983] binder: 13979:13983 ioctl c0306201 20000280 returned -22 19:52:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-net\x00', 0x2, 0x0) dup3(r0, r1, 0x0) 19:52:09 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x14, r2, 0xc573de0d27bdfe6f, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 19:52:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xb20, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:52:09 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:52:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xb20, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:52:09 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x14, r2, 0xc573de0d27bdfe6f, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 19:52:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-net\x00', 0x2, 0x0) dup3(r0, r1, 0x0) 19:52:09 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000640)=r0, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet6(r2, &(0x7f0000000300), 0xfdb8, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 19:52:09 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:52:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xb20, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:52:10 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 19:52:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xb20, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:52:10 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-net\x00', 0x2, 0x0) dup3(r0, r1, 0x0) 19:52:10 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x5, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000040)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f0000000180), &(0x7f00000002c0)=""/106}, 0x20) 19:52:10 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-net\x00', 0x2, 0x0) dup3(r0, r1, 0x0) 19:52:10 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) [ 414.255171][T14038] binder: 14020:14038 unknown command 1090151173 [ 414.262454][T14038] binder: 14020:14038 ioctl c0306201 20000280 returned -22 19:52:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000002fe8)=[{0x4d, 0x0, 0x4000000000401}, {}, {0x6}]}, 0x10) 19:52:11 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x5, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000040)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f0000000180), &(0x7f00000002c0)=""/106}, 0x20) 19:52:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000100)=0x80) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000000c0)={0xda8, 0x0, 0x83fa}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:52:11 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x200, 0x0, 0x0, 0x40000040, 0x0}) 19:52:11 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:52:11 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 19:52:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000002fe8)=[{0x4d, 0x0, 0x4000000000401}, {}, {0x6}]}, 0x10) 19:52:11 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x200, 0x0, 0x0, 0x40000040, 0x0}) 19:52:11 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x5, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000040)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f0000000180), &(0x7f00000002c0)=""/106}, 0x20) 19:52:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000100)=0x80) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000000c0)={0xda8, 0x0, 0x83fa}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:52:11 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x5, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000040)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f0000000180), &(0x7f00000002c0)=""/106}, 0x20) 19:52:12 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x200, 0x0, 0x0, 0x40000040, 0x0}) 19:52:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000002fe8)=[{0x4d, 0x0, 0x4000000000401}, {}, {0x6}]}, 0x10) 19:52:12 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 19:52:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000100)=0x80) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000000c0)={0xda8, 0x0, 0x83fa}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:52:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, 0x0) clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0xb8, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'nr0\x00'}}}, {{@ip={@broadcast, @dev, 0x0, 0x0, 'vxcan1\x00', 'vlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280) [ 416.054235][T14093] ipt_CLUSTERIP: Please specify destination IP 19:52:12 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:52:12 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x200, 0x0, 0x0, 0x40000040, 0x0}) 19:52:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000002fe8)=[{0x4d, 0x0, 0x4000000000401}, {}, {0x6}]}, 0x10) 19:52:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, 0x0) clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0xb8, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'nr0\x00'}}}, {{@ip={@broadcast, @dev, 0x0, 0x0, 'vxcan1\x00', 'vlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280) 19:52:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000100)=0x80) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000000c0)={0xda8, 0x0, 0x83fa}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 416.342748][T14104] ipt_CLUSTERIP: Please specify destination IP 19:52:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, 0x0) clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0xb8, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'nr0\x00'}}}, {{@ip={@broadcast, @dev, 0x0, 0x0, 'vxcan1\x00', 'vlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280) 19:52:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0x45a, &(0x7f0000000600)={0x0, 0x3f00, 0x8}) 19:52:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:52:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, 0x0) clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0xb8, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'nr0\x00'}}}, {{@ip={@broadcast, @dev, 0x0, 0x0, 'vxcan1\x00', 'vlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280) [ 416.694791][T14114] ipt_CLUSTERIP: Please specify destination IP [ 416.712299][T14118] binder: 14105:14118 unknown command 1090151173 [ 416.719076][T14118] binder: 14105:14118 ioctl c0306201 20000280 returned -22 19:52:13 executing program 5: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0xe, {0x2, 0x0, @dev}}, 0x24) 19:52:13 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3325}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x5c}}, 0x0) 19:52:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0x45a, &(0x7f0000000600)={0x0, 0x3f00, 0x8}) [ 417.101973][T14133] ipt_CLUSTERIP: Please specify destination IP [ 417.137360][T14134] device vlan2 entered promiscuous mode [ 417.143012][T14134] device batadv0 entered promiscuous mode [ 417.258492][T14134] device batadv0 left promiscuous mode 19:52:13 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000d4000000d4000000030000000b0000000000000e0400000001007320d1691340e79bd300001000000000000008030400000f00000004000084070000000f00000005000000390000000600000002000000000000000a00000000000000070000000700000001000000000001000700000000000001000000001b002a0203000000020000055370000003000000050000003bb600000600000005000015040000000000000002000004ffff00000600000005000000020000000500000002000000000400000400000000000007000000"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:52:13 executing program 5: r0 = socket$inet(0x2, 0x2, 0x73) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="8907040000", 0x5) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) 19:52:13 executing program 2: syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0x0], @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "01742a", 0x8, 0x0, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x1, 0x4, 0x1000000}]}}}}}, 0x0) 19:52:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000054700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="2967138b9678c0247dfef930a34eccbb170800000082294982a16bb414427c01ecd35428550000000000000005a95b9dc1ed3c1cf579fa9d01000004a04442df99f0a7e8b26235266ac8251a69158200000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000007678bcf0f79730dc1df84608ed81b7a676e736e6c8c5f6751542a010fbd622e8f8235c788efa76bbe2eba82b53299067"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x888, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x85c, 0x2, [@TCA_BPF_POLICE={0x850, 0x2, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5]}, @TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x7f}}}]}, @TCA_BPF_FD={0x8}]}}]}, 0x888}}, 0x0) 19:52:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0x45a, &(0x7f0000000600)={0x0, 0x3f00, 0x8}) 19:52:14 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3325}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x5c}}, 0x0) 19:52:14 executing program 5: r0 = socket$inet(0x2, 0x2, 0x73) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="8907040000", 0x5) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) 19:52:14 executing program 2: syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0x0], @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "01742a", 0x8, 0x0, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x1, 0x4, 0x1000000}]}}}}}, 0x0) 19:52:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000054700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="2967138b9678c0247dfef930a34eccbb170800000082294982a16bb414427c01ecd35428550000000000000005a95b9dc1ed3c1cf579fa9d01000004a04442df99f0a7e8b26235266ac8251a69158200000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000007678bcf0f79730dc1df84608ed81b7a676e736e6c8c5f6751542a010fbd622e8f8235c788efa76bbe2eba82b53299067"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x888, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x85c, 0x2, [@TCA_BPF_POLICE={0x850, 0x2, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5]}, @TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x7f}}}]}, @TCA_BPF_FD={0x8}]}}]}, 0x888}}, 0x0) [ 418.033190][T14161] binder: 14151:14161 unknown command 1090151173 [ 418.039824][T14161] binder: 14151:14161 ioctl c0306201 20000280 returned -22 [ 418.103007][T14163] device vlan2 entered promiscuous mode [ 418.108815][T14163] device batadv0 entered promiscuous mode 19:52:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0x45a, &(0x7f0000000600)={0x0, 0x3f00, 0x8}) [ 418.248614][T14163] device batadv0 left promiscuous mode 19:52:14 executing program 5: r0 = socket$inet(0x2, 0x2, 0x73) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="8907040000", 0x5) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) 19:52:14 executing program 2: syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0x0], @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "01742a", 0x8, 0x0, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x1, 0x4, 0x1000000}]}}}}}, 0x0) 19:52:15 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000d4000000d4000000030000000b0000000000000e0400000001007320d1691340e79bd300001000000000000008030400000f00000004000084070000000f00000005000000390000000600000002000000000000000a00000000000000070000000700000001000000000001000700000000000001000000001b002a0203000000020000055370000003000000050000003bb600000600000005000015040000000000000002000004ffff00000600000005000000020000000500000002000000000400000400000000000007000000"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:52:15 executing program 5: r0 = socket$inet(0x2, 0x2, 0x73) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="8907040000", 0x5) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) 19:52:15 executing program 2: syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0x0], @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "01742a", 0x8, 0x0, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x1, 0x4, 0x1000000}]}}}}}, 0x0) 19:52:15 executing program 0: r0 = socket$inet(0x2, 0x2, 0x73) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="8907040000", 0x5) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) 19:52:15 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3325}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x5c}}, 0x0) 19:52:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000054700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="2967138b9678c0247dfef930a34eccbb170800000082294982a16bb414427c01ecd35428550000000000000005a95b9dc1ed3c1cf579fa9d01000004a04442df99f0a7e8b26235266ac8251a69158200000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000007678bcf0f79730dc1df84608ed81b7a676e736e6c8c5f6751542a010fbd622e8f8235c788efa76bbe2eba82b53299067"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x888, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x85c, 0x2, [@TCA_BPF_POLICE={0x850, 0x2, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5]}, @TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x7f}}}]}, @TCA_BPF_FD={0x8}]}}]}, 0x888}}, 0x0) [ 419.311673][T14199] device vlan2 entered promiscuous mode [ 419.317661][T14199] device batadv0 entered promiscuous mode 19:52:15 executing program 0: r0 = socket$inet(0x2, 0x2, 0x73) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="8907040000", 0x5) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) [ 419.497618][T14199] device batadv0 left promiscuous mode 19:52:16 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="665f07000005eb3014203873bc33760036f300000000007dc0c6b18f7f80", 0x1e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}}}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 19:52:16 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r1, 0x0) 19:52:16 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000d4000000d4000000030000000b0000000000000e0400000001007320d1691340e79bd300001000000000000008030400000f00000004000084070000000f00000005000000390000000600000002000000000000000a00000000000000070000000700000001000000000001000700000000000001000000001b002a0203000000020000055370000003000000050000003bb600000600000005000015040000000000000002000004ffff00000600000005000000020000000500000002000000000400000400000000000007000000"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:52:16 executing program 5: capset(&(0x7f0000000000)={0x24020019980330}, &(0x7f0000000140)) r0 = socket(0x10, 0x803, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) setresgid(0x0, r1, 0xffffffffffffffff) 19:52:16 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r1, 0x0) 19:52:16 executing program 0: r0 = socket$inet(0x2, 0x2, 0x73) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="8907040000", 0x5) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) [ 420.243449][T14221] capability: warning: `syz-executor.5' uses 32-bit capabilities (legacy support in use) 19:52:16 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3325}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x5c}}, 0x0) [ 420.461254][T14230] binder: 14216:14230 unknown command 1090151173 [ 420.468006][T14230] binder: 14216:14230 ioctl c0306201 20000280 returned -22 19:52:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000054700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="2967138b9678c0247dfef930a34eccbb170800000082294982a16bb414427c01ecd35428550000000000000005a95b9dc1ed3c1cf579fa9d01000004a04442df99f0a7e8b26235266ac8251a69158200000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000007678bcf0f79730dc1df84608ed81b7a676e736e6c8c5f6751542a010fbd622e8f8235c788efa76bbe2eba82b53299067"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x888, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x85c, 0x2, [@TCA_BPF_POLICE={0x850, 0x2, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5]}, @TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x7f}}}]}, @TCA_BPF_FD={0x8}]}}]}, 0x888}}, 0x0) 19:52:17 executing program 5: capset(&(0x7f0000000000)={0x24020019980330}, &(0x7f0000000140)) r0 = socket(0x10, 0x803, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) setresgid(0x0, r1, 0xffffffffffffffff) 19:52:17 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r1, 0x0) [ 420.754762][T14235] device vlan2 entered promiscuous mode [ 420.760986][T14235] device batadv0 entered promiscuous mode 19:52:17 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000480)={@void, @val={0x2d, 0x0, 0x0, 0x0, 0x34}, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0x4c, 0x2c, 0x0, @remote, @mcast2, {[@dstopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}, 0x7e) [ 420.815004][T14235] device batadv0 left promiscuous mode 19:52:17 executing program 5: capset(&(0x7f0000000000)={0x24020019980330}, &(0x7f0000000140)) r0 = socket(0x10, 0x803, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) setresgid(0x0, r1, 0xffffffffffffffff) 19:52:17 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r1, 0x0) 19:52:17 executing program 5: capset(&(0x7f0000000000)={0x24020019980330}, &(0x7f0000000140)) r0 = socket(0x10, 0x803, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) setresgid(0x0, r1, 0xffffffffffffffff) 19:52:18 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:52:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0004060000feff800000003a4288443e7f9adf5ed7750702ffff162d0201008cfe6d40fedc00000075c4171f001b4f36366194335b7189fe003b40040000710e134c2a7b9da52376591a6a71e8b8e01db2e8b638096e6c582a66a23b9a6f3d82bc1f2c27283c2b9fdb90109e6697fa878114ec277f16bedd18081374ea271190fdda477c053c82cf881194f2e745c1a838a8edeb691c41103c110d5535bd2d886c53250d51a6279441c1adcda2b01a51c324b9d86b206bba083a1a0fb8cbfdfb48b6a6c5f10aff010000fbffffff28434eec8eca676162f77ad1478ac098f8a217924e062dbdd60a69e32a19ba723161e536d880b600e7a976b5a8d2c17c1e0764e201a5060000000000dc590775526f9e1113"], 0x11f) r1 = epoll_create1(0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r2, r3) ioctl$TCSETS(r4, 0x5402, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, "0db05b4ee667a7d11c38f91e3dba5f9a88abc2"}) 19:52:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x14, 0x1, 0x2, 0x3}, 0x14}}, 0x0) 19:52:18 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000001200)="ba", 0x200001c1}], 0x2) [ 422.069189][T14274] new mount options do not match the existing superblock, will be ignored [ 422.134058][T14274] new mount options do not match the existing superblock, will be ignored [ 422.184314][T14269] binder: 14265:14269 unknown command 1090151173 [ 422.191025][T14269] binder: 14265:14269 ioctl c0306201 20000280 returned -22 19:52:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f0000000200), 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)='X', 0x1}], 0x1}, 0x0) 19:52:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x11f) r1 = epoll_create1(0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r2, r3) ioctl$TCSETS(r4, 0x5402, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, "0db05b4ee667a7d11c38f91e3dba5f9a88abc2"}) 19:52:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x14, 0x1, 0x2, 0x3}, 0x14}}, 0x0) 19:52:18 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000001200)="ba", 0x200001c1}], 0x2) [ 422.797306][T14291] new mount options do not match the existing superblock, will be ignored 19:52:19 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffec6) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)=0xd3, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000400)=ANY=[@ANYBLOB="02"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:52:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x11f) r1 = epoll_create1(0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r2, r3) ioctl$TCSETS(r4, 0x5402, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, "0db05b4ee667a7d11c38f91e3dba5f9a88abc2"}) 19:52:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x14, 0x1, 0x2, 0x3}, 0x14}}, 0x0) 19:52:19 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000001200)="ba", 0x200001c1}], 0x2) 19:52:19 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) [ 423.369253][T14304] new mount options do not match the existing superblock, will be ignored 19:52:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x14, 0x1, 0x2, 0x3}, 0x14}}, 0x0) 19:52:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f0000000200), 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)='X', 0x1}], 0x1}, 0x0) 19:52:20 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000001200)="ba", 0x200001c1}], 0x2) 19:52:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x11f) r1 = epoll_create1(0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r2, r3) ioctl$TCSETS(r4, 0x5402, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, "0db05b4ee667a7d11c38f91e3dba5f9a88abc2"}) [ 423.941328][T14317] new mount options do not match the existing superblock, will be ignored 19:52:20 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:52:20 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [], 0x3d}}) 19:52:20 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000180)={0x1, 0x1, 0x1000, 0x4c, &(0x7f0000000100)="ded6551bbf1a51b64f4989a70c85dbd5940c7b0ad5c03f6a0f576c0095dde2a98ac6f9d29a83966ad51a6ceba722d8ce4cafa360cf3d4e3b40a3aa34f3568e27ec7c18c15fa82bfc6c3e6a96", 0x1b, 0x0, &(0x7f0000000040)="22680513536eb13055dcdbee02847f6897b37bb94af9fab7ef4a3a"}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="2e00000010008108040f9becdb4cb92e0a48b1371400000069bd6efb2503eaff0d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) 19:52:20 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffec6) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)=0xd3, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000400)=ANY=[@ANYBLOB="02"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:52:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="03000000000000002000128008000100736974001400028008000100", @ANYRES32=r3], 0x40}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000002c0)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, r3}, 0x14) 19:52:20 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [], 0x3d}}) [ 424.491359][T14336] device batadv0 entered promiscuous mode [ 424.585086][T14340] binder: 14329:14340 unknown command 1090151173 [ 424.592590][T14340] binder: 14329:14340 ioctl c0306201 20000280 returned -22 [ 424.659211][T14341] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 19:52:21 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000180)={0x1, 0x1, 0x1000, 0x4c, &(0x7f0000000100)="ded6551bbf1a51b64f4989a70c85dbd5940c7b0ad5c03f6a0f576c0095dde2a98ac6f9d29a83966ad51a6ceba722d8ce4cafa360cf3d4e3b40a3aa34f3568e27ec7c18c15fa82bfc6c3e6a96", 0x1b, 0x0, &(0x7f0000000040)="22680513536eb13055dcdbee02847f6897b37bb94af9fab7ef4a3a"}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="2e00000010008108040f9becdb4cb92e0a48b1371400000069bd6efb2503eaff0d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) 19:52:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f0000000200), 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)='X', 0x1}], 0x1}, 0x0) 19:52:21 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [], 0x3d}}) [ 425.124540][T14348] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 19:52:21 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:52:21 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000180)={0x1, 0x1, 0x1000, 0x4c, &(0x7f0000000100)="ded6551bbf1a51b64f4989a70c85dbd5940c7b0ad5c03f6a0f576c0095dde2a98ac6f9d29a83966ad51a6ceba722d8ce4cafa360cf3d4e3b40a3aa34f3568e27ec7c18c15fa82bfc6c3e6a96", 0x1b, 0x0, &(0x7f0000000040)="22680513536eb13055dcdbee02847f6897b37bb94af9fab7ef4a3a"}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="2e00000010008108040f9becdb4cb92e0a48b1371400000069bd6efb2503eaff0d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) 19:52:21 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [], 0x3d}}) 19:52:21 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="03000000000000002000128008000100736974001400028008000100", @ANYRES32=r3], 0x40}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000002c0)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, r3}, 0x14) [ 425.691233][T14371] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 19:52:22 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000180)={0x1, 0x1, 0x1000, 0x4c, &(0x7f0000000100)="ded6551bbf1a51b64f4989a70c85dbd5940c7b0ad5c03f6a0f576c0095dde2a98ac6f9d29a83966ad51a6ceba722d8ce4cafa360cf3d4e3b40a3aa34f3568e27ec7c18c15fa82bfc6c3e6a96", 0x1b, 0x0, &(0x7f0000000040)="22680513536eb13055dcdbee02847f6897b37bb94af9fab7ef4a3a"}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="2e00000010008108040f9becdb4cb92e0a48b1371400000069bd6efb2503eaff0d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) 19:52:22 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffec6) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)=0xd3, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000400)=ANY=[@ANYBLOB="02"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 426.078652][T14380] binder: 14363:14380 unknown command 1090151173 [ 426.085259][T14380] binder: 14363:14380 ioctl c0306201 20000280 returned -22 19:52:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f0000000200), 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)='X', 0x1}], 0x1}, 0x0) 19:52:22 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000d4000000d4000000030000000b0000000000000e0400000001007320d1691340e79bd300001000000000000008030400000f00000004000084070000000f00000005000000390000000600000002000000000000000a00000000000000070000000700000001000000000001000700000000000001000000001b002a0203000000020000055370000003000000050000003bb600000600000005000015040000000000000002000004ffff00000600000005000000020000000500000002000000000400000400000000000007000000000d00000000000008030000088433a9f00857c25c561d5ce8d6894a3a2ff04ae41c4b2f85a59aaaab12b6a63ce581e168d6b11fe6d76e37063ae3ea3363917893ab532bd6405416eae179333092bbe22fc9c814797d5a8efe41ea565cb15829945fe28a9d41dc2057380730b21f6c4480138ec011fad4856caaf5e36fa67323489931ecc1e0d2f528df408fae4a94aed235d99609804d6fa6f8305edd7848c6bc1c95961c"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:52:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="03000000000000002000128008000100736974001400028008000100", @ANYRES32=r3], 0x40}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000002c0)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, r3}, 0x14) [ 426.689863][T14390] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 19:52:23 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="03000000000000002000128008000100736974001400028008000100", @ANYRES32=r3], 0x40}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000002c0)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, r3}, 0x14) 19:52:23 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffec6) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)=0xd3, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000400)=ANY=[@ANYBLOB="02"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:52:23 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffec6) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)=0xd3, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000400)=ANY=[@ANYBLOB="02"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 427.074569][T14391] binder: 14389:14391 unknown command 1090151173 [ 427.081539][T14391] binder: 14389:14391 ioctl c0306201 20000280 returned -22 [ 427.095619][T14400] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 19:52:23 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000d4000000d4000000030000000b0000000000000e0400000001007320d1691340e79bd300001000000000000008030400000f00000004000084070000000f00000005000000390000000600000002000000000000000a00000000000000070000000700000001000000000001000700000000000001000000001b002a0203000000020000055370000003000000050000003bb600000600000005000015040000000000000002000004ffff00000600000005000000020000000500000002000000000400000400000000000007000000000d00000000000008030000088433a9f00857c25c561d5ce8d6894a3a2ff04ae41c4b2f85a59aaaab12b6a63ce581e168d6b11fe6d76e37063ae3ea3363917893ab532bd6405416eae179333092bbe22fc9c814797d5a8efe41ea565cb15829945fe28a9d41dc2057380730b21f6c4480138ec011fad4856caaf5e36fa67323489931ecc1e0d2f528df408fae4a94aed235d99609804d6fa6f8305edd7848c6bc1c95961c"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:52:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="73797a30d01d70210705e9c52143a8c659fba8b78f2fd1b89910c0ff018ca3dd7696"], 0x3a) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) io_submit(0x0, 0x1, &(0x7f0000003680)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001540)="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", 0xac2}]) 19:52:24 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="03000000000000002000128008000100736974001400028008000100", @ANYRES32=r3], 0x40}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000002c0)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, r3}, 0x14) [ 428.030515][T14420] kvm: emulating exchange as write [ 428.034864][T14415] binder: 14413:14415 unknown command 1090151173 [ 428.042357][T14415] binder: 14413:14415 ioctl c0306201 20000280 returned -22 19:52:24 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="03000000000000002000128008000100736974001400028008000100", @ANYRES32=r3], 0x40}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000002c0)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, r3}, 0x14) [ 428.261923][T14425] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 19:52:24 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffec6) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)=0xd3, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000400)=ANY=[@ANYBLOB="02"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:52:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_CT_ZONE={0x6}]}}]}, 0x44}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 428.503594][T14430] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 19:52:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x6, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001300)='net/igmp\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, "00000100"}) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000080)) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000180)) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r1, 0x2) sendfile(r4, r0, 0x0, 0x6f0a77bd) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000100)=0xfffffffa, 0x4) [ 428.697100][T14436] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 428.764854][T14436] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 428.899344][T14450] Unknown ioctl 19461 19:52:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_CT_ZONE={0x6}]}}]}, 0x44}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 19:52:25 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:52:25 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r0, r1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYRES64], 0xfffffdef) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:52:25 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffec6) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)=0xd3, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000400)=ANY=[@ANYBLOB="02"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:52:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="03000000000000002000128008000100736974001400028008000100", @ANYRES32=r3], 0x40}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000002c0)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, r3}, 0x14) [ 429.289411][T14457] Unknown ioctl 19461 [ 429.329509][T14456] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:52:26 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r0, r1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYRES64], 0xfffffdef) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:52:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x6, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001300)='net/igmp\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, "00000100"}) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000080)) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000180)) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r1, 0x2) sendfile(r4, r0, 0x0, 0x6f0a77bd) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000100)=0xfffffffa, 0x4) 19:52:26 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000016c0)={0x26, 'hash\x00', 0x0, 0x0, 'md4\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007b40)=[{{&(0x7f0000000180)=@l2, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000040)="e5379e4f0d67058e618d7918654228b359b2d8101fc7981dda756e5bb29aa9d486c2926d5938c17303f86c336cbc44ecc978c727c688341817070783c0eca825e6b01b91346278a2d972b71160a3eb2f556ea609b3179a3d8fcf5182b3053c701afdbeca5b62813bd0040d748ca515157dcd4d1e153e33a9c3c4d6b8c93659ab02a88e68bd7338363e8082fb71848f66918e1e4896e63c2935269dac7f1459542d842c10762f46072a73ab81f6efb22d4140436bec05d3882ab5f5775257f134e8743456e6d15146411a332f3fe4374b5fc9c3a6a372131f0a77f9d16a950935e711a4a07a7e2497ab468eb85671235dab1bcd8796aa5ed7a8fad8301b8781", 0xff}, {&(0x7f00000002c0)="ad8e934beb9385c9d6cd3e77feb63da93e1bce37804573ae95a04e2548ba787160200414eb67ec8f8eae412f8e8e3f38549efd3b8daf8c65ca090f09cebc0b5b715637ca17073a6514439130b939e873462e206379809f0166761cbf4903cf8fd76ad2a832fcca7fcadfe80ba16b1d5675074d2b78cf11fdd5acaa6555d3cead44cf", 0xfffffeb1}, {&(0x7f0000002740)="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", 0x1083}, {&(0x7f0000001380)="c655cddf0bd8ad7649a5233036ff53721b6a33ada7c236b99c89760a8e44f6415584c79a2af30d08750bdfa130da0cfdaecb6ff7751d7a0ce3f8a02236e5e01fc5ca8724b747978577ba52ee7c75cc3eb9e6fb9d2832afd1f9c10ee5efaa94ebd1145ba1353a163995e42e97eebda0fed9758b1e5961e74fafb91ee569e6fce50c6d5a16b93f96cfed33b7ddd8006855a346fd6408ce1f1874a23ae6b803b839888bafc6dec28bcf845fbbf4a698ac6a571b05acaa93bb26b59a123abe4efae6b54897f4035ff9918f5bab086e8e5ce929fe7d7cec436063cc147cd22c9d9be98044", 0xe2}, {&(0x7f0000001740)="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", 0x1000}, {&(0x7f0000001480)="73f355f64f796f227e52672ac1e5853526a4e670eea3b66d0f9da221da29ec9b3b7db75e3a5697d42fa99e9c7b6355b8ab002ecd7476e5c30af9a580d01b12b9f1d8006e5fcd09f982dccaa963eb210d48bb9092fb4ca8843cda6be7dfe467a8ad22e25a1b0c21bba6ce20e6d27ef3e3c570f035047cb87ed2", 0x79}, {&(0x7f0000001500)="ee1aada26ea34fe31c2f651cd70c730a6f662aecc1bffb663033090224dd511b557f515d573d20b5109c8c405d1dcb95b84b608fc25bcc7d1548c793f931144f872cc0187cb1d56e199ffceac82669cad208fd3eefe3aee1ba4705eeee0c2c93635b8ee2c908fe6501660481ee4cbcfd49bd5b4f1fc59830f6cb717785e42280180c1606b4629e581dc58ee64712ec7317ef3eb7d1291a3d06", 0x99}], 0x7}}, {{&(0x7f0000007500)=@in, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000076c0)}}], 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) [ 429.731003][T14476] binder: 14458:14476 unknown command 1090151173 [ 429.737808][T14476] binder: 14458:14476 ioctl c0306201 20000280 returned -22 19:52:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_CT_ZONE={0x6}]}}]}, 0x44}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 430.033969][T14480] Unknown ioctl 19461 19:52:26 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @link_local}]}}}]}, 0x40}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f00000000c0), 0x49249249249265a, 0x0) 19:52:26 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r0, r1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYRES64], 0xfffffdef) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) [ 430.588600][T14488] __nla_validate_parse: 1 callbacks suppressed [ 430.588634][T14488] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:52:27 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r0, r1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYRES64], 0xfffffdef) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 19:52:27 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @link_local}]}}}]}, 0x40}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f00000000c0), 0x49249249249265a, 0x0) 19:52:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_CT_ZONE={0x6}]}}]}, 0x44}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 19:52:27 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000d4000000d4000000030000000b0000000000000e0400000001007320d1691340e79bd300001000000000000008030400000f00000004000084070000000f00000005000000390000000600000002000000000000000a00000000000000070000000700000001000000000001000700000000000001000000001b002a0203000000020000055370000003000000050000003bb600000600000005000015040000000000000002000004ffff00000600000005000000020000000500000002000000000400000400000000000007000000000d00000000000008030000088433a9f00857c25c561d5ce8d6894a3a2ff04ae41c4b2f85a59aaaab12b6a63ce581e168d6b11fe6d76e37063ae3ea3363917893ab532bd6405416eae179333092bbe22fc9c814797d5a8efe41ea565cb15829945fe28a9d41dc2057380730b21f6c4480138ec011fad4856caaf5e36fa67323489931ecc1e0d2f528df408fae4a94aed235d99609804d6fa6f8305edd7848c6bc1c95961c3e3c1dc8d4bfccbb52e9ce06f8b0b1e58621d4206c3b8c98369a544c"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:52:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x6, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001300)='net/igmp\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, "00000100"}) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000080)) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000180)) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r1, 0x2) sendfile(r4, r0, 0x0, 0x6f0a77bd) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000100)=0xfffffffa, 0x4) 19:52:27 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38}, 0x0) [ 431.244167][T14508] Unknown ioctl 19461 [ 431.289019][T14509] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:52:27 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @link_local}]}}}]}, 0x40}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f00000000c0), 0x49249249249265a, 0x0) 19:52:28 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38}, 0x0) [ 431.701734][T14522] binder: 14507:14522 unknown command 1090151173 [ 431.708405][T14522] binder: 14507:14522 ioctl c0306201 20000280 returned -22 19:52:28 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000016c0)={0x26, 'hash\x00', 0x0, 0x0, 'md4\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007b40)=[{{&(0x7f0000000180)=@l2, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000040)="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", 0xff}, {&(0x7f00000002c0)="ad8e934beb9385c9d6cd3e77feb63da93e1bce37804573ae95a04e2548ba787160200414eb67ec8f8eae412f8e8e3f38549efd3b8daf8c65ca090f09cebc0b5b715637ca17073a6514439130b939e873462e206379809f0166761cbf4903cf8fd76ad2a832fcca7fcadfe80ba16b1d5675074d2b78cf11fdd5acaa6555d3cead44cf", 0xfffffeb1}, {&(0x7f0000002740)="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", 0x1083}, {&(0x7f0000001380)="c655cddf0bd8ad7649a5233036ff53721b6a33ada7c236b99c89760a8e44f6415584c79a2af30d08750bdfa130da0cfdaecb6ff7751d7a0ce3f8a02236e5e01fc5ca8724b747978577ba52ee7c75cc3eb9e6fb9d2832afd1f9c10ee5efaa94ebd1145ba1353a163995e42e97eebda0fed9758b1e5961e74fafb91ee569e6fce50c6d5a16b93f96cfed33b7ddd8006855a346fd6408ce1f1874a23ae6b803b839888bafc6dec28bcf845fbbf4a698ac6a571b05acaa93bb26b59a123abe4efae6b54897f4035ff9918f5bab086e8e5ce929fe7d7cec436063cc147cd22c9d9be98044", 0xe2}, {&(0x7f0000001740)="601242a4f420ab2055bf64684536db4079b0d91a0f5f402d4ca1719d821eec9869bd5864fdff51a472d68e3a2210efb483352c392a06d64f2ac347e7cb3cfc141f7ba26c65673f14ecf6e72d56994f6d1a3a92ed818ca36981d58ef0e84da03d5fe40a91cd801720f0358746073bdd723855e6296668450e8c01c8964f09b6d1a401c0f0f54b1356d76e22cb5b04bbeea3838dfa55ea4cac21deef4d24e474114942d9cd80f4cc14cd2df83a3bd1b3f9ccc739c8ec623a2b4fcd562f95c0653cbcc4d274fcd11deca41e4568b60afec5c03fe1b1612220aeac07f1b5cd941543a9ff498525f23150e7bdaf45ed1bdc35fda606689109f9e0e7ce07778529d0892799d97710bbe66cecf27e08fb8e9e855a778b6c3397c7e2bcf8837490f5b20d65d93533ab2579e95ebc2bf7d264da8164fb7e8858349ffcf3560b7b5c146d09a366bbd245a1b31728feaba9484d17d1d110456e721448c096017ddc27cbd05e2da4e3db0878d9b8e8ad90b08b194fc2ce76794174700b9d96d3fcdc14e746b620ae9f8b4c979e4562fe1d33cafcb178085d9d4a6600d9584c19c3a692f62eaffbacf898daf71a26b81f8cbabd1c59928b5625d26da22ab2f4edf2c3c26089fa91513ef31adadeaff88d873d2a33e897ec8ebd9382e1c1c8808fef59c4583f38dbfad4c6dff810dd4faae06640eced772af8ae03a40a5b174dccca1ca004d51ccbcc943a1f6fe1f9493d724e74e9329fa93f0e7bb1f773e925257b09b8c26c611029fbea27283d5f8e26509f793c9f46c98b8ed046e6e3c8e34472738fc7683a7bf68bda3361a32e59dd7f09f9d801b1690632cf4e18cd50b2117fef311f9377e313b4398e1e349e80fa6ac212020c4a0e07bff33a49a626595a4a13ce77b1b88026da7740c6147e73250e1eed039bcaeb4de8c99122e6c908a9e6e870c711d0f4abca02b1a614c64e34461a3fe16348e98d9a7a247d609cfb461075085e5ab97696e7f35385c31be77b34fafea0d3c150777aa55c60e96ab1c024d647e1058c98ac7eb3df96379836a35a4b5d8046e3bc68f429b12ca432bb3ef8054ab5fd37b904c52ef7711f2944460705ed53fda1e30595819c5a9a31c7a06c080ed926ee637bb30b4dcee317076a8e3214b6872da0f2da5d0d48d7ea667fdc1d338f7f49451210b3c27736ca85938a5f8f6bfc66e1815f1de42c418bfd60540432ca62284a437d438b3585ba4330197a7dd0a5eeef6f80e8d15600f197046ffab8c5107124443b6b18b43305e285521d77a9f916b4ffae33abe0c208d47fa16a325a0c3f30a7202d6a45390ec7b4522f368798e2e039193d17f967aac8cc106ee6104091edcd69a2f2fe3649498cf69b8e5720282ff0d75c635e225aefe35848e24556f470ef03c73cfba54b69cef3efd3f8590dea35f6e5b3b8ee84b1f949ed418c2f418fb401ce20cb525d5248f9b622a447898ddfd733d1222314173709c966764e8ff322f9b05c7a0a93bf4edd973bf671137d200e36ed0f9664a7f7c4538a53ef622774b9ba551d25269547e51c092106aa41f415b5be1e8f84974faf2a636487c73275bb7f8cc5258ac870afc8ee65690b6759bf2e3aff1faae0bf3ad23cea31b517eb5aa8100eb58e18e7a3e836570cd9fdb3148151fb7c164954f8e1e4e0e3740d3fd9e1944f0f1be553889a43330b764563776f463896ec1f47a3844fcafe7cf69573a85b4c97e7a5328e2370f25b4e98adc0a4ec992490a4949fc5134010a04f0a67172278dc967ffd01454c7d0f424259b894e923c4aef54fb764b6e4c94db8b538a88bc77f3db8f81489cfa4d518cf292f264c81684ea462be01147d5dbd2075d22ab8943e0a904b32076a39379e076dc7551045e5bb53e324257940830abffcd3edcc25a8cd08024221d3d137abcb1c9e6ae6fa50e1648e4d30d10758c0af07220d26de48d4ca9e559d7e61066bcdc8f658da27f7ec2a3579bda21553cc861b640dfd1e1726156ff24e89c318d1a8f24867f0e7f91c0df404d777b6a052ec0e66d7f988c602a9d4b4874de046c4f66c5cbd0ed5da0c7c3a58bb64a55c56b9c3a702a4cbf3da1d39c12154f4b8eeec777e44fe5b3d2eeb142c47e880647f92d318d8581f9e0715f6b2176e0c56c49ffe3d13f8e580b015206834a058bd40e9628623da23318c62487fedeb4fc7aa87d2f250a2f3724709c966fa990f35c2e538cc222583cbb2da9bfd4c5835a68caef7d13689dbee2deee993144dc12da88d0a340350b6914e8947d2f71ed24e6e40b6e187a6bba959c651ef83ad0313c660cdeabf363958a22a5e4470d41990e69f873bf33049f25f0cd368bb14ccf1f98dc67852d2e4bab63b08cdb5b41428d1ed9551511c9483be1ed9c27ca27826404661ad9e85160d8e64f3110ef87d60e24602c325f6890d5d5259ff18ecd4a87939b1ece983345fa37d2b024620ceb0c3af79f1e102c376d39a580cfe0b85aad0d9471f8e53b4e955168ffd639ef5596132a7546ad4d536e85c0ed897f85280630379e0d163070066049ebbac68accf02a461d2cd5c710f51d305ccceb8eaccbe40fa7b4d9c39da177998ecd7ecf45dce70a5dcb8bb491370477a60118d68d6f596160ff4ae65726d2bf02fdf925d036f01469f1e261564879e40ab89dce8200723785f6d4f25f86252dadabe28821be2f08ff337409f87fc05e85f59ed31d6b05b72b2f4876e5483aa3edbd3f54c6af867541c8898b79f0e995f2d46f6381ee8cdc1821e76c4618bc060fb964ed924f25ce5cc9499d6f7721db224e215513e10ea6810e9043e5dd7fca8f77d7af23f7641300ac6107b2189d8f6e9a55c749b37df1486ef0019ea8b438ca695c2245752c322ae0f764cd1f7491a6674193f47466f997f4ef39ad8e0bc119525783e1677d06037eea63e137ca05d5a2051c40388c54b6376984f4b2d8b952721c270d8b835be3f7aa8da68c62ca6dfd5575174f0a1897e35d859512967f992cf1de42c76f4d32907d92f16888e9324d0384f9dedd2886a794158a2c7cf1d2e97d8a493a7da16c80160c16d022cb9d574ce5e45011bbcb118ba0c5162970335b88e93bd85a82ca83bd0759c426c3e53299422f4f8029c586d3f2a0629556c564c1844a65e9eaf4829d9201e28ddb0e3a99961a084bf47a402cdf27922d06123f8fba637dd97265c4032f79e69ab65630b4a6beccd3db983dcaaca315c91a5ab9db9844688cc3166a38384d708650509490ee8649eb470c1342584db36eb5a285ff27a228d4832bf75d700f82a39bc2982fa21b85029bc49bb2306e191a8a3a37bee0288b302b72d653a0e23e585979333a66c41b2ff544d922e92307e5529097ecab1b2a698f6f4520a0e41ae373f908a219e4830efd4a58d0ed9951a2649408d7c0752424ea455c6ea51aa76cd9bebe681a462d3a25563653b3bd9e69a1890c2692c2cb5a7f7756d62ce7c98ddf814c2206489549bb72057a042e3c7339b1de5869892f53ea1ba7f83a4b1a46a01f53234394cc9d7fe1c974ed2837103b76f0c2cb5439014b37ee5a155ee7e0a30bb102ad257924f491be3ae877a48a887385857b46353215a421b944ad8cbbbbfeba1d5d86c134a4f4fdd67e5109869619c572332dac18380045a0a1df7f9e90f3d3eb1308a0df6581bc3b435d8f4d2303aa4753a97f98133825a364490b987914800f0893a67c788a72e7f259967712b2d5557febf04d4ae64c3df008a7a99bc9e22be12f7223f1744e7ece2effebfcd6508c93715189127c34ccb22563578816991518090178db21bed16367e350bf4bcae575a5d9891e1cf0c3fa301068c7aeee713dd1ccd3f252d4dc6b4f7e3926fc732a74dda7d28c5bff986b7ca715b586b56342386657da81afcd8256b80c29898ced6c8e126dfa0ff7d59bcd4af2ad82c3d6a72b65f4dc6cb38f1f3b8868140e849a4e857ffbff884ec594acae786fbb0cd7b4bac65f079c782459a732e37120c04e67b360bc2937829fd860ded484d0a35b8c3b799082883d24c843fc75a0c0839e4e80e223452984eba529e8359363c840f6107d4b3040f2d2468a0225f332f0284361206982e2c2ab2562eff6d7b753b3ebc9c747595e38948ba3775d5c21c919de0a04055fe8d1ce8e50d29bbe94f5f2a81883ed5dae3e652acb3fed81bfc5894d93392cfbb1856fb3a1b03cd9f27631b990c5deddf74fe9f6f22572f96f8b999c683b5c33378385c08622f2323fae8d0ef7eca52cd52cdd31bd2f1ba9be5e85e8665d50ad26f054d829c381cae7f1a72399b847b43053ab833a26fc8ba9a956996285d57c2332e066e8c957f960309ae2d3cf3b7e04f252e3c12fd83a4e136650e40ea07abf94b26f63fdd302d44413e32450d09df2ac6fc81f710a5b75936ebfc54cc4d860d25283b024af7161c320c3b7b5e6c4f3647d6359b470b928f933973b5282ef61fa477fd335be14ad504daf1495c55e80b9310c3ee976109d2996e187d20f57af0eea63fb320851200cdc228ed969971c24251c0d9e05af58dc499c17b097158341a2ae3663b90211cece1cf40fb1b76e9977c95a18d2ffaf47f62db9ee10c51a353fe29eabb14ceb8b6cc91e9c3cc081a651b4b0722fc882cc420e6080ff2161a1df02a514a72242d3668ef9ef38826c0853bcbb8a72dd85cd775d0d22d654a5045deba392fe9b7a2ae72866467838410fae3fe521e0546c8aa5689ab64b876d9d6dcf9ae6d55eefb165aec73be9322a7d17091770175c9fb1b091f5825ad085c8483d13022e9d1f4c3a9a15ba19218beff18e0c2848adf60c11a643b3a56f13b9092a01c2243bb5f0adee5d9a5a2f678653fea2c6b6dee4fbb8010fc0befcd12091a1db036e56b3f8b5c25b28548784c3d72e6070e2c8d4ce5b5d04a22e932c07d95f0443316967a9d26a1962f0e81855982cb05c56fbf23a022f4d5d92947a19ceeaa950e08a436323bfe4f1377efdbeb0e359fbf7e306055976cd13ec25a25034a2874c20c4ce75645a925deead5fd6dc9a4292a666f7cc2109c826dafa07dbbc057cf8646553c7870812dbf0cd948efb5001269c5e2703c74f63b289afbbc6d03452d7541002f9999d553fe320a44adf2afeb68093bd7599dc0c17e910227f4530cca93aff5e36e55a4a4d469b34315b72640f9dc84665e5ad1ffb264c647c56da476411b8de90eef5757f21ba6176acca59e9fc624f1c5181fd0e0509c419f5c7ec75c98b22f8deec61e05eb1a940e8a112e55ee3ea22a87b1f2ff0b559e75797530fe2549bf5921312fb7711f7996b230374fc5a529b310dbc9c5262d25fc57b627e71044c4fd916c512bc135dbb15fdc42f617db3ea44bb81f448d68de812ac25624d27efd227e84036aaf849d76c42308ceb899108117c1b396361ff0285030e0b94b825b5e9150979de49938f95161e5fe803bd49e530e633911af2d47189fbc26377e983ccd5db90830b561d7b90b682afd6dc45080a2e545144c2734d743f95e8d367140483bb44aa4518863c00cb4f76c0ccc583e27d20a1fb9f821d0f1552ab07f32d8e4be38833775c12ac3bfc37c88e4383f979abb0f69f57cf4647b12f48ec23a4cb18cdd6302f86db230d3803d2694ce38ad47eccb0e479f17dfbb341826e2024bcbe3538418ca55b6553bfabade850adabd5c6c85a9adaf0c36cf527a0b25b00798e9816cbb9f9365e6842194d56000450e8d7841f9d33ef6cf1013286257669acafd3d67bddaa5506731d182b21e63b3f3c9a7ec9c6f01326608571f6432373722aef0c1", 0x1000}, {&(0x7f0000001480)="73f355f64f796f227e52672ac1e5853526a4e670eea3b66d0f9da221da29ec9b3b7db75e3a5697d42fa99e9c7b6355b8ab002ecd7476e5c30af9a580d01b12b9f1d8006e5fcd09f982dccaa963eb210d48bb9092fb4ca8843cda6be7dfe467a8ad22e25a1b0c21bba6ce20e6d27ef3e3c570f035047cb87ed2", 0x79}, {&(0x7f0000001500)="ee1aada26ea34fe31c2f651cd70c730a6f662aecc1bffb663033090224dd511b557f515d573d20b5109c8c405d1dcb95b84b608fc25bcc7d1548c793f931144f872cc0187cb1d56e199ffceac82669cad208fd3eefe3aee1ba4705eeee0c2c93635b8ee2c908fe6501660481ee4cbcfd49bd5b4f1fc59830f6cb717785e42280180c1606b4629e581dc58ee64712ec7317ef3eb7d1291a3d06", 0x99}], 0x7}}, {{&(0x7f0000007500)=@in, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000076c0)}}], 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) 19:52:28 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x2081f8) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000005800), 0x0) madvise(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x14) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 19:52:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x6, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001300)='net/igmp\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, "00000100"}) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000080)) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000180)) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r1, 0x2) sendfile(r4, r0, 0x0, 0x6f0a77bd) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000100)=0xfffffffa, 0x4) 19:52:28 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @link_local}]}}}]}, 0x40}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f00000000c0), 0x49249249249265a, 0x0) 19:52:28 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38}, 0x0) 19:52:28 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) [ 432.393814][T14537] Unknown ioctl 19461 19:52:29 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38}, 0x0) 19:52:29 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x2081f8) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000005800), 0x0) madvise(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x14) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 19:52:29 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x2081f8) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000005800), 0x0) madvise(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x14) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) [ 432.844844][T14542] binder: 14534:14542 unknown command 1090151173 [ 432.852006][T14542] binder: 14534:14542 ioctl c0306201 20000280 returned -22 19:52:29 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x2081f8) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000005800), 0x0) madvise(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x14) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 19:52:29 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x2081f8) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000005800), 0x0) madvise(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x14) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 19:52:29 executing program 0: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 19:52:31 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000016c0)={0x26, 'hash\x00', 0x0, 0x0, 'md4\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007b40)=[{{&(0x7f0000000180)=@l2, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000040)="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", 0xff}, {&(0x7f00000002c0)="ad8e934beb9385c9d6cd3e77feb63da93e1bce37804573ae95a04e2548ba787160200414eb67ec8f8eae412f8e8e3f38549efd3b8daf8c65ca090f09cebc0b5b715637ca17073a6514439130b939e873462e206379809f0166761cbf4903cf8fd76ad2a832fcca7fcadfe80ba16b1d5675074d2b78cf11fdd5acaa6555d3cead44cf", 0xfffffeb1}, {&(0x7f0000002740)="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", 0x1083}, {&(0x7f0000001380)="c655cddf0bd8ad7649a5233036ff53721b6a33ada7c236b99c89760a8e44f6415584c79a2af30d08750bdfa130da0cfdaecb6ff7751d7a0ce3f8a02236e5e01fc5ca8724b747978577ba52ee7c75cc3eb9e6fb9d2832afd1f9c10ee5efaa94ebd1145ba1353a163995e42e97eebda0fed9758b1e5961e74fafb91ee569e6fce50c6d5a16b93f96cfed33b7ddd8006855a346fd6408ce1f1874a23ae6b803b839888bafc6dec28bcf845fbbf4a698ac6a571b05acaa93bb26b59a123abe4efae6b54897f4035ff9918f5bab086e8e5ce929fe7d7cec436063cc147cd22c9d9be98044", 0xe2}, {&(0x7f0000001740)="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", 0x1000}, {&(0x7f0000001480)="73f355f64f796f227e52672ac1e5853526a4e670eea3b66d0f9da221da29ec9b3b7db75e3a5697d42fa99e9c7b6355b8ab002ecd7476e5c30af9a580d01b12b9f1d8006e5fcd09f982dccaa963eb210d48bb9092fb4ca8843cda6be7dfe467a8ad22e25a1b0c21bba6ce20e6d27ef3e3c570f035047cb87ed2", 0x79}, {&(0x7f0000001500)="ee1aada26ea34fe31c2f651cd70c730a6f662aecc1bffb663033090224dd511b557f515d573d20b5109c8c405d1dcb95b84b608fc25bcc7d1548c793f931144f872cc0187cb1d56e199ffceac82669cad208fd3eefe3aee1ba4705eeee0c2c93635b8ee2c908fe6501660481ee4cbcfd49bd5b4f1fc59830f6cb717785e42280180c1606b4629e581dc58ee64712ec7317ef3eb7d1291a3d06", 0x99}], 0x7}}, {{&(0x7f0000007500)=@in, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000076c0)}}], 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) 19:52:31 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x2081f8) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000005800), 0x0) madvise(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x14) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 19:52:31 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x2081f8) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000005800), 0x0) madvise(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x14) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 19:52:31 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x2081f8) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000005800), 0x0) madvise(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x14) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 19:52:31 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:52:31 executing program 0: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 435.090637][T14574] binder: 14563:14574 unknown command 1090151173 [ 435.097245][T14574] binder: 14563:14574 ioctl c0306201 20000280 returned -22 19:52:31 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x2081f8) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000005800), 0x0) madvise(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x14) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 19:52:31 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x2081f8) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000005800), 0x0) madvise(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x14) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 19:52:31 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102385, 0x18ff1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xbf, &(0x7f00000193c0)="f7f258480aa422a5a79ad10076cc0b13ba6258a9b1a7a0916dd82a1d2a83a178e3a56f7200d380249950f32fea06facb1b4c5d4a1b0352c99c0793778a2267b105caae1d487a8b2494c5d37a3d912f45c8845cda0223abbd4c9b3b770400b6cb5ca768a7a65dc0e1782c845f956d3fed89d3fde7b9afe4c70758a0fb61f6de25bae65100c013b130dda8bddac2c84811993c3dc804000000000000000473543f83cff19186a75df42414dfbbeb2f3b337223829455f3ff396499db30479baf"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:52:31 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:52:32 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000002680)='/dev/snd/midiC#D#\x00', 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x0, 0x121801) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) dup2(r0, r1) 19:52:32 executing program 0: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 436.355110][T14596] binder: 14591:14596 unknown command 1090151173 [ 436.361966][T14596] binder: 14591:14596 ioctl c0306201 20000280 returned -22 19:52:34 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000016c0)={0x26, 'hash\x00', 0x0, 0x0, 'md4\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007b40)=[{{&(0x7f0000000180)=@l2, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000040)="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", 0xff}, {&(0x7f00000002c0)="ad8e934beb9385c9d6cd3e77feb63da93e1bce37804573ae95a04e2548ba787160200414eb67ec8f8eae412f8e8e3f38549efd3b8daf8c65ca090f09cebc0b5b715637ca17073a6514439130b939e873462e206379809f0166761cbf4903cf8fd76ad2a832fcca7fcadfe80ba16b1d5675074d2b78cf11fdd5acaa6555d3cead44cf", 0xfffffeb1}, {&(0x7f0000002740)="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", 0x1083}, {&(0x7f0000001380)="c655cddf0bd8ad7649a5233036ff53721b6a33ada7c236b99c89760a8e44f6415584c79a2af30d08750bdfa130da0cfdaecb6ff7751d7a0ce3f8a02236e5e01fc5ca8724b747978577ba52ee7c75cc3eb9e6fb9d2832afd1f9c10ee5efaa94ebd1145ba1353a163995e42e97eebda0fed9758b1e5961e74fafb91ee569e6fce50c6d5a16b93f96cfed33b7ddd8006855a346fd6408ce1f1874a23ae6b803b839888bafc6dec28bcf845fbbf4a698ac6a571b05acaa93bb26b59a123abe4efae6b54897f4035ff9918f5bab086e8e5ce929fe7d7cec436063cc147cd22c9d9be98044", 0xe2}, {&(0x7f0000001740)="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", 0x1000}, {&(0x7f0000001480)="73f355f64f796f227e52672ac1e5853526a4e670eea3b66d0f9da221da29ec9b3b7db75e3a5697d42fa99e9c7b6355b8ab002ecd7476e5c30af9a580d01b12b9f1d8006e5fcd09f982dccaa963eb210d48bb9092fb4ca8843cda6be7dfe467a8ad22e25a1b0c21bba6ce20e6d27ef3e3c570f035047cb87ed2", 0x79}, {&(0x7f0000001500)="ee1aada26ea34fe31c2f651cd70c730a6f662aecc1bffb663033090224dd511b557f515d573d20b5109c8c405d1dcb95b84b608fc25bcc7d1548c793f931144f872cc0187cb1d56e199ffceac82669cad208fd3eefe3aee1ba4705eeee0c2c93635b8ee2c908fe6501660481ee4cbcfd49bd5b4f1fc59830f6cb717785e42280180c1606b4629e581dc58ee64712ec7317ef3eb7d1291a3d06", 0x99}], 0x7}}, {{&(0x7f0000007500)=@in, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000076c0)}}], 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) 19:52:34 executing program 5: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x48c00) 19:52:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8, 0x16}, {0x8, 0x4}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xf}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 19:52:34 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:52:34 executing program 0: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 19:52:35 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102385, 0x18ff1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xbf, &(0x7f00000193c0)="f7f258480aa422a5a79ad10076cc0b13ba6258a9b1a7a0916dd82a1d2a83a178e3a56f7200d380249950f32fea06facb1b4c5d4a1b0352c99c0793778a2267b105caae1d487a8b2494c5d37a3d912f45c8845cda0223abbd4c9b3b770400b6cb5ca768a7a65dc0e1782c845f956d3fed89d3fde7b9afe4c70758a0fb61f6de25bae65100c013b130dda8bddac2c84811993c3dc804000000000000000473543f83cff19186a75df42414dfbbeb2f3b337223829455f3ff396499db30479baf"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 438.614169][T14622] binder: 14605:14622 unknown command 1090151173 [ 438.621112][T14622] binder: 14605:14622 ioctl c0306201 20000280 returned -22 19:52:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8, 0x16}, {0x8, 0x4}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xf}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 19:52:35 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000d4000000d4000000030000000b0000000000000e0400000001007320d1691340e79bd300001000000000000008030400000f00000004000084070000000f00000005000000390000000600000002000000000000000a00000000000000070000000700000001000000000001000700000000000001000000001b002a0203000000020000055370000003000000050000003bb600000600000005000015040000000000000002000004ffff00000600000005000000020000000500000002000000000400000400000000000007000000000d00000000000008030000088433a9f00857c25c561d5ce8d6894a3a2ff04ae41c4b2f85a59aaaab12b6a63ce581e168d6b11fe6d76e37063ae3ea3363917893ab532bd6405416eae179333092bbe22fc9c814797d5a8efe41ea565cb15829945fe28a9d41dc2057380730b21f6c4480138ec011fad4856caaf5e36fa67323489931ecc1e0d2f528df408fae4a94aed235d99609804d6fa6f8305edd7848c6bc1c95961c3e3c1dc8d4bfccbb52e9ce06f8b0b1e58621d4206c3b8c98369a544cd71355f929298067753d2c3ddc6811564c0a8b92a4"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:52:35 executing program 5: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x48c00) 19:52:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8, 0x16}, {0x8, 0x4}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xf}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) [ 439.480586][T14637] binder: 14628:14637 unknown command 1090151173 [ 439.487497][T14637] binder: 14628:14637 ioctl c0306201 20000280 returned -22 19:52:36 executing program 5: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x48c00) 19:52:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8, 0x16}, {0x8, 0x4}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xf}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 19:52:37 executing program 5: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x48c00) 19:52:37 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000000206010800000000000000000000000016000300686173683a6e65742c706f72742c6e657400000005000400000000000900020073987a44000000000500010006000000050005000a0000000c000780080012"], 0x1}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 19:52:37 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 19:52:37 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) [ 441.188135][T14660] binder: 14653:14660 unknown command 1090151173 [ 441.194773][T14660] binder: 14653:14660 ioctl c0306201 20000280 returned -22 19:52:37 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 19:52:38 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102385, 0x18ff1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xbf, &(0x7f00000193c0)="f7f258480aa422a5a79ad10076cc0b13ba6258a9b1a7a0916dd82a1d2a83a178e3a56f7200d380249950f32fea06facb1b4c5d4a1b0352c99c0793778a2267b105caae1d487a8b2494c5d37a3d912f45c8845cda0223abbd4c9b3b770400b6cb5ca768a7a65dc0e1782c845f956d3fed89d3fde7b9afe4c70758a0fb61f6de25bae65100c013b130dda8bddac2c84811993c3dc804000000000000000473543f83cff19186a75df42414dfbbeb2f3b337223829455f3ff396499db30479baf"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:52:38 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @random="0982e32fef90", @void, {@ipv4={0x800, @generic={{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0x38, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev]}, @timestamp={0x7, 0x5, 0x5, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}, 0x0) 19:52:38 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:52:38 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000100)) 19:52:38 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 19:52:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="fc"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='P\x00\x00\x00*\x00\'\r\x00'/20, @ANYRES32=r2], 0x50}}, 0x0) 19:52:38 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 19:52:38 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000100)) 19:52:38 executing program 5: r0 = socket$inet(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000640)={0x2, 0x0, @local}, 0x10) connect(r0, &(0x7f0000000480)=@nl=@unspec, 0x80) [ 442.413249][T14683] binder: 14671:14683 unknown command 1090151173 [ 442.419966][T14683] binder: 14671:14683 ioctl c0306201 20000280 returned -22 19:52:38 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @random="0982e32fef90", @void, {@ipv4={0x800, @generic={{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0x38, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev]}, @timestamp={0x7, 0x5, 0x5, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}, 0x0) 19:52:39 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000100)) 19:52:39 executing program 5: r0 = socket$inet(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000640)={0x2, 0x0, @local}, 0x10) connect(r0, &(0x7f0000000480)=@nl=@unspec, 0x80) 19:52:41 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102385, 0x18ff1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xbf, &(0x7f00000193c0)="f7f258480aa422a5a79ad10076cc0b13ba6258a9b1a7a0916dd82a1d2a83a178e3a56f7200d380249950f32fea06facb1b4c5d4a1b0352c99c0793778a2267b105caae1d487a8b2494c5d37a3d912f45c8845cda0223abbd4c9b3b770400b6cb5ca768a7a65dc0e1782c845f956d3fed89d3fde7b9afe4c70758a0fb61f6de25bae65100c013b130dda8bddac2c84811993c3dc804000000000000000473543f83cff19186a75df42414dfbbeb2f3b337223829455f3ff396499db30479baf"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 19:52:41 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @random="0982e32fef90", @void, {@ipv4={0x800, @generic={{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0x38, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev]}, @timestamp={0x7, 0x5, 0x5, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}, 0x0) 19:52:41 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:52:41 executing program 5: r0 = socket$inet(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000640)={0x2, 0x0, @local}, 0x10) connect(r0, &(0x7f0000000480)=@nl=@unspec, 0x80) 19:52:41 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 19:52:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000100)) 19:52:41 executing program 5: r0 = socket$inet(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000640)={0x2, 0x0, @local}, 0x10) connect(r0, &(0x7f0000000480)=@nl=@unspec, 0x80) 19:52:41 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 19:52:41 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @random="0982e32fef90", @void, {@ipv4={0x800, @generic={{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0x38, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev]}, @timestamp={0x7, 0x5, 0x5, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}, 0x0) [ 445.582406][T14719] binder: 14709:14719 unknown command 1090151173 [ 445.589286][T14719] binder: 14709:14719 ioctl c0306201 20000280 returned -22 19:52:42 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x6e200000}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffe29}, 0x48) 19:52:42 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="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", 0xfc) 19:52:42 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 445.892502][T14730] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 19:52:44 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="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", 0xfc) 19:52:44 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x6e200000}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffe29}, 0x48) 19:52:44 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f00000008c0)=""/244, 0xf4}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00') preadv(r0, &(0x7f00000017c0), 0x140, 0x0) 19:52:44 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:52:44 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 19:52:44 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x0) close(r0) [ 448.530022][T14743] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 19:52:45 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000200)={0x7ff}) 19:52:45 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="fc0000001a0007008a0925003f0000000aab0700000000001d60369321000200ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc000300095000000000117c22ebc205014000000000008934d07302ade01720d70ee12a591c23b60a54d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b310f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd300000000", 0xfc) [ 448.835393][T14754] binder: 14745:14754 unknown command 1090151173 [ 448.842163][T14754] binder: 14745:14754 ioctl c0306201 20000280 returned -22 19:52:45 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x6e200000}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffe29}, 0x48) 19:52:45 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x0) close(r0) [ 449.093421][T14761] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 19:52:45 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x0) close(r0) 19:52:45 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000200)={0x7ff}) 19:52:45 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="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", 0xfc) 19:52:45 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x6e200000}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffe29}, 0x48) 19:52:45 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f00000008c0)=""/244, 0xf4}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00') preadv(r0, &(0x7f00000017c0), 0x140, 0x0) 19:52:45 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) [ 449.527515][T14769] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 19:52:46 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r0, 0x0) close(r0) 19:52:46 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000200)={0x7ff}) 19:52:46 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettaction={0x28, 0x32, 0x309, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x28}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 19:52:46 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x14}) 19:52:46 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:52:46 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000200)={0x7ff}) 19:52:46 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f00000008c0)=""/244, 0xf4}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00') preadv(r0, &(0x7f00000017c0), 0x140, 0x0) 19:52:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'\x00', 0x20000005402}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x19) ioctl$TUNSETTXFILTER(r0, 0x800454df, &(0x7f0000000040)) 19:52:46 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettaction={0x28, 0x32, 0x309, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x28}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 450.461035][T14796] tap0: tun_chr_ioctl cmd 2147767519 [ 450.580019][T14799] binder: 14789:14799 unknown command 1090151173 [ 450.587178][T14799] binder: 14789:14799 ioctl c0306201 20000280 returned -22 19:52:47 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x14}) 19:52:47 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={@rand_addr=0x64010102, @multicast1, r7}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000004c0)={[0x0, 0x0, 0x40000007, 0xffffffffffffffff, 0x0, 0x0, 0x800000004cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:52:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'\x00', 0x20000005402}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x19) ioctl$TUNSETTXFILTER(r0, 0x800454df, &(0x7f0000000040)) 19:52:47 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:52:47 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettaction={0x28, 0x32, 0x309, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x28}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 451.080584][T14819] tap0: tun_chr_ioctl cmd 2147767519 19:52:47 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x14}) 19:52:47 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f00000008c0)=""/244, 0xf4}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00') preadv(r0, &(0x7f00000017c0), 0x140, 0x0) 19:52:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'\x00', 0x20000005402}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x19) ioctl$TUNSETTXFILTER(r0, 0x800454df, &(0x7f0000000040)) 19:52:47 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettaction={0x28, 0x32, 0x309, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x28}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 451.533761][T14834] binder: 14820:14834 unknown command 1090151173 [ 451.540618][T14834] binder: 14820:14834 ioctl c0306201 20000280 returned -22 19:52:48 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x14}) [ 451.615548][T14835] tap0: tun_chr_ioctl cmd 2147767519 19:52:48 executing program 0: io_setup(0x1, &(0x7f0000000240)=0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f0080fe000001580f0200000000", 0x28}]) [ 451.959209][T14845] kvm [14814]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x4000008a data 0xffffffff0000ffb6 19:52:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'\x00', 0x20000005402}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x19) ioctl$TUNSETTXFILTER(r0, 0x800454df, &(0x7f0000000040)) 19:52:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000200)={0x0, 0x8a6}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:52:48 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={@rand_addr=0x64010102, @multicast1, r7}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000004c0)={[0x0, 0x0, 0x40000007, 0xffffffffffffffff, 0x0, 0x0, 0x800000004cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:52:48 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:52:48 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf44.\xab%n'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r0, &(0x7f0000000100)=""/162, 0xa2) getdents64(r0, 0x0, 0x18) [ 452.400508][T14857] tap0: tun_chr_ioctl cmd 2147767519 19:52:49 executing program 0: io_setup(0x1, &(0x7f0000000240)=0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f0080fe000001580f0200000000", 0x28}]) 19:52:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xa808) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), &(0x7f0000000080)) 19:52:49 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf44.\xab%n'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r0, &(0x7f0000000100)=""/162, 0xa2) getdents64(r0, 0x0, 0x18) 19:52:49 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf44.\xab%n'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r0, &(0x7f0000000100)=""/162, 0xa2) getdents64(r0, 0x0, 0x18) [ 452.770857][T14880] binder: 14861:14880 unknown command 1090151173 [ 452.778109][T14880] binder: 14861:14880 ioctl c0306201 20000280 returned -22 19:52:49 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf44.\xab%n'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r0, &(0x7f0000000100)=""/162, 0xa2) getdents64(r0, 0x0, 0x18) 19:52:49 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf44.\xab%n'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r0, &(0x7f0000000100)=""/162, 0xa2) getdents64(r0, 0x0, 0x18) 19:52:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}]}, 0x5c}}, 0x0) 19:52:49 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={@rand_addr=0x64010102, @multicast1, r7}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000004c0)={[0x0, 0x0, 0x40000007, 0xffffffffffffffff, 0x0, 0x0, 0x800000004cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:52:49 executing program 0: io_setup(0x1, &(0x7f0000000240)=0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f0080fe000001580f0200000000", 0x28}]) 19:52:50 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf44.\xab%n'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r0, &(0x7f0000000100)=""/162, 0xa2) getdents64(r0, 0x0, 0x18) 19:52:50 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0xef, 0x0, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:52:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 19:52:50 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/\x00-\x00\x00\x00\x00s,\xbbFrh`\xa7\x87e\xf44.\xab%n'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r0, &(0x7f0000000100)=""/162, 0xa2) getdents64(r0, 0x0, 0x18) 19:52:50 executing program 0: io_setup(0x1, &(0x7f0000000240)=0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f0080fe000001580f0200000000", 0x28}]) 19:52:50 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x1c3382, 0x0) unshare(0x20600) fallocate(r0, 0x11, 0x0, 0x200200) 19:52:50 executing program 5: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYBLOB="5801844715590a23354abe9d3790cc813c07007a0fa37fafd5", @ANYBLOB, @ANYBLOB], 0xfffffdef) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x7b, &(0x7f00000011c0)=ANY=[@ANYRES16=r1, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r0, @ANYRESDEC=r5, @ANYBLOB="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"], &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={r4, 0x2007}, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="edfd01"], 0x10) 19:52:50 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x1c3382, 0x0) unshare(0x20600) fallocate(r0, 0x11, 0x0, 0x200200) 19:52:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 19:52:51 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x40, 0x2, [@TCA_TBF_BURST={0x8}, @TCA_TBF_RATE64={0xc, 0x4, 0x880b0c8f272888ff}, @TCA_TBF_PARMS={0x28}]}}]}, 0x6c}}, 0x0) [ 454.669454][T14931] binder: 14917:14931 unknown command 1090151173 [ 454.676052][T14931] binder: 14917:14931 ioctl c0306201 20000280 returned -22 19:52:51 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={@rand_addr=0x64010102, @multicast1, r7}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000004c0)={[0x0, 0x0, 0x40000007, 0xffffffffffffffff, 0x0, 0x0, 0x800000004cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 454.785420][T14936] sch_tbf: burst 0 is lower than device lo mtu (65550) ! 19:52:51 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x1c3382, 0x0) unshare(0x20600) fallocate(r0, 0x11, 0x0, 0x200200) [ 455.016750][T14941] sch_tbf: burst 0 is lower than device lo mtu (65550) ! 19:52:51 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x40, 0x2, [@TCA_TBF_BURST={0x8}, @TCA_TBF_RATE64={0xc, 0x4, 0x880b0c8f272888ff}, @TCA_TBF_PARMS={0x28}]}}]}, 0x6c}}, 0x0) [ 455.376226][T14957] sch_tbf: burst 0 is lower than device lo mtu (65550) ! 19:52:52 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0xef, 0x0, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:52:52 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x1c3382, 0x0) unshare(0x20600) fallocate(r0, 0x11, 0x0, 0x200200) 19:52:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 19:52:52 executing program 5: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYBLOB="5801844715590a23354abe9d3790cc813c07007a0fa37fafd5", @ANYBLOB, @ANYBLOB], 0xfffffdef) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x7b, &(0x7f00000011c0)=ANY=[@ANYRES16=r1, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r0, @ANYRESDEC=r5, @ANYBLOB="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"], &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={r4, 0x2007}, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="edfd01"], 0x10) 19:52:52 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x40, 0x2, [@TCA_TBF_BURST={0x8}, @TCA_TBF_RATE64={0xc, 0x4, 0x880b0c8f272888ff}, @TCA_TBF_PARMS={0x28}]}}]}, 0x6c}}, 0x0) [ 455.831084][T14966] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 456.073704][T14975] binder: 14965:14975 unknown command 1090151173 [ 456.080376][T14975] binder: 14965:14975 ioctl c0306201 20000280 returned -22 19:52:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 19:52:52 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x40, 0x2, [@TCA_TBF_BURST={0x8}, @TCA_TBF_RATE64={0xc, 0x4, 0x880b0c8f272888ff}, @TCA_TBF_PARMS={0x28}]}}]}, 0x6c}}, 0x0) 19:52:52 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYBLOB="5801844715590a23354abe9d3790cc813c07007a0fa37fafd5", @ANYBLOB, @ANYBLOB], 0xfffffdef) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x7b, &(0x7f00000011c0)=ANY=[@ANYRES16=r1, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r0, @ANYRESDEC=r5, @ANYBLOB="716ce7c5216329a86a7ac2b0ee3b23ec74f617c0e74420bb8f4456afb2aa0f61c1bb13ce11cbf2b68a9cfb4334e1be45c25db5a6bf69d6534da944841dc82771f26465dee37740abbfddf7b795df8029f835aa416a70d10641053c92d74b90792a5e444cda40318dadd461c147fc6989cf12916366e7e101607c77f9c52cbe3ffab1b2aa7ed3bb132719d2302c36446c272c58f3ede34e864a7db9a1c9ec67e00e578e34a5c5afd52a76630f3d795a85399a117a2aaa80367b5c91583e3b239d6d68f3c6a4d4ca899d149ce544071942ac2784cff4198d15d917de3881db03e62d32ef68d25917cbf163689da2022e03700e33c2cabd488885d7c63562b67fefdbf76e4252b84561fb4a5b4d8f7a35b7f7e240ffa239d122544d8dfe1be6a309a37a278fc98e30ab0b76e65bf71dd5b8f5008894213c6b482eadbd3a8e8facca5a1761bd09613147f1ea8b5ce965c61d5663f64abcb3e2ea079d58f54ebf0a2fb1281bce3db1829e18437e67877201d2a9cb1cfd9eb29b6e9ec598cc60981d837319494ba4c638390d31bbd33b775e9a01877b8253ababeb6855a64d853891ca5f313380fc1fef93277e4f377301a903cb29a9823482fa8c7fcb83f957244a0fb076e3bc809fc1a6da8756080cc5287ad949c1872cee15375b5b2b5e4ef965f3778fe03aba376a990bd621697a2b7e1f2a409e3797211c848724b88f11ca3e2871bbdfa8c0556f6fb93ab8df29120faf9fd3b1274a785f0874d1cbb60802f7cd30974883c0ecdae78d35827ec2d92bd5d58a7006fb66b5e93e4bcb2a2f1d17ec851fb091931b6c50224b3424a475615e1652778d286b5cf6d485bcf9c1c7c038893d2917aee55b4c65c94d473072ac7e25c9e802135e6c12e26ef2311196d4c38ebc992dc89169250b9908ccad1fdee0e129bf09b47a1a86e351b5d89c63e950fe66655ef993566bc8600c3b2d05628aff0a739df0cd25309963102683037ad3620f7683c26610a761e08dcbf5c0ad1a2242da49a361a0222251811c34ca05222b8cf4405ae7013c502d8c579492668d20cf82ce1d09beb517c477eb55e20b8d77b97443fd46f746fbea33f6096b4f77c383360953408cebcc4a92f61b4cb07c18929a55fc1501fd1c10b710bd2144a4f5b4663c9c4e02b4ff6b6d045ac6bf5807c5f3435f1332a64ca7e86d2d5d2088fab9e17a4edba4f127e88096da23653d568595c9466dcc58412fd24b73f67eb71aca3dcb507f08b09af3c7692ed37b4ff94c58b29143097888c8caea4fe74fc9c31651ba6a34da98d3c9d4975c5ae938f743e6c86ae6c20b716ead9e3e63803fb4f4b12211dc7e5d0820555bfa373514b21bd8b14e736b3d7417cb989985d6239f7e0d15355dd5ae6df9aced64134420336b8d7e10dc9bad53de25bd94926406a9a60e48eb06d26a91f67b1290265dc6bf53507eed0d9de53467fcebecffe6d6b6203ba9c6f7d276127ee48a1a547b00eda740b6a815e6677223539ebc43c689c6d91ac643114c5d58486e060a2314bb33d6ef217307e80d8a21d5e82fd9e5ea98a6fd8a647b97b9ca0537fa376b869243da61a1d0be4b5e2ce0c7a9a9ead2051007addf42a575412a0de5db4e6ac4ae4f634dfdb82b6696e51c728a4259a950da6a535318462d48c354f3f90767d3d5e974a8e4d5d684fce307ed790dbdb8008b6ed00e34c7dc96912d676f66fe9b0a7cdd0c5f086d29e427566785cda6b65add9a1eeb0fbb854eac6749dc2f6e4865e038abd5a69f83e04875c55a0c42f32649f27542f92a627eff08b6c2207de3636d0f0407dc42719aca9e32a818f2b05cd132f0414c133e3649448d7fef66d348e62ca3fe0fd69f33579f4ad94ac86e9d42c8f1e318493709b9f33f8869c266f115ba1975ae454d9c8be4a0039971b1358bb5a40d2b32bcffd2020c2bcb3b665ca30de9fad15bc192a4fefc406687e34a1679e3b5e25da917a8bed7e3f65966ea97ab5da9f444a29251e11da3fc930eb963b69fea4bbae065015321cc5001b2b116cdadb3664bed7aefacc1215728efce8ecaeef6bf79c8ace4639ec89d72fa0e862138167c011f1ec56479da66e4b6b6d4b9a95dde101dc3d7efbf965949f6b0a7364daf2f18330e17765198c37f380c7b32f31509813756a91c0d21b5f67beb6930bbe028bc36d4edada7f425a1bc98581e3116e45aa07abb1ffa2ce04d076278a9e33eb4b751b24e14dd2705c58a72c6f341d95ce4850c2d048caeec8fe9a109d04701c0b4f78ae7deb1d31bcec910982302057c80b0df9307f63029f6377088dc34921ac818f066ceedf82ab2121d7ddeb7b0f2a3d2d31188881694e187d1f156308ccac9c41c3afc5d9326bce32cc4b271a1ba41a1fbdbc0e727c6114e418f53d813f134c86a86d63c50a636eb4b571358112ffe05b87f27a6f98ddeba32a8f06cbfb50bd7f48cac0d47b270770b1633007abcf242492bab3fc8452b93061922b7628945a603e0497a02ef029ad01afb8966f65d61f7620b7059ff975421802416c9eb8e7d1a5e96961ade6df6075a3a3fefa70553c702541c0df2c1ac3975657d39840d3fc7d023a5c7d397a8e4fd9695f3f93906fd1997f10c954e2a6bab72c9e878dfc5cd82f25e99f1e0b532947f13402b2333f6939ea1d150fe3136209c2bde47ee1b7a7dc5b00e23d95308a2781d80a558ff6135f44edc5ffdfaf84a20ddc68792d729725c61d3df027fca99e23a49d502d37d107a84c7568daef9e7dd271fe708dd2ddf7bc381987746daf734600345ae339a6c9202088b0d938f59410d296df191a9b67b670d807028d0ac8ca54e1c5e2280b3648f03a1195b0fb674ddf5be5f85942a494e3b5b54e5f7bcb80c031d69aaa8570116cb04a2b4b09ec8aef0b1e3d751a3242cc881ef65e2eb6f1bd643b33b617efc5f338dd97c7c289251bbf0c624192b7b2f83f2a97780f31ec25c4aa2d017b78fb9fe11c947501a4a45c50b2d481d746b2fb58bcd5ba69e9e87d369af366eea901314906ccb1e634f5f3cfd62f720a33b92c6730d96895552b30f39e768d69a77f2905c2a3ccbb286b7d238f60b4d76121b53a2e96fc1ec8cf939ab0c9f042dff0a4e62c8a4899be1e3fafecd8cba5cc14e9f951f9d461deae3a4a097e87134d6aced77d0e7ceb72cc67bcc5e9e9a685a8b2cba9d2a106e10f200cd3fc4a2313f92fcee08421927dd187018e07a5d7d11f7b6c084461fc128159836605a60551270144caa95754a94ccfe37e5d3317f9351bd02efed0bc3f7dadeefb69b57784a1db9a63c220ed2582fd0e11ba8c70e8c4411a305e593b0290d0dae330f50c46a4375ae86af90a3aa814ba1f1a6b1613192a901ab9a624ba4b03c236d24aa28e4c42f4ce0efdbcbb4677361e7ca940580aaf28186742659a23e06415029f975c04885871f470cefd28c381c79af38fa3f3fc628040f39624879b10c3ff425e4671fb1a2cc551b33b574711870da22f68c99fb2e18fb3808ae220f1d31c32058fd939f9ec656bee348c82a92bb116637e4e5d0c7cbd98a47d4ac6cd4cbbfd48eb736ea29b49675314bd67992a56937fe931271ff6ed3dcfb6127ee72eb5e8ad802d84e436e7d2dfde947fca0148d39dc1994098c93848da9ab9812ac6b7f40c4819cddca957f464dd12047cf805f52d3e0579e2ace0dce9a78a74b2f049c5b2b9d90e52aff149b078d1ecc6c33c73a9912a69ec9937d6b49b0ae9eb44c99fdb277fc964bb55c392afa95611ffabec7ce55ad461eb1c3db4be68bab279c49499164b438cbfe039cb8aa5e2fcd666a5475a4433b2effa03a2bb12fd6daed9066c8b33d518f6f542a83a80e85de545c6890141cab7ffd73f3b9bb88de214edfc4b20aa02968fa365e8767eb1f711451675bebc406ac3550ab1096580212fb92acde297541fa03968b11fea7e562df1836e6aa0bd8d4997682012a84828632a9963709e27539a4f76ebddf5b25bbffa6ba4b26a26d6de1b59a17e08ee8948986c11088060bd974613cb9702664704a05e89b4fad567bf5a6ed563fd2ee879422919166dd46a76ce734acb3e8bf2caa61196c2353506a711ed6c31c25552cc6931c4d0a27f2495f08c80015aee683887e19910434fe8638c1203004d88418bb523612ec0e538240bf95337ab76dc6cf6457d5d676583db091b4c5c6b80d62dcb62ebfb919f1c1de8f43e5acfdd1c8809ef1975a5c3efd2ad29fcf33e431f202ff854d5543698b6ed93ea8212feac6ebe3e4455dfc22b0dc209001c66e2c709b0ec727a4704c26f441407e9ccf757bc1338ceb1eef9d450a3cf9d48bafb3245604fd9d065cada52ab4aa38769c9df36054a023d105118d35dc001ddfef79577f1fffb7dec54034c49f98e3e00b20a3a6efbda6f559cdd7b2ffa91066dcfa30301f93a0d23ad70b126ad7382db86593f0cc2125a3d7dcb47a48e395d4a15baa8a35391b447296bfe89e1cc00b19c669ba007035e113b486cdecb17398285a5103c9439a2de2ff94057f0ef1514ba704780d25176a8b38218f0f5a0edac6e671622a90f465bca157524c9942e49224402a174f416558e3843f4ad9f3934ab21e627e516894f1a7f45963fc9a6495042cb1cacedbfa9b621a4e49242434cc57860f357449fa95c821b379d93a60f53c92daef836b6ae09f4bc62e6df1ad73a9630b27fc3f296f7f0c9934bfa1e2118d0881bf9511bab1dbaa191d6e66c155bdecd22506abc4fa6e0bc493646808fe618ea9e67bea7be57276856faf2f3ce31d1b3652cde71b3653d06d3e11a7b84c3eda4966053eabab0e7081956b02bdb03f973d87032b07181180ace905c3f1f95d5a50448160beb2e0777483b6fc4ef4ad50ef7c10f93ceded29e809a62199fd98a456ec649248835df43af2d54dc43fd23b27099f8bf4b032a509c3bc0df79af291d37b97b447b62612762910b56739bfebd44664596958a1428c074aeea179ce3a9c7b0f559d9277e0b579940072e9adc07ee8dcbae94d1da3dae47d9fdba19326eb660a4bbf52d279b2683ea0f26d58184909af3c855ca17dda0a131aee7e3b2a02fdbf579c686caadf3903f28613049007070cea55233d4a8457c69095ab1ba9cfb76b63a8e7aa4a2c54952ad6356ffc9c700d1f5ac80b66b8c5ed4bfeb25ede4fc33debd7b87b5e0c67129d576c7095de46040c9a595038252bcde19e5aa3a0ebdeabd53018a6465dac07e4b26b51dc7a4ffc6025fee7a4170d6797076f97533fad22065209c49f28911a0cfd942dc9c3ea8c36cc1f8e6f5e122b030629d3c307492e4263d165acedec5990ae52457cc60d97db26de750fb192e91ccf2ea37aec447c456c1ede6f2e3e7be317fbcbd204df163c379c267c5fc36be54c1aee25cea4ff4645226fadb234f35865c213f5517c5a700761aa24c64baa223217ad8230984b149468e1e1c8b3fda7645cf2a19c9da853665348445cc60edbd468888a3fb55ad6e20785b83e8c93a87cfa5ded322ade440065f970085ec4068ef52013c849ec20dc78fffa13d29425b79bbfa8156a054c03675a57c51592cc08f5aee574f2557358bebe7603695694918e365c4675c6f2896fcf9e246adac11410e313f9fac2f53a784598746c13c63ca37a248bcea60c943d3ca5da32de3a38d3593c6e772fc92838e2db901005ca14e8b346c0114a0b75365b75521196f3af4b8a0cac95c1476e558e0656e992678e38107d7e92f6fd3db8335947c679d56015e1afa021bf69725ec09591616f35112f251f56162f6d30f3f778c878716e42"], &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={r4, 0x2007}, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="edfd01"], 0x10) [ 456.365496][T14986] sch_tbf: burst 0 is lower than device lo mtu (65550) ! 19:52:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="254b3f49c620", 0x0, 0xffffffff, 0x0, 0x0, 0x0}) 19:52:52 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0xef, 0x0, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:52:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="254b3f49c620", 0x0, 0xffffffff, 0x0, 0x0, 0x0}) 19:52:53 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x8, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8) sendmmsg$sock(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@timestamping={{0x10, 0x1, 0x3d}}], 0x10}}], 0x2, 0x0) 19:52:53 executing program 5: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYBLOB="5801844715590a23354abe9d3790cc813c07007a0fa37fafd5", @ANYBLOB, @ANYBLOB], 0xfffffdef) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x7b, &(0x7f00000011c0)=ANY=[@ANYRES16=r1, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r0, @ANYRESDEC=r5, @ANYBLOB="716ce7c5216329a86a7ac2b0ee3b23ec74f617c0e74420bb8f4456afb2aa0f61c1bb13ce11cbf2b68a9cfb4334e1be45c25db5a6bf69d6534da944841dc82771f26465dee37740abbfddf7b795df8029f835aa416a70d10641053c92d74b90792a5e444cda40318dadd461c147fc6989cf12916366e7e101607c77f9c52cbe3ffab1b2aa7ed3bb132719d2302c36446c272c58f3ede34e864a7db9a1c9ec67e00e578e34a5c5afd52a76630f3d795a85399a117a2aaa80367b5c91583e3b239d6d68f3c6a4d4ca899d149ce544071942ac2784cff4198d15d917de3881db03e62d32ef68d25917cbf163689da2022e03700e33c2cabd488885d7c63562b67fefdbf76e4252b84561fb4a5b4d8f7a35b7f7e240ffa239d122544d8dfe1be6a309a37a278fc98e30ab0b76e65bf71dd5b8f5008894213c6b482eadbd3a8e8facca5a1761bd09613147f1ea8b5ce965c61d5663f64abcb3e2ea079d58f54ebf0a2fb1281bce3db1829e18437e67877201d2a9cb1cfd9eb29b6e9ec598cc60981d837319494ba4c638390d31bbd33b775e9a01877b8253ababeb6855a64d853891ca5f313380fc1fef93277e4f377301a903cb29a9823482fa8c7fcb83f957244a0fb076e3bc809fc1a6da8756080cc5287ad949c1872cee15375b5b2b5e4ef965f3778fe03aba376a990bd621697a2b7e1f2a409e3797211c848724b88f11ca3e2871bbdfa8c0556f6fb93ab8df29120faf9fd3b1274a785f0874d1cbb60802f7cd30974883c0ecdae78d35827ec2d92bd5d58a7006fb66b5e93e4bcb2a2f1d17ec851fb091931b6c50224b3424a475615e1652778d286b5cf6d485bcf9c1c7c038893d2917aee55b4c65c94d473072ac7e25c9e802135e6c12e26ef2311196d4c38ebc992dc89169250b9908ccad1fdee0e129bf09b47a1a86e351b5d89c63e950fe66655ef993566bc8600c3b2d05628aff0a739df0cd25309963102683037ad3620f7683c26610a761e08dcbf5c0ad1a2242da49a361a0222251811c34ca05222b8cf4405ae7013c502d8c579492668d20cf82ce1d09beb517c477eb55e20b8d77b97443fd46f746fbea33f6096b4f77c383360953408cebcc4a92f61b4cb07c18929a55fc1501fd1c10b710bd2144a4f5b4663c9c4e02b4ff6b6d045ac6bf5807c5f3435f1332a64ca7e86d2d5d2088fab9e17a4edba4f127e88096da23653d568595c9466dcc58412fd24b73f67eb71aca3dcb507f08b09af3c7692ed37b4ff94c58b29143097888c8caea4fe74fc9c31651ba6a34da98d3c9d4975c5ae938f743e6c86ae6c20b716ead9e3e63803fb4f4b12211dc7e5d0820555bfa373514b21bd8b14e736b3d7417cb989985d6239f7e0d15355dd5ae6df9aced64134420336b8d7e10dc9bad53de25bd94926406a9a60e48eb06d26a91f67b1290265dc6bf53507eed0d9de53467fcebecffe6d6b6203ba9c6f7d276127ee48a1a547b00eda740b6a815e6677223539ebc43c689c6d91ac643114c5d58486e060a2314bb33d6ef217307e80d8a21d5e82fd9e5ea98a6fd8a647b97b9ca0537fa376b869243da61a1d0be4b5e2ce0c7a9a9ead2051007addf42a575412a0de5db4e6ac4ae4f634dfdb82b6696e51c728a4259a950da6a535318462d48c354f3f90767d3d5e974a8e4d5d684fce307ed790dbdb8008b6ed00e34c7dc96912d676f66fe9b0a7cdd0c5f086d29e427566785cda6b65add9a1eeb0fbb854eac6749dc2f6e4865e038abd5a69f83e04875c55a0c42f32649f27542f92a627eff08b6c2207de3636d0f0407dc42719aca9e32a818f2b05cd132f0414c133e3649448d7fef66d348e62ca3fe0fd69f33579f4ad94ac86e9d42c8f1e318493709b9f33f8869c266f115ba1975ae454d9c8be4a0039971b1358bb5a40d2b32bcffd2020c2bcb3b665ca30de9fad15bc192a4fefc406687e34a1679e3b5e25da917a8bed7e3f65966ea97ab5da9f444a29251e11da3fc930eb963b69fea4bbae065015321cc5001b2b116cdadb3664bed7aefacc1215728efce8ecaeef6bf79c8ace4639ec89d72fa0e862138167c011f1ec56479da66e4b6b6d4b9a95dde101dc3d7efbf965949f6b0a7364daf2f18330e17765198c37f380c7b32f31509813756a91c0d21b5f67beb6930bbe028bc36d4edada7f425a1bc98581e3116e45aa07abb1ffa2ce04d076278a9e33eb4b751b24e14dd2705c58a72c6f341d95ce4850c2d048caeec8fe9a109d04701c0b4f78ae7deb1d31bcec910982302057c80b0df9307f63029f6377088dc34921ac818f066ceedf82ab2121d7ddeb7b0f2a3d2d31188881694e187d1f156308ccac9c41c3afc5d9326bce32cc4b271a1ba41a1fbdbc0e727c6114e418f53d813f134c86a86d63c50a636eb4b571358112ffe05b87f27a6f98ddeba32a8f06cbfb50bd7f48cac0d47b270770b1633007abcf242492bab3fc8452b93061922b7628945a603e0497a02ef029ad01afb8966f65d61f7620b7059ff975421802416c9eb8e7d1a5e96961ade6df6075a3a3fefa70553c702541c0df2c1ac3975657d39840d3fc7d023a5c7d397a8e4fd9695f3f93906fd1997f10c954e2a6bab72c9e878dfc5cd82f25e99f1e0b532947f13402b2333f6939ea1d150fe3136209c2bde47ee1b7a7dc5b00e23d95308a2781d80a558ff6135f44edc5ffdfaf84a20ddc68792d729725c61d3df027fca99e23a49d502d37d107a84c7568daef9e7dd271fe708dd2ddf7bc381987746daf734600345ae339a6c9202088b0d938f59410d296df191a9b67b670d807028d0ac8ca54e1c5e2280b3648f03a1195b0fb674ddf5be5f85942a494e3b5b54e5f7bcb80c031d69aaa8570116cb04a2b4b09ec8aef0b1e3d751a3242cc881ef65e2eb6f1bd643b33b617efc5f338dd97c7c289251bbf0c624192b7b2f83f2a97780f31ec25c4aa2d017b78fb9fe11c947501a4a45c50b2d481d746b2fb58bcd5ba69e9e87d369af366eea901314906ccb1e634f5f3cfd62f720a33b92c6730d96895552b30f39e768d69a77f2905c2a3ccbb286b7d238f60b4d76121b53a2e96fc1ec8cf939ab0c9f042dff0a4e62c8a4899be1e3fafecd8cba5cc14e9f951f9d461deae3a4a097e87134d6aced77d0e7ceb72cc67bcc5e9e9a685a8b2cba9d2a106e10f200cd3fc4a2313f92fcee08421927dd187018e07a5d7d11f7b6c084461fc128159836605a60551270144caa95754a94ccfe37e5d3317f9351bd02efed0bc3f7dadeefb69b57784a1db9a63c220ed2582fd0e11ba8c70e8c4411a305e593b0290d0dae330f50c46a4375ae86af90a3aa814ba1f1a6b1613192a901ab9a624ba4b03c236d24aa28e4c42f4ce0efdbcbb4677361e7ca940580aaf28186742659a23e06415029f975c04885871f470cefd28c381c79af38fa3f3fc628040f39624879b10c3ff425e4671fb1a2cc551b33b574711870da22f68c99fb2e18fb3808ae220f1d31c32058fd939f9ec656bee348c82a92bb116637e4e5d0c7cbd98a47d4ac6cd4cbbfd48eb736ea29b49675314bd67992a56937fe931271ff6ed3dcfb6127ee72eb5e8ad802d84e436e7d2dfde947fca0148d39dc1994098c93848da9ab9812ac6b7f40c4819cddca957f464dd12047cf805f52d3e0579e2ace0dce9a78a74b2f049c5b2b9d90e52aff149b078d1ecc6c33c73a9912a69ec9937d6b49b0ae9eb44c99fdb277fc964bb55c392afa95611ffabec7ce55ad461eb1c3db4be68bab279c49499164b438cbfe039cb8aa5e2fcd666a5475a4433b2effa03a2bb12fd6daed9066c8b33d518f6f542a83a80e85de545c6890141cab7ffd73f3b9bb88de214edfc4b20aa02968fa365e8767eb1f711451675bebc406ac3550ab1096580212fb92acde297541fa03968b11fea7e562df1836e6aa0bd8d4997682012a84828632a9963709e27539a4f76ebddf5b25bbffa6ba4b26a26d6de1b59a17e08ee8948986c11088060bd974613cb9702664704a05e89b4fad567bf5a6ed563fd2ee879422919166dd46a76ce734acb3e8bf2caa61196c2353506a711ed6c31c25552cc6931c4d0a27f2495f08c80015aee683887e19910434fe8638c1203004d88418bb523612ec0e538240bf95337ab76dc6cf6457d5d676583db091b4c5c6b80d62dcb62ebfb919f1c1de8f43e5acfdd1c8809ef1975a5c3efd2ad29fcf33e431f202ff854d5543698b6ed93ea8212feac6ebe3e4455dfc22b0dc209001c66e2c709b0ec727a4704c26f441407e9ccf757bc1338ceb1eef9d450a3cf9d48bafb3245604fd9d065cada52ab4aa38769c9df36054a023d105118d35dc001ddfef79577f1fffb7dec54034c49f98e3e00b20a3a6efbda6f559cdd7b2ffa91066dcfa30301f93a0d23ad70b126ad7382db86593f0cc2125a3d7dcb47a48e395d4a15baa8a35391b447296bfe89e1cc00b19c669ba007035e113b486cdecb17398285a5103c9439a2de2ff94057f0ef1514ba704780d25176a8b38218f0f5a0edac6e671622a90f465bca157524c9942e49224402a174f416558e3843f4ad9f3934ab21e627e516894f1a7f45963fc9a6495042cb1cacedbfa9b621a4e49242434cc57860f357449fa95c821b379d93a60f53c92daef836b6ae09f4bc62e6df1ad73a9630b27fc3f296f7f0c9934bfa1e2118d0881bf9511bab1dbaa191d6e66c155bdecd22506abc4fa6e0bc493646808fe618ea9e67bea7be57276856faf2f3ce31d1b3652cde71b3653d06d3e11a7b84c3eda4966053eabab0e7081956b02bdb03f973d87032b07181180ace905c3f1f95d5a50448160beb2e0777483b6fc4ef4ad50ef7c10f93ceded29e809a62199fd98a456ec649248835df43af2d54dc43fd23b27099f8bf4b032a509c3bc0df79af291d37b97b447b62612762910b56739bfebd44664596958a1428c074aeea179ce3a9c7b0f559d9277e0b579940072e9adc07ee8dcbae94d1da3dae47d9fdba19326eb660a4bbf52d279b2683ea0f26d58184909af3c855ca17dda0a131aee7e3b2a02fdbf579c686caadf3903f28613049007070cea55233d4a8457c69095ab1ba9cfb76b63a8e7aa4a2c54952ad6356ffc9c700d1f5ac80b66b8c5ed4bfeb25ede4fc33debd7b87b5e0c67129d576c7095de46040c9a595038252bcde19e5aa3a0ebdeabd53018a6465dac07e4b26b51dc7a4ffc6025fee7a4170d6797076f97533fad22065209c49f28911a0cfd942dc9c3ea8c36cc1f8e6f5e122b030629d3c307492e4263d165acedec5990ae52457cc60d97db26de750fb192e91ccf2ea37aec447c456c1ede6f2e3e7be317fbcbd204df163c379c267c5fc36be54c1aee25cea4ff4645226fadb234f35865c213f5517c5a700761aa24c64baa223217ad8230984b149468e1e1c8b3fda7645cf2a19c9da853665348445cc60edbd468888a3fb55ad6e20785b83e8c93a87cfa5ded322ade440065f970085ec4068ef52013c849ec20dc78fffa13d29425b79bbfa8156a054c03675a57c51592cc08f5aee574f2557358bebe7603695694918e365c4675c6f2896fcf9e246adac11410e313f9fac2f53a784598746c13c63ca37a248bcea60c943d3ca5da32de3a38d3593c6e772fc92838e2db901005ca14e8b346c0114a0b75365b75521196f3af4b8a0cac95c1476e558e0656e992678e38107d7e92f6fd3db8335947c679d56015e1afa021bf69725ec09591616f35112f251f56162f6d30f3f778c878716e42"], &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={r4, 0x2007}, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="edfd01"], 0x10) [ 456.940828][T15001] binder: 14997:15001 unknown command 1090151173 [ 456.947777][T15001] binder: 14997:15001 ioctl c0306201 20000280 returned -22 19:52:53 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x8, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8) sendmmsg$sock(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@timestamping={{0x10, 0x1, 0x3d}}], 0x10}}], 0x2, 0x0) 19:52:53 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYBLOB="5801844715590a23354abe9d3790cc813c07007a0fa37fafd5", @ANYBLOB, @ANYBLOB], 0xfffffdef) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x7b, &(0x7f00000011c0)=ANY=[@ANYRES16=r1, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r0, @ANYRESDEC=r5, @ANYBLOB="716ce7c5216329a86a7ac2b0ee3b23ec74f617c0e74420bb8f4456afb2aa0f61c1bb13ce11cbf2b68a9cfb4334e1be45c25db5a6bf69d6534da944841dc82771f26465dee37740abbfddf7b795df8029f835aa416a70d10641053c92d74b90792a5e444cda40318dadd461c147fc6989cf12916366e7e101607c77f9c52cbe3ffab1b2aa7ed3bb132719d2302c36446c272c58f3ede34e864a7db9a1c9ec67e00e578e34a5c5afd52a76630f3d795a85399a117a2aaa80367b5c91583e3b239d6d68f3c6a4d4ca899d149ce544071942ac2784cff4198d15d917de3881db03e62d32ef68d25917cbf163689da2022e03700e33c2cabd488885d7c63562b67fefdbf76e4252b84561fb4a5b4d8f7a35b7f7e240ffa239d122544d8dfe1be6a309a37a278fc98e30ab0b76e65bf71dd5b8f5008894213c6b482eadbd3a8e8facca5a1761bd09613147f1ea8b5ce965c61d5663f64abcb3e2ea079d58f54ebf0a2fb1281bce3db1829e18437e67877201d2a9cb1cfd9eb29b6e9ec598cc60981d837319494ba4c638390d31bbd33b775e9a01877b8253ababeb6855a64d853891ca5f313380fc1fef93277e4f377301a903cb29a9823482fa8c7fcb83f957244a0fb076e3bc809fc1a6da8756080cc5287ad949c1872cee15375b5b2b5e4ef965f3778fe03aba376a990bd621697a2b7e1f2a409e3797211c848724b88f11ca3e2871bbdfa8c0556f6fb93ab8df29120faf9fd3b1274a785f0874d1cbb60802f7cd30974883c0ecdae78d35827ec2d92bd5d58a7006fb66b5e93e4bcb2a2f1d17ec851fb091931b6c50224b3424a475615e1652778d286b5cf6d485bcf9c1c7c038893d2917aee55b4c65c94d473072ac7e25c9e802135e6c12e26ef2311196d4c38ebc992dc89169250b9908ccad1fdee0e129bf09b47a1a86e351b5d89c63e950fe66655ef993566bc8600c3b2d05628aff0a739df0cd25309963102683037ad3620f7683c26610a761e08dcbf5c0ad1a2242da49a361a0222251811c34ca05222b8cf4405ae7013c502d8c579492668d20cf82ce1d09beb517c477eb55e20b8d77b97443fd46f746fbea33f6096b4f77c383360953408cebcc4a92f61b4cb07c18929a55fc1501fd1c10b710bd2144a4f5b4663c9c4e02b4ff6b6d045ac6bf5807c5f3435f1332a64ca7e86d2d5d2088fab9e17a4edba4f127e88096da23653d568595c9466dcc58412fd24b73f67eb71aca3dcb507f08b09af3c7692ed37b4ff94c58b29143097888c8caea4fe74fc9c31651ba6a34da98d3c9d4975c5ae938f743e6c86ae6c20b716ead9e3e63803fb4f4b12211dc7e5d0820555bfa373514b21bd8b14e736b3d7417cb989985d6239f7e0d15355dd5ae6df9aced64134420336b8d7e10dc9bad53de25bd94926406a9a60e48eb06d26a91f67b1290265dc6bf53507eed0d9de53467fcebecffe6d6b6203ba9c6f7d276127ee48a1a547b00eda740b6a815e6677223539ebc43c689c6d91ac643114c5d58486e060a2314bb33d6ef217307e80d8a21d5e82fd9e5ea98a6fd8a647b97b9ca0537fa376b869243da61a1d0be4b5e2ce0c7a9a9ead2051007addf42a575412a0de5db4e6ac4ae4f634dfdb82b6696e51c728a4259a950da6a535318462d48c354f3f90767d3d5e974a8e4d5d684fce307ed790dbdb8008b6ed00e34c7dc96912d676f66fe9b0a7cdd0c5f086d29e427566785cda6b65add9a1eeb0fbb854eac6749dc2f6e4865e038abd5a69f83e04875c55a0c42f32649f27542f92a627eff08b6c2207de3636d0f0407dc42719aca9e32a818f2b05cd132f0414c133e3649448d7fef66d348e62ca3fe0fd69f33579f4ad94ac86e9d42c8f1e318493709b9f33f8869c266f115ba1975ae454d9c8be4a0039971b1358bb5a40d2b32bcffd2020c2bcb3b665ca30de9fad15bc192a4fefc406687e34a1679e3b5e25da917a8bed7e3f65966ea97ab5da9f444a29251e11da3fc930eb963b69fea4bbae065015321cc5001b2b116cdadb3664bed7aefacc1215728efce8ecaeef6bf79c8ace4639ec89d72fa0e862138167c011f1ec56479da66e4b6b6d4b9a95dde101dc3d7efbf965949f6b0a7364daf2f18330e17765198c37f380c7b32f31509813756a91c0d21b5f67beb6930bbe028bc36d4edada7f425a1bc98581e3116e45aa07abb1ffa2ce04d076278a9e33eb4b751b24e14dd2705c58a72c6f341d95ce4850c2d048caeec8fe9a109d04701c0b4f78ae7deb1d31bcec910982302057c80b0df9307f63029f6377088dc34921ac818f066ceedf82ab2121d7ddeb7b0f2a3d2d31188881694e187d1f156308ccac9c41c3afc5d9326bce32cc4b271a1ba41a1fbdbc0e727c6114e418f53d813f134c86a86d63c50a636eb4b571358112ffe05b87f27a6f98ddeba32a8f06cbfb50bd7f48cac0d47b270770b1633007abcf242492bab3fc8452b93061922b7628945a603e0497a02ef029ad01afb8966f65d61f7620b7059ff975421802416c9eb8e7d1a5e96961ade6df6075a3a3fefa70553c702541c0df2c1ac3975657d39840d3fc7d023a5c7d397a8e4fd9695f3f93906fd1997f10c954e2a6bab72c9e878dfc5cd82f25e99f1e0b532947f13402b2333f6939ea1d150fe3136209c2bde47ee1b7a7dc5b00e23d95308a2781d80a558ff6135f44edc5ffdfaf84a20ddc68792d729725c61d3df027fca99e23a49d502d37d107a84c7568daef9e7dd271fe708dd2ddf7bc381987746daf734600345ae339a6c9202088b0d938f59410d296df191a9b67b670d807028d0ac8ca54e1c5e2280b3648f03a1195b0fb674ddf5be5f85942a494e3b5b54e5f7bcb80c031d69aaa8570116cb04a2b4b09ec8aef0b1e3d751a3242cc881ef65e2eb6f1bd643b33b617efc5f338dd97c7c289251bbf0c624192b7b2f83f2a97780f31ec25c4aa2d017b78fb9fe11c947501a4a45c50b2d481d746b2fb58bcd5ba69e9e87d369af366eea901314906ccb1e634f5f3cfd62f720a33b92c6730d96895552b30f39e768d69a77f2905c2a3ccbb286b7d238f60b4d76121b53a2e96fc1ec8cf939ab0c9f042dff0a4e62c8a4899be1e3fafecd8cba5cc14e9f951f9d461deae3a4a097e87134d6aced77d0e7ceb72cc67bcc5e9e9a685a8b2cba9d2a106e10f200cd3fc4a2313f92fcee08421927dd187018e07a5d7d11f7b6c084461fc128159836605a60551270144caa95754a94ccfe37e5d3317f9351bd02efed0bc3f7dadeefb69b57784a1db9a63c220ed2582fd0e11ba8c70e8c4411a305e593b0290d0dae330f50c46a4375ae86af90a3aa814ba1f1a6b1613192a901ab9a624ba4b03c236d24aa28e4c42f4ce0efdbcbb4677361e7ca940580aaf28186742659a23e06415029f975c04885871f470cefd28c381c79af38fa3f3fc628040f39624879b10c3ff425e4671fb1a2cc551b33b574711870da22f68c99fb2e18fb3808ae220f1d31c32058fd939f9ec656bee348c82a92bb116637e4e5d0c7cbd98a47d4ac6cd4cbbfd48eb736ea29b49675314bd67992a56937fe931271ff6ed3dcfb6127ee72eb5e8ad802d84e436e7d2dfde947fca0148d39dc1994098c93848da9ab9812ac6b7f40c4819cddca957f464dd12047cf805f52d3e0579e2ace0dce9a78a74b2f049c5b2b9d90e52aff149b078d1ecc6c33c73a9912a69ec9937d6b49b0ae9eb44c99fdb277fc964bb55c392afa95611ffabec7ce55ad461eb1c3db4be68bab279c49499164b438cbfe039cb8aa5e2fcd666a5475a4433b2effa03a2bb12fd6daed9066c8b33d518f6f542a83a80e85de545c6890141cab7ffd73f3b9bb88de214edfc4b20aa02968fa365e8767eb1f711451675bebc406ac3550ab1096580212fb92acde297541fa03968b11fea7e562df1836e6aa0bd8d4997682012a84828632a9963709e27539a4f76ebddf5b25bbffa6ba4b26a26d6de1b59a17e08ee8948986c11088060bd974613cb9702664704a05e89b4fad567bf5a6ed563fd2ee879422919166dd46a76ce734acb3e8bf2caa61196c2353506a711ed6c31c25552cc6931c4d0a27f2495f08c80015aee683887e19910434fe8638c1203004d88418bb523612ec0e538240bf95337ab76dc6cf6457d5d676583db091b4c5c6b80d62dcb62ebfb919f1c1de8f43e5acfdd1c8809ef1975a5c3efd2ad29fcf33e431f202ff854d5543698b6ed93ea8212feac6ebe3e4455dfc22b0dc209001c66e2c709b0ec727a4704c26f441407e9ccf757bc1338ceb1eef9d450a3cf9d48bafb3245604fd9d065cada52ab4aa38769c9df36054a023d105118d35dc001ddfef79577f1fffb7dec54034c49f98e3e00b20a3a6efbda6f559cdd7b2ffa91066dcfa30301f93a0d23ad70b126ad7382db86593f0cc2125a3d7dcb47a48e395d4a15baa8a35391b447296bfe89e1cc00b19c669ba007035e113b486cdecb17398285a5103c9439a2de2ff94057f0ef1514ba704780d25176a8b38218f0f5a0edac6e671622a90f465bca157524c9942e49224402a174f416558e3843f4ad9f3934ab21e627e516894f1a7f45963fc9a6495042cb1cacedbfa9b621a4e49242434cc57860f357449fa95c821b379d93a60f53c92daef836b6ae09f4bc62e6df1ad73a9630b27fc3f296f7f0c9934bfa1e2118d0881bf9511bab1dbaa191d6e66c155bdecd22506abc4fa6e0bc493646808fe618ea9e67bea7be57276856faf2f3ce31d1b3652cde71b3653d06d3e11a7b84c3eda4966053eabab0e7081956b02bdb03f973d87032b07181180ace905c3f1f95d5a50448160beb2e0777483b6fc4ef4ad50ef7c10f93ceded29e809a62199fd98a456ec649248835df43af2d54dc43fd23b27099f8bf4b032a509c3bc0df79af291d37b97b447b62612762910b56739bfebd44664596958a1428c074aeea179ce3a9c7b0f559d9277e0b579940072e9adc07ee8dcbae94d1da3dae47d9fdba19326eb660a4bbf52d279b2683ea0f26d58184909af3c855ca17dda0a131aee7e3b2a02fdbf579c686caadf3903f28613049007070cea55233d4a8457c69095ab1ba9cfb76b63a8e7aa4a2c54952ad6356ffc9c700d1f5ac80b66b8c5ed4bfeb25ede4fc33debd7b87b5e0c67129d576c7095de46040c9a595038252bcde19e5aa3a0ebdeabd53018a6465dac07e4b26b51dc7a4ffc6025fee7a4170d6797076f97533fad22065209c49f28911a0cfd942dc9c3ea8c36cc1f8e6f5e122b030629d3c307492e4263d165acedec5990ae52457cc60d97db26de750fb192e91ccf2ea37aec447c456c1ede6f2e3e7be317fbcbd204df163c379c267c5fc36be54c1aee25cea4ff4645226fadb234f35865c213f5517c5a700761aa24c64baa223217ad8230984b149468e1e1c8b3fda7645cf2a19c9da853665348445cc60edbd468888a3fb55ad6e20785b83e8c93a87cfa5ded322ade440065f970085ec4068ef52013c849ec20dc78fffa13d29425b79bbfa8156a054c03675a57c51592cc08f5aee574f2557358bebe7603695694918e365c4675c6f2896fcf9e246adac11410e313f9fac2f53a784598746c13c63ca37a248bcea60c943d3ca5da32de3a38d3593c6e772fc92838e2db901005ca14e8b346c0114a0b75365b75521196f3af4b8a0cac95c1476e558e0656e992678e38107d7e92f6fd3db8335947c679d56015e1afa021bf69725ec09591616f35112f251f56162f6d30f3f778c878716e42"], &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={r4, 0x2007}, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="edfd01"], 0x10) 19:52:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="254b3f49c620", 0x0, 0xffffffff, 0x0, 0x0, 0x0}) 19:52:54 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x8, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8) sendmmsg$sock(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@timestamping={{0x10, 0x1, 0x3d}}], 0x10}}], 0x2, 0x0) 19:52:54 executing program 4: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000a4a000/0x2000)=nil, 0x2000, 0x0, r1) 19:52:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="254b3f49c620", 0x0, 0xffffffff, 0x0, 0x0, 0x0}) 19:52:54 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000d4000000d4000000030000000b0000000000000e0400000001007320d1691340e79bd300001000000000000008030400000f00000004000084070000000f00000005000000390000000600000002000000000000000a00000000000000070000000700000001000000000001000700000000000001000000001b002a0203000000020000055370000003000000050000003bb600000600000005000015040000000000000002000004ffff00000600000005000000020000000500000002000000000400000400000000000007000000000d00000000000008030000088433a9f00857c25c561d5ce8d6894a3a2ff04ae41c4b2f85a59aaaab12b6a63ce581e168d6b11fe6d76e37063ae3ea3363917893ab532bd6405416eae179333092bbe22fc9c814797d5a8efe41ea565cb15829945fe28a9d41dc2057380730b21f6c4480138ec011fad4856caaf5e36fa67323489931ecc1e0d2f528df408fae4a94aed235d99609804d6fa6f8305edd7848c6bc1c95961c3e3c1dc8d4bfccbb52e9ce06f8b0b1e58621d4206c3b8c98369a544cd71355f929298067753d2c3ddc6811564c0a8b92a4e40de27e8076"], &(0x7f0000000340)=""/84, 0xef, 0x54}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:52:54 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x8, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8) sendmmsg$sock(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@timestamping={{0x10, 0x1, 0x3d}}], 0x10}}], 0x2, 0x0) 19:52:54 executing program 2: io_setup(0x5, &(0x7f0000000300)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r0, 0x0, &(0x7f0000000080)) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) close(r1) 19:52:54 executing program 5: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYBLOB="5801844715590a23354abe9d3790cc813c07007a0fa37fafd5", @ANYBLOB, @ANYBLOB], 0xfffffdef) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x7b, &(0x7f00000011c0)=ANY=[@ANYRES16=r1, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r0, @ANYRESDEC=r5, @ANYBLOB="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"], &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={r4, 0x2007}, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="edfd01"], 0x10) [ 458.499366][T15034] binder: 15033:15034 unknown command 1090151173 [ 458.506611][T15034] binder: 15033:15034 ioctl c0306201 20000280 returned -22 19:52:55 executing program 0: sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fcdbdf25160001000100000004000200040002"], 0x3}}, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="ac0000000001190500000000000000000a0000003c0001002c0001001400030016f8bcd383af9b1577def13edad6b8bf14000400fe8000000000000000000000000000bb0c00020005000100000000003c0002000c00020005000100000000002c000100140003800000000000000000000000000000000014000400ff010000000000000000000000000001080007000000000018000600140003"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 19:52:55 executing program 2: io_setup(0x5, &(0x7f0000000300)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r0, 0x0, &(0x7f0000000080)) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) close(r1) 19:52:55 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYBLOB="5801844715590a23354abe9d3790cc813c07007a0fa37fafd5", @ANYBLOB, @ANYBLOB], 0xfffffdef) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x7b, &(0x7f00000011c0)=ANY=[@ANYRES16=r1, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r0, @ANYRESDEC=r5, @ANYBLOB="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"], &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={r4, 0x2007}, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="edfd01"], 0x10) 19:52:55 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000d4000000d4000000030000000b0000000000000e0400000001007320d1691340e79bd300001000000000000008030400000f00000004000084070000000f00000005000000390000000600000002000000000000000a00000000000000070000000700000001000000000001000700000000000001000000001b002a0203000000020000055370000003000000050000003bb600000600000005000015040000000000000002000004ffff00000600000005000000020000000500000002000000000400000400000000000007000000000d00000000000008030000088433a9f00857c25c561d5ce8d6894a3a2ff04ae41c4b2f85a59aaaab12b6a63ce581e168d6b11fe6d76e37063ae3ea3363917893ab532bd6405416eae179333092bbe22fc9c814797d5a8efe41ea565cb15829945fe28a9d41dc2057380730b21f6c4480138ec011fad4856caaf5e36fa67323489931ecc1e0d2f528df408fae4a94aed235d99609804d6fa6f8305edd7848c6bc1c95961c3e3c1dc8d4bfccbb52e9ce06f8b0b1e58621d4206c3b8c98369a544cd71355f929298067753d2c3ddc6811564c0a8b92a4e40de27e8076"], &(0x7f0000000340)=""/84, 0xef, 0x54}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) [ 458.890933][T15054] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 19:52:55 executing program 2: io_setup(0x5, &(0x7f0000000300)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r0, 0x0, &(0x7f0000000080)) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) close(r1) 19:52:55 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) [ 459.911381][T15074] binder: 15070:15074 unknown command 1090151173 [ 459.918092][T15074] binder: 15070:15074 ioctl c0306201 20000280 returned -22 19:52:56 executing program 4: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000a4a000/0x2000)=nil, 0x2000, 0x0, r1) 19:52:56 executing program 2: io_setup(0x5, &(0x7f0000000300)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r0, 0x0, &(0x7f0000000080)) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) close(r1) 19:52:56 executing program 0: sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fcdbdf25160001000100000004000200040002"], 0x3}}, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="ac0000000001190500000000000000000a0000003c0001002c0001001400030016f8bcd383af9b1577def13edad6b8bf14000400fe8000000000000000000000000000bb0c00020005000100000000003c0002000c00020005000100000000002c000100140003800000000000000000000000000000000014000400ff010000000000000000000000000001080007000000000018000600140003"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 19:52:56 executing program 5: unshare(0x2040400) r0 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r0, 0x0) 19:52:56 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f00000011c0)={'syz1', "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"}, 0x1004) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) [ 460.458443][T15093] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 19:52:57 executing program 2: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000a4a000/0x2000)=nil, 0x2000, 0x0, r1) 19:52:57 executing program 5: unshare(0x2040400) r0 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r0, 0x0) 19:52:57 executing program 5: unshare(0x2040400) r0 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r0, 0x0) 19:52:57 executing program 5: unshare(0x2040400) r0 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r0, 0x0) 19:52:57 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:52:57 executing program 0: sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fcdbdf25160001000100000004000200040002"], 0x3}}, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="ac0000000001190500000000000000000a0000003c0001002c0001001400030016f8bcd383af9b1577def13edad6b8bf14000400fe8000000000000000000000000000bb0c00020005000100000000003c0002000c00020005000100000000002c000100140003800000000000000000000000000000000014000400ff010000000000000000000000000001080007000000000018000600140003"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 19:52:57 executing program 5: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000a4a000/0x2000)=nil, 0x2000, 0x0, r1) [ 461.577697][T15115] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 461.662589][T15118] binder: 15108:15118 unknown command 1090151173 [ 461.669478][T15118] binder: 15108:15118 ioctl c0306201 20000280 returned -22 19:52:59 executing program 4: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000a4a000/0x2000)=nil, 0x2000, 0x0, r1) 19:52:59 executing program 0: sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fcdbdf25160001000100000004000200040002"], 0x3}}, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="ac0000000001190500000000000000000a0000003c0001002c0001001400030016f8bcd383af9b1577def13edad6b8bf14000400fe8000000000000000000000000000bb0c00020005000100000000003c0002000c00020005000100000000002c000100140003800000000000000000000000000000000014000400ff010000000000000000000000000001080007000000000018000600140003"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 19:52:59 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f00000011c0)={'syz1', "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"}, 0x1004) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 19:52:59 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000d4000000d4000000030000000b0000000000000e0400000001007320d1691340e79bd300001000000000000008030400000f00000004000084070000000f00000005000000390000000600000002000000000000000a00000000000000070000000700000001000000000001000700000000000001000000001b002a0203000000020000055370000003000000050000003bb600000600000005000015040000000000000002000004ffff00000600000005000000020000000500000002000000000400000400000000000007000000000d00000000000008030000088433a9f00857c25c561d5ce8d6894a3a2ff04ae41c4b2f85a59aaaab12b6a63ce581e168d6b11fe6d76e37063ae3ea3363917893ab532bd6405416eae179333092bbe22fc9c814797d5a8efe41ea565cb15829945fe28a9d41dc2057380730b21f6c4480138ec011fad4856caaf5e36fa67323489931ecc1e0d2f528df408fae4a94aed235d99609804d6fa6f8305edd7848c6bc1c95961c3e3c1dc8d4bfccbb52e9ce06f8b0b1e58621d4206c3b8c98369a544cd71355f929298067753d2c3ddc6811564c0a8b92a4e40de27e8076"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) [ 463.253930][T15138] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 463.457475][T15141] binder: 15126:15141 unknown command 1090151173 [ 463.464076][T15141] binder: 15126:15141 ioctl c0306201 20000280 returned -22 19:53:00 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:53:00 executing program 2: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000a4a000/0x2000)=nil, 0x2000, 0x0, r1) 19:53:00 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f00000011c0)={'syz1', "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"}, 0x1004) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 19:53:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x5c, 0x0, 0x0, 0xfffffffffffffe99) 19:53:01 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, 0xffffffffffffffff, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r4, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, r5) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) [ 465.056617][T15166] binder: 15163:15166 unknown command 1090151173 [ 465.063335][T15166] binder: 15163:15166 ioctl c0306201 20000280 returned -22 19:53:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x5c, 0x0, 0x0, 0xfffffffffffffe99) 19:53:02 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f00000011c0)={'syz1', "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"}, 0x1004) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 19:53:02 executing program 5: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000a4a000/0x2000)=nil, 0x2000, 0x0, r1) 19:53:03 executing program 4: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000a4a000/0x2000)=nil, 0x2000, 0x0, r1) 19:53:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x5c, 0x0, 0x0, 0xfffffffffffffe99) 19:53:03 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, 0xffffffffffffffff, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r4, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, r5) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) [ 466.952148][T15203] binder: 15195:15203 unknown command 1090151173 [ 466.958856][T15203] binder: 15195:15203 ioctl c0306201 20000280 returned -22 19:53:03 executing program 2: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000a4a000/0x2000)=nil, 0x2000, 0x0, r1) 19:53:04 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000d4000000d4000000030000000b0000000000000e0400000001007320d1691340e79bd300001000000000000008030400000f00000004000084070000000f00000005000000390000000600000002000000000000000a00000000000000070000000700000001000000000001000700000000000001000000001b002a0203000000020000055370000003000000050000003bb600000600000005000015040000000000000002000004ffff00000600000005000000020000000500000002000000000400000400000000000007000000000d00000000000008030000088433a9f00857c25c561d5ce8d6894a3a2ff04ae41c4b2f85a59aaaab12b6a63ce581e168d6b11fe6d76e37063ae3ea3363917893ab532bd6405416eae179333092bbe22fc9c814797d5a8efe41ea565cb15829945fe28a9d41dc2057380730b21f6c4480138ec011fad4856caaf5e36fa67323489931ecc1e0d2f528df408fae4a94aed235d99609804d6fa6f8305edd7848c6bc1c95961c3e3c1dc8d4bfccbb52e9ce06f8b0b1e58621d4206c3b8c98369a544cd71355f929298067753d2c3ddc6811564c0a8b92a4e40de27e8076"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, 0xffffffffffffffff, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r4, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, r5) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:53:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x5c, 0x0, 0x0, 0xfffffffffffffe99) 19:53:04 executing program 3: r0 = memfd_create(&(0x7f00000001c0)='\vem5\xc1#*\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xa2\xf0\xa6\xb6\xbf\xb1\x00\xf0\x97zR\xe2r\x04\x15b\xd0\xa9`\xbc\xad\x1f\xb7\xde\xf3k\xdcw\xab\xe9[>)6;\xabi\xf0\xee\xaa\xa8$\x15O', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'dh\x00'}, 0x2c) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) [ 468.166300][T15223] IPVS: Scheduler module ip_vs_ not found 19:53:04 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:53:04 executing program 3: r0 = memfd_create(&(0x7f00000001c0)='\vem5\xc1#*\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xa2\xf0\xa6\xb6\xbf\xb1\x00\xf0\x97zR\xe2r\x04\x15b\xd0\xa9`\xbc\xad\x1f\xb7\xde\xf3k\xdcw\xab\xe9[>)6;\xabi\xf0\xee\xaa\xa8$\x15O', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'dh\x00'}, 0x2c) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 19:53:05 executing program 0: r0 = memfd_create(&(0x7f00000001c0)='\vem5\xc1#*\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xa2\xf0\xa6\xb6\xbf\xb1\x00\xf0\x97zR\xe2r\x04\x15b\xd0\xa9`\xbc\xad\x1f\xb7\xde\xf3k\xdcw\xab\xe9[>)6;\xabi\xf0\xee\xaa\xa8$\x15O', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'dh\x00'}, 0x2c) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) [ 468.802874][T15231] binder: 15229:15231 unknown command 1090151173 [ 468.809585][T15231] binder: 15229:15231 ioctl c0306201 20000280 returned -22 [ 468.882886][T15234] IPVS: Scheduler module ip_vs_ not found [ 469.299808][T15236] IPVS: Scheduler module ip_vs_ not found 19:53:05 executing program 0: r0 = memfd_create(&(0x7f00000001c0)='\vem5\xc1#*\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xa2\xf0\xa6\xb6\xbf\xb1\x00\xf0\x97zR\xe2r\x04\x15b\xd0\xa9`\xbc\xad\x1f\xb7\xde\xf3k\xdcw\xab\xe9[>)6;\xabi\xf0\xee\xaa\xa8$\x15O', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'dh\x00'}, 0x2c) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) [ 469.732565][T15243] IPVS: Scheduler module ip_vs_ not found 19:53:06 executing program 5: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x387b1d0849878266, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000a4a000/0x2000)=nil, 0x2000, 0x0, r1) 19:53:06 executing program 0: r0 = memfd_create(&(0x7f00000001c0)='\vem5\xc1#*\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xa2\xf0\xa6\xb6\xbf\xb1\x00\xf0\x97zR\xe2r\x04\x15b\xd0\xa9`\xbc\xad\x1f\xb7\xde\xf3k\xdcw\xab\xe9[>)6;\xabi\xf0\xee\xaa\xa8$\x15O', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'dh\x00'}, 0x2c) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 19:53:06 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x22, &(0x7f0000000040)=r0, 0x52d) 19:53:06 executing program 3: r0 = memfd_create(&(0x7f00000001c0)='\vem5\xc1#*\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xa2\xf0\xa6\xb6\xbf\xb1\x00\xf0\x97zR\xe2r\x04\x15b\xd0\xa9`\xbc\xad\x1f\xb7\xde\xf3k\xdcw\xab\xe9[>)6;\xabi\xf0\xee\xaa\xa8$\x15O', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'dh\x00'}, 0x2c) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 19:53:06 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000d4000000d4000000030000000b0000000000000e0400000001007320d1691340e79bd300001000000000000008030400000f00000004000084070000000f00000005000000390000000600000002000000000000000a00000000000000070000000700000001000000000001000700000000000001000000001b002a0203000000020000055370000003000000050000003bb600000600000005000015040000000000000002000004ffff00000600000005000000020000000500000002000000000400000400000000000007000000000d00000000000008030000088433a9f00857c25c561d5ce8d6894a3a2ff04ae41c4b2f85a59aaaab12b6a63ce581e168d6b11fe6d76e37063ae3ea3363917893ab532bd6405416eae179333092bbe22fc9c814797d5a8efe41ea565cb15829945fe28a9d41dc2057380730b21f6c4480138ec011fad4856caaf5e36fa67323489931ecc1e0d2f528df408fae4a94aed235d99609804d6fa6f8305edd7848c6bc1c95961c3e3c1dc8d4bfccbb52e9ce06f8b0b1e58621d4206c3b8c98369a544cd71355f929298067753d2c3ddc6811564c0a8b92a4e40de27e8076"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:53:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x1c, 0xffffffff}]}}}]}, 0x3c}}, 0x0) [ 470.372660][T15256] IPVS: Scheduler module ip_vs_ not found 19:53:06 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x22, &(0x7f0000000040)=r0, 0x52d) [ 470.536380][T15257] IPVS: Scheduler module ip_vs_ not found [ 470.580015][T15266] (unnamed net_device) (uninitialized): option peer_notif_delay: invalid value (18446744073709551615) [ 470.592150][T15266] (unnamed net_device) (uninitialized): option peer_notif_delay: allowed values 0 - 2147483647 [ 470.713891][T15269] binder: 15262:15269 unknown command 1090151173 [ 470.720770][T15269] binder: 15262:15269 ioctl c0306201 20000280 returned -22 19:53:07 executing program 3: r0 = memfd_create(&(0x7f00000001c0)='\vem5\xc1#*\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xa2\xf0\xa6\xb6\xbf\xb1\x00\xf0\x97zR\xe2r\x04\x15b\xd0\xa9`\xbc\xad\x1f\xb7\xde\xf3k\xdcw\xab\xe9[>)6;\xabi\xf0\xee\xaa\xa8$\x15O', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'dh\x00'}, 0x2c) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 19:53:07 executing program 0: r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r0, 0x6d0, 0x2, r3}) r4 = dup3(r2, r1, 0x0) unshare(0x2040400) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000080)={r3, 0x0, 0x2, r0}) 19:53:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x1c, 0xffffffff}]}}}]}, 0x3c}}, 0x0) 19:53:07 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x22, &(0x7f0000000040)=r0, 0x52d) 19:53:07 executing program 0: r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r0, 0x6d0, 0x2, r3}) r4 = dup3(r2, r1, 0x0) unshare(0x2040400) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000080)={r3, 0x0, 0x2, r0}) [ 471.387302][T15278] IPVS: Scheduler module ip_vs_ not found [ 471.510448][T15284] (unnamed net_device) (uninitialized): option peer_notif_delay: invalid value (18446744073709551615) [ 471.522450][T15284] (unnamed net_device) (uninitialized): option peer_notif_delay: allowed values 0 - 2147483647 19:53:08 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:53:08 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 19:53:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x1c, 0xffffffff}]}}}]}, 0x3c}}, 0x0) 19:53:08 executing program 3: r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r0, 0x6d0, 0x2, r3}) r4 = dup3(r2, r1, 0x0) unshare(0x2040400) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000080)={r3, 0x0, 0x2, r0}) 19:53:08 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x22, &(0x7f0000000040)=r0, 0x52d) 19:53:08 executing program 0: r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r0, 0x6d0, 0x2, r3}) r4 = dup3(r2, r1, 0x0) unshare(0x2040400) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000080)={r3, 0x0, 0x2, r0}) [ 472.393299][T15300] (unnamed net_device) (uninitialized): option peer_notif_delay: invalid value (18446744073709551615) [ 472.405652][T15300] (unnamed net_device) (uninitialized): option peer_notif_delay: allowed values 0 - 2147483647 [ 472.750052][T15316] binder: 15301:15316 unknown command 1090151173 [ 472.756517][T15316] binder: 15301:15316 ioctl c0306201 20000280 returned -22 19:53:09 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="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", 0x5fa}], 0x1}, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r1, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x104, 0x7}, 0x60, &(0x7f0000000140)=[{&(0x7f00000027c0)="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", 0x5}, {&(0x7f0000000840)='\x00', 0x49ed}], 0x2, 0x0, 0x0, 0x1a0}, 0xe869) 19:53:09 executing program 0: r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r0, 0x6d0, 0x2, r3}) r4 = dup3(r2, r1, 0x0) unshare(0x2040400) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000080)={r3, 0x0, 0x2, r0}) 19:53:09 executing program 3: r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r0, 0x6d0, 0x2, r3}) r4 = dup3(r2, r1, 0x0) unshare(0x2040400) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000080)={r3, 0x0, 0x2, r0}) 19:53:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x1c, 0xffffffff}]}}}]}, 0x3c}}, 0x0) [ 473.315474][T15329] (unnamed net_device) (uninitialized): option peer_notif_delay: invalid value (18446744073709551615) [ 473.327340][T15329] (unnamed net_device) (uninitialized): option peer_notif_delay: allowed values 0 - 2147483647 19:53:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) clone(0x48381000, &(0x7f00000002c0)="191cca67b61199136686649f3ce41d17d3", &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="e22f271eb5c133423e371e714cc74bf4c65f029b895ce835a35b5e0429568098a450901841be5f36496cb96cd3b388c00f33fd3b15684ea6172f78e4c12129381e83d79d58ddfe9c172208fcf3e62c168e7026713dc9c0e3e8c4a4dc") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nf_conntrack\x00') r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x31, 0x0, 0x0) timerfd_gettime(r2, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x80000000, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000640)=""/4093, 0xffd}], 0x1, 0x0) 19:53:10 executing program 3: r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r0, 0x6d0, 0x2, r3}) r4 = dup3(r2, r1, 0x0) unshare(0x2040400) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000080)={r3, 0x0, 0x2, r0}) 19:53:10 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xff2b) fcntl$setpipe(r0, 0x407, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$midi(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/84, 0xef, 0x54, 0x1}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r4, 0xca975000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000040)) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0xffff, 0x8001, 0x1000}, &(0x7f0000000100)=0x10) sendfile(r1, r2, 0x0, 0xedc0) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = dup2(r6, r5) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563fa4000a62846e7ca7b63"], 0x0, 0x0, 0x0}) 19:53:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) clone(0x48381000, &(0x7f00000002c0)="191cca67b61199136686649f3ce41d17d3", &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="e22f271eb5c133423e371e714cc74bf4c65f029b895ce835a35b5e0429568098a450901841be5f36496cb96cd3b388c00f33fd3b15684ea6172f78e4c12129381e83d79d58ddfe9c172208fcf3e62c168e7026713dc9c0e3e8c4a4dc") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nf_conntrack\x00') r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x31, 0x0, 0x0) timerfd_gettime(r2, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x80000000, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000640)=""/4093, 0xffd}], 0x1, 0x0) 19:53:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) clone(0x48381000, &(0x7f00000002c0)="191cca67b61199136686649f3ce41d17d3", &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="e22f271eb5c133423e371e714cc74bf4c65f029b895ce835a35b5e0429568098a450901841be5f36496cb96cd3b388c00f33fd3b15684ea6172f78e4c12129381e83d79d58ddfe9c172208fcf3e62c168e7026713dc9c0e3e8c4a4dc") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nf_conntrack\x00') r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x31, 0x0, 0x0) timerfd_gettime(r2, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x80000000, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000640)=""/4093, 0xffd}], 0x1, 0x0) 19:53:10 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 19:53:10 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="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", 0x5fa}], 0x1}, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r1, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x104, 0x7}, 0x60, &(0x7f0000000140)=[{&(0x7f00000027c0)="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", 0x5}, {&(0x7f0000000840)='\x00', 0x49ed}], 0x2, 0x0, 0x0, 0x1a0}, 0xe869) [ 474.220820][T15351] ===================================================== [ 474.226723][T15351] BUG: KMSAN: uninit-value in packet_rcv_fanout+0x2442/0x25c0 [ 474.226723][T15351] CPU: 1 PID: 15351 Comm: syz-executor.5 Not tainted 5.7.0-rc4-syzkaller #0 [ 474.226723][T15351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 474.226723][T15351] Call Trace: [ 474.226723][T15351] dump_stack+0x1c9/0x220 [ 474.226723][T15351] kmsan_report+0xf7/0x1e0 [ 474.226723][T15351] __msan_warning+0x58/0xa0 [ 474.226723][T15351] packet_rcv_fanout+0x2442/0x25c0 [ 474.226723][T15351] ? __skb_clone+0x939/0x970 [ 474.226723][T15351] ? skb_clone+0x404/0x5d0 [ 474.226723][T15351] ? kmsan_get_metadata+0x11d/0x180 [ 474.226723][T15351] ? packet_direct_xmit+0x470/0x470 [ 474.226723][T15351] dev_queue_xmit_nit+0x1199/0x1270 [ 474.226723][T15351] dev_hard_start_xmit+0x20f/0xab0 [ 474.226723][T15351] ? kmsan_get_metadata+0x11d/0x180 [ 474.226723][T15351] __dev_queue_xmit+0x2f8d/0x3b20 [ 474.226723][T15351] ? kmsan_get_metadata+0x11d/0x180 [ 474.226723][T15351] ? skb_clone+0x404/0x5d0 [ 474.226723][T15351] dev_queue_xmit+0x4b/0x60 [ 474.226723][T15351] netlink_deliver_tap+0x9d4/0xea0 [ 474.226723][T15351] ? __netlink_lookup+0x8b9/0x980 [ 474.226723][T15351] ? kmsan_set_origin_checked+0x95/0xf0 [ 474.226723][T15351] netlink_unicast+0xe87/0x1100 [ 474.226723][T15351] netlink_sendmsg+0x1246/0x14d0 [ 474.226723][T15351] ? netlink_getsockopt+0x1440/0x1440 [ 474.226723][T15351] ____sys_sendmsg+0x12b6/0x1350 [ 474.226723][T15351] __sys_sendmsg+0x623/0x750 [ 474.226723][T15351] ? kmsan_copy_to_user+0x81/0x90 [ 474.226723][T15351] ? kmsan_get_metadata+0x11d/0x180 [ 474.226723][T15351] ? kmsan_get_metadata+0x11d/0x180 [ 474.226723][T15351] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 474.226723][T15351] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 474.226723][T15351] ? prepare_exit_to_usermode+0x1ca/0x520 [ 474.226723][T15351] __se_sys_sendmsg+0x97/0xb0 [ 474.226723][T15351] __x64_sys_sendmsg+0x4a/0x70 [ 474.226723][T15351] do_syscall_64+0xb8/0x160 [ 474.226723][T15351] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 474.226723][T15351] RIP: 0033:0x45ca29 [ 474.226723][T15351] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 474.226723][T15351] RSP: 002b:00007f457faf9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 474.226723][T15351] RAX: ffffffffffffffda RBX: 00000000004fd8c0 RCX: 000000000045ca29 [ 474.226723][T15351] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 474.226723][T15351] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 474.226723][T15351] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 474.226723][T15351] R13: 000000000000092a R14: 00000000004cbe77 R15: 00007f457fafa6d4 [ 474.226723][T15351] [ 474.226723][T15351] Uninit was stored to memory at: [ 474.226723][T15351] kmsan_internal_chain_origin+0xad/0x130 [ 474.226723][T15351] __msan_chain_origin+0x50/0x90 [ 474.226723][T15351] ___bpf_prog_run+0x6c64/0x97a0 [ 474.226723][T15351] __bpf_prog_run32+0x101/0x170 [ 474.226723][T15351] packet_rcv_fanout+0x51e/0x25c0 [ 474.226723][T15351] dev_queue_xmit_nit+0x1199/0x1270 [ 474.226723][T15351] dev_hard_start_xmit+0x20f/0xab0 [ 474.226723][T15351] __dev_queue_xmit+0x2f8d/0x3b20 [ 474.226723][T15351] dev_queue_xmit+0x4b/0x60 [ 474.226723][T15351] netlink_deliver_tap+0x9d4/0xea0 [ 474.226723][T15351] netlink_unicast+0xe87/0x1100 [ 474.226723][T15351] netlink_sendmsg+0x1246/0x14d0 [ 474.226723][T15351] ____sys_sendmsg+0x12b6/0x1350 [ 474.226723][T15351] __sys_sendmsg+0x623/0x750 [ 474.226723][T15351] __se_sys_sendmsg+0x97/0xb0 [ 474.226723][T15351] __x64_sys_sendmsg+0x4a/0x70 [ 474.226723][T15351] do_syscall_64+0xb8/0x160 [ 474.226723][T15351] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 474.226723][T15351] [ 474.226723][T15351] Local variable ----regs@__bpf_prog_run32 created at: [ 474.226723][T15351] __bpf_prog_run32+0x87/0x170 [ 474.226723][T15351] __bpf_prog_run32+0x87/0x170 [ 474.226723][T15351] ===================================================== [ 474.226723][T15351] Disabling lock debugging due to kernel taint [ 474.226723][T15351] Kernel panic - not syncing: panic_on_warn set ... [ 474.226723][T15351] CPU: 1 PID: 15351 Comm: syz-executor.5 Tainted: G B 5.7.0-rc4-syzkaller #0 [ 474.226723][T15351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 474.226723][T15351] Call Trace: [ 474.226723][T15351] dump_stack+0x1c9/0x220 [ 474.226723][T15351] panic+0x3d5/0xc3e [ 474.226723][T15351] kmsan_report+0x1df/0x1e0 [ 474.226723][T15351] __msan_warning+0x58/0xa0 [ 474.226723][T15351] packet_rcv_fanout+0x2442/0x25c0 [ 474.226723][T15351] ? __skb_clone+0x939/0x970 [ 474.226723][T15351] ? skb_clone+0x404/0x5d0 [ 474.226723][T15351] ? kmsan_get_metadata+0x11d/0x180 [ 474.226723][T15351] ? packet_direct_xmit+0x470/0x470 [ 474.226723][T15351] dev_queue_xmit_nit+0x1199/0x1270 [ 474.226723][T15351] dev_hard_start_xmit+0x20f/0xab0 [ 474.226723][T15351] ? kmsan_get_metadata+0x11d/0x180 [ 474.226723][T15351] __dev_queue_xmit+0x2f8d/0x3b20 [ 474.226723][T15351] ? kmsan_get_metadata+0x11d/0x180 [ 474.226723][T15351] ? skb_clone+0x404/0x5d0 [ 474.226723][T15351] dev_queue_xmit+0x4b/0x60 [ 474.226723][T15351] netlink_deliver_tap+0x9d4/0xea0 [ 474.226723][T15351] ? __netlink_lookup+0x8b9/0x980 [ 474.226723][T15351] ? kmsan_set_origin_checked+0x95/0xf0 [ 474.226723][T15351] netlink_unicast+0xe87/0x1100 [ 474.226723][T15351] netlink_sendmsg+0x1246/0x14d0 [ 474.226723][T15351] ? netlink_getsockopt+0x1440/0x1440 [ 474.226723][T15351] ____sys_sendmsg+0x12b6/0x1350 [ 474.226723][T15351] __sys_sendmsg+0x623/0x750 [ 474.226723][T15351] ? kmsan_copy_to_user+0x81/0x90 [ 474.226723][T15351] ? kmsan_get_metadata+0x11d/0x180 [ 474.226723][T15351] ? kmsan_get_metadata+0x11d/0x180 [ 474.226723][T15351] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 474.226723][T15351] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 474.226723][T15351] ? prepare_exit_to_usermode+0x1ca/0x520 [ 474.226723][T15351] __se_sys_sendmsg+0x97/0xb0 [ 474.226723][T15351] __x64_sys_sendmsg+0x4a/0x70 [ 474.226723][T15351] do_syscall_64+0xb8/0x160 [ 474.226723][T15351] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 474.226723][T15351] RIP: 0033:0x45ca29 [ 474.226723][T15351] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 474.226723][T15351] RSP: 002b:00007f457faf9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 474.226723][T15351] RAX: ffffffffffffffda RBX: 00000000004fd8c0 RCX: 000000000045ca29 [ 474.226723][T15351] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 474.226723][T15351] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 474.226723][T15351] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 474.226723][T15351] R13: 000000000000092a R14: 00000000004cbe77 R15: 00007f457fafa6d4 [ 474.226723][T15351] Kernel Offset: 0x26800000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 474.226723][T15351] Rebooting in 86400 seconds..