df50cac2b55806b773df33ab11b4a728aac8d2e678f51a05c855094157f54db071688b8988118a228238cfa304aa2d5d6562c6ee3d5c0b1944c4fd7413a9ab9516a180b98560df9a3955cea63a49c6a915e1259b03321c6fecc571adbf621cb806f8d03580f8125a9ca1922591ac863a21fb917a47ac31061c325dceb25d1ea44b17252c04427745bdc2654b6d2264488576c12880548360584d55d60388bc612b108ea38d0db929fabe23336355c8dab8ef7473f021276a6226edb723c0fdc7782d58bd8043f8112657e0f54f41c61b68f5276dbc49d4eab8746c9671cf0b767245cc9388543e3ced59108eca6e0a91e9c4be59f4adff33e763f185166cda2770847b2c69f20bd585bc03acfcd621168dc644046c064db6accb5bba0dcbe8b0229945e1660321eecd4073ac97e79f4a72400195921761f9c2ad0e05b40561ff91489eafcb83a49e9b797a87460a4e8d7379e033bfa2cdae69951db9f188c2058f10555b60ac318253709b0e250062cbf6ce90d0e81a46c00f57886fa566334bd10e78137d6af5bd698c12233b278c3c93373a6189abfbedeab6bc0520b978515779bc85f509d7db467bf6080d49f99c6d51af0ebbd8b9de0606caa4c52e9e0d5f3563909698a73deb5ac43fb42b0296fe05707e341c40b1ce6330e24bafdc96a1be2f5f1f25a50ff26bb8a91afd8dfa9fff1981daec868645b7644e43da03d2d24822148f7a66db6ffe2e82754b00f267282fb64946d1e5ca8b11aed1060691dd199ae853eb3219639683486f56af24277c2211acc2ffc0b7017b48439097debfbb700561c341755b9ab41dd9af2e9687511233bbc06b6feb9c6182b0b24b2ddd3d3c968cc65a418d9d402e6e99b06dce61f6cd507ab2f9d85db2f20372b1d433815819e2723dc8f9dffa8d19d2c498ae97fcb66f88843a81660126cde6bca3de14f1bfc168463542b95df74ee7628d327d15c0b81279c4a1b829b56a2901ff953d863006cd325580982b5c514b68c009f0b0aa3cc79fc4704929779cd2cf4eae243274c0ac61fe7334af9d05aff7610d62e7afb3a285fe5c4742bb32d65eb80b2ea2a78f9315804569eac7a30bb4bcc147bb1336b7e5c9025cb6524372127820c0e6aff94258f83caa8061ef97226e870486573127d6ea8dd02df5177acd2169f310aa65eafeed1ac88f45b64d2180a37d1464b360f629d94c20ca8ab3d69e1a027e7c25c695f12cee485d58d2c8d9f42142a89dd97c060ce8574df95649d20613435cd072697f3a4b0949d9a3bc23153517ea30446bff7608e4ae937ad255e14c47c73a14271fb3fcee48301b73301cbf48b1628f16afca5f734f7f10ecf19d87d8756ce995cc353cc64eb6cdf5f8ce250d6e4a4d8e42ad0807d1c2849639ce82032e1532840951826c649e290f6385e985bb20bc994cb43039cf567d004fdac9e7ddb88b7ecc7a52504f042b73cc09bb3c5d7f48721b870f0db0f6421913f224d752abddf5d023c69b6a7e4609107e903e1bcb3af4265c6c8dcb10cc2ec32db764a67cd737c856457a47f2a4756d218374ea96eb7144a47f16d21fba20f4c9c592a4de193c652808cf95158aa53ec64ab8c8c2f7ab5f7c3e9d19645f63a6f28e0a9694cff2df9c9031c6a4a97b704f2924ef1ed0332081b5944cda71827bdf853b78ad72bac69a2a25be5ec11059a7f47f0288a58412bc147e9ffb7b49516d5955d577bcd0a44c0a8de1e8307dba53945528f01ee36e29e72fcac167a22879263ef0e087158721a79620a4871d44d1cb3873b6996c066f52a8394a5bcced7877a9462366f1dc05122787b6b90b33ccf08a9ff0314f1f84a408bb79062b080990eb432bb29ef2b4b26c5ffb5e022304a2cf131a4ba265194d3d383c4e94b834b105ffc72d38685a0b0a927b082d3b251566174802d693109801ac1d515c809bc32a037eac6cb6ad8f47baded477e13b85d8c95cc3e33ec1de5b12072803c5feadfab20b1aefe80afd9f8cb186ceebab79e53bbd6aba80b0ca85484071cae46460d38ada1dbd4de810fb4b9afcf125f9f4eaeed8a49c9313baf5af72345f2b5c2670a5c81e97b0010471d771c4543d72b001f2aff3c2dd8da4588738320384ce96f0269b599e1dba3230086e7d8bb85e90116f354c878b8f06562a9a77dcfe9119937288deb91f035e9bd955be8be9acc1280bd53a16bb3b7861a798a3aba9bba466f68985fe845c4bf2be896efef92e17fe3590b9f44bfbbb842fe39298d1a508d0e4469f54f3e786b1db624cb11aa1b96d25bb617aed9893db61107c5808050df21fa3c7ce50e660e805d8911e663bd721a94cf1c7f3c6ba3f3dfcf8e7690612d784a6529407045d49d959113982563dc8c6ecff414c5497c9b059df49fca20f1f6213f43210c52a1178edb6deeb67d94b6a754b6161ccfee31b06baf0baeb8c99c908140ac49ce34f0a3a1772267515ef329c747e14ee9e1ed636d56b47cc7d4695c2a2d35f6ebe6afc30b3a252adf2850ff7ce791fd34e7f0a7af0f96a3d9908bfe2ef1321b5b5c5b5ebabd184f2101b1c180cf1753381fd97549e0ff9420296a0c7a6de63c6c95a4ad7165dfe3d11cd56156cf4276c8b16b3252b9778206c08dfbca64116f392dc28b600d76a9cde7c877eb2a5c44690bffb362f392a924b00908cac3d7fffc01b911a1bb024f88fade351f2e753f4ee1b610c039927f7261b4c5beae37ca632193a9cff1bec0bd526f1d049b7ae5442968527edc96e335b3c90f324679c575f2a44b8861a6f1109276864e98843a9c6d62fca4a3679af92ddc916e2010ef113b8c2ef7d9b2b40c455f68deb52cba3f7f557333ddd71d36fc7fa4d8c5c89118e2bcf5c04c116c0b2b804007c228429f306ab6dfb9806b2817d5f2db41b612fcf9a1a076c16f25f2887e1637f8326dcaa6437e94ad62dab62b5e43ab0bdf279a5586f5ba9db82aa44f545948a836b071e51937cdb9b2b952e3869b0b38aae5a9c948431b0e4f50832dc3d2b4331d01c4abc779f93ff68833050046637d2a822e26914bac218e6ebbb56d6cba36879f86068b435c6c56bc95f8536684f77439ee7ada5d00bfdc73ff55bac065036df372a61fdcd34d0c1f5dcba6c90243c9f34051df8d2d9076a28a081f7f16d11003032c03ac1108f1f7d0428ca2f323a6fa392ccafc0e8b17251d03c29baded5c8c93050b5bad7e6a23e1749fc4821f25729ecd04f686cbf34ae9b36b4fa8ed8b121da3e84afa6006326df14ccf9328de7ae3b6cf4614ce600dffdecf3ab8f16e86013eaa0d4f727027ff8f18ff56d431f092cb59f4f5c704c439a955259b9c4ab91987c8f44c6f1a8fff0dab7e768eaf229721b82471e2d491e1b3e2f372ad25dfcdaa70e752a1b228f11f1be2c3f65e786e1ffa7227018f1799f4c691157ac052a2079beb3c9bb5be9825b1e7ca9062f4253aa40cb92c5027d97b59aa35c77e4ceb49bd2d068831e3447d5185247662971145318fea49e6d9f7164381e36e8822ff30154270c0399b528310ea42fed10c04cc4db56713588af2ae77abd16852f5ebff3d9b35910a8986d1d98149e5a7cfbe36becb4d6c4f27764091945ffcf4699bf72f83c32daf390eb2c29d8622b30104b1ff70bc916126d4d4778b6817537ae856a363e98c59692bdc702d5ad9e07fc18d5da1d702367c6d5ee7e7b4839e716ff83e9dc2dcd44bc0b95e3dfb542d53abd67d99405ddb15ab8f5da340aec14e6301d887ddf25e0cb9b7a6ce3538b022d96f4ae7a8c1d7a4a16f2553daf654192eb19e8f2f99ec3542e848719ce4926ab838fd4688f4c659fdec7efa900150e4d94e6261b67be5a31b500654e2d0ad1816338cc83b45e8c501085015c831883742d8bf3abfd0c219ef076ca6ff0de0b649908bb1740f3ef540cfefcb10da8e6712800f9a11bddffe735614fca355924160b64c4e4b0214f9ef41923e84a7d92a65de038218598b9ce31d0993e819f034bb7b744d1449c039411e31e97ea625b62d186e0089be99316961876abf0f119c97b342b1fef0a1766cfe682e1ab7567384dce90b20412617e10d1369f6da062d3e74eec569c617bdff2bf8f72b76763b07841167f956903916e85ee0dc2f19a4f52247fd464e005deb78f25fbfa3bec161837c8a6a18e9c733ba6e8c281cf6f6d488a68456245e15dea81dd40de7adbbf2812d49b59374b567996af5893f23e8068162e4549b0dd7570e43790218b07ab2871aef69fd6ed9e41cfb140c16b9e6573d4ae64c3ef85c1ea5a87211cf6082cdd57bb84d29bdc71b02b7ba6b83cea391c68cc8c671e5a969dd005ac411928d8b1de352d68cf5597730d6b6b4f73eea6fa75dfddc0f3382a326aeed02704cef74d0cdf50d5dd522bc520884d84fa23a727addd523d2398befd10d68d311f4fd8bd54e8852f97a2848467fa213b27704ba339826776f68ac5872917366fb43a2145df8b1e3190f1660c1b98f19de878aed06f4de095a7d651d9e73b7082f9a01fba8963179afa72c2a6b964d29a013704ebf25439c908557262b92131fc68e66ff131669512a601edf3cd609382b4b4982601a7da780a91044c54cab944a8d86f9ef1930d6b297c79f0dcc88b1b23b89ea0d7ec3a131a210490960d61a603fe897e5cc6a7028744b4457174566b43a28bbbb2bf4ad1383bbb399fd47bbbc78a7e204284334bc1500f96031e32b7139a8b117d62ea8bf41f661c7469ef84d3e71c32ed21dce9e29129a1fdd9dfaf326968ff08231f43c5325f2ac2d195f56b6c4ba8204ff92f3d0bcd204dda0ce656365a3d823999a67e36979da850449ecececd2cdc5b08ff2fc5bb95216799d57200f1d98ab1cfbb342403492ab38253f84a4a35b178e9ca29be6d6950932c619cc21b54e6a85321b26142a9299b0f48023a84d27ca4594b2a87654498598fd15e3ccdbdde8803f68e86f4ac823f18fbe5642cda3d803d447b9c00893a618dabdef82b931dc6f7ed7108330816d8c2c60839d0d5687e8ec9b08d5caa79598f3115714614e6a129ede4e52e3623b152d04602ca9e904e18821c8eb551e9f7686ef948f3954e88cde42836c0f4ce933fbdbebfc3fdc07401c179926136ceb52b5b22385bf0e051e5cb6fa37c83281ef6d6b85e47bfbb8df6bb2037e28aa5688ad2e0a588b475adb61889d3a89d25fa1c260f2f", 0x1000}, {&(0x7f0000003740)="afa168fc16a9a409139fb88d74c8430bb91bfb385af82584f18f9ea46a4dfeb8da87ad0e60e923d177377d76a072f71203b60d62e7bb7d40ddc44bb075806f3c6bd7ebc436e5a9a34ad637b94ddebe55e31b4fd5f00f8f5bcfc8430b8081ad49fcb993e7f492104474dd017394359c271e16", 0x72}], 0x8}}], 0x2, 0x80)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
prctl$PR_GET_FP_MODE(0x2e)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$BINDER_WRITE_READ(r4, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$VIDIOC_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f0000003840)={0xe484, 0x0, [], {0x0, @bt={0xfffffff8, 0xfffffffc, 0x1, 0x1, 0x7, 0x25, 0x8, 0x1f, 0xde0, 0xfffffff8, 0xffff, 0x3, 0x7ff, 0x0, 0x0, 0xaebc2b87bc5dd1ec, {0xff}, 0x5, 0x1f}}})
ioctl$SG_GET_KEEP_ORPHAN(r4, 0x2288, &(0x7f0000003900))

14:00:12 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$BINDER_WRITE_READ(r4, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000002c0)="0f01c866660f1bef0f23120fc77ba09a7e0a000000010fc7599a0fc79e08000000640f78b80030000066b8f8008ed8f3670f35", 0x33}], 0x1, 0x57, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_NMI(r5, 0xae9a)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmsg(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0445609, &(0x7f0000000200)={0x9, 0x9, 0x4, 0x400, 0x800, {}, {0x4, 0xc, 0x30, 0x1, 0x2, 0x6, "447d2de4"}, 0x1, 0x1, @userptr=0x4, 0x8000, 0x0, <r7=>r6})
write$P9_RREMOVE(r7, &(0x7f0000000280)={0x7, 0x7b, 0x2}, 0x7)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000100)={0xa8001})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x2, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x401], 0x10000, 0x20080})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

[  227.788198][T10117] misc userio: Invalid payload size
[  227.805877][T10118] binder: 10118:10118 ioctl c018620c 20000540 returned -22
[  227.826517][T10121] misc userio: Invalid payload size
[  227.850133][T10117] binder: 10115:10117 ioctl c018620c 20000540 returned -22
[  227.861234][T10121] binder: 10115:10121 ioctl c0945662 20003840 returned -22
14:00:12 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x521402, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)

[  227.968601][T10124] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
14:00:13 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000080)={0x303, @tick=0x3, 0x5, {0xff}, 0x40, 0x1})
openat$null(0xffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x101000, 0x0)

[  228.182205][T10129] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
14:00:13 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000040)=0x1)

[  228.400890][T10145] binder: 10143:10145 ioctl c018620c 20000540 returned -22
[  228.421815][T10147] binder: 10147:10147 ioctl c018620c 20000540 returned -22
[  228.429991][T10145] binder: 10143:10145 ioctl 4040534e 20000080 returned -22
[  228.452243][T10149] misc userio: Invalid payload size
[  228.469266][T10150] binder: 10150:10150 ioctl c018620c 20000540 returned -22
[  228.484466][T10153] binder: 10143:10153 ioctl c018620c 20000540 returned -22
[  228.502011][T10155] misc userio: Invalid payload size
[  228.509711][T10153] binder: 10143:10153 ioctl c018620c 20000540 returned -22
[  228.541766][T10145] binder: 10143:10145 ioctl 4040534e 20000080 returned -22
14:00:13 executing program 0:
r0 = openat$cachefiles(0xffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x40000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0xffffffffffffffff, 0x0, 0x40, 0x0, 0x7fff}})
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmmsg(r3, &(0x7f0000006d00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000000140)="cca88c", 0x3}, {&(0x7f0000000200)="7f2511ba70e97bc274f990feeafbf7b5943ccb7f0fad4391683cfbc15d2f272408a77f2c16701f31f51f3fec047727c4d55541de04d7f35c3ed4b1460caf4cc25a8e5626ccf304c6e5ea5e705c5d3052d1058324084a9e19073b3cd8b2080169056b18aa33bf29fae5df1ea7892f01fc9664f84bd5df137b02f7468f7957afa8918084eaf68c6e7e7bf30622707a7032338da883d76c15555e368e9efe048ddc9f7e41540d2d5aa825b71aef9d5c7d7b7d6db5907bd949b797", 0xb9}, {&(0x7f00000002c0)="c345aec0fd55b5505b992378223cac8615bc79750c394fa33d0959bdfb34268bdb92e413e8f16a2e6d6c803f3d49411cae29cbb752753b31214f17f64189cb69bea9959a16509c2b4c204b8d90205d06de13129959d2c8cec194f10b98d9d8d07d15ee6033a757ebbd66df7decaec0dca0e8fa63c4f9452aca0a5918d18076fbae4ccb5afac5b6cc887b9c74148666a62bf154a77d51e38a0603d84095109a089416fbec2550a74a26f48e85424f433768994153f0b359d63e32ae377c086f90a3f4a7d18f39c012d4", 0xc9}, {&(0x7f00000003c0)="09e100c58a17010ed76cc2aca15b065b83bd1e5d3edd67c485b1e5aa178f0572707d75da9b79d7366e2841db9bf836080844e1d88383d149f8943dca092a4ed0025bcd4486fc9f9fb6fa464213ff213eb821f3e5ddcf1c9dd890aa03b84e9058a73447b0f79d32faff19444a69de8a2d2532ae0141575207fe1bad1e6c20f04a7102b79618812e59e774446e7e33b3e0b3b51f58f1ceaaae3438c9c11ac3d57c569e42", 0xa3}, {&(0x7f0000000480)="7944e60e6acf8a853f3b966639c829384bfd0fc56e229300f3801991ea3eb6ed1644052d15684b6c593278e02ff26fd2aad3cd8f0b547381c64d39250e85048ccc8f28f1d0b6f76a85f7c23e11a06690be4afa6fe06f475d64a357bcf57408cab87c26d018c5eac831d678bb270c74d7da5b9d2e928ea0a622eb45e22d7aba6e2f", 0x81}], 0x6, &(0x7f0000001580)=[{0x34, 0x10f, 0x2, "e29de2dda286d3749ac4f21ce727eb6b07857f67adf1df13a91da550c849eb479b35a430203ae53d"}, {0x5c, 0x110, 0x7fffffff, "2b8013816fcda3ef8e36d346b48579d279406e5177c387b0e540224b5ebed3d075b3ab29f8b6d8884f15cb7bdcc7412caf9dc49f07a1abd61d5f3c35146b43b6e883dc06cb7381d1b07d2a1d0ada95"}, {0x90, 0x10f, 0x6, "d883e7f2f4ef9d724af79071aaf63509e5faa9e84c882c95a159618896f9e952d6e70d06816b03a6965dcde8658d5e2612f68b9bf2ecff3780dc8e1cd7e772a5831bb18960f382433f9aaa7aa1763524cdb7a3c0d425b241dd9da041863c455dde6252fdc97f57ac80b8999278e6b7fce0eac291b65b558a7153fce2843beb5cf0e4bec2"}, {0x108, 0x10c, 0x4, "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"}, {0x58, 0x88, 0x9, "4e806deb42706ca46f0aed522b1acbc05a172c7edfb934ee7c1918386a58d5834d39f8e1aa2f71872dbbc023e288cbd5f17000dd91d70021e1b982ecc2c22df30ca2695e6dce2fb7cd3c"}, {0x68, 0x13, 0x6, "1cc612213c74a4680780349b5a14f761f94a5a5fd83ee1a6350f4fd6e9cb136a3e761e2ad27e3883121471a16549611a88ea447d033d58da6c42550d657917784012950bdba743441f671923187623ea128f9160278695c6a3"}, {0xa4, 0x84, 0x3, "565cc63e39d972d14e3f42d3d8a1a32b74c1b9f4ba1803adcc39b9ce7f06840b8b0d9bd85390ac44e34486bd91a8b7ec32d39700e23b5d7d0423e845224ddb2281451f1aab4202b12bdd1ae645e5401120e2be8b947fca6e5b7c5a7674b95e7617cdabd34ccd90a56162c804001473bd03cd4a5d8b4cc58b4fe5d3e3a51ca4dedda680ef17fd75f95bcadfd600c8abf00a6e6f91d0825d38"}, {0x40, 0x104, 0x1, "46c292cb97486a1a93cc83371d20623cbfb56b7b908146c685246ca10db75f7048ff6e621c0b09f2f214c236ce6be443784c"}], 0x3cc}}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001980)="1b9ca8a162ce61d754b4d34164694bed3d184059a40aa650f5ac744d3aaeac", 0x1f}, {&(0x7f00000019c0)="7eb63a95898d4841d29b38f0e6c0f23152abc28acb3020058335c62bf1b7a3f235cd09dbecf0d4e40b6088a487dc104e0af6b3237db9e676898430e8b33abc177c728bb454bcbfa415190e6b1f548afca236cbb401cd8908ee0a454a648d0ac554677407212c514e62acaaaac5a16467102d6f8503e99ecf7ce91a785d368ee35cc63451c869bd98bad1d00ce67730394b211ace4b6ef1cf7085e9b869c76e4ee0ed1bd60ad52ec9a8fc013cf159ae76c783cc1221eeb594fb8aac4178dba2c088445affa92e12b0256c5821", 0xcc}, {&(0x7f0000001ac0)="67deef8dcf798d6355a2d7c18ad939a9c0508de9844b1664a39aff429abfea47ee953ff1869ec4cddbd07fc897757e9c9735066bc6461bf45db4f482d509c1a30ec5c9119a6ec86fef76e2ea0ed9b1d45c6fc9c9ec5c4968a41898a668913a19be7b1f1187de2948ae504db5960a01f4898e1c8cbefe25fc2a96f19e53002a5da7290b03ebdbda5185478b8633b69ae0fcd47cce2110c70bc2e261db938aa661e266f792e8c8da210b67655a77e37e6fe36d9439fa939ec2f260282dfdbce4f4208c14b367255f6a9fd3184fd52fcfbd538627439b146a889d117336159584adb43421ff3bb9c8", 0xe7}, {&(0x7f0000001bc0)="726a5cb94bd0233026f9e4dfccc201618c2f0ea440dfa3d5fb015dcdf38b9efcebf7a7062c2a8d8382cd6a76fa7d7a5317d11c55b90faa89fb7df3f3baa83426f837675bb999b2823d", 0x49}, {&(0x7f0000001c40)="e48760a668c832b2084a20ce5227ce0305d05fd84476c89c8ee610b0d380700ab6c7dd5293edf400ccc696933d34ae30d496d030f612cb87acd6c160dded725f32de1cefb5b70184471a34e23326320ef3d27077d09f4bffadf7dc5d64a18d79241c2421807b6df4a9cb32a89606995131cd8ef8a98ccc4b2e9996af70d27fd99cbe2c6cf00ae254f3cc79da20b7b6b379154b779011e13779fc709217c80724e4047fb9e2836f29bacb5f8952dc44689d7376a757bd9ba3", 0xb8}, {&(0x7f0000001d00)="1c", 0x1}, {&(0x7f0000001d40)="680a17c370f41c30fe1db3e0519facfdce7e9c3feb7b048d4533243c6a094dca", 0x20}], 0x7, &(0x7f0000001dc0)=[{0xbc, 0x103, 0x9, "9e5119d968c9edff3cd03be3c408f097a4d288c822845130283529c10a3061354f5028f96d7882eb53aa400e54c9d2642852d0fc16b6f6cc3166ce0f84f6c4ff3ea3f9fe6e0b69b5131ec72eaa8c17247dc27fc5947831cf7291d1b6cf9a6b0152648c372d0eaf9cb84c2c7f20de503a4ef96d4e03508664faa6a80ca2bcbca56eff0f55e81493070c8e551fc8053bfc718362e3bad6e6269f111e0764ec14b5c1f8b1a9224b0f7a218614e3487c5b"}, {0x18, 0x1, 0x1a6, "9520257c9603a4e2756a4c0a"}, {0x80, 0xff, 0x1, "ed0c746056d783eb48420482b0f9af91f0fb89157f29ca6b00af6d0120758a9a3f9b9071fc671878c1723953b0501d71722a312a5f5ebfa226acdd8bec9df33a65846105db60365266c091793c1197e08b5129e5cdc39b84ee75912d61882f342ff5bb6ed90f1b624e81edf89ece668620c387b4"}, {0x28, 0x111, 0xa73, "f47be95e81873074803d541513a170b63a6dc89f2907d9ec8b4f"}, {0x10c, 0x108, 0xb0ac, "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"}, {0x100c, 0x84, 0x6, "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"}, {0x24, 0x29, 0x8, "20147747d42e4fe1348eb1e9bd9dc9b8de888d1c6be1"}], 0x12b8}}, {{&(0x7f0000003080)=@isdn={0x22, 0xf8, 0x1, 0xff}, 0x80, &(0x7f0000003380)=[{&(0x7f0000003100)="dd3b189f2d7b8924c7b48083b1272a0e4f997c63d256f18d55f6cd4cd2d357e674eabaa08c820564c4c6d40ed4cdc7016aa925bb3dffdc6fccdc11a537bc4e2a9fc1aad78285182e710765fe47ec6bde994234fc0685ca05ccfce0e43984074004d825669bb78f7f1d71476e77f9d2c90af4fd887a97a000f2b648ed2b4bbac3c7fb8705bcd54cc2", 0x88}, {&(0x7f00000031c0)="0221", 0x2}, {&(0x7f0000003200)="86c178bb2af382f6009d7c4e005a88a1d34409ccd287f9a64542a4699850f6274a39394483c6ad7355b6d35ba6e73d3a41061c6e961cab326f52359514d8c34a2bfd5d5b91d1f197e35912222cc310e683b9effbc2bf4e59e07b30885e6c172fb02a1e36026d440c1730a474349241b228df312e4c4ff32400403fa731e1832168e3402221f9be21275736e148235d7c234722509b6945cddd06dda2efd50f745da29dd78e4493d69236811115bd321e5d65feeaf6478b7c258d109057c6cdc8eb1e304fd09b2315567a7f51668f457857", 0xd1}, {&(0x7f0000003300)="e655732770bdf55ea7fabbb126582a3863b1107231a0e7ed4a7fa3e041e3790d21f9977465a43028423b205d642bea1ec50b33bc4ca1e518bdf966796df19e562e975d71a420ced412dd9bb74041338e3a77559fa5dbcd5f019d1c2921b5e2fa3a03e750fa8e8c58b8cefcd2ea1ed91c9d4a95", 0x73}], 0x4, &(0x7f00000033c0)=[{0x60, 0x104, 0x2, "8b391a74b456c217dcfb10ed5bbcc0b532d3771e11399d2162644ffcefedfc29902a682ce0ed32807b8022d5d2f80d7bc7546f54d112e8ef3ec7ca5752633bcc6ca165a8eb576d56f6c06b32aa732956df4c"}, {0x64, 0x10a, 0xfffffffd, "f196b9ed276d2f39d7dffceb1b4dae34756ae280734f6f70fac36c44134faa0303be5ecb5ac0ebc9d7fd3179919e9511d3b39acad7e3c81e3e0ac832fee02f9ce0f9b7bb6915d53906aebbbb12810e8a669fb60cfe69"}], 0xc4}}, {{0x0, 0x0, &(0x7f0000006900)=[{&(0x7f00000034c0)="9066bf1e0f036da4dd3aa5c4b1a02c0529d800bba2eda5dcf99d2a6d85040758191d9f8f65a8ce46caf67211ed494459d366261e1e3e5d92da03d907427bb8a37291c4ce722396f1ea0c7c0860b7bf4e3dce4b1a9290ac450d301a1231a4c272649de3326489933d2c79bc61b6a23671598c9a3528327ff03d9dbee2b449d867b9ba64dbef67a3987386dea606a8fdc70211f555b0becc9e5e384802fd7a9a1906a6eeeb9a6eec162da5337e9b2f1c2842aca3a6742799263233845fdd4b138f2ccd758d65a3b73273974fafafa2f44ec835b78d4325df58897ce74200b84655d60ec2dc33", 0xe5}, {&(0x7f00000035c0)="0fa5c1", 0x3}, {&(0x7f0000003600)="fa9e42723ed13ab887fb4e3fa80bba17c479ee30de73885096fe987a8ff16106a12fb25951de4f5ed408c8f39020440207bc4ba130508316d3fa4f200de863e3ac0114cb44f8ba9e0b7f573d2813f8db93c4fcb4a70a972b5f57294e687d376bbef4c4d0f6efb891e9a225a7591eed7975b9b5b73c3cb8e9be44a37fd43ae005b69f0d1cdd2465f3c40a92cc1f982e15a4d38e82ae4f18236c82d78e974c6e0c01a6648ca582b50b04ed2d34e59344b3affa8c5a2ccbd7024a06b8d2ed9fc41556952af301abac4fa1bf8e4cb76c1cbc9281773e9b90a29eb8c38f5e1472925e", 0xe0}, {&(0x7f0000003700)="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", 0x1000}, {&(0x7f0000004700)="9533c3e079d5729ce8f5e3699e22c7c79c808ad880470aeb244f6027b0b5ebffd082ce0fbba7cbbc9cfb11cfd0b8141938b537216bb8da0fa727bd30252c4cd6709a26585956f7ac811fbd7d347aea839e49c0e37f673b27d5adb6135c4d1803893382848e5d9ba11fb3611302", 0x6d}, {&(0x7f0000004780)="b36a39022f5a560e7dfda3f47f57394df06dda24fbd5cddb039495c4899732b67f86a764cb5013ebd46405301df47338762ac8af486490e9564e36ee7a5d23308593697e449b4cbde156198dbd6a809cbbf98e0f0c854cdc2a3398058df3ce296a33b9485845bfc031bb747b1e570d67b6396f55cb7fdf3a0a16ddbc233737111186c39d679560ed2a951a74eeca64d00fcce9c8b8e432b928951e6d481e904714b058db0e3bcd8a7c73b6836b3c8854cd714df8d2", 0xb5}, {&(0x7f0000004840)="7c9edcec44af4eef20f7b28ac3f8f6342d0a6e6e1f0b7715b785627728d3f7a8f1f330e8ed1e6d3335c4ac396e94ccdd823d388a154bb3f7a9b2ba376d22ad9d5e3c8e356556ff8c38877ee1024feb1afa1160a930c035746e5767e1d888797e28b184e1b7a8ae068faf13b9ffff6196484893741465f51e7b25eba21da67f8bf012cd90c9ccd99605f9381953983a987eb4f4e0e276c5deab", 0x99}, {&(0x7f0000004900)="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", 0x1000}, {&(0x7f0000005900)="6f0382343c0dedb346be72322a5361b92e4346c5771cf22bc9bcd6121a535e27fa0735dc5923aec3439e82468ad9a6fe201f95fa2db91de627791081c555a4c9d83b0f4915214be88aff7feb377690140e70a93c552ef7246add55929f2cdb6e693803acd592864dad0751314cf595b7c93ae50c9ac9047ad0d048f9ebdd55fd6da974adf3207fe9882ed4cdc18b0d867e9f92ecf205bdaaed700e873862199dd065c678495d5961dd8651fd2cddd14ac91c52fb6e55b23efa22cf27a5b0c6e3b55461c76f01aab0832caaf43c95af0c519fb8ce531dd0ba65bb809c2f0003458e0db75636155b385a21c3e1575194bc91f158badcba309e28324edfa0d8111bfca7058992b1e6d64197078665704ab21044e4870126a161b98cf0601ebf435f140c88bb03aded906432a19792a534da5133e3c00b9486c4f600071ce6bddaccfbcb6a5f5e39c8c32244dc8f067ade6b5d9f64f2b7ae2588dc764a2f735e3e59bc5e2472881184fc15692af22904ff14d237b52e1c3b0d6d400a7e0bb95a9013551ac022831e573482b505d30c2c19f94a54ea5f5b90347e5b095e7efb7490f81d00be1d4272fbf6cbd34bbab97d2226f790af3422f4f5418e8541e489906719e30434ae97cf3005102f60b6161d773264261986fabb0652c92b2535a8c9a92ebb6bfbe03047f37b45c70b5c1390890b8bf0d61a4d288da687b64ad885a49a827126a3a53f48ddaf7db3dd7aff4186e4950056ea3b664074c007d1ab2e4d96a28e5a190b42b5df437d6f38ff2078372e885a10476659da4bebe64c4858145e9aee34a984c90ea48e420da7db2fb662ccd2cbaf45969e3a2d4e5f31e96a948a4e6ee0d3a100a5616c464ea97582d5176d9c03239c8f7a3c4db9ec7b4546882bf91b08130f51cbfe500cc35008e56058b132ea14eedca0057eae9337ca28b1f5f135599eff81a778be7ddaf595f58b889f68c73c144c399665d32165eae695ec8c5ffb3c85c6a841a249e0b78eda1f483154c811cf779c4901d659284b936c1ae4dcd8d40ca67aa48f819df8e6c1b65027cd4e57ede5edf2e0ec544f43be2c2d597051681f77a78a6a2dd8b477b656ee639fc42211fbf186d7d24cdb832ac5243c38f7c7c6ebe616c4a16bfc0e40dd5ae84247286d29126f44fefe0c680024bec63b40b1475dc291346daec8a49aedd1ef8b47ee853ef9acccc191ec47b441d15f73d75442f77c757cc555e5965ab4479b925367d5c8a1061bf937afc834c5352c7a25be274a7c0ba0805a840eea7a627d2dfec81ea4d88ff55113df37c6bf2c547c9d4a7328a46427c28b233d45071d52909a4c55ada62f5435c80a69f434e445fe8d39c525d036accefe138fefe5a9bec3142959c1d41582acc7eb71e86a329d4b15eb94edced1ccb6dc2d3577ac656439c6382f9cdbf90098df1cf45a52ae6e278c6b9a5fe0e4beb4370e08c1e15325ea20858b146ce918f06ebd3d081d70d267d372b9e02cf797073202f2a0a2f88963517dc181f138e0efc6a1a4d7e90c15533d2759b41d8eb50c0a5b1ff8892f49b7125afe6feb6819ebb8874d48346f42162eed2dcd1ca829809e0ceb893a25665fcac190a837f13583960113e4f156d6f5ab5eaa8ba7e4848a3136d0416cf4bd868a6d258024c8f687cda3dd22491451b1d783912d4866d202f9ef0fed288bff1f2ce3e01162d2b286f4758dd1cf558c32643b4cfa0f1376a3df3d8c3e0ca28148222ac83f621def984a445a171adfc5c6d7237a24c0252145fdd0d0d1411b65886003c735f24c7f60eda756e76d9d9abed8c6b9d7159a77db8e751280e2f1173564a0b7d3f645b8df1922f59ead6eb32027a64c33550f32f9a8fd975d504ec49a79a3ea552a2dcdf0307e965ebb87d562375d243c2681ba7ee8ac625b2811da64ab2b0d47a7fd7a095b4e194c26e3a09b2031d2a6f95696f29f303ea437970f073840e81f54f37a765b2136b1ae775d5e2690ad76bffc92a180a542f13ed9991d1d1887bdfbece382979937f4ff322ffe37d1cbe7125936a54f713ecaf3399f99a05dc18bd9142763ee40a350bf88ffd6746eda5c86de97086c8acf41196ae7df9a3a04ee012a0cad53a7725273381ca6064974454b039e4a1c582ed47a970cc48ff6c753b3b5773525349690fe959803d3d32b6b991a0f0b832aec5d05c02e340b2d7460076ad03fe5f769466528efa56f29c6880aa313b6f3a811db486c32c74a80682149d7bcfae519e50290ee9ad9860d90b826f7e3aa1d65f543c320c09b9b67f900352619999bdc07b50a963866cf458aee2b65b2b2186410fba04bcec121ab453f8f124605afdd395b1409ffe37af2211417ebfaad794dc2d9aa38daaedbe8129fafa0eb5842247d2cfe542dd64577cda44bb0f9edddb691c12449e941593641b6502c45ef2d9db9723a354fce86ce2add340394c66fdacade7626e7ca980517124ebc622e0a806ec198ef60933e44c5abd385b53de423e8df4631bfa6132bca990e428a6beef97a77e9cc49e34720230fba85b870243521bf1cfdb5c4e6b3e58e3e4ca1038010fcbbb291f39270572883737e0eaf7d723575e8e67012cf386928a5fa3b5dfa4dc02cbb0d3209ebc5a428466a1db9cab6eb261ef577fadd4d438305a657d151734d63e15edf9862553e0e9aac01a80ead5de9a621cc9c0787198133e345cbd40e02bd69536cf5676dde9b4ec20bee02473a8aaad9a4788664474b42e5db2a2b0fab7d607f9b110c00243820691ed305a580a53dd9b8d80152be75a2c6ba543cf703b7a4c4e409732bdd3a0ce61ee51f6b41f00a493c880e6eee7fd1af7af0e8a68c7955d4840d5b457bd60ee05de2d34c72ad9b310d7eacc501c098b6084cd61b18e811762ff778df13ddf345e7dadc2cc46db18965ea4009acfd24e1e9a6b1c886e1471cd42933c0106b6dd5550d8e505216269a708dcd744529ae7f2c6157f0c5a9ae048d775b447eb42b444558b629223ac3c7d1c100b21858debda043ed6146e9bbb6f94acd09b9dc9e15b1dbfc3dd152230f93eac6d6b546796bece79f78f3c21196c63cc6cd0f2324479a3874e5ea4a299b1bb675cf8e27720abcf008e849cb7844b22a86171d6e43268ff99021536f9e211b367806005a5f3903bab00c5a8a3c763f881d8c40e9db5478d3b84cf3a302738505b4b96a6c4d53eccdc258c756f9092cb67a2f83056acb5cf33daa7f36b12f8360f66de42b77fa399f0750787001c80852f5796a4d7191a4e50367dc3c31fbb8892eb995630938341477959ffea30157ebb86be6e001b9a859817ba6fc072fe66c2e4ad25e28cf035f8dfd12ea05862daed2932018ae64bd108540cf0bda6daba1a326dd8cf6b6af345230a10b060dab19e224c2d2de962ec5780f2163e7707bdffeb397f7293f1932ebf9f884e317a20442ee5a29c4871a6a59d5eddca882a895742ff6b51e60a595863411a5585ca5067b1af8d59290c487a7f30e67c1f03f9078ca9b22159bf7e06dde8534cd7dba7d8bb7159b0761e212670df600ab0812470f360e74cd20204de2bb0a5cf76f68ed739354b82e5841ee14fde3722f9d82b31bc27bc6ea46f68803e928dfb54c418f601aa5049596cd3e4488f5b649b9a10aa5b3ef0d142ce6e0dd061f810115052cb40bf4a24a271d5380b986a948e089665aa6ebb78f7ba990ff0df5fcd08b3d41b2aa21e03f85b2d6acffaaad1b1305d974d453b9cfb6b1932c9d28e1820a652380b604d0d1de918b60179d52946bf8ec228f22e6b4c83ddf8dfef0697fbb9aafa00f1f05cd7e4da7823d0f1f1e54a56f78871809a9f0e8725a1e7e9be036f904daf2e322f963b95bbfa86ed56c2a1ea6b99473d69333d3b1e8eedcca1eba3a0d9932a63937c676f41d3e30a9436168805441fd8e06f348818a5ad008977244d9151f5a33bc67599433cc0634f81225debd01bbc7c3eb4949d65ec85bb6e2c809ca3831bfec7a4087a95658c700d083b9956075053e99507e4a9e12312c8942be96e69dca628dff9e2cd0aa22f4871bbae51f7841f536f5e0ac470f80b375970496ddac5683ec6ee63b7f44a62c53eb33af96d698da7825ba262570ac752365fa53df22c54b739cb4fb08da59dc3a9394dd151a0d0905f30821ff154053ec57b058086f239f5d21bf5b34fbf7986628c9f9726d47d5d0dedaa5952815a64b02780299a0c66d66016eb2292a58098cd79d2bb77fdad9a8970b8c60b375e3184301ca7b67526dc1f84cc10a51c43b9a9a38c03129cf7851f962ed16c214c0e665aa6faf6ac215215ea1567736798a4007b9080bd4799362fddfc945715e909e18a1f8b5d74d588772f03ce5c68a4cf67240d3655a465ae45aae652e8a2644ba4e0e71aafc7c6620abb78c419fbe3a3fd151f5a55b6aeb83dae15a362da1915d748e4d3ad8a79a36250ade8fb93e1e3528b2c711a4979c7a7472d0645ff9f36de34b4e549b6b2fa8b76a421cdbba65172d0bae42ed36f131537abb1b8adb6fe266489fd2b76535265973c2a8a95e21dd52b15744c0ff9e49ed20cd5030cc83d6a7db741b53adcc87a78ada4f424328ab25774c56536f7d1ffa2d0cda0bac636fb057532f8851b86a34f82229b348e1db056690ec621c1aaba1864bb173d180d6493a47df36f74ec6f87ca0fc35e1686556de3187b813b3fd93b8c0d51317af8445e1abec2ecedd4cbebc87371bde89af44d2366c8c6b812c395bdf19b0e54486030c727a9f920dd1d878ec96d7ce87ad3ba34f6e380270aea235125c4937307f18e67050d818d244170ead606a26b3b73b329008019b92e480fc69a7eb7021e63ff3eaf8d19011dd021ec8282b5fca762778acc35ad9047f270208554e0744a8d6c4f14b0d4fc3f1d0804b653d7f638b9c4c671813ac9b2b0705bad1285cd3b8e1e88f049a44eb0d3029a011f75c206e0956724ab42e25f242ceaf4bfbb8678ea679566e1c9ee31ad3f536e634e8e7f6038d6d6e3d9257ab7356f8386a0734388c5e6f001002793b6afcba46a90c37a99f43adb5260bc72ca09e11c811dc2d6add5878d24e267ab46c45e2ea2d1da4862171992bc6077675584a1c3badfff7ccb10f4d9dbef92c7978fa6530deeb7fdebfc33e9c4a18e30633c58eafaa98b4ed57aa52ba314d23ce50f8ad49d5d478383820f245c96c7acf24e0531fbffbc4cc5834e768565a2304d5bde22f31376694271358453f2b756c8b674d534e701a18859823a940c0fab036b343a813894715f9cb6a4db6f8d29dd22ab77906cedcd819e9863fbfade3c135e59573104692fc6aa9fa339b37bf6080008eff0aebca03ba58ab0db6e3d7dd5c85ea8b0561cf959955bc43a50dd036958f10c0c2a4ca4e3ea35f25d373b9b01f35fea1978be486e9e4a22f00af4b675c384deb132ce2de84135f0062f3936fb67bed530b398852e12aafcb42cb4674e17820ed97908d54de75a0227c7f71ab6d7b73d0838fdbfc3342fcb0b9d8a5ce00c3acd8015ec1c91807a3759398dedc82d3c2c49112fd0acc89320bcde44bb78711cec1608458bd1ae30d2013a6b9388bac186ffd48ab099e8ea073d3d7865d5fb4d7921475be69a0998ef8d84cfc4de478fe2421d61d56bcd5075cabb16f9ce548108cdf43085ffb6a1c4265883ceaab808b229fb985170aaaf288db519264bd9e8c80e4312dd1ef55a1cbc3ac14c17e4828b95fd562f17c671c06e7bb62fedf65da39934909a55a8ba0c99368fea0b7e0f44e3f252f669ba6bb73d26f9ec0b6d90626fd6a43c66f", 0x1000}], 0x9, &(0x7f0000006980)=[{0xf8, 0x110, 0xab, "35f65d132f88e5d63d66c7e90b73c72ecc3899cb6925e61a69175e55d57e8790e14ce4deb4d32be40266b4ded8b7c7685aa2420cb2321310caba0a56e53807610dc6bdc9815bc47f7a939bd3a0be7ddb63445b80324799b7fd69fbfbdf050b7a2eb30fd3278a1b1182a8e7c66ef4155d18ec2c5f6dff51fe58c4e4b57e94547e2ddf36d810bc5330137228a8bdd6c474000f8f38a9cf80c0959391e560577b4080edb0e5afdf5761cbff9f4a1d6486de4cf11249e2fe5667229fcebdb84ac554e5489be1f739189f29cb9b772a79eee78aa0105cc6e26b99b2220dedc2da5e0371c4d857c26606d1cb6e59fb"}, {0xe0, 0x108, 0x100, "a54b4d166d9066ae6f69ac8373334c3d7b1efb543013375644e10314f70665415b28f1cc4adb086183887b3ed93a5c7ba97ad821faa0cdc6344171b7516d844a1900074b69bc3eb14cfdd242bbfd996f4818a61e82c8178b746cc720bd14ca7bfb68e7a70d28115f0613109d4c78bb7b301d57938c6c59eaefcfd68b539836898df6786b5549f1489f149ce53712ce51c2049de614405d6c85d154ca70ee99d504d537b9bbbae091fd321a5d1df58607d16354f26ab91595248d0dc38c6818e30de36e9c93c96d246ded65e521685cb51bf932e2"}, {0x100, 0xff, 0x0, "86fc1827f0bd4e47d0aabc91fcbc0e367e51e2c3afed30ca395a6e8d073ddfff50b2515690f8b4a23308f343aac1cbb31aee7232cc32489a6256031135703088f4ca86a4d85b299304b4bd60e7ebcf5a0544a635618416548062ec24520fa6d8da135c9ec817462907686cefb54426ef2d3b241f2705b6ad83ad2a3539462e78792a6c925def521eb44d81d280f6a8a2eb08e1c251f21bd557dd97a0df7ac3329225928e732c1213fd3b37d4ad8a5f7e7d38ef41d550231db14beae1204e184b23980ccd5a831e1ba16a33429ad525356e1469a0a9d877389644d559b34da4b6ad8370cd5f33f7763344493361354da87a9b8bf5"}, {0x80, 0x111, 0x100, "67b47affafb07687f4e245244c503081249a6f40d0ad9313bcd0b94ccaa68b8ef614e474a81045ac0aba471e73b61d37601bb1f0a1ae5d3a807ffa068d8dc0221a3d8e40ef847d0dee479e9ef32ca949281e96211b02d5187a8e54cebdaecd3af3b867b422245f7557f226c47b1475ada9a5"}], 0x358}}], 0x4, 0x4000)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r5 = dup2(r4, r2)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r5, 0x40044103, &(0x7f00000000c0)=0x800)

14:00:13 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r8 = getpid()
ptrace(0x10, r8)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRES64=r0, @ANYRES32=r7, @ANYBLOB="00000000000000002800120009008b007665746800000000180002001400010000000000", @ANYRES32=r8, @ANYRES32=r7], 0x5}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xf}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2e23}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x3, 0x4a0a}}}]}]}]}}]}, 0x60}}, 0x0)
bind$can_raw(r2, &(0x7f0000000040)={0x1d, r7}, 0x10)

[  228.764697][T10133] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
14:00:13 executing program 2:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0))
mremap(&(0x7f0000823000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00001ed000/0x2000)=nil)
madvise(&(0x7f000005b000/0x400000)=nil, 0x400000, 0x9)

[  228.930161][T10164] misc userio: Invalid payload size
14:00:14 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x12080)
dup(r1)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$KDSKBSENT(r5, 0x4b49, &(0x7f0000000180)={0x80, "1dfa715707e5115043eb037d7cfbb714255915ba169fb6442ec2aa8e6e97d7bddc572806f750f82dbce0df85e0e9dca9887cdde2faf28732c9ad21ff6e52b7c1946445d9beb33c8ef6ee7e724ea9fa1a41bfd9c095e498e5c5a06462ed90e8c2756ae90cde1f3c76859bf74720168ab498ad485bc3c3e57b003b770a373ed5037ac79030351d1a4d9bb7c7f4c55775f471c533fe803f85fe80317fa3d68496d949382623622ad5965e58f0d6889ece22900f93b232583daec2434bfb92ebe21a06768764d2a531a65ea71adb86c58cdf77f074aebe9e2bc075c9a74e5c4e2954a8fd787c4e3f1193009ca640ed0ab1f390e2febcf16c515919c0753a656a520df2dbd1d44b183baaaf4fdf8c6b65e503f03302330dd645bebd833fc1d095fb854a9ddf9240cea0d365d07eb348646832eb95d93a6ec467fc039238393d542609363136f83bc3ca1f67d7d5e4569cbe629001baad90b108e7d4a767d22ed34e8bdaa3c181c15cc3125fd6b5779e8846bd21d1f4248a76bd633447b9e72883dafdd405f1da96e7e28aac58c6fae64642db84ecc6af5f255d352de0c4913f2fb7c4558157a43ee4ea2bc288c81164f363749553fb2977bd0070732e76bf96094b010e409fb222be93b47df98087bfee634a65f761a318af795cc0e462e30c57420490abc46549cdcb6ed6645eff63752cbb6f9de8408d878bdc0925afcafb39e277"})
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
bind$l2tp6(r5, &(0x7f0000000040)={0xa, 0x0, 0xb09, @loopback, 0x1, 0x1}, 0x20)
r6 = dup2(r2, r0)
ioctl$ASHMEM_SET_NAME(r6, 0x41007701, &(0x7f00000000c0)='\x00')
ioctl$BINDER_WRITE_READ(r6, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r7 = openat$proc_capi20(0xffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x202040, 0x0)
ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af12, &(0x7f0000000140)={0x2, 0x1844})

[  228.954775][T10164] binder: 10162:10164 ioctl c018620c 20000540 returned -22
[  228.980676][T10164] binder: 10162:10164 ioctl 40044103 200000c0 returned -22
14:00:14 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1)

[  229.205007][T10181] binder: 10171:10181 ioctl 4b49 20000180 returned -22
[  229.232868][T10181] binder: 10171:10181 ioctl c018620c 20000540 returned -22
14:00:14 executing program 2:
syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000380)='./bus\x00')
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[], 0x133)
r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000040), 0x1d4, r1)
add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$BINDER_WRITE_READ(r4, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$USBDEVFS_SUBMITURB(r4, 0x802c550a, &(0x7f0000001600)=@urb_type_iso={0x0, {0x8, 0x1}, 0xb26, 0x4, &(0x7f0000000100), 0x0, 0x3, 0x1, 0x69, 0x1f9, 0x0, &(0x7f0000000600)="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", [{0x2, 0x465}, {0x0, 0x4, 0x10000}, {0x7, 0x489, 0x80000000}, {0x95f0, 0x2, 0x2}, {0x5, 0xffff, 0x200}, {0x5, 0x8, 0x2}, {0x81, 0x1, 0xac}, {0x3, 0x6}, {0x4, 0x7, 0x9}, {0x7, 0x8, 0x10001}, {0xe75c, 0x0, 0x3}, {0x0, 0x18000, 0x8}, {0xf38, 0x6, 0x2}, {0x400, 0xd0, 0x80000001}, {0x3, 0x919, 0x3f}, {0x80, 0xe8, 0x9}, {0x9, 0xfffffffc, 0x1000}, {0x7ff, 0xf5, 0x74e}, {0x2, 0xff, 0x7}, {0xd2, 0x400, 0x10001}, {0x5, 0x7, 0x4}, {0x8, 0x3f, 0x5}, {0xb5, 0x5, 0xbd4}, {0x7f, 0x3, 0x6}, {0x1ff, 0x7, 0x80000001}, {0x3, 0x1}, {0x1f, 0x40, 0x6}, {0x10000, 0x6, 0x9b}, {0x6, 0x401}, {0x2, 0x80000000, 0x7ff}, {0x2, 0x20, 0x6}, {0x1ff, 0x7fffffff, 0x4}, {0x6f3c, 0x8, 0x8}, {0xa3e3, 0x1, 0x5}, {0x2, 0x5, 0x8}, {0x1ff, 0x59e, 0x3}, {0x9, 0x1, 0x200}, {0xffff, 0x0, 0x10000}, {0x3f, 0x5, 0x5dd3}, {0x1, 0xa625, 0x2}, {0x8, 0x6, 0x1}, {0x2, 0x5, 0x1}, {0x5, 0x4, 0x10000}, {0x1, 0x81, 0x7fff}, {0x1, 0x1a0a, 0x60}, {0x3f, 0x7, 0x6}, {0x5, 0x401, 0x3}, {0x7fff, 0x4, 0xc27}, {0x4, 0x3, 0x1f}, {0x4, 0x1, 0xd}, {0xfff, 0x7fff, 0x7}, {0x2, 0x3, 0x42f}, {0x5, 0x1, 0x700}, {0x6, 0x80, 0xf24d}, {0x5, 0x401, 0x2}, {0xfff, 0xc, 0x20}, {0x7ff, 0x4, 0x6}, {0x6, 0x7, 0xff}, {0x6, 0x1, 0x5}, {0xbd1, 0x5, 0x12}, {0x4, 0x948}, {0xa9, 0x8001, 0x2}, {0x8001, 0x68, 0x8000080}, {0x4, 0x401, 0x5}, {0xffffffe0, 0x2, 0xfff}, {0x1, 0x0, 0x1}, {0x5, 0x22988cfa, 0x1}, {0x3ff, 0x54be, 0x4}, {0x6ed68ab, 0x8, 0x917}, {0x1ff80000, 0x9}, {0x5, 0x7, 0x20}, {0x401, 0x40, 0x1ff}, {0x2, 0x80, 0x8}, {0x0, 0x8000, 0x3c7d}, {0x7fff, 0xfff, 0xbd6}, {0x6, 0x7}, {0x401, 0x800, 0x6}, {0x3, 0x7f, 0x1ff}, {0x5, 0x10000}, {0x0, 0x9, 0xca}, {0x7fff, 0x9, 0x1000}, {0x2, 0x80, 0x2}, {0x8, 0x8000, 0x4}, {0x7584, 0x80, 0x4}, {0x80000001, 0x800, 0x8}, {0x7fff, 0x2, 0x1}, {0x9, 0x6, 0x7}, {0x2, 0x80000000, 0x1}, {0x8, 0x5, 0x1f}, {0x6, 0x8}, {0x9, 0x10000, 0x9}, {0x2b, 0x5d49, 0x7}, {0x1000, 0x6, 0x1000}, {0x80000000, 0x87, 0x7}, {0x1, 0x3a68, 0x7fff}, {0x5, 0x400, 0x1}, {0x9, 0x9, 0x7ff}, {0x1f, 0x2}, {0x8, 0x8819, 0xffff7fff}, {0x0, 0x4c, 0x8}, {0x1ff, 0x8476, 0x2}, {0x200, 0xff, 0x1}, {0x20, 0x4, 0x81}, {0x5, 0x10000, 0x1}, {0x2, 0x9, 0x3}]})
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

[  229.255171][T10183] binder: 10183:10183 ioctl c018620c 20000540 returned -22
[  229.284912][T10183] binder: 10183:10183 ioctl 400454cb 1 returned -22
14:00:14 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000040)={0x1, 0xe1}, 0x2)

[  229.335436][T10183] binder: 10183:10183 ioctl 400454cb 1 returned -22
14:00:14 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x771183, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000040)={0xb532, "889066ab6d6e5ad978cfb8ea732394f3bf6c5086164099722c575ecf3dfa87c0", 0x1, 0x40, 0xfff, 0x96, 0x4, 0x2, 0x81, 0x81})
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)

[  229.447334][T10191] misc userio: Invalid payload size
[  229.462307][T10192] binder: 10192:10192 ioctl c018620c 20000540 returned -22
[  229.482864][T10197] misc userio: Invalid payload size
[  229.551920][T10190] binder: 10188:10190 ioctl c018620c 20000540 returned -22
[  229.581698][T10190] binder: 10188:10190 ioctl 802c550a 20001600 returned -22
[  229.686951][T10204] binder: 10188:10204 ioctl c018620c 20000540 returned -22
[  229.712151][T10202] binder: 10199:10202 ioctl c018620c 20000540 returned -22
[  229.720695][T10202] binder: 10199:10202 ioctl 4054561e 20000040 returned -22
14:00:14 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="a4f946844ac097132ec05c53a66c5b1deeef876a19b0accf8963f18fe04e7dbdcf9c56b5f4a68ed833fdf59e4b74e5627b93dd07aa790d7a7f77bb4bbd7e6e222713c8cbb99330cc9ae0b7822c63993b751d13c616f112eaebd8b9342d561f48a02eeaacf710512ae72ad73667c767485abd133c9b3c46a98d977a41935d1abf08a77de560893f7d61f213c4d2cd6a70f896f3fcfbf6a5b949220040a268d7ec9bf963c760369458bff09791b7f4f5105a7b9296", 0xb4}], 0x1)

[  229.731216][T10190] binder: 10188:10190 ioctl 802c550a 20001600 returned -22
[  229.750627][T10202] binder: 10199:10202 ioctl c018620c 20000540 returned -22
[  229.758971][T10209] binder: 10199:10209 ioctl 4054561e 20000040 returned -22
14:00:14 executing program 2:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80800)
dup(r0)
r1 = getpid()
ptrace(0x10, r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRESHEX=r2, @ANYBLOB='\x00\x00', @ANYBLOB="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", @ANYBLOB="2c706f733c6961636c2c63616368473d6e6f6e652c6e6f657874656e642c6d6d619a05ddf970d52a322742b410b3a04a96f7f3af32b3354a94ea6abb3b3986e2da4ab4c30000"])

14:00:14 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
lsetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00', &(0x7f00000002c0)='md5sumsecurity{lo\x00', 0x12, 0x3)
recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r7 = dup2(r6, r5)
ioctl$BINDER_WRITE_READ(r7, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000200)={<r8=>0xffffffffffffffff})
ioctl$sock_SIOCDELDLCI(r8, 0x8981, &(0x7f0000000180)={'erspan0\x00', 0xebe5})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc01c64b9, &(0x7f0000000140)={&(0x7f0000000080)=[0xffff, 0x7fffffff, 0x28, 0xca, 0x1, 0x8, 0x4af9, 0x80000001, 0x1000000], &(0x7f0000000300)=[0x0], 0x9, 0x8000000, 0xeeeeeeee})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000280)=0x1)
write$P9_RFSYNC(r0, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7)

[  229.926757][T10185] binder: 10171:10185 ioctl 4b49 20000180 returned -22
[  229.933704][T10213] misc userio: Invalid payload size
[  229.965564][T10215] binder: 10171:10215 ioctl c018620c 20000540 returned -22
14:00:15 executing program 1:
clone(0x20000000a5000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x802)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

[  230.092462][T10220] binder: 10219:10220 ioctl c018620c 20000540 returned -22
14:00:15 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x800)
r2 = dup2(r1, r0)
ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f00000001c0)={@any, 0x1, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0xa4, 0x0, &(0x7f0000000100)=[@acquire_done={0x40106309, 0x1}, @acquire={0x40046305, 0x1}, @exit_looper, @increfs_done={0x40106308, 0x1}, @decrefs={0x40046307, 0x1}, @release, @clear_death={0x400c630f, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@flat=@weak_binder={0x77622a85, 0x0, 0x1}, @fda={0x66646185, 0x9, 0x1, 0x17}, @flat=@handle={0x73682a85, 0xa, 0x1}}, &(0x7f00000000c0)={0x0, 0x18, 0x34}}}, @dead_binder_done], 0x0, 0x0, 0x0})

[  230.172909][T10226] binder: 10225:10226 ioctl c018620c 20000540 returned -22
[  230.193898][T10229] binder: 10219:10229 ioctl c018620c 20000540 returned -22
[  230.227389][T10229] binder: 10219:10229 ioctl 89e2 20000200 returned -22
[  230.266282][T10229] binder: 10219:10229 ioctl c01c64b9 20000140 returned -22
[  230.287375][T10229] binder: 10219:10229 ioctl 40086200 20000280 returned -22
[  230.312188][T10229] misc userio: Invalid payload size
[  230.351912][T10234] binder: 10233:10234 ioctl 800443d3 200001c0 returned -22
[  230.369196][T10235] binder: 10235:10235 ioctl c018620c 20000540 returned -22
14:00:15 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x800)
r0 = openat$mice(0xffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x101400)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00')
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
recvfrom$inet6(r5, &(0x7f00000001c0)=""/145, 0x91, 0x0, &(0x7f0000000100)={0xa, 0x4e22, 0xb6b, @loopback, 0x2}, 0x1c)
sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000280)={0x28, r2, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x104}, 0x0)
ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000002c0)=""/146)
r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r7 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r8 = dup2(r7, r6)
ioctl$BINDER_WRITE_READ(r8, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, [], 0x16}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x4000c801)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

[  230.524021][T10239] binder: 10238:10239 ioctl c018620c 20000540 returned -22
[  230.536724][T10240] binder: 10240:10240 ioctl c018620c 20000540 returned -22
[  230.641536][T10239] binder: 10238:10239 ioctl c018620c 20000540 returned -22
14:00:15 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$procfs(0xffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0)
setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f00000000c0)=0x1, 0x4)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000140), 0x4)
r3 = dup2(r2, r1)
rt_sigpending(&(0x7f0000000040), 0x8)
r4 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x2, 0x101000)
read$snddsp(r4, &(0x7f00000002c0)=""/149, 0x95)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x24, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0663040400000000000000400000000009631040050000b320cc04ed03a8a98541ac111f5de266b67011c5e3f137a190bf00bd6b2868b9111e0ecfd0d7c2a9ab852d28b5cae9e42cf29acffbe6bc25b82bc197e08ae251f96f73ce87f77f55b32aeef9bc5c074527e6953d134bd9b9fc20f6104c5f56981b763b681f797e9840cc28a258702c007899d1272cac0659da962bbaed4fb8386d72c3c43d3311901054de763b568a5a01cb787e67d861ffc019e3c29458fde7cee5404e407cdb8400"/204], 0x0, 0x0, 0x0})
r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r7 = dup2(r6, r5)
ioctl$BINDER_WRITE_READ(r7, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000100)=[{{0x2, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x4}, {0x3, 0x1}}, {{0x0, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x4}, {0x3, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x3}}], 0x40)
r8 = getpid()
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x78, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x101}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr="bfea18d58666ce3628787980439e6681"}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}]}, 0x78}, 0x1, 0x0, 0x0, 0x200080c1}, 0x40851)
ptrace(0x10, r8)
prlimit64(r8, 0x1, 0x0, &(0x7f00000001c0))

14:00:15 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r3 = dup2(r2, r1)
r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$BINDER_WRITE_READ(r6, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f0000000080)=r3)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x1, {0x40, 0x1, 0x4}}, 0x14)

[  230.871662][T10229] binder: 10219:10229 ioctl c018620c 20000540 returned -22
[  230.987907][T10253] binder: 10251:10253 ioctl c018620c 20000540 returned -22
[  231.000398][T10254] binder: 10254:10254 ioctl c018620c 20000540 returned -22
14:00:16 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x802)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

14:00:16 executing program 2:
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
open(&(0x7f0000000280)='./file0\x00', 0x3b9240, 0x140)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x42000, 0x0)
ioctl$GIO_CMAP(r7, 0x4b70, &(0x7f0000000080))
dup(r6)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="ccdea389be06786b9367ee30bebcf092ca515afb2ed94d25713721b5e0627e0e88595ed2d13aba93f55106dbcd221cb237d73b0d099a9e2a5014486c943e1fbeb18e8a0ce01169aabe70ff0f96697c35cf96e914394329c1216aa2b190348f61c59e27502c3c870d7a7d3fbc97ee37cf908f14dc9e12d71c6017de5d6b42105a1a4537e64292e29628e83a71eae1b07a2e00000000000000"], 0x40}}, 0x0)

[  231.044863][T10256] misc userio: Invalid payload size
[  231.089611][T10259] binder: 10259:10259 ioctl c018620c 20000540 returned -22
[  231.098350][T10256] misc userio: Invalid payload size
[  231.134447][T10262] misc userio: Invalid payload size
[  231.167572][T10256] binder: 10255:10256 ioctl c018620c 20000540 returned -22
[  231.175531][T10262] binder: 10255:10262 ioctl 800454e1 20000080 returned -22
[  231.219470][T10266] binder: 10264:10266 ioctl c018620c 20000540 returned -22
14:00:16 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000040))
r3 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl(r4, 0x400, &(0x7f0000000080)="53d024153251b28a97fa2e0b4d346accec5c1adf79874e72ae2e3c2780ba333bdbd7b95b1baed3bdfd24b5c49c11dbf21fdc99ae4881e0701eea07cd7fec1e2d1e8c6f6ef8060bb44603efac928a0c990d6262")
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)

14:00:16 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = openat$pfkey(0xffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x123040, 0x0)
openat$snapshot(0xffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x101000, 0x0)
ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000080))
r3 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

14:00:16 executing program 3:
r0 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x22080, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040))
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x777a8adc, 0x4)
r1 = openat$full(0xffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x8000, 0x0)
mq_timedsend(r1, &(0x7f0000000100)="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", 0x1000, 0x40, &(0x7f0000001100)={0x77359400})
r2 = socket$xdp(0x2c, 0x3, 0x0)
signalfd4(r2, &(0x7f0000001140)={[0x0, 0xdd]}, 0x8, 0x80800)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f0000001200)={0x0, 0x4, 0x7113cd49, <r3=>0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x980907, 0x5, [], @string=&(0x7f0000001180)=0x7}})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001280)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f00000013c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x44100}, 0xc, &(0x7f0000001380)={&(0x7f00000012c0)={0xc0, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x800}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000014}, 0x269ea34ad8216ca1)
r5 = syz_open_dev$vcsu(&(0x7f0000002940)='/dev/vcsu#\x00', 0x0, 0x189141)
setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000002980)=0x1000000, 0x4)
r6 = openat$vcs(0xffffff9c, &(0x7f00000029c0)='/dev/vcs\x00', 0x101000, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000002b00)={&(0x7f0000002a00), 0xc, &(0x7f0000002ac0)={&(0x7f0000002a40)={0x60, 0x3, 0x8, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8035}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x81}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1b}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6005}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x4008080)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002b80)='nl80211\x00')
sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000002c40)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x28, r7, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x7}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0x0, 0xfac01]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000880)
r8 = creat(&(0x7f0000002c80)='./file0\x00', 0x2)
sendmsg$NL80211_CMD_SET_REG(r8, &(0x7f0000002d80)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x1c, r7, 0x2, 0x70bd28, 0x1, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xc1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000040)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000002e80)={{0xa, 0x4e23, 0x80000001, @local, 0x20}, {0xa, 0x4e20, 0x5, @mcast2, 0x6}, 0xfff, [0x401, 0x4, 0x8, 0x2, 0x7, 0x3, 0x3, 0x5]}, 0x5c)

[  231.451915][T10277] binder: 10274:10277 ioctl c018620c 20000540 returned -22
[  231.464329][   T33] audit: type=1400 audit(1586268016.456:12): avc:  denied  { write } for  pid=10276 comm="syz-executor.1" name="net" dev="proc" ino=29320 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1
14:00:16 executing program 2:
syz_read_part_table(0x7fffffff, 0x15555555555557b6, &(0x7f0000000000))

14:00:16 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20502, 0x0)

[  231.487795][   T33] audit: type=1400 audit(1586268016.456:13): avc:  denied  { add_name } for  pid=10276 comm="syz-executor.1" name="pfkey" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1
[  231.498075][T10279] binder: 10276:10279 ioctl c018620c 20000540 returned -22
[  231.509823][   T33] audit: type=1400 audit(1586268016.466:14): avc:  denied  { create } for  pid=10276 comm="syz-executor.1" name="pfkey" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:kernel_t:s0 tclass=file permissive=1
14:00:16 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
openat$vcsa(0xffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x62c800, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

14:00:16 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r1 = openat$vga_arbiter(0xffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x8300, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000100)={0x3, 0x1, 0xf, 0x3ff, 'syz0\x00'})
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$BINDER_WRITE_READ(r4, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r5 = signalfd(r0, &(0x7f0000000040)={[0x8, 0x1]}, 0x8)
writev(r5, &(0x7f0000000000), 0x0)

[  232.001483][T10300] binder: 10296:10300 ioctl c018620c 20000540 returned -22
[  232.088255][T10307] binder: 10298:10307 ioctl c018620c 20000540 returned -22
14:00:17 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
r3 = openat$vcsu(0xffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x14080, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r6}, 0x8)
r7 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r8 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r9 = dup2(r8, r7)
ioctl$BINDER_WRITE_READ(r9, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r9, 0xc0845658, &(0x7f0000000180)={0x0, @reserved})
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={<r10=>r6, 0x6}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000100)={r10, 0x5, "aeca3d8da7"}, &(0x7f0000000140)=0xd)
r11 = fcntl$dupfd(r3, 0x406, 0xffffffffffffffff)
ioctl$EXT4_IOC_GROUP_ADD(r11, 0x40246608, &(0x7f0000000240)={0x0, 0x6, 0x7ff, 0xd8, 0x6, 0x3})
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

[  232.358299][T10310] binder: 10309:10310 ioctl c018620c 20000540 returned -22
[  232.397063][T10310] binder: 10309:10310 ioctl c0845658 20000180 returned -22
[  232.435289][T10310] binder: 10309:10310 ioctl c018620c 20000540 returned -22
[  232.483180][T10313] binder: 10309:10313 ioctl c018620c 20000540 returned -22
14:00:17 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x801)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x800)
lookup_dcookie(0xff, &(0x7f0000000080)=""/247, 0xf7)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$BINDER_WRITE_READ(r4, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000000)=0x10000)
r5 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r7 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r8 = dup2(r7, r6)
ioctl$BINDER_WRITE_READ(r8, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$UI_SET_SWBIT(r8, 0x4004556d, 0x3)

14:00:17 executing program 2:
syz_read_part_table(0x7fffffff, 0x15555555555557b6, &(0x7f0000000000))

[  232.683473][T10315] IPVS: ftp: loaded support on port[0] = 21
[  232.806863][T10318] binder: 10317:10318 ioctl c018620c 20000540 returned -22
[  232.829362][T10322] binder: 10298:10322 ioctl c018620c 20000540 returned -22
[  232.859789][T10343] binder: 10317:10343 ioctl 2275 20000000 returned -22
[  232.899275][T10318] binder: 10317:10318 ioctl c018620c 20000540 returned -22
[  232.922227][T10318] binder: 10317:10318 ioctl c018620c 20000540 returned -22
14:00:18 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @l2={0x1f, 0xfffa, @fixed={[], 0x11}, 0x1, 0x1}, @nfc={0x27, 0x1, 0x4, 0x1}, @llc={0x1a, 0x312, 0x7f, 0x19, 0x4, 0x9, @broadcast}, 0x6, 0x0, 0x0, 0x0, 0xff, 0x0, 0x200, 0x0, 0x1})
r1 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@sco={0x1f, @none}, &(0x7f00000000c0)=0x80, 0x800)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000200))
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$BINDER_WRITE_READ(r4, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0)
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
writev(r5, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)

[  232.967605][T10343] binder: 10317:10343 ioctl 4004556d 3 returned -22
[  232.997689][T10346] binder: 10317:10346 ioctl 2275 20000000 returned -22
[  233.028583][T10343] binder: 10317:10343 ioctl c018620c 20000540 returned -22
14:00:18 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
renameat(r2, &(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00')
r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r7 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r8 = dup2(r7, r6)
ioctl$BINDER_WRITE_READ(r8, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

[  233.317333][T10359] binder: 10356:10359 ioctl c018620c 20000540 returned -22
[  233.345746][T10397] binder: 10363:10397 ioctl c018620c 20000540 returned -22
[  233.356761][T10398] binder: 10398:10398 ioctl c018620c 20000540 returned -22
14:00:18 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x63, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0})
write$capi20_data(r2, &(0x7f0000000040)={{0x10, 0x1, 0xfb, 0x83, 0x8001}, 0x24, "8d9706d3648e68602ba29cd0dabb41161ea514dd2f73f87ffed1275c6aee50cbb9590fd2"}, 0x36)

[  233.362708][T10374] binder: 10356:10374 ioctl 4140 0 returned -22
[  233.371816][T10397] binder: 10363:10397 ioctl c018620c 20000540 returned -22
[  233.379036][T10374] misc userio: Invalid payload size
[  233.391392][T10398] binder: 10398:10398 ioctl c018620c 20000540 returned -22
14:00:18 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x323402, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x802)
prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffe000/0x1000)=nil)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000040)=0x2)
r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$BINDER_WRITE_READ(r6, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)
r7 = accept4$netrom(r6, &(0x7f0000000200)={{0x3, @rose}, [@null, @rose, @bcast, @null, @default, @remote, @default, @bcast]}, &(0x7f0000000280)=0x48, 0x100000)
ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40046607, &(0x7f00000002c0)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
recvmsg(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
fcntl$F_SET_FILE_RW_HINT(r8, 0x40e, &(0x7f0000000140)=0x1)

[  233.559527][T10315] chnl_net:caif_netlink_parms(): no params data found
[  233.606066][T10442] binder: 10436:10442 ioctl c018620c 20000540 returned -22
[  233.719367][T10458] binder: 10451:10458 ioctl c018620c 20000540 returned -22
[  233.748319][T10459] binder: 10459:10459 ioctl c018620c 20000540 returned -22
[  233.768645][T10464] binder: 10451:10464 ioctl c018620c 20000540 returned -22
[  233.781084][T10459] binder: 10459:10459 ioctl 40047452 20000040 returned -22
[  233.792037][T10464] binder: 10451:10464 ioctl c01064c8 200000c0 returned -22
[  233.965615][T10315] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.973279][T10315] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.982936][T10315] device bridge_slave_0 entered promiscuous mode
[  234.011211][T10315] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.019125][T10315] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.028954][T10315] device bridge_slave_1 entered promiscuous mode
[  234.120860][T10315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  234.152065][T10315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  234.216032][T10315] team0: Port device team_slave_0 added
[  234.229440][T10315] team0: Port device team_slave_1 added
[  234.286291][T10315] batman_adv: batadv0: Adding interface: batadv_slave_0
[  234.293373][T10315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.321053][T10315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  234.349319][T10315] batman_adv: batadv0: Adding interface: batadv_slave_1
[  234.356788][T10315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.383729][T10315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  234.481904][T10315] device hsr_slave_0 entered promiscuous mode
[  234.525818][T10315] device hsr_slave_1 entered promiscuous mode
[  234.624135][T10315] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  234.631773][T10315] Cannot create hsr debugfs directory
[  234.881424][T10315] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  234.935912][T10315] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  234.996724][T10315] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  235.143786][T10315] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  235.441930][T10315] 8021q: adding VLAN 0 to HW filter on device bond0
[  235.481306][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  235.490947][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  235.513872][T10315] 8021q: adding VLAN 0 to HW filter on device team0
[  235.539155][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  235.549661][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  235.559227][ T2692] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.566637][ T2692] bridge0: port 1(bridge_slave_0) entered forwarding state
[  235.587108][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  235.596762][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  235.606868][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  235.616183][ T2692] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.624520][ T2692] bridge0: port 2(bridge_slave_1) entered forwarding state
[  235.645093][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  235.665891][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  235.685294][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  235.696790][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  235.728373][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  235.737405][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  235.748282][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  235.758230][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  235.768190][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  235.795169][T10315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  235.808539][T10315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  235.840490][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  235.850568][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  235.895543][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  235.903343][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  235.926081][T10315] 8021q: adding VLAN 0 to HW filter on device batadv0
[  235.990625][ T8999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  236.002312][ T8999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  236.059108][ T8999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  236.068988][ T8999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  236.085041][ T8999] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  236.094525][ T8999] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  236.112702][T10315] device veth0_vlan entered promiscuous mode
[  236.158863][T10315] device veth1_vlan entered promiscuous mode
[  236.226550][ T8999] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  236.236240][ T8999] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  236.247942][ T8999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  236.258471][ T8999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  236.289319][T10315] device veth0_macvtap entered promiscuous mode
[  236.313194][T10315] device veth1_macvtap entered promiscuous mode
[  236.355807][ T8999] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  236.365580][ T8999] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  236.379055][T10315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  236.390167][T10315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.400532][T10315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  236.411407][T10315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.421636][T10315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  236.432509][T10315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.446821][T10315] batman_adv: batadv0: Interface activated: batadv_slave_0
[  236.465490][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  236.475899][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  236.532987][T10315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  236.544359][T10315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.554633][T10315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  236.565331][T10315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.575574][T10315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  236.586259][T10315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.600393][T10315] batman_adv: batadv0: Interface activated: batadv_slave_1
[  236.609047][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  236.623580][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  237.176381][T10580] QAT: Invalid ioctl
[  237.207653][T10580] QAT: Invalid ioctl
14:00:22 executing program 3:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000340000705000000ffeb00000000000000", @ANYRES32, @ANYBLOB="0800010068746262dd00000000000200"], 0x3}}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00$\x00\a\a\x00'/20, @ANYRES32=r3, @ANYBLOB="00000000fffffffff6ffffff0b0001006d756c746971000008"], 0x3}}, 0x0)
r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$BINDER_WRITE_READ(r6, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETFB(r6, 0xc01c64ad, &(0x7f0000000000)={0x3bae, 0x5, 0x20, 0x2, 0x6, 0x48d, 0x9})
splice(r0, 0x0, r2, 0x0, 0x38, 0x0)

14:00:22 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00')
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x721, 0x170bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xd52}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x47ec}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MON={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000011}, 0x8845)
fspick(r2, &(0x7f0000000080)='./file0\x00', 0x1)
dup2(r1, r0)
r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r7 = syz_open_dev$binderN(0x0, 0x0, 0x0)
dup2(r7, r6)
ioctl$BINDER_WRITE_READ(r7, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0})

14:00:22 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2022)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc0485661, &(0x7f0000000140)={0x6, 0x1, @stop_pts=0x7ff})
r6 = dup2(r2, r1)
ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000100)=0x18)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="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", 0x1cf}], 0x1)

14:00:22 executing program 2:
syz_read_part_table(0x7fffffff, 0x15555555555557b6, &(0x7f0000000000))

14:00:22 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
dup2(r1, r0)
r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x8, 0x400400)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r5 = dup2(r4, r3)
r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r7 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r8 = dup2(r7, r6)
ioctl$BINDER_WRITE_READ(r8, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
getsockopt$netlink(r8, 0x10e, 0x9, &(0x7f0000000080)=""/214, &(0x7f0000000180)=0xd6)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xfffffffffffffe53)
connect$can_bcm(r5, &(0x7f0000001740)={0x1d, r9}, 0x10)

[  237.464026][T10595] binder: 10590:10595 ioctl c018620c 20000540 returned -22
[  237.490127][T10595] binder: 10590:10595 ioctl c01c64ad 20000000 returned -22
[  237.523922][T10597] binder: 10588:10597 ioctl c018620c 20000540 returned -22
[  237.544155][T10598] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  237.575231][T10599] binder: 10588:10599 ioctl c0485661 20000140 returned -22
[  237.615782][T10597] binder: 10588:10597 ioctl c018620c 20000540 returned -22
[  237.626863][T10595] binder: 10590:10595 ioctl c018620c 20000540 returned -22
[  237.638487][T10598] binder: 10590:10598 ioctl c01c64ad 20000000 returned -22
14:00:22 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r7}}, 0x10)
write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000040)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @in6={0xa, 0x4e20, 0x800, @loopback, 0x40}}}, 0x90)

14:00:22 executing program 3:
set_mempolicy(0x3, &(0x7f0000000040)=0x10000010000111, 0x1ff)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00')
clone(0x4412c500, 0x0, 0x0, 0x0, 0x0)
socket(0x28, 0x3, 0x100000001)
socket(0x2, 0x3, 0x100000001)

14:00:23 executing program 1:
clone(0x7707d080, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000000)={0x21, @loopback, 0x4e24, 0x4, 'lblc\x00', 0x0, 0x2, 0x19}, 0x2c)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

[  238.092887][T10610] IPVS: ftp: loaded support on port[0] = 21
[  238.199618][T10599] binder: 10588:10599 ioctl c018620c 20000540 returned -22
[  238.208039][T10616] binder: 10588:10616 ioctl c0485661 20000140 returned -22
[  238.221400][T10614] binder: 10612:10614 ioctl c018620c 20000540 returned -22
[  238.245394][T10599] binder: 10588:10599 ioctl c018620c 20000540 returned -22
14:00:23 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x46802)
io_setup(0x403, &(0x7f0000000080)=<r2=>0x0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x0, 0xd00800}])
clock_gettime(0x0, &(0x7f00000002c0)={<r3=>0x0, <r4=>0x0})
io_pgetevents(r2, 0x18, 0x6, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000300)={r3, r4+10000000}, &(0x7f0000000380)={&(0x7f0000000340)={[0x3f7, 0x9]}, 0x8})
r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binderN(0x0, 0x0, 0x0)
prctl$PR_GET_THP_DISABLE(0x2a)
r7 = dup2(r6, r5)
ioctl$BINDER_WRITE_READ(r7, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_FREE_BUFS(r7, 0x4008641a, &(0x7f0000000200)={0x7, &(0x7f00000000c0)=[0x65fade67, 0x0, 0x81, 0x2, 0x6, 0xbd80000, 0x1]})
r8 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r9 = dup2(r8, r0)
ioctl$BINDER_WRITE_READ(r9, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
waitid$P_PIDFD(0x3, r9, &(0x7f0000000040), 0x1, &(0x7f0000000140))
r10 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
writev(r10, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)

[  238.408342][T10611] IPVS: ftp: loaded support on port[0] = 21
14:00:23 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r5, 0x40045731, &(0x7f0000000040)=0x1)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$SIOCX25GFACILITIES(r5, 0x89e2, &(0x7f0000000080))

14:00:23 executing program 2:
syz_read_part_table(0x7fffffff, 0x15555555555557b6, &(0x7f0000000000))

[  238.706496][T10665] binder: 10662:10665 ioctl c018620c 20000540 returned -22
[  238.734491][T10665] binder: 10662:10665 ioctl 4008641a 20000200 returned -22
14:00:23 executing program 3:
set_mempolicy(0x3, &(0x7f0000000040)=0x10000010000111, 0x1ff)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00')
clone(0x4412c500, 0x0, 0x0, 0x0, 0x0)
socket(0x28, 0x3, 0x100000001)
socket(0x2, 0x3, 0x100000001)

[  238.763599][T10668] binder: 10667:10668 ioctl c018620c 20000540 returned -22
[  238.771081][T10665] binder: 10662:10665 ioctl c018620c 20000540 returned -22
[  238.774254][T10665] misc userio: Invalid payload size
[  238.815592][T10670] binder: 10667:10670 ioctl 40045731 20000040 returned -22
[  238.838877][T10672] binder: 10662:10672 ioctl c018620c 20000540 returned -22
[  238.860537][T10675] binder: 10667:10675 ioctl c018620c 20000540 returned -22
[  238.870650][T10665] binder: 10662:10665 ioctl 4008641a 20000200 returned -22
[  238.885869][  T722] tipc: TX() has been purged, node left!
[  238.891549][T10677] binder: 10662:10677 ioctl c018620c 20000540 returned -22
[  238.902142][T10668] binder: 10667:10668 ioctl 89e2 20000080 returned -22
[  238.941968][T10670] binder: 10667:10670 ioctl c018620c 20000540 returned -22
[  239.113870][T10681] IPVS: ftp: loaded support on port[0] = 21
14:00:24 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r4 = openat(r3, &(0x7f0000000040)='./file0\x00', 0x22100, 0x24)
ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000080)=0xe86)

14:00:24 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
sendmsg$AUDIT_ADD_RULE(r5, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f00000004c0)={&(0x7f0000000080)={0x430, 0x3f3, 0x20, 0x70bd26, 0x25dfdbfb, {0x10, 0x0, 0xf, [0xfff, 0x7, 0xffffffff, 0x3, 0xa8, 0x1f, 0x6, 0x3, 0x6, 0x9, 0xfffffffc, 0x10001, 0xff, 0x800, 0x7, 0xc7, 0x7, 0xffffffff, 0xbc5, 0xf3, 0x1000, 0x5, 0x3f, 0x3ff, 0x40, 0x5, 0x5, 0x1, 0x3f03, 0x0, 0x0, 0x7f, 0x2, 0x3f, 0x4, 0x0, 0x6, 0x7ff, 0x7, 0x1, 0x0, 0x63d, 0x0, 0x9, 0x0, 0xffffffc1, 0x3, 0x2a07, 0x3, 0x2, 0x7ff, 0x401, 0x3, 0x6e, 0x4, 0x5, 0x3, 0xffffffff, 0xfffffff7, 0x9, 0x3, 0x3, 0x8, 0x1], [0x3, 0x7fffffff, 0x101, 0xfffffc01, 0x40, 0x1, 0x7, 0x8000, 0x3ff, 0x0, 0x6, 0xfcb, 0x0, 0x1, 0x7f, 0xfff, 0x81, 0x0, 0x4, 0x8, 0x80000000, 0x5, 0x2, 0x1d10b7a9, 0x4, 0x20, 0x5, 0x1, 0x9, 0x1, 0x101, 0xfffffffb, 0x401, 0x4, 0x7, 0xff, 0x1, 0x3, 0x7, 0x7, 0xff, 0x3, 0x2, 0x0, 0x3, 0x400, 0x2, 0x3, 0xffffffff, 0x300000, 0x7f, 0x8, 0x1, 0x5, 0x8, 0x5, 0x1, 0x6, 0x1, 0x5, 0x6, 0x6ac, 0x4, 0x4], [0x7, 0x2, 0x7, 0x40, 0x1f, 0x5, 0x7, 0x7, 0x0, 0x5, 0x1, 0xdca, 0x5, 0x40, 0x8, 0x8000, 0xfbab, 0x8, 0x1, 0x2, 0xfff, 0x7f, 0x100, 0x6, 0x20, 0x0, 0x7f, 0x1000, 0x5c7, 0x95, 0x6, 0xfff, 0x6, 0x1, 0x323d, 0x0, 0x8a99, 0x0, 0x3, 0x101, 0x7, 0xb5, 0x9, 0x9, 0x8, 0xfffffbff, 0x4, 0x101, 0x7, 0x5, 0x7fffffff, 0x1f, 0xf241, 0x7fffffff, 0x8000, 0x4, 0x75, 0x1, 0x0, 0x5, 0x4, 0x9, 0x6abb, 0x1], [0x4548, 0x998e, 0x5, 0xfff, 0x101, 0x5, 0x8000, 0x4, 0x51, 0x1, 0x68a2, 0x69b2, 0x1, 0x800, 0x0, 0x5, 0x3, 0x1, 0x3f, 0x5964, 0xc6b6, 0x1f, 0xe6a9, 0x7, 0x8, 0xd35, 0x91e, 0x1, 0x9, 0x4, 0x10001, 0x4e6, 0x92b7, 0x881, 0x4, 0x7fff, 0x3, 0x4, 0x0, 0x41, 0x329, 0x800, 0xf0, 0x2, 0x1cb, 0x8, 0x400, 0x10000, 0x2, 0x1, 0x4, 0x9, 0x0, 0x2, 0x7, 0xe92, 0x8001, 0x7, 0x38, 0xfffffff8, 0x347, 0xf01, 0x9, 0x3f], 0x10, ['/dev/binder#\x00', '\\@\x00']}, ["", "", "", "", "", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x4000}, 0x1000)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

[  239.418138][T10706] misc userio: Invalid payload size
[  239.437331][T10707] binder: 10707:10707 ioctl c018620c 20000540 returned -22
14:00:24 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000040))
r3 = openat$vcsa(0xffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x90000, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x28, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0963104000000000000000000000000000f7b163735400000008631040aa000000000000000000000000000000a77a51b3844789822bdfb86d50ba0b8151fe08a06656134cf260a7ae14eebb22b39ba17c2d97b7c37bad4f594856187d1791a88c68f89bae9dbbdd159432aa9ec22fc3c8196c0f558c467c15e5efc7bcdb68cb879af39cf3950b030aa92210108f2a1c08506c2542dff0efa469a6bf6e38400604007fd66bd71624747eea5f"], 0x5c, 0x0, &(0x7f0000000140)="23bf6a69193d5363a860e945341b328d457f2609da6afdce397a0145c10dd0669e1ae9fc7586c29369663ef5f59a6b758b9e1aadddcd6fe1ccd7988c6c1b61f4f705245f02f7252f00cca9f2db7d4e6fbbc2ecef719dd56571f5bb82"})
getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000600), &(0x7f0000000680)=0x60)
ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f00000003c0)=@get={0x1, &(0x7f0000000100)=""/63, 0x9})
ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000080)={0x6, 0x101, @value=0xfff7fffffffff000})
r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$BINDER_WRITE_READ(r6, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r6, 0xc0fc4111, &(0x7f00000002c0)={0x1000, [0x1000, 0x7f, 0x80000001], [{0x101, 0x1, 0x1, 0x1, 0x1}, {0x1f, 0x71, 0x1, 0x0, 0x1}, {0x2, 0x236, 0x1, 0x0, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x800, 0x41, 0x1, 0x1, 0x0, 0x1}, {0x0, 0x7, 0x1, 0x1, 0x0, 0x1}, {0x7f, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x80, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x1, 0x1}, {0xffffffff, 0x9, 0x0, 0x1, 0x1}, {0x8, 0xfffffeff, 0x1, 0x0, 0x1}, {0x8001, 0x6, 0x0, 0x1, 0x1}]})

[  239.481821][T10712] misc userio: Invalid payload size
14:00:24 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="240000004f0007031dfffd946f610500070000040200000077000000421ba3a20400f27e", 0x24}], 0x1}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00')
sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x14, r3, 0x711, 0x0, 0x0, {0x7}}, 0x14}}, 0x0)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x859}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x480d}, 0x4)

14:00:24 executing program 0:
syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x4, 0x40)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r2}, 0x8)
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000140)={r2, 0x4, 0x30}, &(0x7f00000000c0)=0xc)
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r6 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
writev(r6, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)

[  239.810173][T10718] binder: 10716:10718 ioctl c018620c 20000540 returned -22
[  239.841914][T10718] binder: 10716:10718 ioctl c0fc4111 200002c0 returned -22
[  239.864677][T10721] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[  239.892408][T10723] binder: 10716:10723 ioctl c018620c 20000540 returned -22
[  239.919478][T10721] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
14:00:25 executing program 2:
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))

[  240.000519][T10728] binder: 10724:10728 ioctl c018620c 20000540 returned -22
[  240.050321][T10728] misc userio: Invalid payload size
14:00:25 executing program 3:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r4 = openat(r3, &(0x7f0000000040)='./file0\x00', 0x22100, 0x24)
ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000080)=0xe86)

14:00:25 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r5}}, 0x10)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r5, 0x7fffffff, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0xfff, @remote, 0x3ff}, @ib={0x1b, 0x1, 0x20, {"9849e36ec6294397b9fdd5d1f74a5ce9"}, 0x3f, 0x2, 0x10001}}}, 0x118)
r6 = syz_open_dev$binderN(0x0, 0x0, 0x0)
dup2(r6, r0)
ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000040)={0x1c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0e630c4002000000000000000000000006630440010000000b630000cd6c774eaf40e159b0824673441aeeb694973b31bef337af475c4db54f70a7b56c26fbc1827a1a1edcb72f4a2f54a91b34ae46b177ce2776bfd21849b789fbe6b49029dc166bf0044707d6e7f61e0c86518d63228252b59c16a4a32b3e76c6437cc4f3913cd0c4756b946118cb0698ad810680229d4f7f903177c5a80a6993ad59cdb3fae28c5a47c38db43a0c6abbabaec54c66b2"], 0x0, 0x0, 0x0})

14:00:25 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendfile64(0xffffffffffffffff, r0, &(0x7f0000000040)=0xfffffffffffffbff, 0x80000001)
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$proc_capi20ncci(0xffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x10000, 0x0)
ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000140)=0x1)
r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x48441, 0x0)
r3 = msgget$private(0x0, 0x0)
msgrcv(r3, 0x0, 0x0, 0x0, 0x0)
msgrcv(r3, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(r3, 0x0)
msgctl$MSG_STAT_ANY(r3, 0xd, &(0x7f00000001c0)=""/56)
openat$loop_ctrl(0xffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x10400, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)

[  240.252841][T10733] binder: 10732:10733 ioctl c018620c 20000540 returned -22
[  240.317164][T10733] binder: 10732:10733 ioctl c018620c 20000040 returned -22
[  240.355685][T10740] misc userio: Invalid payload size
14:00:25 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0x7)
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmsg$sock(r2, &(0x7f0000000300)={&(0x7f0000000040)=@isdn={0x22, 0x4b, 0xfc, 0x2, 0x7}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="b1e0a2f25d9ab040f4713e5d4b5c76e7af4b6cf1e462047d24766827ab58a20b6d3e524869f247b17e73643e280094fe4c1e54628ee5a99ed359a4c64cf268fc049b1cde7bedc70cc644a5da20fd65", 0x4f}, {&(0x7f0000000140)="a68c9fcb6b17ce667c0523c8be54d6f1763b5f", 0x13}, {&(0x7f0000000180)="6fa47e90dc79de52f5fe362c026e62f2285cc9bc99d03677bdce279d285dae15a7f3f57db290d859648a9e27b10a7387cf330709a8da767fbc14db23c43100b253b466afe049c4f6fa4d3497604bbb7ba50d5a0f7b93a7", 0x57}, {&(0x7f0000000200)="27ce1adc247be61c45949022c5bb3be3eb72ee8127ab9a8770ae61d8e514bbd3ba9ba529a6751ce5e5d12d9780ecec40c03b826355335c41108d799c0f663f6314ef3d483306b1eb91d75430aa11ef3a4d6f184918ba6ba500317a7237d80aea09c3daae", 0x64}], 0x4, &(0x7f00000002c0)=[@timestamping={{0x10, 0x1, 0x25, 0x1e4}}], 0x10}, 0x20008841)

[  240.415682][T10740] binder: 10738:10740 ioctl c018620c 20000540 returned -22
[  240.462344][T10746] misc userio: Invalid payload size
14:00:25 executing program 3:
r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x1, 0x2)
setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000040), 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x1c, 0x23, 0x829, 0x0, 0x0, {0x2804, 0xe00000000000000}, [@nested={0x8, 0x17, 0x0, 0x1, [@typed={0x4}]}]}, 0x1c}, 0x1, 0x60}, 0x0)

14:00:26 executing program 2:
syz_read_part_table(0x0, 0x0, 0x0)

14:00:26 executing program 3:
r0 = socket(0x40000000015, 0x5, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x711, 0x0, 0x0, {0x4}}, 0x14}}, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)

14:00:26 executing program 0:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x113000, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)

14:00:26 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendfile64(0xffffffffffffffff, r0, &(0x7f0000000040)=0xfffffffffffffbff, 0x80000001)
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$proc_capi20ncci(0xffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x10000, 0x0)
ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000140)=0x1)
r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x48441, 0x0)
r3 = msgget$private(0x0, 0x0)
msgrcv(r3, 0x0, 0x0, 0x0, 0x0)
msgrcv(r3, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(r3, 0x0)
msgctl$MSG_STAT_ANY(r3, 0xd, &(0x7f00000001c0)=""/56)
openat$loop_ctrl(0xffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x10400, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)

14:00:26 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = openat$vcs(0xffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200a02, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000080)=[@increfs], 0x32, 0x0, &(0x7f00000000c0)="2fa48a6134aa57e83df47abcc6c129fd73ff82fae11514ebbd285380d86e1b5b26c0c7dcbb237b963cca5a7f2648d496d0bb"})
r3 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$BINDER_WRITE_READ(r6, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f0000000140)={0xba8e, 0x6, [{0xb}, {0xe}, {0x8, 0x1}, {0x8, 0x1}, {0xb}, {0x3, 0x1}]})

14:00:26 executing program 2:
syz_read_part_table(0x0, 0x0, 0x0)

14:00:26 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
r1 = getpid()
ptrace(0x10, r1)
sched_rr_get_interval(r1, &(0x7f0000000040))
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="b4", 0x1}], 0x1)

[  241.869246][T10799] binder: 10797:10799 ioctl c018620c 20000540 returned -22
[  241.898498][T10799] binder: 10797:10799 ioctl 8008551d 20000140 returned -22
[  241.954325][T10812] binder: 10797:10812 ioctl c018620c 20000540 returned -22
[  241.979940][T10804] misc userio: Invalid payload size
[  241.990778][T10813] misc userio: Invalid payload size
14:00:27 executing program 2:
syz_read_part_table(0x0, 0x0, 0x0)

14:00:27 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
fstatfs(r0, &(0x7f0000000040)=""/213)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
setrlimit(0x3, &(0x7f00000002c0)={0x9, 0x1})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
r3 = dup2(r2, r1)
ioctl$SNDRV_PCM_IOCTL_HWSYNC(r3, 0x4122, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x2}}, @NFULA_CFG_MODE={0xa, 0x2, {0xa3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4041}, 0x40081)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x34, 0x0, &(0x7f0000000140)=[@register_looper, @clear_death, @dead_binder_done, @acquire={0x40046305, 0x1}, @dead_binder_done], 0x0, 0x0, 0x0})

14:00:27 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x204000, 0x4)
r3 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)

14:00:27 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00')
sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000280)={0x28, r4, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b2000010000049d67b932043c2e20d691484ba3d34473b8b7d7f2ee4ec12c53dbf"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xf}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2e23}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x3, 0x4a0a}}}]}]}]}}]}, 0x60}}, 0x0)
connect$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x6, @none, 0x7fff, 0x1}, 0xe)
sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @remote}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x30}}, 0x4020000)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

14:00:27 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2)
ioctl$TCGETS(r3, 0x5401, &(0x7f0000000040))
ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f00000000c0))
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)

14:00:27 executing program 2 (fault-call:0 fault-nth:0):
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))

14:00:27 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendfile64(0xffffffffffffffff, r0, &(0x7f0000000040)=0xfffffffffffffbff, 0x80000001)
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$proc_capi20ncci(0xffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x10000, 0x0)
ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000140)=0x1)
r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x48441, 0x0)
r3 = msgget$private(0x0, 0x0)
msgrcv(r3, 0x0, 0x0, 0x0, 0x0)
msgrcv(r3, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(r3, 0x0)
msgctl$MSG_STAT_ANY(r3, 0xd, &(0x7f00000001c0)=""/56)
openat$loop_ctrl(0xffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x10400, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)

[  242.703370][T10842] FAULT_INJECTION: forcing a failure.
[  242.703370][T10842] name failslab, interval 1, probability 0, space 0, times 0
[  242.717190][T10842] CPU: 0 PID: 10842 Comm: syz-executor.2 Not tainted 5.6.0-rc7-syzkaller #0
[  242.726361][T10842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  242.736540][T10842] Call Trace:
[  242.740728][T10842]  dump_stack+0x1c9/0x220
[  242.745440][T10842]  should_fail+0x8b7/0x9e0
[  242.749953][T10842]  __should_failslab+0x1f6/0x290
[  242.754966][T10842]  should_failslab+0x29/0x70
[  242.759732][T10842]  kmem_cache_alloc+0xd0/0xd70
[  242.764554][T10842]  ? kmsan_get_metadata+0x4f/0x180
[  242.769729][T10842]  ? __anon_vma_prepare+0xa5/0xae0
[  242.775189][T10842]  ? kmsan_get_metadata+0x4f/0x180
[  242.780454][T10842]  ? kmsan_get_metadata+0x11d/0x180
[  242.786104][T10842]  __anon_vma_prepare+0xa5/0xae0
[  242.791212][T10842]  ? kmsan_get_metadata+0x11d/0x180
[  242.796612][T10842]  ? kmsan_get_metadata+0x11d/0x180
[  242.803367][T10842]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[  242.809369][T10842]  do_huge_pmd_anonymous_page+0x505/0x29f0
[  242.815261][T10842]  ? kmsan_get_metadata+0x4f/0x180
[  242.820436][T10842]  ? kmsan_get_metadata+0x4f/0x180
[  242.825631][T10842]  ? kmsan_set_origin_checked+0x95/0xf0
[  242.831331][T10842]  ? kmsan_get_metadata+0x11d/0x180
[  242.836583][T10842]  handle_mm_fault+0x567d/0x9de0
[  242.841630][T10842]  do_user_addr_fault+0xb30/0x1520
[  242.847626][T10842]  do_page_fault+0x1ba/0x840
[  242.852273][T10842]  ? kmsan_internal_unpoison_shadow+0x2f/0x40
[  242.858407][T10842]  ? page_fault+0x3c/0x60
[  242.862791][T10842]  page_fault+0x4e/0x60
[  242.867411][T10842] RIP: 0023:0x8049d59
[  242.871625][T10842] Code: 89 f8 f7 61 08 8b 41 08 c1 ea 17 69 d2 00 00 10 08 29 d0 39 f0 89 c2 77 28 01 d2 89 41 08 39 d3 0f 42 da 83 c1 0c 39 cd 74 2a <8b> 41 04 3d 00 00 10 08 76 c5 c7 41 04 00 00 10 08 31 f6 eb c1 66
[  242.892339][T10842] RSP: 002b:00000000f5d99eac EFLAGS: 00010206
[  242.898800][T10842] RAX: 0000000000003000 RBX: 0000000000000000 RCX: 0000000020000000
[  242.906988][T10842] RDX: 0000000000001000 RSI: 0000000000000c0b RDI: 000000000fe03f81
[  242.915177][T10842] RBP: 000000002000c000 R08: 0000000000000000 R09: 0000000000000000
[  242.923372][T10842] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  242.933958][T10842] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  242.945667][T10842] syz-executor.2 invoked oom-killer: gfp_mask=0x0(), order=0, oom_score_adj=1000
[  242.956649][T10842] CPU: 0 PID: 10842 Comm: syz-executor.2 Not tainted 5.6.0-rc7-syzkaller #0
[  242.967050][T10842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  242.978733][T10842] Call Trace:
[  242.982363][T10842]  dump_stack+0x1c9/0x220
[  242.986817][T10842]  dump_header+0x1e7/0xd00
[  242.991794][T10842]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[  242.996950][T10843] misc userio: No port type given on /dev/userio
[  242.998574][T10842]  ? __msan_metadata_ptr_for_store_1+0x13/0x20
[  242.998658][T10842]  ? ___ratelimit+0x542/0x720
[  243.016384][T10842]  ? task_will_free_mem+0x2c9/0x830
[  243.021738][T10842]  oom_kill_process+0x216/0x580
[  243.026690][T10842]  out_of_memory+0x181e/0x1cc0
[  243.027377][T10843] misc userio: Invalid payload size
[  243.031564][T10842]  ? kmsan_set_origin_checked+0x60/0xf0
[  243.042348][T10842]  ? mutex_trylock+0x151/0x260
[  243.047195][T10842]  pagefault_out_of_memory+0xdd/0x130
[  243.052667][T10842]  mm_fault_error+0x38e/0x5b0
[  243.057466][T10842]  do_user_addr_fault+0xd8a/0x1520
[  243.062684][T10842]  do_page_fault+0x1ba/0x840
[  243.067333][T10842]  ? kmsan_internal_unpoison_shadow+0x2f/0x40
[  243.073473][T10842]  ? page_fault+0x3c/0x60
[  243.077854][T10842]  page_fault+0x4e/0x60
[  243.082040][T10842] RIP: 0023:0x8049d59
[  243.086678][T10842] Code: 89 f8 f7 61 08 8b 41 08 c1 ea 17 69 d2 00 00 10 08 29 d0 39 f0 89 c2 77 28 01 d2 89 41 08 39 d3 0f 42 da 83 c1 0c 39 cd 74 2a <8b> 41 04 3d 00 00 10 08 76 c5 c7 41 04 00 00 10 08 31 f6 eb c1 66
[  243.106447][T10842] RSP: 002b:00000000f5d99eac EFLAGS: 00010206
[  243.112551][T10842] RAX: 0000000000003000 RBX: 0000000000000000 RCX: 0000000020000000
[  243.120897][T10842] RDX: 0000000000001000 RSI: 0000000000000c0b RDI: 000000000fe03f81
[  243.128914][T10842] RBP: 000000002000c000 R08: 0000000000000000 R09: 0000000000000000
[  243.136913][T10842] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  243.144919][T10842] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  243.154447][T10842] Mem-Info:
[  243.157799][T10842] active_anon:119830 inactive_anon:2621 isolated_anon:0
[  243.157799][T10842]  active_file:11712 inactive_file:42350 isolated_file:0
[  243.157799][T10842]  unevictable:0 dirty:126 writeback:0 unstable:0
[  243.157799][T10842]  slab_reclaimable:7839 slab_unreclaimable:17036
[  243.157799][T10842]  mapped:45366 shmem:2761 pagetables:2376 bounce:0
[  243.157799][T10842]  free:821345 free_pcp:665 free_cma:0
[  243.196352][T10842] Node 0 active_anon:479320kB inactive_anon:10484kB active_file:46704kB inactive_file:169500kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:181464kB dirty:500kB writeback:0kB shmem:11044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 415744kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  243.225897][T10842] Node 1 active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  243.255592][T10842] Node 0 DMA free:15904kB min:216kB low:268kB high:320kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  243.285033][T10842] lowmem_reserve[]: 0 2738 3428 3428
[  243.290776][T10842] Node 0 DMA32 free:305384kB min:38648kB low:48308kB high:57968kB reserved_highatomic:0KB active_anon:466072kB inactive_anon:1532kB active_file:21560kB inactive_file:151428kB unevictable:0kB writepending:472kB present:3129332kB managed:2807756kB mlocked:0kB kernel_stack:1664kB pagetables:7924kB bounce:0kB free_pcp:1656kB local_pcp:344kB free_cma:0kB
[  243.309760][T10834] binder: 10833:10834 ioctl c018620c 20000540 returned -22
[  243.325177][T10842] lowmem_reserve[]: 0 0 690 690
[  243.325236][T10842] Node 0 Normal free:12148kB min:9748kB low:12184kB high:14620kB reserved_highatomic:0KB active_anon:12748kB inactive_anon:8952kB active_file:25144kB inactive_file:18072kB unevictable:0kB writepending:28kB present:786432kB managed:707232kB mlocked:0kB kernel_stack:3400kB pagetables:1284kB bounce:0kB free_pcp:1328kB local_pcp:948kB free_cma:0kB
[  243.325393][T10842] lowmem_reserve[]: 0 0 0 0
[  243.377226][T10842] Node 1 Normal free:2953796kB min:41488kB low:51860kB high:62232kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3009836kB mlocked:0kB kernel_stack:8kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  243.407950][T10842] lowmem_reserve[]: 0 0 0 0
[  243.412553][T10842] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB
[  243.426848][T10842] Node 0 DMA32: 258*4kB (UME) 90*8kB (UM) 33*16kB (UME) 17*32kB (UME) 4*64kB (UM) 2*128kB (UE) 1*256kB (M) 1*512kB (U) 1*1024kB (U) 1*2048kB (U) 73*4096kB (M) = 306184kB
[  243.444164][T10842] Node 0 Normal: 3*4kB (E) 3*8kB (UE) 3*16kB (UE) 3*32kB (U) 7*64kB (U) 18*128kB (UE) 10*256kB (U) 9*512kB (UE) 2*1024kB (UE) 0*2048kB 0*4096kB = 12148kB
[  243.460046][T10842] Node 1 Normal: 9*4kB (UME) 10*8kB (UME) 11*16kB (UME) 9*32kB (UME) 12*64kB (UME) 6*128kB (UM) 2*256kB (M) 4*512kB (ME) 4*1024kB (M) 4*2048kB (M) 717*4096kB (M) = 2953796kB
[  243.467713][T10848] binder: 10833:10848 ioctl c018620c 20000540 returned -22
[  243.477790][T10842] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  243.477829][T10842] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  243.477864][T10842] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  243.477895][T10842] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  243.477912][T10842] 55408 total pagecache pages
[  243.477931][T10842] 0 pages in swap cache
[  243.477956][T10842] Swap cache stats: add 0, delete 0, find 0/0
[  243.478001][T10842] Free swap  = 0kB
[  243.542096][T10842] Total swap = 0kB
[  243.546008][T10842] 1965979 pages RAM
[  243.549888][T10842] 0 pages HighMem/MovableOnly
[  243.554639][T10842] 330797 pages reserved
[  243.558991][T10842] 0 pages cma reserved
[  243.563135][T10842] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.3,pid=10695,uid=0
[  243.577866][T10842] Out of memory: Killed process 10695 (syz-executor.3) total-vm:74560kB, anon-rss:2188kB, file-rss:35604kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000
14:00:28 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
sendmmsg$inet_sctp(r5, &(0x7f0000000200)=[{&(0x7f0000000040)=@in6={0xa, 0x4e24, 0xfffff2ae, @empty, 0x10000}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="6b94c38509afd900922a39cb78d94ac9e096ae20280801bce4e95c38e4a2000b169e", 0x22}, {&(0x7f00000000c0)="ea4c03eb48695b635fb740ac2675d9fade483030d7fc08092bd9362ea8be151b4887aab40a2db0f72ee153e1d45ec3d97dad8d2260a0b727c0ff2093fa271daa41b9b0d9f07348be4b4cc51f99187b7e0bef83dd386fbd47dd097baf7f1aefc1dcb8570f554aa021ff8b9cf5f19c277ea978c7b847a931b8622ca4eae0339c7af028bc5a36960621c7c968c564834d00292c86ff", 0x94}, {&(0x7f0000000180)="926700b978c7f3f326782bc3a2f1452bee", 0x11}], 0x3, 0x0, 0x0, 0x4048054}], 0x1, 0x4044)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

[  243.789033][T10846] misc userio: No port type given on /dev/userio
[  243.871188][T10852] misc userio: Invalid payload size
[  243.886034][  T722] tipc: TX() has been purged, node left!
14:00:28 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x9c, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x99cc}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x3}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfee8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x880}, 0x8000)

[  244.020527][T10858] binder: 10856:10858 ioctl c018620c 20000540 returned -22
[  244.044622][T10858] binder: 10856:10858 ioctl c018620c 20000540 returned -22
[  244.164131][T10864] misc userio: Invalid payload size
[  244.212143][T10864] binder: 10860:10864 ioctl c018620c 20000540 returned -22
[  244.274932][T10868] misc userio: Invalid payload size
14:00:29 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
r3 = socket$inet6(0xa, 0xa, 0xfff)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0xc4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00634040020000000000000000000000000000000000000010000000000000000000000050000000000000001800000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYBLOB="85616466050000000000000001000000000000002900000000000000852a62730001000000000000000000000000000000000000852a646600000000", @ANYRES32=r3, @ANYBLOB='\x00'/16], @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\x00\x00\x00\x00\x00\x004\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000058000000000000001800000000000000", @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r3, @ANYBLOB="000000000000000000000000852a747000000000", @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/162], @ANYBLOB="a20000000000000000000000000000002200000000000000852a6277151000"/48], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000004000000000000000"], @ANYBLOB="00100000000000000c6300000f630c400200000000000000000000000863104000000000000000000000000000000000106308400000000000000000"], 0x0, 0x0, 0x0})

[  244.313130][T10868] binder: 10860:10868 ioctl c018620c 20000540 returned -22
[  244.505932][T10872] binder: 10870:10872 ioctl c018620c 20000540 returned -22
14:00:29 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffca3}, 0x12062)
r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
sendmmsg(r1, &(0x7f0000007040)=[{{&(0x7f0000000140)=@in={0x2, 0x4e21, @multicast1}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000200)="d2779840bab9e83e2b1a05002048704f6e1862ac64fde676e23b5a16c9260a5c76859862ea35a22c84bedce7011293f1697728f97b44212ca7f1f2052eda81d55270bd27b51af8e2f26451a3e7beceff79ae72ef7c31fdb52e17dbd2bcb797cf579048dfd5c46623aea95595cc9f7f8aee92f1b4890cc58868bfce", 0x7b}], 0x1}}, {{&(0x7f0000000280)=@ipx={0x4, 0x4, 0x10000, "08228096e6a7", 0x8}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000300)="20e9324a659dfbf595c1ac8a5e52204a88759d52427efd6fe7317d878a23db68511815ea5518163e2adc8b8adf68de8d50036e04b58de14f2170bb833cb11b22c49d4a934540bc67cb1c870e72f07d229b4d8c9316d0057f03b3d07f89819ccf1172fb2b6581b36eeadf65c072997db27ec3e4840631ee6494f2ac968151f2cf6106e822f4dd84c1a10bb35c9bc3", 0x8e}, {&(0x7f00000003c0)="24453cf1cb03c3e9ad8f26a5d2caeb3459ebeeb773ac74669e945ac14aa8fd4e82f659b2c6526d5510a6707b25573927bd1602160b943daea1bc3e75373a8fcea4f2823294fa64d9ac8bc705f5ab0f3a9c5b09742d01d4402067d1c4c4287157f6893de451c8d179c310a1dfbc1d05e586b326afe22d5ff48d4a50541085a44a2b", 0x81}, {&(0x7f00000000c0)='2J', 0x2}, {&(0x7f0000000480)="8ee823b1eeb162cd2a86843a7a0cd9a4255a8f1994220fd501723152c7db5bde9d8773b3c5886d0e3cc634e51a5a68b13c82b43a74f68b053e7a", 0x3a}, {&(0x7f00000004c0)="63e3e0e68162ecd1c8a3c38f540e68f38b85157d90927cb3e21427ae892e99c69dacc0fa789eba8eb0c49431929a0a5c17498c6694c9be9c75ce2b5484d1cdeefb9f619fd02e2c788191d8b2984a0c03f2d42cf85acd83f8c63559c90b01aecc6aacbdd54268718c5135ebc1712c2a5e93270ff8e59b962b575a702e66702f6e40a2ab873321b1915058f4af4ef9b82c5c4f0f4eb84bc3d292104c2f4c73eb55fa5084429379b6b72e9f31785e8f550eef8693bbf394440ec1eca455b3a05e551ddc258b007f6b", 0xc7}], 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x3bc}}, {{&(0x7f00000009c0)=@llc={0x1a, 0x201, 0x98, 0x0, 0xff, 0x4, @multicast}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000000a40)="13e6c280ac129d03363a1407fb075bf0ad7e63556b682f849b65df1bcd15e53e860661b3fc7956925bbd15d122fda74b40ba2c2c81a5ba33bdfed197abe7447db918aa11bc6ec38115cfad6a0ba903bcf5e52688ac1d30688952e09ec1ddfc1daeadbaefba332329c7a92a5df8da6a7c3ad25d9e90a5b1ffe076f103cc7128196c7946180bd9c680233cfcb3fbacf31d757616e4f38f32ff33c83e45b2e30276bffc7ed85d3fda924998591727ee77210b8527a249862526cab6b025e03722d897603e7efb2f259bb9d3546a9b6a6aed7bf7c176", 0xd4}, {&(0x7f0000000b40)="5df475d054578376ff599146b1cc792b87cd914146ed1c988e95b72f2ff237873a6a8636373777114d4f9d0a91605786e99b7f81924bcf9b66d6688b3e2236873249b1fcb9b19ed224f76025017710b7e9ae51598a9c2cfdfce78c4adf07326508c647ee5c572b333e60f9e615d9653a02c701eb2d8f4c2c127f7c3716aa08b70d9c4efe7af03826be998574d4dcc55245b5019e6b91e7c904d58faba1d25ab782cb1e9acb2932fe00722855720b5b32c716c55a85f480b3fc3962314a46a44f4f828475a685df22eedb8de960122760d31a6c99eb513f20c4097866416b021b5b852ae4169252e74745a69e4a776306e70f", 0xf2}, {&(0x7f0000000c40)="c3ed2b2df868f6add19360ef90b5797ce8ce6de7f1c11c0d6688d20d33228b86e190922bb1ac3bbc800a13193e660a4df7c9c3fa1e79963c802b75eec511ba35e9d41ddffa9db40e9d9ba0de3a6aaa4d806109a5f548217895aba3520b466c74389809ba2c93e9c0399bc9c6d6ae5a24977a517cc60722851f8f017821c1ce2cf1f6e4e9b8d1de3447163daa48f7882ff1a7203ff941", 0x96}, {&(0x7f0000000d00)="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", 0x1000}, {&(0x7f0000001d00)="573b67132cd30d2b2f41af15b5b6aa87cc3a5e6759fcf0afe1ccee72421ada7c78bfd11e013dfe7ad08c57e7f501b617a6f44b303af58a62c433a273271acb2a3a175a7d6aacaf2da85c63ecdc002ceb787af432f62c41f3183c672ee80a3056fbe268711c395532ddea7a9067f204054e57af9d566b45a624cee8c40623fd4e17c4ea1230feec", 0x87}, {&(0x7f0000001dc0)="5473e48594a5273204349ff252302fa0aaf55312222b4e539c57c073bc3c74daca5748bfd89bf2470cd704aacdb0cd93a348c2efe901de2b8354485f76f933324c6682ed88055531504a176f7d9d87366a627a", 0x53}], 0x6, &(0x7f0000001e80)=[{0x100c, 0x104, 0x3, "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"}, {0x84, 0x10e, 0x4, "250d3c034912745500d38c17ec0fe5b394404ce7974839146312401ce70aefe2d8365f765f68d85980133e4aa73f57151bf289fa757c62fc10c4e553214f4f44d288ead6a34fa9c47c7a82d391165ae1219a14e29dd6e7d334e2eebab62a58167eb22052da454cb110224f7570d7158f2ff16172e96759"}, {0xf8, 0x101, 0x4, "d77041357abeeb153f7b22d4d0e89d47fd12204edc056f6b703fef6a88ff3ae3906bf0f8c2915d4a01b9db1303fffb648aa946298088b769cbb0a303fe3a493b02beac93bda7e001b42c5b663ae9651f8438ed308487d1edfa2d3bbfca682010d916914c7c6d8b2fe1de10eb7c0381e40bca7b5a2caffe015ce79307a57ab8cf3df738d26cbc416ab869cc09d139b7a1b950dbd15ce7235ccf4ff0429a9ff83846256c6ffafecc28d80c97697680337b1e7d5352e6292f159607fce466b83deffdd9f1ae71240fcdc8fd2921fabfad46e86bbae6c082888d0ba7d22a316bb9dbce69eac47865add13e08"}, {0x10, 0x108, 0x5, "2a7d3799"}, {0x58, 0x114, 0xffff0000, "c0264b2efaa587429b09ff65c858bf8215b668756bdeb0bef43b81c524c20d056b600442770e57e984633ca31e1cd709c544e43795d648bfe7c7a112cda9c94243f4f24d5146aead39725f68"}, {0x100c, 0x103, 0xffff, "d685d5817f6a89958b3f89994317d05937ab60c278d53dcf8a7928db96423d6c84cab7c349348643654dc4f5d86bc8474a723dd62c77499988909b745d5f931010829ecfc075a9ca6ce54f80b9657bd8da319b9402a19027d00967e382778232f80dcb28b69d974193a70cc18ab1231e8163c6c935ef6a0a3ebae429c8ce625672e4ba82ecb4cd5b15835b1a2393e10fe4fffa27b50133fd8cc9bf115af068774af0f9d00a4be4dc83fe4bd8df5ac0a9a8562e4b313ef12b49d1eb31811cf5d7866e92ea3b6ca869479130eb48fcf40aa015d595a7c198f4d89f42f2fc2e38b0ff03165df5f96223bad56634ad05ad5d4f16b80285b61123aa2da1b53a29a183312349d0a977815f9a2501ed8dac41ef961e83e8a1cd468e04f7afc889ad9fcf931a3ccbb27197cf2cd47ae1b6aa453c68e955610a72b50efbce197498db6a03908574fb83c034f17a8a45c8cfc4997c762f06d6bcf0fa309c59df7dbc782fe3f8ea0ab1264f1efeb300eb46f36ef486b4dc1896a410c9463f9403f35591579dd651a0bd01085b274ca9734ef6d1a09c0d149d0a5ebe10b47e7152ab0a652e80071d461f9325fb31c9b4a1cca9c466e9aac50e76235d320e0b999453d4c3c079e79754083ce0b0153a169ae85ba217b484cc57fda5222c2af1d49dd7bd722e60c47be33e806b39fea2a9de4b5084965073719702d9fa23e05b546b19b50098e899124e81774e03d24af65b9b5bc26b3d8d3088122869f99615029a6ccb3e6a352a18e3a7aaaed3b2ef093927d7e1962432cfbd5be8897b5d13110c10b7fe692c0309fb220ad3b5f902ed1c6abb4789a475f0edb601246e44b2ecf51d39d6be70024bb185404586857026f323958cd2678f59ac8386631ea878dbdb818830da78506ba061cb2a542e94048adb5f1dd9a2101328cc354aa1e4b8e71dd1ad89e2b11eabe35e8007897d9acef10b11853d08b2a2b248c1244ccc3b319824432cf75ff675eec413bb9fc5b5185a1e05f8e142dcae6089f7a7ebeed01f4062b7bdf98a983e4f43b2727d41ae4deec06b9f821360bea3983fb368c5c762bb393bb9fbe0406c41a24dbed6a7dea72c4a7475aa403ec85e80c069794da33528ddb8509af1ac201bc47ed1d2402845ede369c0490b4bffae8a6843a3ab5232fb36550f919628492db3544aad36337a45b915655cb842bc0c80d91cf65f26a3a256935ccabac7bfc0972d8284086ab3d983c97ac5558e8534525387d48a7d1fef7dd0355b6582cb255ff51e334b7df3bc922bcd6d4261a5cdabd480394ffcae7923b7ca206a27850eab8d6a3b1c6efdafec96470558e024829f4f7a3825d67a4cae84416936f3bd54d898df2300cc26778b9338b2ab3c0f0c93d5dc02de5ab90cafb05d95b8937c6c629253ce3797446d36335759079e3649ad01c327fcb300f9f8269a208930a6dd36be3be4327a692e65fda2a2a5a64ee365ff7fcde24172fa010e34ef92d892d09b61707fb4643d1d837fd0041ebe031dc0e6abfbc315c61dab5697200d862f3e2ef6a2414555307d4bbbeb600407c04b06ad782b098a9e94fabaad4df6cb913d84cedcee4056823ffd19ff9a58eb50d2e9002619990b0520a4c134b0f06d712cde01263ac393b747c65e67598e353f260de8707c465c8a03749195f9714c5dc8d77e8a7a3b3c1919346a416e965a153b10d0fbafee08641ae8c254b707a492aac3e5d500a84cca9de13a56a8f88f9f40da3cb7889bdba8a8ffbc6db10317dc70d7bd290a96e3e4956bcd8affa6cbbc49a1ac3437861eb4151bbf150878b38294c9b58a40c1cba50c0a7e64a2d32ce2ef9e5b0b072063128e7191f401981b9413f6219e4582fb9b90fffaf077cc40381cc8424c5f4fd3a49fd441795a9d5d0e46d03363edaa100386894bd8ab80cc29c87ee15e6709a71169b804b6cca071496299c5842009b0b7e9087064ee8bbf2911fded472a91767e5ff84eb3f14678061551bad26742dff8e889640b3ffcf01cfc9521a5d28cf58fed9cd6f0fe82d762f37b5896a6afc1a14419d9ee4e3c2d58dda1f475e9a1dede6fad9135fb35551bad6893540419a2e1e8e46388a9468cd8e5fd4ab9607dc83b476e1696bc2ac3b5ff36f96f02068e983ad3cc29b013a9e4874558f67807455d084c35edf4272bda67d70be850a684cea1ab62c56de99d3522e344edb0163c1753914be79b959080bb877e7e0bd446da9d21aa44a03da72727e8d3237d9f3b074b415c90a80a49ac9aae1b1083f69441dbd32c9b80f8d3a6bb48935a60a0aa09fcad236c62db27a96086b9c691e272d677665ba75c72ef55af62199266617caab9f73d5ff6c61e90c4726e6cfc8fcf9301dfc853d1af4a96c6fbfcb6957c08fda43e218418c52b2e4af23863eb28bc72dba88836f506422369a0f4839f314e559cfec726e519cd6bdcac7ee2b63f231edc88ac2b8de7862805ad8faded0f1ec286aa18147917b7b9b7e724857cf4340f01a6d67024f16aeac2e7a775b65f90910ccb69c69afc7071bc06cfd232b4205e91728da4844f3c66eb37d2bbd7590b9fb764001acc127c47f807b84496fde1d9f88ee7f4df2b35d15bf73e0719e67ceeda598f5b48b81a18ffe512deba6184d07318cb5c3674c6934e47e35397a2aba95c9be93513337a687070d3d31c2b45b7147b11c53f8ebe1648bb91c1e6f4f40148095b5c3f7707034cd0015e1562fd0daab3e7b42b37ff3b5806becdbccf346e68425822f02fbe9166f95fe960a6808f86ef17cc05e4eff3ad2b51a06c933a252be05f54d7664fa5bc2f24148d4fe9375e0c63b5b2a442df69c9f3a8742cbe83162b3c9d7206ed9b79bf7ff7efcd08074ceab557106933b44fd88cf711718322acd796d4f2fc545d661b7e4e257801d4aae6b9b702c7554e12b07bb9731093900b22a889d9da6ae9cf7f8bd7d4793bf3831aedaa6059ea614543c118c25f3828480e24a41fa3e034085567410da77eb6c2a6833f6ef19ca25e57dc8ae6ffbe8c1da906c083614f2e6a593033fa1b704c55bf60561fb0699c4bb55e84ea584299485f62ad5bd00f7a9dc6399c952ccf9222f24dfc99e79f2fec1ff47ffe5169484e074390bf75e39aea741742c450110f4295ddd91ac4d679d9f954c08a0baf7d3ca95b79a82c8e4f7966f1e282df69b18c8687bbc7c7bbff08d5c18b7609faa32f9b6b5a7bd1340752d736f03743c0bf62de7e0d4dbc9cb49775761574f7caad466e6fce1d3c987ea6873c781fcde45eca340e8bdb351fbdfe5a9f1d8073cd9dd3710c9ed0d03231fa909332f9972f6f19b74e3571600270975f2c79e7f33bc19d9b2f66c21813a2486ac83d0cf66f3acf1e7f4996898da21cafcb1ea19e398b822b6c1d3cde6359a82d2a0e3e075d4fffab4d8b0fc0c83a663c15078d05ba27b055d92d699bf862a404f9f481cb323b28305442d891a16b72dcce5383111ba9ecb14d95b4b4009e15fefeaee08222dd611a637904850831e1cdc7aee46ffa6daa2bcaf10d952c47eaadcd70ebd0c3c3f94e6f9b086743d60b0b28d7d776e0b1bae8e3c632ceca07d00934d7ed7316a556165097917a0c8d0d10a4f2bf6bb22802bb006f3d0b4d02aef75fd7bbf586519c5d3a75b30c2f45a9f827a80c59f30f3e2a89e5f22adadcec226f2c6c69ab2ca93626bf4213af9bfbee39075eb71a459a5554c13b5efc7b2f17561b47effa88ab52f340d0f5cc637bd561daaf90191b1165f37145eae7f3be9afdf096a273e3713be26fe5912c760a24e79d1fd1976872a73527657aaa98b9f214e980c8f83d429eff398653fc3ea6651dbc54baf47a4a4cd473e5b8c6a9c0d91edbfa01c8dd506ff1bc8751565ef6f188e4ae9e0f3f8768dae7db53b4728b1201c2c954bc4f2d0a82eaa2763278fc4832b7c92e690b235bfbcb6b17e1e09d45a7bd04a70902a408e47caed2feb627c488322857bc65ac9aa70f0c7514f60125536942d17bf4bee0941a33138527fc02b7e9e26b72c2faf8d7e3a1415ca9ac9adba988760a7f96c5e550acae2ae2b2aeaee536670cdac81591a291771a027331de714a1e767c231963a27ed81394f1a62cca13119c40f61b20107c687473eab74e81a793eee45020f1cea665a7e54d5db87d64643f46557edab33f18c326079d56e0344e41b120c1dda68867ea41f7e66bfbdcbc8996d97104c2519af545a96fa329b2c3f4c499c9966bfd725be2588bf8bf7a348d4a08bd8d2e9aeaaafe8c2000c7eb0bee0febd4f3e9a7a48e1aafa0198ec7847b6da50637eb859bd9d67cf63db483fb69913c789dd35c0c8353bd6b982acf1f51f5b4f19d9831ae7113b4257368b54a341e7f1014ab9514a6f6c4c9d337d83c3e261f88d2a1b0605a6fd5c973a3b9a62f6c116a93df4ae41867b4d472b2206827c567798c181f76b6faece6859b594d0c63f118ad221d9d04281318239eddfc4779382388a0adcbdac18b507de8bf9963399e3190d41dacae1d6b125f5ada9aa32d0ed905e3f981419408bd8a25e70f90e97d7c3e1dc7efb4be1440a4b4974f93dc067583190584e31a584e02b2ebd74435e9ccb1d4b71dfd701a0a4952b9ccdf05298c3bdb55e466197d567c8e61ed17fe86eb2c73c0c761b42273be1f99837461b720fc5863513c480cc38a9a56c0c1bd0ba540be3f82d9803c99b2916e7776b3de11eb828c22b6432ddc47932c97fca164a6ad25e9870d68053d0a2107c58abb8659f7efff4a873208c58b9d8b958c6b30a1727418e2d856b707803cd123b152c70c36fff72bc5b6ac5b91765a296bcbcd4bf63bea1e2dddbf7418adf215b2b8fd9828ba973294054e6681666f58f1055acc3ebcb432f3d7c3433a6053325c5d327514321579555ab846bce8d0e51a3af3f32ab1912364f442b6a2c18cf4ea59fe0e1ecf94e2f128eff3b1efd30eccb7f56a1701f11819d5c0851815c488183b5009dc2d3d2c91e828698bf1e6a8b02f251b5be241fdcab37736d4e0f3a1336c7c609f6c8c83ee68527953f36eda34952394c784c04e93342e78bf6756df569a2f1067915935c783efdfc36555623b0f7d747ce8f5e7050fcf259bc1c7b9e2055ef2d44810948599880504f62df5d4759079439f948d6436d32253532107023172688df80ff1b9544cf5bb03383ab4eecb65e0920c7a7f832245866195ab1f1fbd6be427ea5c31e20332ddcdf8273431c91144bdcf3e2858cf229d5aa2ad7e118e2c6dee1c0ea2c8a037e6f306839e6ec8c6545f172ee1092e2af9dd50f8ab81b4800b4a28481e50dac852fc0e9857dc71ab313b6d990b044012918fec1b8804db7e0bc5ccccdaa4253e6dd8af27c1b66ce0ddf9daeb49fcfb88c3668b8ad6be092bfe55638391d271025bbbf0838ab1e9ba7d665b404203a8f62eeb4202b63b0aa6adcd09a468ec82302baa3e9b143f66e0e41faf57a6e28d39327d313468659cb850d1cd5b0183654bb4fdaedfb868f18a6695107149a80c47249e79a1578b958cd2a7f0d1d571f95dbca913e3c50dd6b227cc7ae971f5edff862a7bafee93ffb6e86cb5c2bdac5f69d9b3f9924c84c66b91ceaef7c4361f0e53e59382e2ba8bc00143085670311d5abf29ef2f19afb301a085d1f4655ad02173b716b8d6667bfec54c8bdce48e65c0a15307bcc478cdaabbf6685625ddc5f3764511c05155749a65c86e019f596ac17800e8dd21e2d0193abff8c0a39ee85f9ec10b0c85f42c8013f3732f460143b770944ca5c5c9b234dd9079c777d48913c3e7afdbdd89c0078a11494d"}, {0xb8, 0x6, 0x5, "a522a79fe5227929719b46f03257d66549430e224b403fce4c192a1925e1648e80f89a91ce970f79b93a2ca79fe24c35c890f7f218fed99b22603a9278ae367a205d1093f5840504eab8c412896a7ef41d3e448002426c61d5b164db8cb7be6b087b9fde54bbd18dd2fb2ba06ddb98aa769ab4a16234904d3b240480db67f77334ce5f96d06c8c445371ade130f1608c1840f9b0778a49b24f8c25acf2cba6a1cc5b91d1c60a6006d3ec2137"}, {0xa8, 0x10e, 0x5, "38290fa2c16e6c45f11a67b9583406965a6e7b081b1bae66eeb00e3e0857ce9a8843d5ce53a444aa7a4eba81df2a215439742c3c95c08df727794abe7e06d89718519cdc0fd18007b74e35f143f7ab5452a94487e9d11d8213952ab0e7746cc0c69f67df73f618f40e4246273de80d943d3b560f80b6a3fca06db97f4dfe15606a807b15f51d2b2a9435f046f753335a028291504b7c942fe941"}, {0x24, 0x118, 0x5, "6303ae9daae5d4025df3d8a825fa9b072e9510f41d"}, {0x4c, 0x0, 0x4, "37d986f9da8025448935dc2fc413abdd9d9460c27d2232f38dff07755067a6de86a1101ac1c4f6ff373e400d7499e97f37b1d6b6a05be05ea557b4c84694"}], 0x23cc}}, {{&(0x7f0000004280)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x80, &(0x7f0000004400)=[{&(0x7f0000004300)="4f007ddb69fc608b77c878c83b310b4ac816a1b1aec3d94c33f558654986695d1a10f54c7fcd6b0706e29f35cd8f9c7c5170f52306b4e75cfe75dd4512222192d15c2ce99ab9b1f94aaebd6bbd88d2af3f64e3ae656fe0340f5eaffe06a17f029de83ac3591bb017539680f3c7a4cd5c68c552a29610c6c68c34f4943ffca5f908b3543c7a5740a09c8cf8dd7752458b4edc8f63c76d103cb087e2237b06965a8402f328e324a83417777114c520547674829e54beea1b0349cff872062d99bdcc5b0c192dcf48c2ec46fffdcef33b2c58ac13ea109a6ad56caac83f6622a42b42ea1d7582c10fb7064a54e815b24258", 0xf0}], 0x1, &(0x7f0000004440)=[{0x5c, 0x86bc54f6f270b52e, 0x48, "0cf662f6203ca116e3b52d640c7c3be362bbe8c2344b3bffcdcd17bb1ce9761c62fcab542fe2aa5f3b6395e644e58af5783503bbdd51de519375670cb68c57058ec258d354a8f6ac0881942885"}, {0xc, 0x1, 0x4}, {0x44, 0x6, 0x9, "389def7221b7bc3e7bbc53337d51abe6297deca3bca3833d0451c8c3bc888831c483e11010209ce95ededed1d1a4107cadb057e84580"}], 0xac}}, {{&(0x7f0000004500)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @multicast1}, 0x0, 0x0, 0x4, 0x2}}, 0x80, &(0x7f0000006780)=[{&(0x7f0000004580)="7b6eca4a0d672358c351024b52118002a3c56fd84f494b876a1599cde1142ad2c845f4dfdea269d142d527bf20d37699b8dc00e65c16abc237767671bf6d63cc72409eea0fb676ce323aeb2cfd6c65298e93cbf86d3eb90695ae75c23cc08c6674ab9d5d2c0437e158fce3926fef1ff924e3cd981a9b2b515994a813911a24e5182d287d632b72ced96cfbc1c92877491f51ec5fe8075a72de6801c82de2a15a3810cc8065f79223fe4f3fa021e59109727015b87c03bb08003a733922890e8b43e6f1fe914c24048235790516c508f9e8d3bb23e3f3c5a34e0add4083ff316b4d44b0b08e0899f9af2c82926caf2b6fe92eb24ef5631674bc74a38aa23715e386d4f246952561d72d166984d22e68838cb0625e8a0a0d1c6177a63fc6aa52219e30bd4c50a28ed6d647a4fd944f2566825028175be439c45544c950a2447babb12f4e14ab7c6b2236b914ca30aa886715423910f03d4f339b8d470559ccb52816d592c8c76079e55f42c260d3d62b61d31e74ddc34fa962244319591530ffd6ff6f38b5aecdde836ba6fac90a2437274b29b6e419b1386931cf8d3862e00b2d77845e689bcc6a155aa19d4c042cb06e72f32db6f781598fcf537e214b8121f59e58b4fa42727cf00bbc17c517731d84f2509c7d5596dae65d568a21fcc2cd898d10593b2965812d273bcec28153bf7abe056e7638673fd2979f9fa34929eea62c3d622fa0a1493ff2a8175f2e267419344f97aece1d57265b0e2679a56f17c7616b8133029b86bacdb860ebbf38ade714e3013e139a125675b94ee448d029f569d240eaaecc02c42d1c8de5b56e77b91c04fdd0a92740bb3919f5326ceda904d5df8c4778149613859dd99a16d9ce59ed85aee11112e8e4fbf80fa475fea8f4a7c8fe52802d20eb384b02392c8cc9b7b2005594cc598f15fae217ba366ef1aa67e914c69a8f7f6ba31cfb8ba4c80a9ac0427dcba655d200c4d064d90c9193241a105159bb2e63b28bb2e5ee116a7a45d86bf1cf966dc4d584b3d0a9df3c5835b11bcd00a8c865b4535817544a740ceddb7a70414384d760952803fba523aef78a8b86d36dca8b3e21d63fc189db32601642f5df335ca94a7965e139e83cb1b700254d28fbf322d95cd5143c3fad68009a1c8f6526c83ed5c5aaf9e3eaf1a3fb2cc4949047ac93c283f74bba94734013241c21364dc441bf39d0a7301ccb51fd8d0e4a92f50bff6dd1a29dc861d47036b5383e17518531f78a2bdc9f4568fa6c89abd2fe84a0e9be2ba0f6a3f49a652b45d0e05937b9f27530019ca57ea8377ae701150110377bc6cf0eac4764bfd506eca1f90504eac31af9eb2254575af1216f530a442b203b3142873137af38f266438eed14a8649087f5a40bfb1e104079b511219f9c74f1307c7f7cdbce1663a45e67ffe7b1e1319684e0907a3455a2837139e30b0dad9a310132740727559220ebb7417d55c7595b91a0f88b42aad0d0b8cb3d3851af4db407912af9ad06c0a4089da3a3bed6d98030e6f611ff0c36f610f358b9caa8f66510936d7b36aa6b62009a3bccf7867e2a61229b95e382196d50864bc2d7970433675030d55690e5864d25bd19b04d325b7cf71c4237799bd1a1376c41b2d840feb0eb179bd8f3500e508aeae59996f65e7779843e741d90cffe85ba8e263a7e1f92bde75213f661537fe4d1be2851f3b4e0c44119340ec4aae679e8711a9afd49b7d285382e26b3dfa71d351c571404362a512ba636582c9a2e41e16d42c84fc8d3f8de3887e8c8f3790aa5eef82c8aeb12933ab349bfc0cb8d732e9a76304cd5b37f6b35433fef62c6ee058961e0ad5e02660c8199ba79ac303c11fcabb87ae40d768e0af5bcf0a93caa9ad3a61685d168d73a0a35063b72bfd69d4b6c248a2dd8483a40850bf9117080359b3da1098b8d148e129ee4a2f6ed876ea99683c4a001a1e4247116e230af46657f1e80e17e99498919110748e5ac9a4db80cd2278e3091345bf0a07936ee309c9309f0ad05a8a9ce028d7bee7dd3e41a31922c597a55c33319b1b530b4eb1fbc085367f9b7ef39ee031d64f3ef62ca77c7ca28bfc4577d8da2eda54479e3259039f74b9288759372cba128933d8b791cb9bc40d22fd720f51f419b84716a0e9b1827343e7fca6f9d5de0be63aff48f0bb62574f359fabfda9e721ec6ad6c867932853a4a45c0d5d4c39034605fb6d13331aa9c11efe6339dbcb98b21bd3b1e51b9613c406f891972ad1a3536a5ba5e49374898460151e5b2082198aa9ad9bfbd4e2d9dba0e0d69c26f96278f6b4b538c4348d7d30bbe021cb66731058eae2f04c470f0de5540fa2c26cf41e79bfbec7fb72f6b35e80fc342371fd2ab50834f3e0c8ee652577426a2346826968a2a46e9673b0055be98162405adf8deee170eb112b81057ba9df159179bcb22813a37e1939f579b6107200f449402eb401420e32714fc833cbc74c0c41b8976e6b14f664211384942738c2f4abef236e3c7755fb650b39e4aa95b5e693dd16a82f7259dc153a653d13db1c1b0534112e293c64d34071929d31e3cd80fad37c9ac2654f893cc83830218460e02ea4314077debed8a45aed33c4011d9d414e62650fe1d8b9482b00513676851f995e229b0af5f4c4263d28459958c99fcc8e164370e0859347f7a736d8e799f06ae868a565a50ddee23f636d571ca83b571e1de35cbbf2cb07cead5eccccf0421e3bfeb234595c025cdb53d9ec04ace783d5a446b27209baa3119132b9fae6728406238070b60e12708448be2d22728c3ea4fefcb7686b748957db1595b8116cb2d7efbd1c79fb6001480d534ab9139214cdce897db62d9f0fa3b8ab4cef1cfb06495c065174de27032bf3ef2eb428fbcc6ac6f0ac8e2a7f1e3a92df40edd75101e6e8555a2b32df1294c5d430b2bb5de14473175ac0b8d185dc7dd8151abdfc6b4f2b1acd2b78ef0de5e0bf8968a11af2a7d809f809aa4aaca18deaa5d35311b6f9857915f9a35b3c9c12fd08205c632b8f9921d3fbb1571b7572c7f18702b0b1a8e8fd0be873ade6fcac03442623d2f3a0ee540278d81888b35e61c080f863d40929f19541c798dedbd5a5f053f7d1f571a65a5818fcd09be14b78f847353ef11e7f51e2ae46fc847eb272195621dfd4fcfcd835b97a32afedc4f4ae5eedd90f4efde9dfa7b4a283873d3f25488a8e50c141af6be4757e66b4a69e5f8edc958f3f72d6ce6196f67d64c93ffda702538d7fb1febab01b51e70887dd70910483cb5a49b871979f560023a63cae568f411db40efc08c8346cd48c4ad65631a7049e1ff8845959033a214e0049af51170fb502bd862fb38f9a02828a17f85c5d5d0a261614815e050f55d69628706bc9f6fecd91b4fb7fc5b88591d926d8244b51973cadc25e38df01d8be02a4bbbf080d843e43ab625b71a0762f2ccd87b506527734f16632c1417c7365e72272ee2e39b2367e39e36e0b1fc3df2d0c2c75738120280ca1505cdd131db426d4c1b1d6f1bd1751e03268318ee42bb59b69b3468cc83d92528d43886c72034b1c11568a34e72d225a95d262bc6130d60a0c158a98ca5f838608c7f6c249ba9e82930c66606b33862548d82c4a081ea7832ae4199659a0f022a4b8c28be63fc6b4ffe31d3328ca570110dd0c18bddb394bf4cfc33228fd712b76043835b4e1ef858f79c3bbc26ca9763a86e802ddd9f95d28bc4c1d5901190f0b0dea92c60661b8dc214829b7c126c2a2bbdd1339e8b5e70647bccbedd722fbd02e5ed85d5b7609e993723ca60a53f893171a54de569617bf69ab734caf4900d6db4a7f8666eeb62638d008fa5f4ef96fdd1bfe2df1409cf5d5ffe52347bf942386c937abd6dc253c78d89f00c949e09d01b3f898808c185bc46298aa96046dd8a616287b803ef9b19d864a3da691a4db556c011fd0750bad09ca6e4e111ec7ac6d7b418846e6c65df3e7800a60b9dbaef5a882a3852386d9d83b577eda8578d39fc4a0c8ba90c0d95cc3fe83568935dc2efb7269ab346503edbc2c8226a436b8c57f9faffb1a5e847f4e14037aacdd1feb72aefa6b804f146c0f52fb453367e7d17d6577a709e6f43b1fd98d0b0fc3cf165fc19b4dd3d249d0a513840179985a3211dd36e025643d9598ca8ffcd32bc4049b23649831cc4b8098004cae8ead5196413ba2ee903568d67950760a3568c456654cf2107ed7128385da3f1063d05764ec61c4b429c108bfccfea2c4fcab03f94f5ed9750da44977da7fdbbe8ba8196c039cb69b3537c763c1e6c6ee4166b94a468c47a85db6aec7e00d7f2f0cc4662cd1df76f6f2e7e9db337c94bc4af225a77d3f10b543134bd18517a817020a388c18b646da59f538a0c9f86ed0cab7e1051eb8dc7e45fa742fd98c2c25b90679648b6d85b4c745cb8e12a349b4813a091b71e0d075f516741f1808738700a5a516bdbc5988fe134b7adc7a86717a8c30041b85741f3a34db1dc1698a8d2da48c919235f151f2d3b55713dddddb028a75565acfb8703c2a23f0c7b1c7f11859300c4a4015542dc1461f3c5a7cf614c93439a92f159c3bb8f1b4f3c2618f193066bee93b4353c94b085abd4d9b55d3068c2488264a7a9b2008c58bbac5d5b0ccd952d19caa4f8ee737cbb4708a2fa71ebf33b0e1e34cb2f4a172d71e960fef1831f3b9dcf3366e83ef7ed0ea5cbe187ca1721affc0c793f8cde9b066b454507e78fedf1915fcda8f9c246085e0e1f7af0bec84a146c2e2b5c9ab39649e733ea36df73d9a490b6807880a6a0732bdda846bd5759b4dfab0744f85ec50b4587c2d97846d0a27b74c530a5b9f22792d62afab4d9961418d1fc7fb86d25b451bfa4e1c04b4d44014e003819f1c44c013b309d378040bd125c706b1718396047201bb5fe4f5fabac2cec0996214cb3c74de3844a2ab44ab95a3323d557237afa05dfc9aa1af10d62f833ff4119e80cd6152d856c67084892736032bad6e314f04fe2d48ae01cf066fded8c5a1900ba7a90184d164864634ec1bda77dfdbf11f18dcf8b5006f63c083722bcb1ac35d28db68b37ea740bbed621d711775490ffab08e6fe18dd3dfb3ea889cb89ad8632ba10f5467c84db89e23a123f766944c446c9a110b1f893b4c7c0aba199b920052dfd9e7eda483854296c216df6807d9364f7230a13da4ec9240e2aa4f82f2811d0f5aa1c514c37dbf7aca98248f7347397b279b3bc3f3e03bab825868b57f412c1fd3db533abd9142960f54236b1b387a792a2c6e5ee589b0987b8284d414cd4a85bc1ad6d1d5c670bfe932dfb17a98524d1a734f026ef4dda9b8eebd09cff8b91a3c9df0b627233000546e5db58b190dfb05df69f8fc71e68bfafb6a3f8b4c1c519f6383a36dba3f328a02d98d6357fcc00231812bb49baa62ad51f9b43a48e733d201325e2f84f00c4c73e0beed34ec321bdf6267e2841fa6bd15dbc4c2d465ddc71a9479a42e5a5f1a91523445ae48ec6dd8b74954f7f81d1ae8efabe71e6beb8b4944cc017c77ff70ac2cf0ba380031f81beba78176bbb12ab185b04254975ebc23b2bc2d75b43639a0940fe9b6e57d7dd390a43de96a99fa56bc95155439312a3387b0653ab32e514bf3a22a0db45ab331c290d506acba9d876e8d725de644fd85f1d3fa3384710cbb187124d925c6b3539f33dc0d7dcd02e39e7ed3f3c5b4fcc5b0e863b081ed61a4758f550504a3684892b58a77381003e5fd6a0a4b2cb0f4e9576df4dda7bd82bc7cedc58fbe1e0cef58899e288d0e032374fe589fcccaf846e", 0x1000}, {&(0x7f0000005580)="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", 0x1000}, {&(0x7f0000006580)="b629107543ff00ffa55712e0fa9462ac4e0d4af31da5b53f7bf5edaf89d5e5d2fc99ae7bef845f08827247601e2c02dbea0013dcdc6ac2a1e68a08457a63b6e527d84008eb28e4290e9f3f41c9bca2669fe0be59b58fc1dcf93078964738fcb1e9d847c8400e62897f1b8debd10591c392837b11cbe7178bf115dcabb1214816c876ad", 0x83}, {&(0x7f0000006640)="962f6953689b7b504a11131c7fe11d76c432834999a87fb597c43382d77a4e06833ddad66410a360851745d7464f0ec8a9c04aaeae344d35b3b67ddd73bd95254071e1096b5f7f39adf428c6f5031b41b83c355b9acca8efc002691640850c37922bdad34fbf93c320b6f6cb165d9593171892fb7cbe26ef6e552cc0af1683d3a7c52e70ca27c0361470f5ee5dc2ec02fd3b359ed92179901872affaaaa72e0d059e5b4d70721969d48e4756ff5ac5bff3efd636cf89c145ede83c4b58a69e2f87910d531b3ad5a31ab49ea566b4c51eabb027e6d0c8e195046a920958dd2039a96c80a2aa24b0591aa45b4f9b02b0db04311bdc21", 0xf5}, {&(0x7f0000006740)="96d74804c7c19dbc7705b1de11abd4a988ffb032f3372e209c4a224e", 0x1c}], 0x5, &(0x7f00000067c0)=[{0x1c, 0x100, 0x5, "ca159f2bf75d4d47ea2f39659f"}, {0x100, 0x84, 0x1, "04ec2c754cd834d8d263aa21e1262f84967e30cbafb1a4833ae4b65fab80acc4396d8f0bafb46b94eab6309d54da99b0b6cd0dcd2352b0426971568de2e5ea4a4ca8891c60767fd785a438853a3a43b9af1d761325013d16f151e0b1cc68533c1b0f30f7c3c792cd209f8c4e1ffe5775ec27697ad23ec8646338877cb93d37a0789daaf343e0bfaf966ca5dce99c9e9490fb08ab8f01e45c09047327af5fc1eb26d1ddae1baab4c51d50083ac6cb5c43425277dcfc7683d67825616e5133f9952b173d09ca8b860fe486a4633c3f78e2f781d85ce1a42b605d5e8fba248c0f8a8eb0d7f03bdf601349aae9629018014cbe38e9b7"}, {0x80, 0x10c, 0x4, "3059fe30c27701a5aea0fbe0ad00a75d569db89770a78717bf4c63c37887cc9247779b5ef4de71c1a73bb2a4371efb27d0f7d64d8a0eeccd2a30c76e00c945d38f3174e94fe447725933804347bb9d86457061917fcf6c6e3e2997d052e7b98870f76f2cfaead1ba277e88d35a4c104ca201"}, {0xec, 0x8, 0x4, "765b903d0cd63c4d0057566f69c050d973d7c82867229b0f8b0ce9bdbbb7c112d58b2237753e4f6f96d65b1bbf3b7107acb10153eee15c405c75b5f14d22832b848874d473d2e06b9dce24736d3d63904a79ffbbbd73ecfe8565ca34cd30027fd4b3f16bb2aaf4f92f293f2d563ea501fd0bc37191ba2a71ad06b6504141943eafb6411ba9a4b3e6cb4afe5a805e79b181b2d217bcce4c8779ed74019b376825d4375114a18a33a13bd0774b91e7159fe14385d4f28663a47f69ffcf114b8c008b38fadc0e2bc1a321d71ca423b48385e5bbc5f300d40ca97b4a5c8e06cba7"}, {0x84, 0x103, 0x13, "a0f8a99b753e62623e3206ccbd11dc6ec04f85da6673f40139f24f01b578a4e4842361fdb021e0cde6cbeebc27974cffdf8cc937d0b0f97b01ada15cdfc93b2a60d1e0b9ff29c6dc02e842a7a3acb1e68c13830203d4cc518da10edfb3b5499c1f6c20614c90e7c1fb502d0f180b166bce66b11d23"}, {0xe0, 0x0, 0x7fff, "e05c32e7dcddb86593610ab6e555fb1ddb71e959c61a5cccab578686b5ef582e2d3eb8171428dca38afbd8ad7bf7623c634be9ffc16639767af90ec46a716e4d5d7ddc94853195e0cec516422bca814f3bccc676b32aed6e36839f65f03da2e9862ec199d6263ff56a449df1fd2008df1b255a3126e19c72f3a831624733e1cc358ee367edaad405cabdc65560a7646a7f696a43b0f0069a5c2e2e9cb4e729f8cf3c5205963a620103382390e6ec8e34696bd456e3a22414a169750297f9de7eaff83876fa47c9cee86729ccd63867254aa39b"}, {0x104, 0x109, 0x1ff, "bcb20e610c4ede224cb4bdd6cdcb2d9fd9c96cffd8a72024cdd28d7a106f6185d58fb78a90fb090a4dc733b69b987cd41b8ba26f0772fe152da3e2d1a08c4071bb584d79950bc76d4aae0798e2fb6ae1a551b16a3ca088fc50756b66757b9f6acf79c7db3479c121f6ea67f8942a34a63b7d60fdb047769d478bc3bf456c6bf7d88ee1cdc481769b7f2961f44d6ba78ee42b1b6c71501842e99a1e2b693cfb7a883d94d7dce4f9f85840402fab50bc347d049db3b79e3fbf768ffd5e0226d8f3f55194094c8636c5f921c0d2ad06b4b73b435b3dde3d9117712dc4db44680290b1e9ecf1b912a89524e9ae12f04cf387e44a57997f"}, {0x58, 0x115, 0x4, "d95fcee618d942e0efcc3e1bb6a026129d45428d74d5005017159cb5724e72b0b2c33bc61d20b87407efbc8eb4125d6f41119ec7883a8a760ab8ef24127fd6c2dca6fb44a298ce4f01fd704b"}, {0x68, 0x105, 0x81, "550f598dba4e2b978a4ec6b2fdfa2361834d7d8583718be76ed18097ea1c155f66b99df9f28baa8a078798b047d98dffdb31a99579a49b6788d34a773a94dedd4346d6afe7a93dc3d5bc22e33380992dbbcde472cba7609e37ddd326"}], 0x5b0}}, {{&(0x7f0000006d80)=@hci={0x1f, 0xffffffffffffffff, 0x4}, 0x80, &(0x7f0000006f40)=[{&(0x7f0000006e00)="3ca53f8acca7282fc2180abc7674a5fc7cc025c3eba89d3d6904f513057d8682b6cab6d86570e1acd6431e179aae1a89cd1a1159232ec0bd732dbe872a5c8c5478c84bb1de37b658c93929c9c9497a4cfa6cb76b88500a6c8195920b0f63521b4dbf46593b00e41b2f0f1d00c3dc89a85931904c0c3beef109d73d82825345f31f19f0e8b83de7274997252049", 0x8d}, {&(0x7f0000006ec0)="f7ff952a5b482f7e92a067a02b84a909cd2f5b867ccb7153bbc58aa51b482e55dbf895f2d310bcfe880a28e5251fad2eec53958b077fa6922908b8bad7a22d7f147b3605e50c23e121c30d455c4c28f1", 0x50}], 0x2, &(0x7f0000006f80)=[{0x44, 0x117, 0x20000000, "4ae84646ca6eb1a5af5a0d5a63145ada4be32fcec4fa87f2f79079ae867cab51fcebabf6c47fb71090dc8c3312f3ce5d710d906a798cc859"}, {0x40, 0x10b, 0x9, "f2d4dff81f40ad1f031193075bc9fdc6611558abc45b26e55dc6e9d21b51d7cb7189d12d08edd386b0008f439c0ccd19be1f3f8b"}], 0x84}}], 0x6, 0x11)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
keyctl$session_to_parent(0x12)
r4 = dup2(r3, r2)
ioctl$BINDER_WRITE_READ(r4, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000007100))
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)

14:00:29 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendfile64(0xffffffffffffffff, r0, &(0x7f0000000040)=0xfffffffffffffbff, 0x80000001)
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$proc_capi20ncci(0xffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x10000, 0x0)
ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000140)=0x1)
r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x48441, 0x0)
r3 = msgget$private(0x0, 0x0)
msgrcv(r3, 0x0, 0x0, 0x0, 0x0)
msgrcv(r3, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(r3, 0x0)
msgctl$MSG_STAT_ANY(r3, 0xd, &(0x7f00000001c0)=""/56)
openat$loop_ctrl(0xffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x10400, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)

14:00:29 executing program 1:
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)="16d0d5f89389bb056f4289cadee57982f189fd02dc0d87eeea99b12a382d3d82137a81613afb16334b78973ea6044b43d6258811d11b895090d07044ad99632ed7089c866db213e0eaf44a4568096b164c2110d33bac12986350dc15e05f98fe6b7e22490e9126ed36bc707cdc19a8c2e9bba6fb5eff694cf849e8d290b28028f978ee13066fe134cb2a7db45e2c81e839ed176935eadb096e41901709a3d291f136344e5f501df9f36187258c4ac6fa303392", 0xb3)
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$nvram(0xffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x125000, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
setsockopt$packet_buf(r2, 0x107, 0x2, &(0x7f0000000580)="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", 0xff3)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x4)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r4, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

[  244.764287][T10878] binder: 10877:10878 ioctl c018620c 20000540 returned -22
[  244.818630][T10880] binder: 10877:10880 ioctl b704 20007100 returned -22
[  244.858298][T10880] binder: 10877:10880 ioctl c018620c 20000540 returned -22
[  244.885035][T10878] binder: 10877:10878 ioctl b704 20007100 returned -22
[  245.076740][T10885] misc userio: Invalid payload size
14:00:30 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
setresuid(0x0, r2, 0x0)
setresuid(r2, 0x0, 0xffffffffffffffff)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000cab000)=0x6)
setresuid(0x0, r4, 0x0)
setresuid(r4, 0x0, 0xffffffffffffffff)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, &(0x7f0000cab000)=0x6)
setresuid(0x0, r6, 0x0)
setresuid(r6, 0x0, 0xffffffffffffffff)
syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f0000000080)='./file0\x00', 0x7, 0x4, &(0x7f0000000380)=[{&(0x7f00000000c0)="4666a67f53", 0x5, 0x2}, {&(0x7f0000000140)="1cf1059c771ac67166f8986512835e312158d8c6ab5c7e4c7001939922df5f395d070b58ee200c851183af00d0f41af6c1c01b7f3d7161b0f1f18175f4b17d5e82c2c1acce00f02ce34fbf80d9805b", 0x4f, 0xd4b6}, {&(0x7f0000000200)="7b7f32b45bf1c682bee27f54b8ccbd8da2d4e1486e3e1c251aeef855072bde712791233ea2553f450dbb05fd8e5619944bfd452fc9d145a02331205fea4d8981649b951bf91c171e3d87c1c40f3098ded0181be65d6d795151881c6b417cac5815b086679c46bd0b43f7f8b4511121d2103f891762fe691256d86a6a74e3db9114eea56ea21ca140d71c35f3220692b4324238bac3699fe0e39418d5939b42b2978b87dfa1bdc6d6afefd9de0ac5bdc411c2e8fbcb2dc9d4fad26c5e999359b06885", 0xc2, 0x4}, {&(0x7f0000000300)="7133378c6fbb8b24380fca6389a748b9121ff88296f67baeda71fe4977eeece3fcee1296a2ff0f70292329bc1d81b069ec224c9542e920df45b06e50f743ca5f11a6fdf97491e7", 0x47, 0x4}], 0x1000002, &(0x7f00000003c0)={[{@type={'type', 0x3d, "aaef39fb"}}, {@umask={'umask', 0x3d, 0x3}}, {@nobarrier='nobarrier'}], [{@uid_eq={'uid', 0x3d, r2}}, {@uid_lt={'uid<', r4}}, {@audit='audit'}, {@smackfstransmute={'smackfstransmute', 0x3d, '{mime_type'}}, {@uid_lt={'uid<', r6}}]})
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)

14:00:30 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="fbfffffffffff1ff0000000009000000"], 0x0, 0x0, 0x0})
r3 = openat$bsg(0xffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x100, 0x0)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r3, 0x4010aeab, &(0x7f00000000c0)={0x0, 0x103006})

[  245.373765][T10897] hfsplus: unable to parse mount options
[  245.393865][T10897] misc userio: Invalid payload size
[  245.474070][T10903] binder: 10899:10903 ioctl c018620c 20000540 returned -22
[  245.605454][T10910] binder: 10899:10910 ioctl c018620c 20000540 returned -22
14:00:30 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20043, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)

14:00:30 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0xa4, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)={@flat=@handle={0x73682a85, 0xa, 0x3}, @flat=@weak_handle={0x77682a85, 0x1100, 0x1}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x400}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x2, 0x0, 0x11}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}, @fda={0x66646185, 0x2, 0x2, 0x1}}, &(0x7f0000000180)={0x0, 0x1c, 0x34}}}, @increfs_done], 0x0, 0x0, 0x0})

14:00:30 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendfile64(0xffffffffffffffff, r0, &(0x7f0000000040)=0xfffffffffffffbff, 0x80000001)
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$proc_capi20ncci(0xffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x10000, 0x0)
ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000140)=0x1)
openat$userio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x48441, 0x0)
r2 = msgget$private(0x0, 0x0)
msgrcv(r2, 0x0, 0x0, 0x0, 0x0)
msgrcv(r2, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(r2, 0x0)
msgctl$MSG_STAT_ANY(r2, 0xd, &(0x7f00000001c0)=""/56)
openat$loop_ctrl(0xffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x10400, 0x0)

14:00:30 executing program 2:
r0 = semget$private(0x0, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00')
sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r2, 0x703}, 0x14}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r3, @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYBLOB="fa78b821a8ae497c909a7bedcce873376cf86538e32eb2cc5d7fae2d287e5b4903fea922fb9effbfea121ee5814832d01f26c0bd6d451c1f647f0e06bc8c7299fc21ca55fd75aba45439385de30199fce799b6777624ddf5d67eb19d635b27c039019fb486999da3b32708e1e5a4d676ed94af37e671abc52e8c7a18110d4b0f24c0a14b31778800f813bc9244bc401ffaaae28708fe18a0ce71712b8867162a05caa65d86f7df7f6fb20ddd523b6066a389312e07c86482de5bee080a2e858e38b2f7ee60fa98738fb6a7cced4d7d6c3a55dd78600bfc5fca07e598e592dba7e5586c822f6444b74645b26a3bf37b2ee5124d79997b5c1774", @ANYRES64=r0], @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
shmctl$SHM_STAT(r0, 0xd, 0x0)
semctl$SEM_STAT_ANY(r0, 0x2, 0x14, &(0x7f0000000000)=""/240)
r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$BINDER_WRITE_READ(r6, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r7 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r8 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r9 = dup2(r8, r7)
ioctl$BINDER_WRITE_READ(r9, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x9, 0xb, &(0x7f0000000400)=@raw=[@exit, @generic={0x3, 0xf, 0xf, 0x40, 0x7fffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x29}, @exit, @map_val={0x18, 0x8, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xe000000}, @alu={0x4, 0x1, 0x1, 0x7, 0x0, 0xc, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x9}, @generic={0x1, 0x1, 0x1, 0x63, 0x3ff}], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x1a, &(0x7f0000000480)=""/26, 0x40f00, 0x8, [], 0x0, 0x9, r9, 0x8, &(0x7f00000004c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0xb, 0x8, 0x5b}, 0x10, 0xffffffffffffffff}, 0x74)
write(r10, &(0x7f00000005c0)="73c5f8c65b9a3d7aa4bb2c1bb5", 0xd)
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))

14:00:30 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$BINDER_WRITE_READ(r4, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r7 = dup2(r6, r5)
ioctl$BINDER_WRITE_READ(r7, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r8 = openat(r7, &(0x7f0000000080)='./file0\x00', 0x10000, 0x2)
sendto$rxrpc(r8, &(0x7f00000000c0)="c5e7030cec48ccd4fb69ee33ee75e87d1bcb38970ddd1ff7684e532956792d97093745d37d133b5130bfde2bbdfddd689542be6d638edbf096e9ee29e3a9dda34d02b63b53438e1859eec9a035fc7d6fe8f139e7fc1a72", 0x57, 0x4004010, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x8000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}}, 0x24)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, &(0x7f0000000040)={0xff, 0x8, 0x3854, 0x4})
r9 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r9, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

[  245.940340][T10922] binder: 10917:10922 ioctl c018620c 20000540 returned -22
[  246.025678][T10929] binder: 10913:10929 ioctl c018620c 20000540 returned -22
[  246.054210][T10929] binder: 10913:10929 ioctl c018620c 20000540 returned -22
[  246.072504][T10931] binder: 10930:10931 ioctl c018620c 20000540 returned -22
[  246.083741][T10932] binder: 10932:10932 ioctl c018620c 20000540 returned -22
[  246.097916][T10931] binder: 10930:10931 ioctl c0106403 20000040 returned -22
[  246.110256][T10932] binder: 10932:10932 ioctl c018620c 20000540 returned -22
14:00:31 executing program 0:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)

[  246.144633][T10936] binder: 10930:10936 ioctl c018620c 20000540 returned -22
[  246.171525][T10931] binder: 10930:10931 ioctl c0106403 20000040 returned -22
[  246.383996][T10940] misc userio: Invalid payload size
14:00:31 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0xc00)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L+', 0x6}, 0x16, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r4 = accept4(r3, 0x0, &(0x7f0000000180), 0x800)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00')
sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0)
sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x168, r6, 0x402, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x36}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x2}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x2a}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x35}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9de8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x88, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x168}, 0x1, 0x0, 0x0, 0x40}, 0x804)

14:00:31 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
writev(r0, &(0x7f0000000000), 0x0)

[  246.647759][T10944] binder: 10942:10944 ioctl c018620c 20000540 returned -22
14:00:31 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40246608, &(0x7f0000000040)={0x5, 0x80000000, 0x10000, 0x95, 0xff, 0x100})

[  246.702249][T10944] binder: 10942:10944 ioctl c018620c 20000540 returned -22
[  246.720968][T10949] binder: 10913:10949 ioctl c018620c 20000540 returned -22
14:00:31 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendfile64(0xffffffffffffffff, r0, &(0x7f0000000040)=0xfffffffffffffbff, 0x80000001)
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$proc_capi20ncci(0xffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x10000, 0x0)
ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000140)=0x1)
openat$userio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x48441, 0x0)
r2 = msgget$private(0x0, 0x0)
msgrcv(r2, 0x0, 0x0, 0x0, 0x0)
msgrcv(r2, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(r2, 0x0)
msgctl$MSG_STAT_ANY(r2, 0xd, &(0x7f00000001c0)=""/56)

14:00:31 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x191c42, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)

[  246.917371][T10959] binder: 10958:10959 ioctl c018620c 20000540 returned -22
[  246.941489][T10959] binder: 10958:10959 ioctl 40246608 20000040 returned -22
[  246.978932][T10963] binder: 10958:10963 ioctl c018620c 20000540 returned -22
14:00:32 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000040)={0x5fa2, 0x5, 0x3})

14:00:32 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$BINDER_WRITE_READ(r4, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000140)={0x0, 0x12, &(0x7f0000000100)={&(0x7f0000000000)={0x34, r6, 0x800, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0xb, 0xe0}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty=0xe0000000}]}, 0x34}}, 0x0)
sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r7 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r7, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

14:00:32 executing program 2:
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0xc0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x4, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000080)={0x4, 0xa, 0x3, 0x9}, &(0x7f00000000c0)=0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0xfffffffffffffffe}}, 0x10)

14:00:32 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r2 = dup2(r0, r1)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = openat$ipvs(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'xfrm0\x00', 0x2})

[  247.254290][T10975] binder: 10974:10975 ioctl c018620c 20000540 returned -22
[  247.337656][T10980] misc userio: Invalid payload size
[  247.353619][T10980] binder: 10973:10980 ioctl c018620c 20000540 returned -22
[  247.411496][T10986] binder: 10973:10986 ioctl 404c534a 20000040 returned -22
[  247.444452][T10986] misc userio: Invalid payload size
14:00:32 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$KVM_ARM_SET_DEVICE_ADDR(r5, 0x4010aeab, &(0x7f0000000040)={0xfffffffffffff6ee, 0x100000})

[  247.473659][T10986] binder: 10973:10986 ioctl c018620c 20000540 returned -22
14:00:32 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="0f076ad4134a7e79462f3d43b169c52f837de59351ab7dcf981c0d11dcf47db04b0f8c6f30c945f2878eba137bca4368476d526c851f99f9c8ae378d1dcb23ceddd230e4c49dcfeccd39", 0x4a}, {&(0x7f0000000080)="341787745ad8ec477619417ce471a2a6c9a60bcb36b35392df9f6f30d7168432e9b7586b29834383d317d65770338c5e79cd8c1bf79d2961992fdde03877d3a3596c38323cd211cc0ccf52", 0x4b}, {&(0x7f0000000100)="7aea495d021cd66bb83ff3f827fabb1a8632a4116cd3127b9000c2fa76143f5b6375480ff6966573dcd50dd5befaf8670024011e50ca81f1b5a683b6f08f3c04ecca8f90510300a6df6d6d0367c0f1b8772f67309ce43f92cae58b9b87ab5bd7b3525fcd6be08be7b4926817356c4add0e85ae13f33d1af5203d57da64de90b5d7f2c39d67817699aaf00a90529af7502996d4dcd151d8991051e27ee473f141ea58", 0xa2}, {&(0x7f0000000200)="0aa526406b00d34ab5236eeeb18c39", 0xf}], 0x4)

[  247.733791][T10997] binder: 10996:10997 ioctl c018620c 20000540 returned -22
[  247.768369][T10997] binder: 10996:10997 ioctl c018620c 20000540 returned -22
[  247.806886][T10997] binder: 10996:10997 ioctl 4010aeab 20000040 returned -22
[  247.856017][T11007] binder: 10996:11007 ioctl c018620c 20000540 returned -22
14:00:32 executing program 0:
clone(0x28000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffff07}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
openat$dlm_control(0xffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x408000, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r6 = openat$rdma_cm(0xffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r7 = dup2(r4, r6)
ioctl$BINDER_WRITE_READ(r7, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
mkdirat$cgroup(r7, &(0x7f0000000040)='syz0\x00', 0x1ff)

14:00:33 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r5 = dup2(r4, r3)
socketpair(0x2c, 0x4, 0x9b07, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f00000000c0)=0x8)
syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x2, &(0x7f0000000340)=[{&(0x7f00000001c0)="b24dab4471cc0658e5875778a6d1c3d4317f27a82a1095c935fc859a762790ad925e41fd24793777f5a68216acaff58530cc3bf2776d40f7a96b1f780ffd15c3be608d6a6868e952c3421043d3f26fb7e83fd5d83fb7a046a5b8b324626844fac85e03812351e43aecb855adc253e5f3509949da8b57502b88ac5af816a982dc242e99428c63a44618ebe53d98fe011b4028e9d75a5a108b259e1e6cdcf028c0d19f6ea868c4c840290b20ac50aa00d0650cc61641b64cd8ee32211d3f829f13ece9e92adecc377d844db087fdf4e9b4e503d1f82da0e2d1a5090f8f4ca64e15fd6d1f6a259d04373c672e2099639ddc26659b", 0xf3, 0xc1ff}, {&(0x7f00000002c0)="627fd78191a3c7ea8d445eb8780814dc84790c496bfd9962f6f9d4593d375ee9e33dc6172f9bd5e393295fc5aab07bb2f7f914c562c1312349156768ec913d0c94cb2899", 0x44, 0x1}], 0xa8, &(0x7f0000000380)={[{@umask={'umask', 0x3d, 0x3ff}}], [{@smackfsroot={'smackfsroot', 0x3d, 'cgroup-system'}}, {@subj_role={'subj_role', 0x3d, '/dev/binder#\x00'}}, {@context={'context', 0x3d, 'user_u'}}]})
setsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r9}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f00000000c0)={r9, 0x9}, &(0x7f0000000100)=0x8)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000040)={0x9, 0x1f}, 0x2)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

14:00:33 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendfile64(0xffffffffffffffff, r0, &(0x7f0000000040)=0xfffffffffffffbff, 0x80000001)
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$proc_capi20ncci(0xffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x10000, 0x0)
ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000140)=0x1)
openat$userio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x48441, 0x0)
r2 = msgget$private(0x0, 0x0)
msgrcv(r2, 0x0, 0x0, 0x0, 0x0)
msgrcv(r2, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(r2, 0x0)

[  248.159739][T11011] misc userio: Invalid payload size
14:00:33 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
accept4$llc(r5, 0x0, &(0x7f0000000040), 0x80000)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

14:00:33 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendfile64(0xffffffffffffffff, r0, &(0x7f0000000040)=0xfffffffffffffbff, 0x80000001)
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$proc_capi20ncci(0xffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x10000, 0x0)
ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000140)=0x1)
openat$userio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x48441, 0x0)
r2 = msgget$private(0x0, 0x0)
msgrcv(r2, 0x0, 0x0, 0x0, 0x0)
msgrcv(r2, 0x0, 0x0, 0x0, 0x0)

[  248.515647][T11029] binder: 11025:11029 ioctl c018620c 20000540 returned -22
[  248.552941][T11029] binder: 11025:11029 ioctl c018620c 20000540 returned -22
14:00:33 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00')
sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x34, r7, 0x1, 0x0, 0x0, {0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, 0x34}}, 0x0)
sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r7, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'nr0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000000)=0x9)
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))

14:00:33 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x6d30, 0x367e82)
ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, &(0x7f00000000c0)=0x8000)
r3 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\vO'], 0x0, 0x0, 0x0})

[  248.598903][T11029] binder: 11025:11029 ioctl c018620c 20000540 returned -22
[  248.709309][T11036] binder: 11034:11036 ioctl c018620c 20000540 returned -22
[  248.746831][T11036] binder: 11034:11036 ioctl c018620c 20000540 returned -22
[  248.776270][T11036] binder: 11034:11036 ioctl c0045627 20000000 returned -22
14:00:33 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$SOUND_MIXER_READ_RECMASK(0xffffffffffffffff, 0x80044dfd, &(0x7f00000002c0))
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = openat$bsg(0xffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x200, 0x0)
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
sendmsg$IPSET_CMD_HEADER(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0xc, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0xc001}, 0x20004080)
r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r7 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r8 = dup2(r7, r6)
ioctl$BINDER_WRITE_READ(r8, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
write$FUSE_NOTIFY_INVAL_INODE(r8, &(0x7f0000000140)={0x28, 0x2, 0x0, {0x5, 0x8, 0x6}}, 0x28)
r9 = openat(r2, &(0x7f00000000c0)='./file0\x00', 0x200800, 0x114)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r9, 0x4008af60, &(0x7f0000000100)={@hyper})
setsockopt$inet6_dccp_int(r2, 0x21, 0xa, &(0x7f0000000080)=0x101, 0x4)
r10 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r10, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

14:00:33 executing program 0:
clone(0x60932880, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0xc06)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
setsockopt$inet6_buf(r3, 0x29, 0x15, &(0x7f0000000200)="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", 0x1000)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)
r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$BINDER_WRITE_READ(r6, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000080)={0x40, 0x1, 0x8b, 0x0, 0x80000001, 0x8, 0x6, 0x1f, 0xd3, 0x0, 0x7f, 0x0, 0x0, 0x200, 0x7, 0x3c, 0x0, 0x6, 0x3f, [], 0x2, 0x2})

[  248.923569][T11027] misc userio: Invalid payload size
[  249.173225][T11052] binder: 11050:11052 ioctl c018620c 20000540 returned -22
[  249.193688][T11054] binder: 11054:11054 ioctl c018620c 20000540 returned -22
[  249.223895][T11052] binder: 11050:11052 ioctl c018620c 20000540 returned -22
[  249.239651][T11055] binder: 11053:11055 ioctl c018620c 20000540 returned -22
[  249.255784][T11055] misc userio: Invalid payload size
14:00:34 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r3 = syz_open_dev$binderN(&(0x7f0000000480)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmsg(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl$FIGETBSZ(r6, 0x2, &(0x7f00000004c0))
ioctl$KDFONTOP_SET_DEF(r5, 0x4b72, &(0x7f0000000440)={0x2, 0x1, 0x2, 0x3, 0x1f3, &(0x7f0000000040)="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"})
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r7 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r8 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r9 = dup2(r8, r7)
ioctl$BINDER_WRITE_READ(r9, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
sendmsg$IPSET_CMD_TYPE(r9, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000000d06000000000000000000200000000511000300686173683a69702c6d61726b000000000d0003006c69737365740000000005000100070000000500010007000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8000)

[  249.320524][T11055] binder: 11053:11055 ioctl c018620c 20000540 returned -22
[  249.365966][T11059] binder: 11053:11059 ioctl 4040aea0 20000080 returned -22
[  249.395040][T11055] binder: 11053:11055 ioctl c018620c 20000540 returned -22
[  249.405576][T11059] misc userio: Invalid payload size
[  249.433722][T11060] binder: 11053:11060 ioctl c018620c 20000540 returned -22
[  249.442006][T11061] binder: 11053:11061 ioctl 4040aea0 20000080 returned -22
[  249.475758][T11063] binder: 11034:11063 ioctl c018620c 20000540 returned -22
[  249.513671][T11062] binder: 11034:11062 ioctl c018620c 20000540 returned -22
14:00:34 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendfile64(0xffffffffffffffff, r0, &(0x7f0000000040)=0xfffffffffffffbff, 0x80000001)
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$proc_capi20ncci(0xffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x10000, 0x0)
ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000140)=0x1)
openat$userio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x48441, 0x0)
r2 = msgget$private(0x0, 0x0)
msgrcv(r2, 0x0, 0x0, 0x0, 0x0)
msgrcv(r2, 0x0, 0x0, 0x0, 0x0)

[  249.523069][T11063] binder: 11034:11063 ioctl c0045627 20000000 returned -22
14:00:34 executing program 4:
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="72c74bd304bc0b312643a904e33ac31e", 0x10)
r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080)='wireguard\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xe4)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x800, r0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b='\xb0\x80s\xe8\xd4N\x91\xe3\xda\x92,\"C\x82D\xbb\x88\\i\xe2i\xc8\xe9\xd85\xb1\x14):M\xdcn'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_PEERS={0x794, 0x8, 0x0, 0x1, [{0x25c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_ALLOWEDIPS={0x244, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr="2c91d5127f6f03090d8275c3dae50f43"}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0xffffff81}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}]}, {0x8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xfffffeff, @local, 0x1ff}}]}, {0x60, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x80000000, @ipv4={[], [], @multicast1}, 0x2}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x400}}]}, {0x460, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "855f533f685875c2879aeeded023076c34ff57b56f64baaec6a3b859af71dcc9"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x3ac, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr="cbe5a58f8cecf5cceaec768f38e5e273"}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr="8b1d27143e5b2b94c03de679bc48f6cb"}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x1d}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f50adfaefda82ec8675bcfef84a159eb977b5d6731b96270a856ad2f267cbade"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x80000001, @loopback, 0x1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x7f, @ipv4={[], [], @remote}, 0xfffffffc}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xd00d}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b='\xb0\x80s\xe8\xd4N\x91\xe3\xda\x92,\"C\x82D\xbb\x88\\i\xe2i\xc8\xe9\xd85\xb1\x14):M\xdcn'}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x800}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
prctl$PR_CAPBSET_DROP(0x18, 0x4)
ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000b40))
r2 = openat$vcsa(0xffffff9c, &(0x7f0000000b80)='/dev/vcsa\x00', 0x2, 0x0)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000bc0)=0x2400, 0x4)
personality(0x40000)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000c00)={<r3=>0x0, 0x401}, &(0x7f0000000c40)=0x8)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000c80)={r3, 0x4, 0x3, [0x7, 0x2, 0x2]}, &(0x7f0000000cc0)=0xe)
r4 = openat$vcs(0xffffff9c, &(0x7f0000000d00)='/dev/vcs\x00', 0x40202, 0x0)
setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f0000000d40)={0x4, 0x6, 0x10000, 0x7}, 0x10)
r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000d80)='cgroup.type\x00', 0x2, 0x0)
fsetxattr$security_capability(r5, &(0x7f0000000dc0)='security.capability\x00', &(0x7f0000000e00)=@v1={0x1000000, [{0x8, 0x8}]}, 0xc, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000e40), &(0x7f0000000e80)=0xc)
pipe2(&(0x7f0000000ec0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80000)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000f00)={<r8=>0x0, 0x80}, &(0x7f0000000f40)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000f80)={r8, 0x2, 0x20}, 0xc)
io_submit(0x0, 0x8, &(0x7f0000001680)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, &(0x7f0000001000)="3655e235db67ec054457984f9a3cef37ac4b369076b4090b194e07c31e6cb35548d0266487e0b2417071d5b3fedae6be8cac630af04403cc07df33cd18187815388974530fccac80d3fb442f6a44c00b7ef247fe15ed35c0a81b9a3d2357fa9334391700998cb1bf7454d89eb29c845ced9fb3c04e7b0afc3c5fcd612681e7685cc5b3f0680366700f2a692128a67f57e1155ab686248098e789eff033b282184a77e2b2fc8e4c2a", 0xa8, 0x100000001, 0x0, 0x1, r4}, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0xf, 0x2, 0xffffffffffffffff, &(0x7f0000001140)="c33c274bf436556e02318a9d8457bfbee38b15bc5c57129d5fef187531f754706880c182b9c348fd1d4b2c52573a6086351cf1cd6aa5dadfc4fee05429256f2af37cda68f56d2708cacdc12473cf0f79d8c11bfd0f710bcb39347ffaedbdcd7253ac2449c9e1cdcd7a1cec36b69c91eb", 0x70, 0x401, 0x0, 0x3}, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, &(0x7f0000001240)="85320bef0a9d3ad45ca559211a34ff1f48e0f197f06ec19e", 0x18, 0x3, 0x0, 0x2, r6}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x2, 0x2, 0xffffffffffffffff, &(0x7f0000001300)="65381f77134717d17b0a573815d7e1126f1b3fcadbcc7257511aa215ce9a3304", 0x20, 0x1}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x8, 0xa7, 0xffffffffffffffff, &(0x7f00000013c0), 0x0, 0x20, 0x0, 0x2}, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x1, 0x100, 0xffffffffffffffff, &(0x7f0000001440)="2ba01d796322f86dc51b62ff4fde45c841fecaf14991542f3ccd5bb2a1b0a7ebef5a794268a92ea9472a3c", 0x2b, 0x7ff}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x2, r7, &(0x7f00000014c0)="934a37a8bc3301649dee9499f2c15cd057de4721be7e30d5a2d8120a666540bad3c880e9315e1f5d60630b0eb64b1c1df82f93e79587d7b05941", 0x3a, 0x7827, 0x0, 0x2, r5}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0xffff, r5, &(0x7f0000001540)="3cf3d42441cf9da501208b8c9a0aea69d1d0d6837231aefc8beb4e75695010ac0bfa212ad0a2895b41271360e23ffc651de5ef78a7281aa7c4fb98f37642a89f9f42256a09ddc2389bcd0a350e2d0da6799cc65df58127287080caacec23d63cac1f16b8f26dba39af647ae532cc34962371192e1c2284d811db9a68c9c36eb08fb1f976084fb0bed72390cc9cb3e4b007e0132733d18a04d6dc0f36e93105dd01dbe45ea1c6290ecb7e66cbbe9ed9514f8224a0b15782cd0ffb0230ee721e53659bfb8adbc05ba27c8457f0a04dc0b6dfa264f4", 0xd4, 0x1, 0x0, 0x0, r6}])

14:00:34 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
read(r1, &(0x7f0000000200)=""/204, 0xcc)

[  249.660856][T11066] binder: 11065:11066 ioctl c018620c 20000540 returned -22
14:00:34 executing program 2:
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000000)={0x2})

[  249.760901][T11070] binder: 11065:11070 ioctl 4b72 20000440 returned -22
[  249.793620][T11070] binder: 11065:11070 ioctl c018620c 20000540 returned -22
[  249.840267][T11075] misc userio: Invalid payload size
14:00:35 executing program 2:
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))
r0 = getpid()
ptrace(0x10, r0)
move_pages(r0, 0x2, &(0x7f0000000000)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x3)

[  250.415929][T11070] binder: 11065:11070 ioctl c018620c 20000540 returned -22
[  250.430409][T11092] binder: 11065:11092 ioctl 4b72 20000440 returned -22
[  250.444875][T11093] binder: 11065:11093 ioctl c018620c 20000540 returned -22
14:00:35 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x402)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

14:00:35 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendfile64(0xffffffffffffffff, r0, &(0x7f0000000040)=0xfffffffffffffbff, 0x80000001)
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$proc_capi20ncci(0xffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x10000, 0x0)
ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000140)=0x1)
openat$userio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x48441, 0x0)
r2 = msgget$private(0x0, 0x0)
msgrcv(r2, 0x0, 0x0, 0x0, 0x0)
msgrcv(r2, 0x0, 0x0, 0x0, 0x0)

[  250.638367][T11097] misc userio: Invalid payload size
[  250.785695][T11100] binder: 11098:11100 ioctl c018620c 20000540 returned -22
14:00:35 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
ptrace(0x10, r0)
ioprio_set$pid(0x1, r0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)

[  250.844121][T11105] binder: 11098:11105 ioctl c018620c 20000540 returned -22
14:00:36 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6, 0x20080)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r2 = dup2(r0, r1)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
sigaltstack(&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040))

14:00:36 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)={0x800, 0xb1}, 0xc)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000040)={0x0, @reserved})
r3 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$BINDER_WRITE_READ(r6, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$EVIOCGMTSLOTS(r6, 0x8040450a, &(0x7f0000000180)=""/31)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)

14:00:36 executing program 2:
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))
ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000000)={{0x1, @addr=0x9}, 0x8, 0x30, 0xb6e})

[  251.400651][T11125] binder: 11115:11125 ioctl c018620c 20000540 returned -22
[  251.423428][T11123] binder: 11121:11123 ioctl c018620c 20000540 returned -22
[  251.438485][T11123] binder: 11121:11123 ioctl c0845658 20000040 returned -22
[  251.474303][T11123] binder: 11121:11123 ioctl c018620c 20000540 returned -22
[  251.476862][T11122] IPVS: ftp: loaded support on port[0] = 21
[  251.494944][T11123] binder: 11121:11123 ioctl 8040450a 20000180 returned -22
[  251.516774][T11123] misc userio: Invalid payload size
[  251.546551][T11123] binder: 11121:11123 ioctl c018620c 20000540 returned -22
[  251.554777][T11131] binder: 11121:11131 ioctl c0845658 20000040 returned -22
14:00:36 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x20e8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080), 0x10)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
write$P9_RREAD(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="fd000000750100f20000003e4e196336c48787034557ceb19afa11a848b8b4a9c050aa0001d0c213ba6652a62c87000000b8cb2edd43ac49d66a0400963811ef01696de53e3d40e3625254f0957a8d615229daf10899d7806f47bd6add3a0f804c212e464b679b91fcf6507d0c19b49f9e0181ad62cddc494665befd53a3e5262b50b50cd828da87c8f3af47a4ecd49ae36f28b72850f002dca161619e001bd5664c2fffe74053caeeb0df94abd0607f86dfddbe344e0e84ee9ccb6aae900d9bc303a80f5cd89801f21956c074f5ff7e75c56217b8339d58a6bd9daca6e3ffe9118a25c25d1ab0a5acabbcf436e8016dd9abca40b82fabc55fe5aee6c75a2c"], 0xfd)

14:00:36 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendfile64(0xffffffffffffffff, r0, &(0x7f0000000040)=0xfffffffffffffbff, 0x80000001)
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$proc_capi20ncci(0xffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x10000, 0x0)
ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000140)=0x1)
openat$userio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x48441, 0x0)
r2 = msgget$private(0x0, 0x0)
msgrcv(r2, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(r2, 0x0)

[  251.921320][T11157] misc userio: Invalid payload size
[  251.937644][T11158] binder: 11158:11158 ioctl 40047438 20000040 returned -22
[  251.963293][T11158] binder: 11158:11158 ioctl c018620c 20000540 returned -22
[  252.409248][T11122] chnl_net:caif_netlink_parms(): no params data found
[  252.751974][T11122] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.759653][T11122] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.769752][T11122] device bridge_slave_0 entered promiscuous mode
[  252.839491][T11122] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.846922][T11122] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.856813][T11122] device bridge_slave_1 entered promiscuous mode
[  252.915003][T11122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  252.935643][T11122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  252.999522][T11122] team0: Port device team_slave_0 added
[  253.013152][T11122] team0: Port device team_slave_1 added
[  253.056050][T11122] batman_adv: batadv0: Adding interface: batadv_slave_0
[  253.063550][T11122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.090002][T11122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  253.143699][T11122] batman_adv: batadv0: Adding interface: batadv_slave_1
[  253.151128][T11122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.178160][T11122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  253.356329][T11122] device hsr_slave_0 entered promiscuous mode
[  253.389456][T11122] device hsr_slave_1 entered promiscuous mode
[  253.467766][T11122] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  253.475691][T11122] Cannot create hsr debugfs directory
[  253.731639][T11122] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  253.784271][T11122] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  253.855830][T11122] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  253.897312][T11122] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  253.921212][    T0] NOHZ: local_softirq_pending 08
[  254.163008][T11122] 8021q: adding VLAN 0 to HW filter on device bond0
[  254.206516][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  254.216221][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  254.241407][T11122] 8021q: adding VLAN 0 to HW filter on device team0
[  254.271397][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  254.281598][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  254.291366][ T9704] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.298940][ T9704] bridge0: port 1(bridge_slave_0) entered forwarding state
[  254.317049][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  254.326733][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  254.336973][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  254.346707][    T5] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.354084][    T5] bridge0: port 2(bridge_slave_1) entered forwarding state
[  254.382091][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  254.416315][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  254.427917][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  254.440012][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  254.493401][T11122] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  254.504295][T11122] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  254.525443][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  254.535837][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  254.546616][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  254.559846][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  254.569913][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  254.580745][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  254.590505][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  254.609886][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  254.653459][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  254.662534][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  254.689311][T11122] 8021q: adding VLAN 0 to HW filter on device batadv0
[  254.847564][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  254.859215][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  254.923547][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  254.934640][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  254.963220][T11122] device veth0_vlan entered promiscuous mode
[  254.982952][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  254.992706][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  255.025713][T11122] device veth1_vlan entered promiscuous mode
[  255.110015][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  255.120059][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  255.130794][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  255.141440][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  255.176091][T11122] device veth0_macvtap entered promiscuous mode
[  255.199156][T11122] device veth1_macvtap entered promiscuous mode
[  255.223503][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  255.233586][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  255.263104][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  255.274458][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.284552][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  255.295172][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.305543][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  255.319423][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.329921][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  255.340937][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.355106][T11122] batman_adv: batadv0: Interface activated: batadv_slave_0
[  255.366829][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  255.377916][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  255.403826][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  255.414842][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.428157][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  255.439085][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.450670][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  255.462113][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.472366][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  255.483583][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.497722][T11122] batman_adv: batadv0: Interface activated: batadv_slave_1
[  255.508168][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  255.519076][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
14:00:41 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x200, 0x24)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bond0\x00', 0x10)
sendmmsg(r0, &(0x7f0000000d00)=[{{&(0x7f0000000040)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)="d567f66c6c7dcdcd66acaad31d766bf5d1818ec242704b49025215cf592f471e775aab3e4bbb1cf1246eed7d97287e87057962e5796b6eb043532bbd", 0x3c}, {&(0x7f0000000280)="6fff928e76c34eac711d55cabd3271cdc507d0f4b2aac7d16bc6418186127fa0959bee326c84f1f44c41e2c51ad135b716316bad3ea6231a9ec707ab58326a33611293b2ad4a0fadc729911c330e43d3c83139b4e92bbfe5821c027eeb1ae31775bc1f1d63ed9a650107b053629528d66fa0ffc1a015085394c06596afe76ba57fbef2fb63f83275fbeb5daa30dbc8820ee226c7cb88055987050dc4df48d58fd2563b919eec38d5a4d59d01eeba9fdf2de32d3378d092cd83c87a91", 0xbc}, {&(0x7f0000000340)="3e6de52935f5cf6611cba86ef2d13306417b473bcc37273f464db7980ac9317eda770487cdaadf3ba0de3198daec7fb37061cbec3efa8b4b31991c107ecd9445b05f2d78f2c2a1d0a46136b9497bbc5979fc490925d7f7e09afc9620c49e926e64a2ea489f9257abe75cf7614b6cf0e35076180e1fe16810dc43c2ab33d5c6dc2fd940020d379ae74b2dffa947a8bd504f23d9babbcd550e0b46bba0d4", 0x9d}], 0x3, &(0x7f0000000400)=[{0x3c, 0x11, 0x9a2, "91937fddd2b2a0458c5d1a2fadf4d3299e6cb65f169a28606ec56dcd79f332ca460bdcbfaddb157f3b090d1063b52100"}, {0x60, 0x10b, 0x42a0, "a1c1a9904fb5a3fa890d1ca2c215e5dabece07cbbc7ac38c84f45c879c11344f87186a703720620d9680b7c2de6213fc97e1102499a13d0623fc28d9a4c39e3d57e5cb8010203e6c5b6b9cc4fa4c54a4241d6c61"}], 0x9c}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000004c0)="3e7dd66beef639947e1c6d91e7d3c67801f6265754d5d617ace526954e6440769155c5ad00a840f4e115fd643524780ae203a2f5eaaf0c30a59b3702c8d0c44d6a9c850100b1af29cbfe44643553a2e887a308988f802a6653167abf4fb568307e1b0180289b865d0636a0738cc927edc13ff331533139b1420b31291bcb051e2436", 0x82}, {&(0x7f0000000180)="12730ea45e56587a57d5d1139ff36434d5254b64357a6cef525f885f8fe9d137a17fe82f5cb433abb53ad3a0366fe346ecd28ddb8da7c572c218edfab608c41c952d206330a22b1bc24d240a65db30d19ae53600d515b6df5408fa78", 0x5c}, {&(0x7f0000000580)="4d71a6c8bcd9a6a78364ceee852e332bc8ab02372da00fe3777afdfa58d59a9e21f1a613d80b4198c53c554b53d04a5a346888587c1c5adb761009bb486807f100c2c8a74bb226a1dd8a30779dd19c136499b30a255fef7569bdf123ea1ea381278289f9af590b99cdb40fbed8b6ce1e1d112f7cbe11aea492ad45658a574769ce48c9a623ac8f770858db40285fb6fe16495f24ef759a435dd569ba456d264f28b57da5a1265ca8422aebe7873512c46c084649d4818e30987c650d6bfbeb2064de1ccd09b5849d46a90d2dde6e9b2f8cd87644bbdde2ae66e6", 0xda}, {&(0x7f0000000680)="67c35f9b711d5e1f6f0c859824625d7957d03872106856bfa5798e53ae2fc9fdd0d2a9aac5ccb07d0cb2d564ba69883681f7473d0392c0a92752222c6ed94578e6581d806a6dacc77d55b3de00871a9c1aea7f78e0c0aedf948604244930b1d2f0e17fa9bb81f2c8b43dbce80d90c07e26ca1bee97a4d9cce45464a80087595042943a50bc7e7e8a36802ee1c5288de8e56af7254ca0f55b1a3b1abba0374d3baf22bd1557a5ae982ca296785926475cb0af9c3fa55f768b4941dedb48cf6c95ee0cb7a6563e4139edd9d067d6e04cbde76310ff35e52241d9282479067756840c3613751b31114719e6c3833b65ecb073937aa08f", 0xf5}, {&(0x7f0000000780)="8474d352afd98c49e0eec3ca13357d7a5b506f788ed38ef1e8981791d4235f6a519828519e428793fa012d4ae51f0db416fdf3e529804369f034077ecf1031e5f879a127c443c9171f522fe9bcecc11c5d5bfdd766427a7ce7c99f0a52f748396f42c775f6ed81d0a5df0614a60023de81c0a2c7726d3b17ae21b3198ef281c8de6b1c11f00808aab500188c945f60b2738bd7c876ee0d87836e5de653f4ac1e9a1af7a8dfbf806282838be9cc5f78019cb3005610eb8a1d860956259eb021caf30719a681156eaf63a2af5f074caa29b2eb1e690cbf6c3d320171505a6163a12962428e", 0xe4}, {&(0x7f0000000880)="6a60698a92882f957b4d72f6d988c44f0d522b5425a597ef22f6be7871c9a1ef43f8dd62c36a35681b73fb7d2c2eef02ebffde050c2a3825f2159eae44e14818fb1738c1cc0e7ac586c6f9da523c85cabca6be6e35902ef38e434696704a37eb3e551199e59b9d1ae66995bf4a35f12138b24fdf076001a79eff0bc1e4a31837e23f47641028b116b746f4daebd75467d9a1dd51177dfcc0c8570f1450f73c6a0be957cb78e53e6f8d7ab3cfd77a783e8aa2fd3e1c1e5508880495b846a2bc66f3e0a1eec753ffbc2a73", 0xca}], 0x6, &(0x7f00000009c0)=ANY=[@ANYBLOB="58000000eb0100000300000087c2be7bff05b211a79079d508afef26364293957a7f904603e0188e7d17931ef06510aed26c512ecfd8eb9a22574407b7e6e1b0d4588fd6327e8bb0b7672d9610d600fe2f0f41abca0000000c0100003a000000050000009ff2941c0722e0c1b25d52d6c6fb9a85f0f8b6845c4b6c7113cce60684242d05005e2837f7b131bb9eaeeb73e1c99309d6f2ba348966a2750d7406cad1d537e75ed1d0b1282b0a819e5b3de86f24c13a0127761af33ddd7c02ee6e834fb7310a1f7a56d83934871b68506e45792e5fe861dbce2737368ab1d6c64bf53dd03aa65b40f0d69b89162368061bdb931b44905eddd1e7fb08e07166e4026c1f881d384ebc7fac41bf9c392b6c3bc2f0e5b0ca017b5316a26ccd59c0cd2a684ab6c2d96c9cb21e40042859574024c1e02e3fed4996920c25a663928c1a55e0090dfded941c2f53a5237bf785b519ff23c73849643360415b36ab802763b7bd3d000000ec000000110100008008000032b7e605c06142a2f32453cd09749d7cbbe28668d8b7f16a07dfbdae0d9b750f745f7eef986569e9bbc02647ad0811a4c5fba518a05b0247dfd92156c56bcbed779373c57ae03c34931c5e9326f599d869165e27ad3adf2c83442b62d092a19cb26598d02d21573b22e7b4f90ee2612ac182fef81c8e204903b8652a19f41c5cbb4075bc79fb6cd9d67138a3fc8dfdc66610853c7c43adbdd947fcaf7e7071a5e61038bfff7895218fd4f2d6547f2047279a444c8a6bdecc6b939f2c96b0cfe17b5f86030b76f6b17715bffd8e9221cdc2c4682b047f74b6d30b10fb3c596dca8f46d4ae2b7aaeec970000180000000501000005000000f7a7a5dfa56bd3ae112e1d00d80000000d010000000400003a0044004017f48cb998dc70d5c126d3120469f97a9b3ae1d2e9f6056c5b878c309bab489616ab244399d6b8a8492ff2ba162c465f9f6cbdf9c0ee3fb1f7646f3e3bd6d2a617d06a44f2a92c51728af801bf0fa471646d74593bb5fd1f468447709e64b1e417a6f06488ceb09d759c78a721d7939dd18b498e32d4186f97bccdd48b8a1507cf0e4954d36a5adb378efae72d91775d1b4bcc1e01017cba4257cae6358bd2bf3ea3bac8b0162578b16ddff5f59e4142de7acf6e5bc45c0d3ea4ee65"], 0x340}}], 0x2, 0x40000000)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r3 = dup2(0xffffffffffffffff, r1)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r4 = getpid()
ptrace(0x10, r4)
write$FUSE_LK(r3, &(0x7f0000000d40)={0x28, 0x0, 0x4, {{0x6, 0xffffffffffffffad, 0x2, r4}}}, 0x28)

14:00:41 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)
syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x800, 0x8482)
r1 = getpid()
ptrace(0x10, r1)
r2 = syz_open_procfs(r1, &(0x7f0000000200)='net/ptype\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r3, &(0x7f0000000340)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=""/34, 0x22}, 0x1)
sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000380)=@nfc_llcp={0x27, 0x0, 0x0, 0x3, 0x80, 0x3, "884d3da5b6c03b5ba52969cca2b9b8931faab40ac190dd6beea137d402960ff1a5aef1b2f42bbf3da5aa7c210098fbdd32a453bef672fa4dca42bb56e13106", 0x21}, 0x80, &(0x7f0000000400)=[{&(0x7f00000002c0)="e32d183f77f75a3c4ade9d7608e1393cf8f2160cf464a905346c20d73e21923ab54159843888", 0x26}], 0x1, &(0x7f0000000440)=[{0x84, 0x114, 0x121, "b2c3916c5dfdacdc2c78e67e05b0337daa15327b470b2c97d3c2d6f628e037d06d1b4042c68502b719b63d352a01eca8f3aab079bfb3393cf720c5eccde6725784bafe2cb82bdd1143f7a8151f053697fd85e7f0a330d8cac441d40ccf5baa06c8c4fdadb2d32431725cfb1d41d289daab969c6818"}, {0x10, 0x111, 0xda, "2598b0dd"}, {0x1c, 0xff, 0x9, "4e86ae07f86015fbb96d20aca31a9b"}, {0xec, 0x105, 0x2, "5cf8b186a217f9be26a4a42e3a3006262321c437782ad009920e9dde190457f295d58395a3ce6aeaaa371285828825e6f2697ed322503d28c79764ebc8c4835c542c1d63fe7ee4c07e7ea5905ac32fc74a6d09deef4ae0ce6e4f2a7498c025b15df317dab7c67e6432452c54ea1d7e872534594275503e24adfd2ddcdfb061bfd1d808ee8d71cb1a662a488fa66136612564ce4f8c547fcc7851c77af43878156be53987e0049acc245884f24bd11cc0d4adb4b1b668b94be8fbde88f1845386572348f711b145366d6d4feefc16fcbf1cf462835aed823216580ebe12"}, {0x98, 0xf6, 0x2, "07b391c0bb8649c092752d15fa4eb580407726814367723a4067cfaa8cde8fc106d746227ffeace47940d59b06d2569d39344e034c3a6b11d68ff5f92e1985e98549a05106a188f337e7ddc945bee4ca0f5b35218cdbe45cd27ba1267ca62f71fe8b0120fa0d70896e703099bc1a00d571c68f0976eb281373c20d21e6920ef0f4184af80bbdb2c68e9ea708"}, {0xfc, 0x6, 0x9, "479861f7dcca52e7919afccacb1ffb82d574209b976966e483c89bdaa528d3c4dca006b10bcfc5efa081b8edfda3d1fd794c8fb6c4e1f0f7ae4939ba2bb961e9e664601a7625931d1c27482d1a71d74981b351adb01574ffcd15765a2a8c84469576ddc7d2cd724b8f460a392d780f61b42f4e53db64542e66b784b0c9b1c5f21d46457965d046d31879c11583f6ddee6d3afe3e14817eb110021e02f488f408d9577b16a8ed298060df1db36f3d2486096f366f40d2af5aa6d5afb7546b7215f00ea23fe03edf407851ebbcfe50bcd387eb08571dbf503d848c6ab012a337f3cb962e139f6acac34023f736fe"}], 0x330}, 0x20008001)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, &(0x7f0000000180)=0x8)
r4 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x121002, 0x0)
ioctl$KVM_DEASSIGN_PCI_DEVICE(r4, 0x4040ae72, &(0x7f0000000080)={0xfffffffa, 0x7fffffff, 0x1, 0x1, 0x1})

14:00:41 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendfile64(0xffffffffffffffff, r0, &(0x7f0000000040)=0xfffffffffffffbff, 0x80000001)
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$proc_capi20ncci(0xffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x10000, 0x0)
ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000140)=0x1)
openat$userio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x48441, 0x0)
r2 = msgget$private(0x0, 0x0)
msgrcv(r2, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(r2, 0x0)

14:00:41 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$BINDER_WRITE_READ(r4, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
sendto$l2tp6(r4, &(0x7f0000000040)="f444d75deb83a89ece1c51d3b700ed5fb9f14ee306c788c9e5c8898e133d6b2152eda6a4fe6a12e35c896ce91536808c08392241a6424f51228848771969c3de18e93212abe21402aad387703c2e6378bbbf9c81999d38ab1f481b42dae20ee741cfce8c6e0e1b9ef4264506d4c97e80a816b9caf7f43b94d34191d7a319e4a41530717212ffabe332ae475c45d36940405c5adbcad950b57ac8f7381374968a3b1d996835f35ea04162a146844f12ac0710169792cf", 0xb6, 0x404c806, &(0x7f0000000100)={0xa, 0x0, 0x1f, @local, 0x101, 0x4}, 0x20)
r5 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

14:00:41 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2002)
dup3(r0, r1, 0x0)
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='bond0\x00')
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))

14:00:41 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = openat$sequencer(0xffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x143080, 0x0)
sendmsg$AUDIT_TTY_GET(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f8, 0x100, 0x70bd29, 0x25dfdbfd, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000)

[  256.411312][T11393] misc userio: Invalid payload size
[  256.621740][T11408] binder: 11407:11408 ioctl c018620c 20000540 returned -22
[  256.666394][T11414] binder: 11407:11414 ioctl c018620c 20000540 returned -22
14:00:41 executing program 1:
clone(0x20000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

[  257.194281][T11423] misc userio: Invalid payload size
[  257.196776][T11425] binder: 11417:11425 ioctl c018620c 20000540 returned -22
[  257.249574][T11425] binder: 11417:11425 ioctl c018620c 20000540 returned -22
14:00:42 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendfile64(0xffffffffffffffff, r0, &(0x7f0000000040)=0xfffffffffffffbff, 0x80000001)
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$proc_capi20ncci(0xffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x10000, 0x0)
ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000140)=0x1)
openat$userio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x48441, 0x0)
r2 = msgget$private(0x0, 0x0)
msgrcv(r2, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(r2, 0x0)

14:00:42 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$VIDIOC_G_CTRL(r5, 0xc008561b, &(0x7f0000000040)={0x5, 0x9})

14:00:42 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2020)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'L-', 0xc0e}, 0x16, 0x2)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="ae", 0x1}, {&(0x7f0000000040)="e8f35e6f2bdc84c3c0150f2fc5e3a48fd544e6c7192dc99ee04254f2c52cf12c96accd36a5b99573b4924bf03126a38feba1fd75cfc7b56a4f61ac92bb0aaffe6e7ed37e93fda10a9f0d93618df655d6f5ddedff511ca7e2a364e8dd993d5677ab60f27a45a9b6e004120dc7a442c606ea61fb2c44c10d7ca92dd988d246263671ef3b653961801a7f3d05422302565599", 0x91}, {&(0x7f0000000200)="0a0c95a72324db884e2d11987a712df780854e75773aefb089d5ba40786ad520c8db5e9bcf125d1fe298922724e7ae8941780ff2bbd58284cf55da8c94c1b9c9123d42b72f0dc852d701a99edffe8a63b0d391a2e3d745d603afa53d20617a5845394a429f59cb4a1709ce41ab280aed66c9b58f4f69e043dc6b68e875b303baa54c6860a71ce88ad1ec604bbe464371c93a27d70e69b1c4235fe90b", 0x9c}], 0x3)

14:00:42 executing program 2:
syz_read_part_table(0xfffffffc, 0x0, &(0x7f0000000000))

14:00:42 executing program 4:
r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
fsetxattr$security_ima(r0, &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000040)=@ng={0x4, 0x5}, 0x2, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)
r1 = msgget$private(0x0, 0x0)
msgrcv(r1, 0x0, 0x0, 0x0, 0x0)
msgrcv(r1, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)
msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000080)=""/217)
io_setup(0x1, &(0x7f0000000000)=<r2=>0x0)
io_destroy(r2)

14:00:42 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendfile64(0xffffffffffffffff, r0, &(0x7f0000000040)=0xfffffffffffffbff, 0x80000001)
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$proc_capi20ncci(0xffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x10000, 0x0)
ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000140)=0x1)
openat$userio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x48441, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x0, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(0x0, 0x0)

[  257.768073][T11441] binder: 11440:11441 ioctl c018620c 20000540 returned -22
[  257.808130][T11441] binder: 11440:11441 ioctl c018620c 20000540 returned -22
[  257.808926][T11449] misc userio: Invalid payload size
[  257.842758][T11441] binder: 11440:11441 ioctl c008561b 20000040 returned -22
[  257.862783][   T33] audit: type=1804 audit(1586268042.851:15): pid=11450 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir897209072/syzkaller.ld66cp/2/bus" dev="sda1" ino=15938 res=1
14:00:42 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x400)
r2 = dup2(r1, r0)
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000040)={0x32, 0xffffffff, 0x6, 0x5, 0x3})
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

14:00:43 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x4004fbe, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2f42f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$SNDCTL_DSP_POST(r3, 0x5008, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x4, 0x70bd25, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008001}, 0x48000)
sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x240, 0x0, 0xa)

[  258.062547][   T33] audit: type=1804 audit(1586268043.051:16): pid=11454 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir897209072/syzkaller.ld66cp/2/bus" dev="sda1" ino=15938 res=1
14:00:43 executing program 2:
syz_read_part_table(0x800, 0x0, &(0x7f0000000000))

14:00:43 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendfile64(0xffffffffffffffff, r0, &(0x7f0000000040)=0xfffffffffffffbff, 0x80000001)
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$proc_capi20ncci(0xffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x10000, 0x0)
ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000140)=0x1)
openat$userio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x48441, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x0, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(0x0, 0x0)

[  258.288524][T11470] binder: 11468:11470 ioctl c018620c 20000540 returned -22
[  258.350446][T11473] binder: 11468:11473 ioctl 89e3 20000040 returned -22
[  258.415575][T11470] binder: 11468:11470 ioctl c018620c 20000540 returned -22
[  258.430254][T11473] binder: 11468:11473 ioctl 89e3 20000040 returned -22
14:00:43 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000cab000)=0x6)
setresuid(0x0, r4, 0x0)
r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r7 = dup2(r6, r5)
ioctl$BINDER_WRITE_READ(r7, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$VT_GETSTATE(r7, 0x5603, &(0x7f0000000500)={0x350f, 0x2, 0x7ff})
setresuid(r4, 0x0, 0xffffffffffffffff)
syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0x81, 0x7, &(0x7f0000000400)=[{&(0x7f00000000c0)="553257b0ea74b372d8766a6a684b902fd7ad9376ba74dfc74a8d27f25dc6c83c5c058e1f71933433cf70b076b0a9077ec4dddda58250f97d5b62de299d922233ba686b0432ccd9d480de07eb49920d9266e97b1a15d459b67f8bc7fefcfad1cddb1b5a2490a9caf8167e1dd83f84454b939bfd6aae6d68cc345a16885509226ceb8270415cd1", 0x86, 0x5}, {&(0x7f0000000580)="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", 0x1000, 0x7}, {&(0x7f0000000180)="ed52a6bec7c0ebd25508649beb794aaa4c55b2653876c36728362f8fa30869680ead702a30c760113d7374c1da649a3b674897a69b76af396f789bc60d354a80d997ed9ff289f286c9ca528fdbd9be3efcdfe7cf92d7c25ed584ea356517e9c020910f07ad85a040072d9b5427358158b64a5c5ac72b12111b27ed2d11b65b5cb2fc94e3cd76bdd6a3918e6289c3c4271205b8eae5219ddeddc36f247f1613e7f353b536615afa337a2e47c5443d9dfcd7c9d9217d63a95fe597dd86fa62e435167c6df7de19fd2bb6f514d6e9061d620556cc", 0xd3, 0x8}, {&(0x7f0000000280)="00c960d409b34ef7cf906a93f8ba6ef340be3976ee7f7ba1d95a4ce1b9cc6fd49f2e35cf2692aceb7a8f8a303328d08a33891191", 0x34, 0x5}, {&(0x7f00000002c0)="4abe54fefd23eb661d830de2c24f9809661e8e22c8d1ddec3453ba2f4bb4825b22f1e6b0f8b4c4833bcbaaf0f012c05bd3499d52746e718f93fe29892de436263da60f9d0168739a66aa642c9f33daf149ad74f8d88733b8717c89b8e02e2ed85ef9d5bb", 0x64, 0x100}, {&(0x7f0000000340)="e8b659c51ebeb20088bd201a6e3a71b3cd5d0655544b9af36cb4cf0648ce12908e159ab2e837959c7eaff530f685b6d26728baaa62d1985660ebbfd682c6ac50354fd0f0a6bb7bfcf4d6b61f800defa5dea7aa87eee0f1ae275a8b35653af1c0e4c9abf0424879956bc91f2716a1be379cbb2a0190d4d2c38e25a2e32ee721d14a42386a56cf7ce692ed6b5fc9e0f234c03108585b19b3d36c1e41d9dfc7b7c650ed780af3109a6918fbb16ace225c2633e5c0a6fe", 0xb5, 0x81}, {&(0x7f0000001580)="202a84b138e9a3ee7f346aadd64e1f85e3eee8dc69bd82aa14c7914b1c3767ec7c30ebabf7110ffc18029d54ece411f6bade056c51b5b0d5aa28682b3c21da8a37280b5ff5386f36492f2072da51104153a95b842d09ff8e374dc696f36a9b47d15f53bfe7f8db1d15ed82488e8d4544aef95f20ec5c10bebc7fd1e3c7dff01617c6d914ae5beb69ff33aa8720402f391109aafc7ae202c2e2692a058d117c320a8488ab1e675e91717f10b01d4f5d783fa9aacaea48cf1f0be9baeae0330f09f5736efe1524350a021988d26240df05b0fbf2c8a5e2c93b66596d8d4f4f94e05c5f2b9e4b0683110ec8aa55255f3ce51e84593f3c3a9362449a3378cfbb1d1c1a2bb69d78b8606c3901f51a51f4418731fa85d193f1b513c21e639f7cfce1cc705e7d720c9de653344751a2dc851df308adf74ff6b5660ef93bed03716ff2f4b909770fd36f43d39e7c05545f8fdc09d6ecaa6682e71e202efdf4a4ada6fc00316569b75776a65102a5bf5629f2942475b69579fc8d07791f7e601daf38f271e4e2d4516a9ad0099644b389554369a8f745f4b272a730a6c896a9625cfb4b40eefac004c199a0b4c26b264b1ffb4bede6d7e28e0172b3f885de34e0b7651e6f08cdbf457cd38064bb8999b01ad6b9c6db5c9b29a878f6cd61630547a8e4078c55e64ac3b84c9d44385a3023accf5d84853b06d52639e674c03522358b8a992da6034d04307e830df8b06352a0e55ddc54b6e6e09f088c3330c82698fd7fdb62597c3dbe3be9c131fa540ccffe46ddd300319086cb68b69926a166927bbb4dd5ba599a705ae9c6007711369f6e3f924e1becee37b5d1b5040a80570b166b1ffc345a9ee24f26d59e5599aacbf2cd2be0ee1a42d375d920ba1893f0dc8d91de105560618d8b0c8a1f7cbcd24c01c12fac50e94f25061b707b31fe6fefab2fcea0d102a5eaeae2dd79d6e90884b36c3c9fea497eed0dc027d70288011ab5ba431d4d3996c986dd90c9e50726c26efcaacd6968eeaca28d913de38c6d608f0becd08cb570498493e1f5010cea2688d81d189500e2c5a5ba0f80ae6360be34290267090de7253d84cb57f4d1e64085e802d9d751cd384dff9d8ef6b29a4386afee524fc3b4fc05d4138f4db89b88d8dd848c5e4c44e3a00525278b67e25b1f932639322ccfdb8c4e7ac561d1f68bf2b8a06b591399d6aaee4c0b9aaa8a055a8c5cac79d18a67f0153eef05ff9ba8ff57f351f7ba2b31d4043998bdb93827c7d4999c3e6c8d4e705b2c55026a36cc61ab84e7bd4cb05842f11a845b69c044bcf3b6e9b5c7f822954aee0ff73653cf7f8739a48d7b6827d109030c77ca8db52ab06c6e055400d564b3122a7dc2de2b0c4adfb8d3e3b393578e57af474624d6fb606d8eaf3dba5846739628819716c2a3f8b4e3168167e3f1b43aaa8bab6e4621d4180b135604a45e466fd1ebd5ae7fba8017e83feb9ce997f07d503529b19da5a3580ba696964a0bcd6459188f62b51a3f76caaeebec5c74fba275f25200446de069da72a90ffd2f3e495e82bc8b8e2a7c18ab753902f61573c33afb840681158be5466ea717c9552efb44bbfefd2beab768b06360b229707d486eb72b979927daba4dcd3478671b953633ecc988376da4a799cdcef258b727f553f669fdb288af803e4058bc0a4109f2919591092e844e42d1d6a4ffadf34a4ef98f4e42693b9f846dff2b5eb74da7a758a52195808256905b88472776af846e2bbd6d9e6cbcea5a341935703f9fe1aed36c199226982b0cbe77fe63c174b7eec726f086c1f2719985e6bb6b51c6ce2e1094932f21b35d73035591431265851d725aedef6439fe9d6422d5b423c627b962585cec1f9a5070c273954238d79d0a48e585eff2c0060f027f1f3570f056f0a381dd78891c8bf8ffda546eb5b83ebef8c1e27abfb72ce421b95d5e3f7ae0cbb80ce1c48b6a1865bc973ce064c8f3bcf1f7564283dbd90ab873185cb7fe830d962753b47076ac6619991217196c40bdc19bce24a7ca94ded9c59daa7fa731ed5724edf4ef6a291ada52da2f67f88e148c3c209763bae0fbbba3600bf0c3323a53f82bf641c12ff17b282b5c32bc873f6412de495d541bf2cfc7159698d1dcda7195f43a001741d11881c98db331ba65093d2c5d4f1a4e14c2867020f80b62c6e5fe7ac006492b1626004ee33c5bcadaa5db22495ad21fcb78575667a8c577af9a343918fbae19b77047d6680cb11ed700a97c33e87f08de20ff2dee89ac6ec58bdffc4893ea75ea2583e60326252a017c4eef24995d35970c55dff9cdfb2710aacd6f623440cf15240c5646f52ff73100e1bd7f6a2fc3230b522e86ec322d4cd581590b5cc351a3b8a35f75d1b2a1f800e827972250df86d9c2a90f4757b69e407e265d4f24e2405413c793bff36a6be8db2b6f0a7b4f70898169a38495f4d2d08b394c821b23915e1b558a7b6e0ca1f27f90c41d1c7b7cbeb0a09377c8f2ba2c2e9a15b702fcb5bf9eba6d4dbfc630d1da92a6c3af988012713ed3cfbc234cfb9a465be29d5c20eb67851d14435a5b563440e3fba5cd9916525f0631e3022380c770a3cbb0627a54c07ecc172c34a26d08d2a6d5e5094dd0a6b81508ee60f1431a3ca2cb138cc6561f63ee62409a36ec7c66be3a0584fad0e1ef38caf5533a950f7e11d7f7d138ed9d98f15f53189a6b97bcd39b32dd3338f9c1790d1de95a895dcedd1abaa08596a195675e893d75325b714bcc63d25423d8d9d06528a3447ade61b1b3ad49de602d315ec78616ae6022f8e6157c0904f9b171070ea0be2378caa0b6d923e00b07c561ce6c7752e6c926cdbd275c25db0476780d88ff7ca2c84534013ac9829516d1c8b900b885b455fb5242e04be1d67a5c483a147ead1e55becf8110ecca73d2eca0a5cc5dd1b0881c32aa16c29818c34b7376e0477dad54812b82a52b9749c142ae91c2b82367355e10cef8e7a332426956169ef307a5386143d3bd16b722ce99336b47c253692f70788bbc19284f4cc63f5bfac5078034663d6c07661babfb1fc52b9394d0f915b859d9e3f7c24a90430540b7d703b3cea4b0b781b5e94e7b0e62ce2b2bf4ea030690b65d2299c084c4901e13cd4fc9542ea30436414df8d809dcfff58f291f936903fb0ee94555344027ff59ef96c07bcf842d26e4922d114ff8673706d2bf04354a0be69c46ec5e364c4d0099c428672331298079ffde7e64eb4abf2af87d8bf0dc56511a505b57bfe11010b657c5327b58a266c38b35e942f0082d7fea95fa802dd9fd605c53f43b90243bc030a13bc268b4c63953f73319d5eee5ede86f2de545489e21a756f961d52659b5734f95cf74c7d1f49c62d0fdd7a4d66523d87fca0807835696ca930c6d03286a0e4f0476cc5a28193913b6d2e3549e54215eb5754a3812d4ff32fd5a25f60f96b750c1865b24894672160a0e101c6deb7971bca14a859d8b02b9f434246bbc8b1d380440a95bcaeae9efdfe8b3f25fae033b45baedde09ba3b1edac742a6f449cabf2f127adaf2e02132f3cd3186527289015837a3205f0318ca27d3c9058520615c1cd31364c68622dd8df49dabd73d0ef683d86ffe8c53cd22b757355172626f725beca190049bf9b189891ea8962765b7e82b616e1e70c785e75b4afea9eba2625f9a3706fcdd6c64195609fc9c8ea7fac7087f9011ec14586eac265eee618fb1b462e6801221b6be27c21bd5dfdf6ac84ae8125513b2ca17bf1937ec23838378964f4c18f34dc969b733b23a61fa1a976b3620e21dc131fd5f2949c49c1c0276dfe0f7ef63a91ec174acebe8ae32fdecafd155530b2d78b5806125ae107590b2d30074089c55add15328a06b2d0ff44ca87dcb6675f23935b61f43adb8672f38a18227f4452566373d9ff2d63ac543e07788eb5ed2b52ab275f90ee85d562658a608ef25d5495293d989a1f4317a0b6563ad8971865f46a7a21e13b1782606622526dda53fda4ca52c93572be19b8202db5ee7b07a4af02df1b18877982de8e1876d588853b19dd9d4dfc381047baba798a9a51da343caca9b65a40a9561b60e1df931ff0910ca93bd59f6e588e7df1aa291b8379a637d0d7d08d22c8c36a59d44a38a79189ee8b45aaf22656b0d197df9c428497850a1bea44757eefb919b5659d4ebe61b71b8651635182eb2858b305b252996100bff17234ad2459e218192bc24992648a89049b25805fc13344d107cdb07f85e322040dec02bc8d63c5ff8c274d7f37faf06f0089a74e202d9c5e4aeecbb39c9445763916395026cf2150467d3ac75a444cc35c086157cd4d7c7e2f9f18d8cb0d80346c7fdf45d7f4eb20fa50c08535b6f4f268f5510725f7c624c1d1205e7607bf9266c6f394c75ab5ab1155639d9909c7ce4fa2338dae9222f40182a8eb88c6b7bc4ac9de548a265d8c77aac0e6ba3c62058bf38117c47a3573ae78df7be53d63382eaf3ab6848f7593a074422bdd2941407969bb16853f1ee8dc8a611a9e9e024cf0fa4aecb510e70791830cb2527e4b5ba15ae44f47da28b635ed964fcd230ca26113c9307904237409241a53cb7c6c927d93e1fb22508eacc7ace79add812bf5063e944288097ace45fc8f4fb45279bd87391fa8cc2f1d4cb2fe357f4b5b1ac651a525f10ff044fa5c4a6db1fe3e706cc0f7d4c44346adec5d6bc26b8a21df94c96e63426f165899ae36ef929e25daa566f6769226d749b5b8c70737d4695a50546d303c9da8eb503cf44064a0cc6b236c65f457411b88cd23900b40b8fba4ef2dd080c9631107ad64908506401deff544e4d9216c2adca3b74041d94cbea6dc376d2ea8aa24e067d61c53237989f7c6015411e8c04cbfa3599eef49c07c3c105b81e1349963bd275fa212e655a87b9f8afd326b347fcb60923be4d6e69f2af5020b9b8d95533b1a95d90d96e0d9dc3878008221cee6f5cd9d24a79409f34d4472fab6aace8caa62f6f0547924cc0c71aff854eb0369a15a6a888126c4be7e6401fcb7ff51e5e472e9f1bca73656d16c39b338011968a34abcaed3cec2be3ff2916e2c3ea66b6fc9bea70e36f613367aca49ce3485a3f750676ea66585c029d88179b303f5fcc6d5ecf6464f22d4c86ae9fbab505a39f7363f08a7ed08f642a439a5b62b26627bcf3a5e67659505bef0f78f384e06ef8f374c7d695003c0525c75243aa126574bd70487d5779041b10fc1887454a06049a238f66ac93b291c5e9d04f8e94375e7c108cd3c8853883a7bc29f0f9fd6cc57ceba088d9bbd0d54c6696941bc9181fc331b5312af0348a4a6e883136007cad6d9836554e2c45411fae7b2b716b1448aa641df4084cd4b33b6ae3e014bd9dd6576ed681ae30737090d6bfae519fbea7132dd673ae3a5100a1fbef64c0fc98aac1a60704179da32f9428ff2e3a1153cdcbc6ec7029f4b2f40ad8673594e8f350827769631dbb812183ca95e9c563df0723d5cf6ae6ac80f8da111a1228f33133979d42275819a3d9b2a000fecbb40af3453709cbaa61b7953039c1e7a0971c45ec92b0cc9f19764aa886f5ad197645f793d6e2c000775ee75c942fbb65188600d04ae0bbfb9e0fa92056cf1c501fd8bb08696796b1b85a64c88b4916c39f4cc431b61040df573f877685c535872a0de69bc5f3f0eddb99cf2a9ab329aade76e35b3835d3c6f5daa24dc04073bbd94e832ace5e698ce7cbc1a135f09ab875360e7e445212910f0f96b9f489f62aaaf9704c529005e609b82d683fa9e561989c74b036eb23e2172c0150c2b5", 0x1000, 0x9}], 0x201000, &(0x7f0000000480)={[{@errors_recover='errors=recover'}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@umask={'umask', 0x3d, 0x1}}], [{@euid_gt={'euid>', r4}}]})
keyctl$set_reqkey_keyring(0xe, 0x7)

[  258.506534][T11477] binder: 11474:11477 ioctl c018620c 20000540 returned -22
[  258.539414][T11477] binder: 11474:11477 ioctl 5008 0 returned -22
[  258.552626][T11480] Dev loop2: unable to read RDB block 4
[  258.558696][T11480]  loop2: unable to read partition table
[  258.564812][T11480] loop2: partition table beyond EOD, truncated
[  258.571401][T11480] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
14:00:43 executing program 0:
openat$audio(0xffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x452440, 0x0)
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)

14:00:43 executing program 4:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x50, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffffe, 0xfffffffe, 0x20000000, 0x0, 0x1000}, 0x2}}]}, {0x4}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, r4, 0x1, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)
r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r7 = dup2(r6, r5)
r8 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r10 = dup2(r9, r8)
ioctl$BINDER_WRITE_READ(r10, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
accept4$inet6(r10, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000240)=0x1c, 0x800)
ioctl$BINDER_WRITE_READ(r7, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_GET_CAP(r7, 0xc010640c, &(0x7f00000001c0)={0x6})
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000280)={0x7, 0x3ff, 0x7fff, 0x400, 0x6, "998d825debea8cc6faebc6ba9dbc209af3ca6c", 0x1, 0x10000})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x0, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20040800}, 0x14)

[  258.800167][T11480] Dev loop2: unable to read RDB block 4
[  258.805922][T11480]  loop2: unable to read partition table
[  258.812559][T11480] loop2: partition table beyond EOD, truncated
[  258.818994][T11480] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
14:00:43 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}, {&(0x7f0000000300)="b77a414abcbce630d7ffb3450600ebf4e3d845926227987b0100e1f7c716ab5a44fc200ba55f069fad2baad3dc4f6ae06d597aa99fe3c8bf210ca44c3a1557f52f3b4f5219b388b4e5e13defb3139fc1cd63630bea3fd0e60b3d29828b63b639824c0660f489571f51d40fd9a20b6c38af320d306e91a591aa06b3c4e971cead51039ed5caab9ee50e2396bf75115e683ab3bab6857018d9b4412402aca8d68d07a2294992de1152e6bc896ffd675eb7796462c4711ddc0dd7d6a83dbf6e7bf2cf4be8fb6bf3cb6203103ad20226ad4dbb97837e265bca772c179ddbda2f4ee93917cca3f47fb5cba0d44f7500"/251, 0xfb}], 0x2)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f0000000200)={@none, 0x5, 0xf55, 0x2, 0x7f3, 0x5, "42b5ceb38607de2a6b0e3454600e2672f20b292db2f4f2a0a8460279372d41b6cb2f0f360e94f5d18108fdd0ba295bf0d839a91514d941abec0e4fea6f9271cc73e2298189330562e53485812cdf3d63687118507e0b10e79f21b69a5ac54ad9e6ee0a6e772152df76b2ced2c6e56e91e94465d0fdaa5fd27f578144129f98d2"})

[  258.910865][T11503] misc userio: Invalid payload size
14:00:44 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={<r1=>r0})
ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000100)={0x2bd22939c1f678e7, 0x4a41, 0x2, 0x4})
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))

[  259.087204][T11509] binder: 11508:11509 ioctl c018620c 20000540 returned -22
14:00:44 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000040)={0x1, {{0x2, 0x4e23, @remote}}}, 0x84)
r3 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)

[  259.156299][T11509] binder: 11508:11509 ioctl c018620c 20000540 returned -22
[  259.223377][T11509] binder: 11508:11509 ioctl c018620c 20000540 returned -22
[  259.241451][T11509] binder: 11508:11509 ioctl c010640c 200001c0 returned -22
[  259.296323][T11518] binder: 11508:11518 ioctl c018620c 20000540 returned -22
[  259.333096][T11516] binder: 11508:11516 ioctl c018620c 20000540 returned -22
[  259.370637][T11516] binder: 11508:11516 ioctl c018620c 20000540 returned -22
[  259.406057][T11509] binder: 11508:11509 ioctl c010640c 200001c0 returned -22
14:00:44 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendfile64(0xffffffffffffffff, r0, &(0x7f0000000040)=0xfffffffffffffbff, 0x80000001)
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$proc_capi20ncci(0xffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x10000, 0x0)
ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000140)=0x1)
openat$userio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x48441, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x0, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(0x0, 0x0)

[  259.479668][T11523] binder: 11521:11523 ioctl c018620c 20000540 returned -22
[  259.512213][T11523] misc userio: Invalid payload size
14:00:44 executing program 4:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x50, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffffe, 0xfffffffe, 0x20000000, 0x0, 0x1000}, 0x2}}]}, {0x4}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, r4, 0x1, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)
r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r7 = dup2(r6, r5)
r8 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r10 = dup2(r9, r8)
ioctl$BINDER_WRITE_READ(r10, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
accept4$inet6(r10, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000240)=0x1c, 0x800)
ioctl$BINDER_WRITE_READ(r7, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_GET_CAP(r7, 0xc010640c, &(0x7f00000001c0)={0x6})
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000280)={0x7, 0x3ff, 0x7fff, 0x400, 0x6, "998d825debea8cc6faebc6ba9dbc209af3ca6c", 0x1, 0x10000})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x0, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20040800}, 0x14)

[  259.552850][T11532] binder: 11521:11532 ioctl c018620c 20000540 returned -22
14:00:44 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
write$USERIO_CMD_REGISTER(r0, &(0x7f0000000180)={0x0, 0x8}, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
writev(r1, &(0x7f0000000000), 0x0)

14:00:44 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
dup2(r1, r0)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$BINDER_WRITE_READ(r4, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

[  259.831590][T11537] binder: 11534:11537 ioctl c018620c 20000540 returned -22
[  259.875784][T11537] binder: 11534:11537 ioctl c018620c 20000540 returned -22
[  259.895357][T11537] binder: 11534:11537 ioctl c018620c 20000540 returned -22
[  259.925823][T11537] binder: 11534:11537 ioctl c010640c 200001c0 returned -22
[  259.962223][T11543] binder: 11539:11543 ioctl c018620c 20000540 returned -22
14:00:45 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000040)={'filter\x00', 0x3, [{}, {}, {}]}, 0x54)
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)
socket$nl_generic(0x10, 0x3, 0x10)

[  259.989707][T11543] binder: 11539:11543 ioctl c018620c 20000540 returned -22
14:00:45 executing program 4:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x50, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffffe, 0xfffffffe, 0x20000000, 0x0, 0x1000}, 0x2}}]}, {0x4}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, r4, 0x1, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)
r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r7 = dup2(r6, r5)
r8 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r10 = dup2(r9, r8)
ioctl$BINDER_WRITE_READ(r10, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
accept4$inet6(r10, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000240)=0x1c, 0x800)
ioctl$BINDER_WRITE_READ(r7, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_GET_CAP(r7, 0xc010640c, &(0x7f00000001c0)={0x6})
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000280)={0x7, 0x3ff, 0x7fff, 0x400, 0x6, "998d825debea8cc6faebc6ba9dbc209af3ca6c", 0x1, 0x10000})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x0, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20040800}, 0x14)

[  260.034122][T11549] binder: 11539:11549 ioctl c018620c 20000540 returned -22
14:00:45 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3, 0x2000)
getsockname$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800)
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x42b45e5d57542b8f, &(0x7f0000000140)={@multicast1, @broadcast, @multicast1}, &(0x7f0000000180)=0xc)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000040)=0x3)
r6 = dup2(r2, r1)
ioctl$BINDER_WRITE_READ(r6, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

14:00:45 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = pidfd_open(0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x49c, 0x2e, 0x100, 0x70bd2d, 0x25dfdbfc, {0xb}, [@nested={0x2c9, 0x73, 0x0, 0x1, [@generic="597613529c0020ba6876ef9b930c6d3937a94e1731d1072f5e6173ddd6dbe7a67b6a0aa8805fe977c4a55799bc841e923dae1b", @generic="1627df726b5a0e918000820006a92f4191af8edfde30e848bbc551cccc34725f8eaa5a4db1b190b5921357c77ca0", @typed={0x47, 0x8e, 0x0, 0x0, @binary="8fc2bb390f0fea4626caefabdca3e59a4f1ffe3e50b29aa20430c3c99dd91e9ed9e7ed80716d73ef411c19407a7aefa8cadd0ff65822ad814d7cb67724f5619f0c0992"}, @typed={0x14, 0x28, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x4d, 0x0, 0x0, @u32=0x20}, @generic="ea43276f8363b00bebfff3b9b18170d4c2de9b3769e3aeb154af4b350812d5969e570bdf0d760d36c496ffbd1f2a9954cf3502f7dac3b62216eafd266496043a984a8e4ad1c781c3f19e4bdf465cb27f8cfe50c83b57d3ef926c89d83ffd31eb4ede33518b81b2b7eaf58b144dccf1b8ceff063183f39e676d60afe5a116d76bb9dd4c9283140c3abb50d6c492f177f27d0a43cd573623b9de49fd93bdf34b1050953988ff23fa7ac5b587f9a3d133ae6ab85255f77225752d542908ed42aacaf3f9ab87c3176d62c3fa16b07394d32155ef662ed7c03fe78003c398e85bb7d6b290341f11a14dd422", @generic="1e5d28aad982ef4e11473e7891f001871e096263fee74b0cb9c440f9106681fc3d67e27c00aa4bf0421807ba57af9b71664a372154953de99556100aebdd10def553e1ba095a6b5a22df1ad72d89f06280af1324ed96d193c8996799ec06da35ea49d123604b601dec3d63ca1dced9143d35a0338ab015197a493d516277ec14e123829c8c2ae25bb2", @generic="97e94a9df460b591", @generic="dfd8b74c157ac0fcb0055c7f4e5b55715900bc4cb588d381a8ccc250d8665be11fb5feb18ec387c95c7d35b7f068ea52bda79160a896bbdab50fcab0a519c5c7e4d5f8f5257bd6836b9a9dd089a824e1f4428869392ff76c763f1eee20d206801cc1eb18066421c974bde56ad549fc2078aed45d86e3319323b0e94cd3877d68899d30467cc9"]}, @nested={0xb6, 0x20, 0x0, 0x1, [@generic="c16b7dda713e5a8023f67b99f4ba1f28fd12795d1cbee200af4649f7ddf69ee86e4c7bb675ee6e57a5098a148c2ea5d04d7ae6131d453237ceff1706b9259c496659ca0547bd7d33bc6787bae4819d494fc911878a96ad0a631126e77ffc28fa9200aeadf427b6b921f3980aefd1c079b29f96a769c78eb485c7ecee60a38fd9630078e7614709971899e9a04320817f3d54d3b2c8047f42ddd7b6241c7788ed44fa4d60095aae2005cf9b3bdd3e59484a9e"]}, @typed={0xc, 0x81, 0x0, 0x0, @u64=0x3f}, @typed={0x8, 0x1b, 0x0, 0x0, @u32=0xc5b}, @typed={0x8, 0x50, 0x0, 0x0, @fd=r3}, @nested={0xe8, 0x62, 0x0, 0x1, [@typed={0xe3, 0x42, 0x0, 0x0, @binary="453cab9503952b8ba7d7128e6bbe4f35fc08ab8d2f6f13e129708d658c890b4ba8b1e329995f018aefc3c18cc956d6b56debb63818dbbe507ae2b7672c471e69500445908e80edd3862fc6b14cc365fc9e1fedaf97484237dda125cf06be70676bb8859efcb6eb0857af61886cfb7bd102adecdeec0e5144bfa22438f9016de57c4a628548e0c08243ec76f9b7bc921b92d71ef437ddc1d2bb44bb1341c19c531364cf8ce5e8f8f9d50a1f0d16538ef7a1518b49cd90f895b8d2584e3b3c647208242be5f9bbf379472e228e11372b22e2414bd77fda7d89fa4cd11adf7e17"}]}]}, 0x49c}, 0x1, 0x0, 0x0, 0x4004090}, 0x4041)
write$input_event(r2, &(0x7f0000000240)={{0x77359400}, 0x3, 0x7, 0x5}, 0x10)
ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f0000000280)={0x8, "280966b16856f22da6d26160f9ab46cd818f62edfda803cca6af6c9d1fb9d1c5", 0x7b9815a25c71d2e3, 0x17a3, 0x8001, 0x8, 0x1})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r7 = dup2(r6, r5)
ioctl$BINDER_WRITE_READ(r7, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
write$P9_RXATTRWALK(r7, &(0x7f0000000200)={0xf, 0x1f, 0x1, 0x9}, 0xf)
recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0445611, &(0x7f0000000140)={0x1, 0xb, 0x4, 0x20, 0x4, {0x77359400}, {0x4, 0x8, 0xf6, 0x89, 0x2, 0xcb, "0454832a"}, 0x9, 0x6, @fd, 0x0, 0x0, <r8=>r4})
ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f00000001c0)={0xfff})
syz_read_part_table(0x9, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000000)="178ac15712d5abb328fc542ec41c2fccc6a173105120e46f1524aeb47660325a609fdf939d947e81bee18f189d5a0cded558d60c14f33363e2be01575175ccd2f1791b38193b50e7582c56e3ea0b374df72d7e8a996d35b7a44be9433a34cafa6c3975660970db16ad1d7c91354025d76c5411316f68f0d1d47d3438c19d6723ec18c97f6c90fec9dad8eb0e01e78be39c349f", 0x93, 0x401}, {&(0x7f0000000100)="0434ea3de05d4300e42f63c89e50e27769bd4c", 0x3, 0x80000001}])
getsockname$packet(r7, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14)

[  260.361892][T11556] binder: 11554:11556 ioctl c018620c 20000540 returned -22
[  260.396144][T11559] binder: 11555:11559 ioctl c018620c 20000540 returned -22
[  260.425715][T11556] misc userio: Invalid payload size
14:00:45 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40046607, &(0x7f00000000c0)=0x7)
r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
dup2(r5, r4)
r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r7 = syz_open_dev$binderN(0x0, 0x0, 0x0)
dup2(r7, r6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
recvmsg(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc018620c, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
uselib(&(0x7f0000000180)='./file0\x00')
ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f00000001c0))
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x5, 0x3f, 0x3, 0x1}, {0x26c, 0x93, 0x0, 0xe17}, {0x1, 0xc0, 0x40, 0x2ff6}, {0x7fff, 0xf9, 0xe1, 0x6}, {0x4, 0xa7, 0x1, 0x8}, {0x6, 0x3f, 0x7f, 0x400}, {0x7, 0x0, 0xf9, 0x7fff}]})

[  260.448534][T11560] misc userio: Invalid payload size
14:00:45 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x141142, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x6, 0x5}, 0xc)
writev(r0, &(0x7f00000000c0), 0x0)
openat$dlm_plock(0xffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x8040, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000080)=[@window={0x3, 0x6, 0x1}], 0x1)

[  260.515721][T11559] binder: 11555:11559 ioctl c018620c 20000540 returned -22
[  260.553650][T11569] binder: 11567:11569 ioctl c018620c 20000540 returned -22
[  260.553983][T11559] binder: 11555:11559 ioctl c018620c 20000540 returned -22
[  260.584725][T11569] binder: 11567:11569 ioctl c018620c 20000540 returned -22
[  260.611119][T11564] binder: 11555:11564 ioctl c010640c 200001c0 returned -22
14:00:45 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendfile64(0xffffffffffffffff, r0, &(0x7f0000000040)=0xfffffffffffffbff, 0x80000001)
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$proc_capi20ncci(0xffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x10000, 0x0)
ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000140)=0x1)
r2 = msgget$private(0x0, 0x0)
msgrcv(r2, 0x0, 0x0, 0x0, 0x0)
msgrcv(r2, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(r2, 0x0)

14:00:45 executing program 4:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x50, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffffe, 0xfffffffe, 0x20000000, 0x0, 0x1000}, 0x2}}]}, {0x4}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, r4, 0x1, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)
r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r7 = dup2(r6, r5)
r8 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r10 = dup2(r9, r8)
ioctl$BINDER_WRITE_READ(r10, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
accept4$inet6(r10, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000240)=0x1c, 0x800)
ioctl$BINDER_WRITE_READ(r7, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_GET_CAP(r7, 0xc010640c, &(0x7f00000001c0)={0x6})
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000280)={0x7, 0x3ff, 0x7fff, 0x400, 0x6, "998d825debea8cc6faebc6ba9dbc209af3ca6c", 0x1, 0x10000})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x0, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20040800}, 0x14)

14:00:45 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
eventfd(0x2)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = openat$vim2m(0xffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0185648, &(0x7f00000000c0)={0xa10000, 0x1, 0x1, r0, 0x0, &(0x7f0000000080)={0x9909d4, 0xd83, [], @ptr=0x5}})
r3 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

[  261.341307][T11569] binder: 11567:11569 ioctl c018620c 20000540 returned -22
14:00:46 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000000)={0x0, 0x1ff, 0x1, 0xfffffeff, 0x4})

14:00:46 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r2 = dup3(r1, r0, 0x80000)
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x1, 0x2000}, 0x4)
ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x7fffffff, 0x1, 0x7, 0xffff8001})
r6 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r7 = dup2(r6, r0)
ioctl$BINDER_WRITE_READ(r7, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

[  261.697283][T11593] binder: 11589:11593 ioctl c018620c 20000540 returned -22
[  261.711878][T11595] binder: 11592:11595 ioctl c018620c 20000540 returned -22
[  261.724256][T11594] binder: 11594:11594 ioctl c018620c 20000540 returned -22
[  261.735390][T11595] binder: 11592:11595 ioctl c01864b0 20000000 returned -22
[  261.771503][T11595] binder: 11592:11595 ioctl c018620c 20000540 returned -22
[  261.780796][T11602] binder: 11592:11602 ioctl c01864b0 20000000 returned -22
[  261.790627][T11600] binder: 11596:11600 ioctl c018620c 20000540 returned -22
[  261.823019][T11604] binder: 11596:11604 ioctl c018620c 20000540 returned -22
14:00:46 executing program 2:
r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x284640, 0x0)
fallocate(r0, 0x67, 0x2, 0x1ff)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)=0x1)
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))

14:00:46 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x640f40, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2)
poll(&(0x7f0000000080)=[{r1, 0x100}, {r0, 0xc0}], 0x2, 0x1)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)

[  261.913160][T11607] binder: 11590:11607 ioctl c018620c 20000540 returned -22
[  261.987356][T11607] binder: 11590:11607 ioctl c018620c 20000540 returned -22
[  262.032634][T11610] binder: 11590:11610 ioctl c018620c 20000540 returned -22
[  262.054909][T11607] binder: 11590:11607 ioctl c010640c 200001c0 returned -22
14:00:47 executing program 0:
clone(0x2000000024800b80, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)

[  262.187780][T11619] binder: 11612:11619 ioctl c018620c 20000540 returned -22
14:00:47 executing program 4:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x50, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffffe, 0xfffffffe, 0x20000000, 0x0, 0x1000}, 0x2}}]}, {0x4}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, r4, 0x1, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)
r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r7 = dup2(r6, r5)
r8 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r10 = dup2(r9, r8)
ioctl$BINDER_WRITE_READ(r10, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
accept4$inet6(r10, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000240)=0x1c, 0x800)
ioctl$BINDER_WRITE_READ(r7, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_GET_CAP(r7, 0xc010640c, &(0x7f00000001c0)={0x6})
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000280)={0x7, 0x3ff, 0x7fff, 0x400, 0x6, "998d825debea8cc6faebc6ba9dbc209af3ca6c", 0x1, 0x10000})

[  262.245356][T11619] binder: 11612:11619 ioctl c018620c 20000540 returned -22
[  262.458639][T11628] binder: 11626:11628 ioctl c018620c 20000540 returned -22
[  262.512777][T11628] binder: 11626:11628 ioctl c018620c 20000540 returned -22
[  262.545220][T11629] misc userio: Invalid payload size
[  262.553830][T11628] binder: 11626:11628 ioctl c018620c 20000540 returned -22
14:00:47 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendfile64(0xffffffffffffffff, r0, &(0x7f0000000040)=0xfffffffffffffbff, 0x80000001)
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$proc_capi20ncci(0xffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x10000, 0x0)
r1 = msgget$private(0x0, 0x0)
msgrcv(r1, 0x0, 0x0, 0x0, 0x0)
msgrcv(r1, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)

[  262.595483][T11632] misc userio: Invalid payload size
[  262.608749][T11633] binder: 11626:11633 ioctl c010640c 200001c0 returned -22
14:00:47 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x400c4152, &(0x7f0000000500)={0x0, &(0x7f00000004c0)=[&(0x7f0000000200)="111360795d4236edde5cc93d0781881fb9a5cc2344ae0a332275a0b7ed43628e20fb738ad045fe13ead5f7c0a62969162924148c49383dc09af95ae58d11cf0601b2dc96024652991a8a076217662e0c00b0058d8b977bbfcbe9dd60cfd8cc75a1a6ce2234b72d427246ae0ab9046d5ec58fac131bca50a40695a5aa91e2bf7fc68f0f4f8781b84fe966b6a796d8f0697f31845030a4faceda6751aad15a5d", &(0x7f0000000400)="9680e0aa2408dcce13994649ddbaabf92581995a99da4ec0480ddc232870be19cc55a02fcb898e769a06d0f468ed9c20ee41a2c47e921f8377fa1583658b1c9d027e4a58e098c8b2ec80618c5cf1f1076c642b813b26b15667c4a809fde22d0164eb6db71c409dee5fc106c9329a98df71d918a27bf467ea24629b49dd77352bec1d2294a493", &(0x7f0000000140)="137e914e88ed6f0086fe878c7892b0a0b9bf39f89bb607ceeec3ea22c8b81765db9edb761368da47f0c9d3658888e49c3345abaa95ca2ca3a1f4e8d41b2eb7c4432cc0cef00fc102b8a8a406d2b65e6164f21b9bc29137032062a0b3e160fce5dc596681684c9f9ca08fb851692e11c012", &(0x7f0000000700)="b46cb78efbf6f962552d4dbdc11acdbe009e876489d713d4dec238b5e5dabf38217e9f59fa239a2d5950b286eff282aea3f0fd502a11b741abdd8e23ecc6cef112cd4bf3fb0d5f23d66ed8f1b4603218c19fbf904e71b6d2609fdc22fc5109ee756126408458c1f4d06dd728395c9e4509c15c5ff7b1cd35bca4f27097cd2ead83d5044b4189a44b817603d915dd8c18bb02ec43f13ac789d0436fdcc201b89f9f699aaec79f3060d56274df76a00f0e2578ce59ae056621c439872651f0b37a8826c854a4", &(0x7f0000000800)="43e55121a3b4cdcb633b9650e750ff1bf791ce6fb1878f4feeeb834bd3fea7b7f1a7ad1e088d5c31c5e7a6c44d58a0614edabbe172ed296d831a29369ee6e1526bf43574d8789ed4c66572441a9371b82e3f0bae8c9ae74360a66ca998400455472471426ee9481dfeb12bb375c5743f33eff55c18d2b1017432004cd8abc9072a129336b9c4b6387044529c249f072dfd3ebf83c20fbed81b48364070f996beaf2eb37568462fc39a6f87a7dadef29c4290b6e5055c840f03228db100277c56c4", &(0x7f0000000900)="418b361c4aa3c445ee0508376b04eefdee9843173458046b8e4a1a60518330ef3d4e5da990a7d6ffd949db56112cc93887809df23b26ddbac66621a7beb298492d1a234d136798a26c47aef4282d0ab3bdec9244008f27b3737cf59274b402e2ee43d5183d5dec094a5b8a1f4aa14866de4186f7e8cdb59487387a6819664097804e643cd55d621aff724c6ada509169b98422349ff308143902678ce7e6034eda4d68d75221a924513d47d70ca586d5358a850baf36b44b16167855a02fd4d2b67e53194e14cfa0db91fd33353cd3a5a6828a6ba427d24e921d025d5b4bfc819e8fcebe76a2acbf1783cd7481e7e49850277f504139c981", &(0x7f0000000040)="4becf416a5d7870b27ff00", &(0x7f00000002c0)], 0x9})
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$BINDER_WRITE_READ(r6, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
name_to_handle_at(r6, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="d500000002000000f186b7fd7dacd5643a94bff69d6b16b2c1efe0c382f0d28229ba7d6464c3d7ce8f05024745937b8aeda5f2fcee55aef06c2d57f8dc2dbc98f203bdc32cae55d898dcaddc421841fcff94d74cfaf67f4eecb1f5335b2ec0d248d02fd39628296624295e528ef72f897e7b9fb64a8b1c5c71ab2eab8496a01ff0b778c3df34ad9ce27cd71fce460d341e2361bc05eacc2563b50d18c0ee50fe0202a3a8f8814ec9b4375310757d22e0515bb3e73790c2b06bb04ddb8a3a626b0d4354505e0200000000000000a83c1516e35a3d6d2ee1fb622337522b20fe4eaa23e78e98fb82c7400d0fd6d29fdbce11106a0d47cbd5fb39424381cb"], &(0x7f0000000100), 0x400)
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)="c0d5951a1172ef75", 0x8}, {&(0x7f0000000580)="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", 0x174}], 0x2)

14:00:47 executing program 4:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x50, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffffe, 0xfffffffe, 0x20000000, 0x0, 0x1000}, 0x2}}]}, {0x4}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, r4, 0x1, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)
r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r7 = dup2(r6, r5)
r8 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r10 = dup2(r9, r8)
ioctl$BINDER_WRITE_READ(r10, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
accept4$inet6(r10, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000240)=0x1c, 0x800)
ioctl$BINDER_WRITE_READ(r7, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_GET_CAP(r7, 0xc010640c, &(0x7f00000001c0)={0x6})

14:00:47 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x1000)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

[  263.046740][T11648] binder: 11644:11648 ioctl c018620c 20000540 returned -22
[  263.068624][T11649] binder: 11645:11649 ioctl c018620c 20000540 returned -22
14:00:48 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$btrfs_control(0xffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x80082, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

14:00:48 executing program 2:
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))
r0 = openat$vcs(0xffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0)
syz_read_part_table(0x8923, 0x5, &(0x7f0000002300)=[{&(0x7f00000000c0)="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", 0xfd, 0x7}, {&(0x7f00000001c0)="c89e173127fc84c396a1a54ba6fd0b0a2b2655200a16b719851c92cb9e69c49de34a519dc8e5abdb931a6575d2efab50b1cd9bc9c0905a52eda458b24218a1250691d6c1f8adef1861ff4ab6cd2369a6310853578bfaabaa80e06af3db7870c10c5ff48f36b9844cddc3a5da75ec7fba6cfd12f192d8b27b8d2a459a552c2a437a8f6a034f7832ed9130bfdf172f2e807b078068535c79d752fa9a7319ec368df5679599168dc49868a1f55dd676e827f2c81994f7cc76bf10768e0dac1e75eaa4f69993b3dccda4364596778735a54e9abdf25c4d48e6d758b2cc01c1c3265abdd2e200f3825697e53c", 0xea, 0x7}, {&(0x7f00000002c0)="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", 0x1000, 0x40}, {&(0x7f00000012c0)="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", 0x1000, 0xc000}, {&(0x7f00000022c0)="bad5f28909d2fdce9c5f315de30deb26e2f09ec45affc1438ccd9cd7e2", 0x1d, 0x7f}])
getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4)

[  263.097732][T11654] binder: 11644:11654 ioctl 400c4152 20000500 returned -22
[  263.112293][T11651] binder: 11646:11651 ioctl c018620c 20000540 returned -22
[  263.129770][T11648] binder: 11644:11648 ioctl c018620c 20000540 returned -22
[  263.204375][T11651] binder: 11646:11651 ioctl c018620c 20000540 returned -22
[  263.244048][T11651] binder: 11646:11651 ioctl c018620c 20000540 returned -22
14:00:48 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b2000010000049d67b932043c2e20d691484ba3d34473b8b7d7f2ee4ec12c53dbf"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xf}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2e23}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x3, 0x4a0a}}}]}]}]}}]}, 0x60}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r6, @ANYRES32=r8, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b2000010000049d67b932043c2e20d691484ba3d34473b8b7d7f2ee4ec12c53dbf"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="6000000000000000000000000000000000000000cd173cf34819d53d8e3d96bba88528d80a3d8c47b3e8f4ed792cbc2da103490c9db914c2dde7fb9d7f43667f2a7d0c50b54e6b2f9fadecba9afddc405d", @ANYRES32=r8, @ANYBLOB="00000000000000000f0000000a0001006261736963000000300002002c00028008000100232e0000200002801c000100000003000a4a00"/72], 0x60}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xcc, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x400c0c4}, 0x1)

[  263.280409][T11651] binder: 11646:11651 ioctl c010640c 200001c0 returned -22
[  263.366540][T11661] binder: 11659:11661 ioctl c018620c 20000540 returned -22
[  263.418312][T11666] misc userio: Invalid payload size
14:00:48 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000200)=""/195)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)

14:00:48 executing program 4:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x50, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffffe, 0xfffffffe, 0x20000000, 0x0, 0x1000}, 0x2}}]}, {0x4}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, r4, 0x1, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)
r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r7 = dup2(r6, r5)
r8 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r10 = dup2(r9, r8)
ioctl$BINDER_WRITE_READ(r10, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
accept4$inet6(r10, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000240)=0x1c, 0x800)
ioctl$BINDER_WRITE_READ(r7, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

14:00:48 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00')
sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000280)={0x28, r4, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048051}, 0x4851)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802)
r7 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r8 = dup2(r7, r6)
ioctl$BINDER_WRITE_READ(r8, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
getsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040), 0x10)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000002c0))

14:00:48 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$sock_x25_SIOCDELRT(r2, 0x890c, &(0x7f0000000200)={@null='               \x00', 0x8, 'veth1_to_team\x00'})
r3 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
r4 = openat$mice(0xffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x1)
connect$l2tp(r4, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, 0x10)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)

[  263.627048][T11672] binder: 11671:11672 ioctl c018620c 20000540 returned -22
[  263.648014][T11673] binder: 11673:11673 ioctl c018620c 20000540 returned -22
14:00:48 executing program 2:
syz_read_part_table(0x0, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r1 = getpid()
ptrace(0x10, r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0x6)
setresuid(0x0, r3, 0x0)
setresuid(r3, 0x0, 0xffffffffffffffff)
r4 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, <r5=>0x0}, &(0x7f0000000040)=0xc)
syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)={[{@gid={'gid', 0x3d, r5}}]})
setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={r1, r3, r5}, 0xc)

14:00:48 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendfile64(0xffffffffffffffff, r0, &(0x7f0000000040)=0xfffffffffffffbff, 0x80000001)
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = msgget$private(0x0, 0x0)
msgrcv(r1, 0x0, 0x0, 0x0, 0x0)
msgrcv(r1, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)

[  263.805729][T11679] binder: 11677:11679 ioctl c018620c 20000540 returned -22
[  263.833405][T11679] binder: 11677:11679 ioctl c018620c 20000540 returned -22
[  263.848494][T11680] binder: 11678:11680 ioctl c018620c 20000540 returned -22
[  263.871534][T11679] binder: 11677:11679 ioctl c018620c 20000540 returned -22
[  263.968511][T11680] binder: 11678:11680 ioctl c018620c 20000540 returned -22
[  263.996641][T11687] binder: 11682:11687 ioctl c018620c 20000540 returned -22
14:00:49 executing program 4:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x50, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffffe, 0xfffffffe, 0x20000000, 0x0, 0x1000}, 0x2}}]}, {0x4}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, r4, 0x1, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)
r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binderN(0x0, 0x0, 0x0)
dup2(r6, r5)
r7 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r8 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r9 = dup2(r8, r7)
ioctl$BINDER_WRITE_READ(r9, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
accept4$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000240)=0x1c, 0x800)

[  264.030438][T11692] misc userio: Invalid payload size
[  264.046797][T11688] binder: 11678:11688 ioctl c018620c 20000540 returned -22
[  264.121326][T11702] binder: 11682:11702 ioctl c018620c 20000540 returned -22
[  264.146238][T11685] hfs: gid requires an argument
[  264.158430][T11685] hfs: unable to parse mount options
[  264.176152][T11687] binder: 11682:11687 ioctl 890c 20000200 returned -22
[  264.193557][T11707] binder: 11705:11707 ioctl c018620c 20000540 returned -22
[  264.212003][T11707] binder: 11705:11707 ioctl c018620c 20000540 returned -22
14:00:49 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendfile64(0xffffffffffffffff, r0, &(0x7f0000000040)=0xfffffffffffffbff, 0x80000001)
r1 = msgget$private(0x0, 0x0)
msgrcv(r1, 0x0, 0x0, 0x0, 0x0)
msgrcv(r1, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)

14:00:49 executing program 4:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x50, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffffe, 0xfffffffe, 0x20000000, 0x0, 0x1000}, 0x2}}]}, {0x4}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, r4, 0x1, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)
r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binderN(0x0, 0x0, 0x0)
dup2(r6, r5)
r7 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r8 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r9 = dup2(r8, r7)
ioctl$BINDER_WRITE_READ(r9, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

[  264.240573][T11688] binder: 11678:11688 ioctl c018620c 20000540 returned -22
14:00:49 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000040))
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
dup2(r2, r1)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

14:00:49 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = openat$autofs(0xffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x185803, 0x0)
r3 = dup2(r2, r1)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$SNDCTL_DSP_POST(r3, 0x5008, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)

[  264.500601][T11716] binder: 11714:11716 ioctl c018620c 20000540 returned -22
[  264.543078][T11716] binder: 11714:11716 ioctl c018620c 20000540 returned -22
14:00:49 executing program 4:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x50, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffffe, 0xfffffffe, 0x20000000, 0x0, 0x1000}, 0x2}}]}, {0x4}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, r4, 0x1, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)
r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binderN(0x0, 0x0, 0x0)
dup2(r6, r5)
r7 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r8 = syz_open_dev$binderN(0x0, 0x0, 0x0)
dup2(r8, r7)

[  264.670754][T11726] misc userio: Invalid payload size
14:00:49 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000200)={0x0, @vsock={0x28, 0x0, 0x0, @my=0x1}, @ax25={0x3, @bcast, 0x4}, @generic={0x11, "a7ac62dabb8dffdc0799d7880404"}, 0x391, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)='bridge_slave_1\x00', 0x4, 0x10000, 0xd66e})
r3 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x7, @rand_addr="c2f417cc23b088915a26ddc6fa1d7670", 0xe9}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e22, 0x10000, @local, 0x4}, @in6={0xa, 0x4e22, 0x0, @loopback}, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @broadcast}, 0x6}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, @in6={0xa, 0x4e21, 0x8, @remote, 0x6b90}, @in={0x2, 0x4e23, @remote}], 0xbc)
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
writev(r4, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)

[  264.774493][T11734] binder: 11733:11734 ioctl c018620c 20000540 returned -22
14:00:49 executing program 4:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x50, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffffe, 0xfffffffe, 0x20000000, 0x0, 0x1000}, 0x2}}]}, {0x4}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, r4, 0x1, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)
r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binderN(0x0, 0x0, 0x0)
dup2(r6, r5)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)

14:00:49 executing program 2:
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00')
r0 = openat$dlm_control(0xffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x94000, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00')
sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r2, 0x703}, 0x14}}, 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0xe4, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2835}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcb1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0xdb89d191011ce78e}, 0x4000000)
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))
r3 = openat$cachefiles(0xffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x420801, 0x0)
write$P9_RLOCK(r3, &(0x7f0000000080)={0x8, 0x35, 0x1, 0x2}, 0x8)

14:00:50 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x20402, 0x0)
openat$dsp1(0xffffff9c, &(0x7f0000000140)='/dev/dsp1\x00', 0x200000, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)
r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x2, 0x4000)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x10})

[  265.028965][T11741] binder: 11738:11741 ioctl c018620c 20000540 returned -22
[  265.055262][T11741] misc userio: Invalid payload size
[  265.118775][T11745] binder: 11742:11745 ioctl c018620c 20000540 returned -22
[  265.264919][T11750] misc userio: Invalid payload size
14:00:50 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x2a00042, &(0x7f0000000200)={[{@mode={'mode', 0x3d, 0x1000}}, {@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x1}}, {@mode={'mode'}}, {@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0xffffffffffff7fff}}, {@mode={'mode', 0x3d, 0x1c00000000000000}}], [{@pcr={'pcr', 0x3d, 0x21}}]})

14:00:50 executing program 4:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x50, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffffe, 0xfffffffe, 0x20000000, 0x0, 0x1000}, 0x2}}]}, {0x4}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, r4, 0x1, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)
r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binderN(0x0, 0x0, 0x0)
dup2(r6, r5)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)

[  265.308767][T11751] misc userio: Invalid payload size
14:00:50 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendfile64(0xffffffffffffffff, r0, &(0x7f0000000040)=0xfffffffffffffbff, 0x80000001)
r1 = msgget$private(0x0, 0x0)
msgrcv(r1, 0x0, 0x0, 0x0, 0x0)
msgrcv(r1, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)

14:00:50 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000040)=0x6, 0x8)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

[  265.557265][T11760] misc userio: Invalid payload size
14:00:50 executing program 0:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000000))
r3 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)="b01ed8894ed3786a1a2cf918ac6952f6309f01f08d2632711b89e76dcb32a7e42018917d69fc20d9f34dc1b559e88f5803fd992d4d41f16c5a722d53bca376ca6e1311ab331de6460255dcae2299a8c993712fd8a61c12aca20b2fc214a6eaaa9e557a79595396a488ea57aaf2e8a2fb0b23d582b06cb6a04f252ba687242591de1ce52ab90eb4d84b39d24839f6dab061e400b70868a45d251541d0b4ed2eba73d4b40681cc75caceddb15d2e405de48a16da1684ee1bc437b52f", 0xbb}, {&(0x7f0000000140)="15a6146dcda61b60d691f1aa544a5fcef6367c03df40a37c874a6757b23ba4ec11d5989de1925f33e048ba149e951a", 0x2f}], 0x2)
r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$BINDER_WRITE_READ(r6, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={0xffffffffffffffff, r6, 0x9, 0x2, r2}, 0x14)

14:00:50 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$BINDER_WRITE_READ(r4, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$VIDIOC_G_MODULATOR(r4, 0xc0445636, &(0x7f00000000c0)={0x3, "b8168d687d4be4cf659a8a15b96860e27b51afe0ab1809c3bda0bbd2258783f6", 0x8, 0x5, 0x8, 0x6, 0x5})
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r5 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

[  265.663888][T11766] binder: 11763:11766 ioctl c018620c 20000540 returned -22
14:00:50 executing program 4:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x50, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffffe, 0xfffffffe, 0x20000000, 0x0, 0x1000}, 0x2}}]}, {0x4}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, r4, 0x1, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)
r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binderN(0x0, 0x0, 0x0)
dup2(r6, r5)

[  265.878251][T11779] binder: 11777:11779 ioctl c018620c 20000540 returned -22
[  265.985977][T11778] misc userio: Invalid payload size
[  266.014862][T11778] binder: 11776:11778 ioctl c018620c 20000540 returned -22
14:00:51 executing program 1:
clone(0x2000000024044300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = openat$btrfs_control(0xffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x1, 0x0)
r4 = openat$cgroup_ro(r2, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611)
write$input_event(r3, &(0x7f0000000080)={{0x0, 0x2710}, 0x11, 0x8, 0x7fff}, 0x10)

[  266.138610][T11786] misc userio: Invalid payload size
[  266.157604][T11778] binder: 11776:11778 ioctl c018620c 20000540 returned -22
14:00:51 executing program 2:
syz_read_part_table(0xfffffffc, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000), 0x0, 0x65}, {&(0x7f0000001080)="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", 0x10bc, 0x5}])
r0 = openat$vcsu(0xffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x80400, 0x0)
ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000080))

[  266.184688][T11793] binder: 11789:11793 ioctl c018620c 20000540 returned -22
14:00:51 executing program 4:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x50, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffffe, 0xfffffffe, 0x20000000, 0x0, 0x1000}, 0x2}}]}, {0x4}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, r4, 0x1, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)

[  266.333223][T11797] binder: 11797:11797 ioctl c018620c 20000540 returned -22
14:00:51 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$BINDER_WRITE_READ(r4, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000040)={0x1, 0x2, [@local, @dev={[], 0x28}]})
r5 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

14:00:51 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
openat$cgroup_type(r2, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = accept4$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @netrom}, [@remote, @rose, @rose, @remote, @remote, @default, @netrom, @rose]}, &(0x7f0000000140)=0x48, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r4, 0x1, 0x53, &(0x7f0000000180)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000200)=0x2c)
recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
writev(r3, &(0x7f0000000000), 0x0)

14:00:51 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendfile64(0xffffffffffffffff, r0, &(0x7f0000000040)=0xfffffffffffffbff, 0x80000001)
r1 = msgget$private(0x0, 0x0)
msgrcv(r1, 0x0, 0x0, 0x0, 0x0)
msgrcv(r1, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)

[  266.565599][T11809] binder: 11806:11809 ioctl c018620c 20000540 returned -22
[  266.596380][T11815] binder: 11812:11815 ioctl c018620c 20000540 returned -22
14:00:51 executing program 4:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x50, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffffe, 0xfffffffe, 0x20000000, 0x0, 0x1000}, 0x2}}]}, {0x4}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, r4, 0x1, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)

[  266.794431][T11820] binder: 11818:11820 ioctl c018620c 20000540 returned -22
14:00:51 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$rtc(0xffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x22000, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = eventfd2(0x100, 0x1)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r3 = dup2(r2, r0)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x5, 0x0, 0x6})
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
semget(0x0, 0x0, 0x3)

[  267.046647][T11831] binder: 11827:11831 ioctl c018620c 20000540 returned -22
[  267.090034][T11833] binder: 11830:11833 ioctl c018620c 20000540 returned -22
[  267.128205][T11836] binder: 11830:11836 ioctl c0185879 20000080 returned -22
14:00:52 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0185649, &(0x7f00000000c0)={0x9b0000, 0x3, 0x0, <r4=>r3, 0x0, &(0x7f0000000080)={0xa10908, 0x7ff, [], @value64=0x7}})
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={<r5=>0x0, @in6={{0xa, 0x4e24, 0x5, @local, 0x6}}}, &(0x7f00000001c0)=0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000200)={r5, 0x80}, &(0x7f0000000240)=0x8)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

14:00:52 executing program 4:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x50, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffffe, 0xfffffffe, 0x20000000, 0x0, 0x1000}, 0x2}}]}, {0x4}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, r4, 0x1, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)

14:00:52 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

[  267.478675][T11843] binder: 11842:11843 ioctl c018620c 20000540 returned -22
[  267.543652][T11824] binder: 11818:11824 ioctl c018620c 20000540 returned -22
14:00:52 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x60, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x5f, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/61, 0x3d, 0x1, 0xb}, @flat=@weak_handle={0x77682a85, 0xa}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x1000}, @increfs={0x40046304, 0x2}, @acquire={0x40046305, 0x3}, @register_looper], 0x0, 0x0, 0x0})
statx(r2, &(0x7f0000000040)='./file0\x00', 0x6000, 0x10, &(0x7f0000000080))
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

14:00:52 executing program 4:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x50, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffffe, 0xfffffffe, 0x20000000, 0x0, 0x1000}, 0x2}}]}, {0x4}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, 0x0, 0x1, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)

14:00:52 executing program 0:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="ae1ac246248539e248dcd32cd56e7a202a09160df2c619830826eaa0a96d93ed5396eec1dca076396f860a4ae5e92e6678a149b2647a8a907e74a619807a5804c500761675e8720ec4996eff26f7cb66e7f43cbc84c6e0c3be900366ed62182adc395fbc7eb126d61dafaca1a66ec65f79cef1a80ad6db52c4b908e3e4eef91cdd44f15e", 0x84}], 0x1)

14:00:52 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = msgget$private(0x0, 0x0)
msgrcv(r1, 0x0, 0x0, 0x0, 0x0)
msgrcv(r1, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)

14:00:52 executing program 5:
syz_read_part_table(0x800, 0x0, &(0x7f0000000000))

[  267.888860][T11855] binder: 11854:11855 ioctl c018620c 20000540 returned -22
14:00:53 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r4 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r4, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

[  267.929126][T11855] binder: 11854:11855 ioctl c018620c 20000540 returned -22
[  267.949469][T11858] binder: 11854:11858 ioctl c018620c 20000540 returned -22
[  267.959120][T11859] binder: 11856:11859 ioctl c018620c 20000540 returned -22
14:00:53 executing program 4:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x50, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffffe, 0xfffffffe, 0x20000000, 0x0, 0x1000}, 0x2}}]}, {0x4}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, 0x0, 0x1, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)

[  268.269726][T11875] binder: 11874:11875 ioctl c018620c 20000540 returned -22
[  268.283328][T11877] binder: 11877:11877 ioctl c018620c 20000540 returned -22
14:00:53 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x54, 0x0, &(0x7f0000000200)=[@enter_looper, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x5, 0x0, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/202, 0xca, 0x0, 0x36}, @flat=@weak_handle={0x77682a85, 0x1001, 0x2}}, &(0x7f00000001c0)={0x0, 0x1c, 0x44}}}, @enter_looper], 0x0, 0x0, 0x0})

[  268.423235][T11883] binder: 11882:11883 ioctl c018620c 20000540 returned -22
14:00:53 executing program 4:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x50, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffffe, 0xfffffffe, 0x20000000, 0x0, 0x1000}, 0x2}}]}, {0x4}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, 0x0, 0x1, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)

14:00:53 executing program 1:
r0 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x40, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1f}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000)
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = gettid()
r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0)='devlink\x00')
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00007c4c40f6b2e8f4bd00006acc5a5ce114daf1ea941b870bd8a6d10e71cf4a6f2c4dd817d90e850e92cdb28becfcc33ed8f282c965bcb706c7b0f38c50e04ae6703222e4c140b4334fdccdcba616d707654b6b309e5f8c6e5a74fedc46356cdbefeee25b2264e67dee3ae400651f376df3177e617562c3e2797788d316db7c780e8f225a9571b9120b162cc35340e46522ba28a8e2b6202ef4e7431f7eaad49d2999eed4b1bda0c00ccc64a9e718cb1733be8e524ac52284a517ae0c13e13f4580ccafd7858f9a06c34928c8ee58368a", @ANYRES16=r5, @ANYBLOB="0b3e0000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xe4, r5, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8800}, 0x28000050)
r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r7 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r8 = dup2(r7, r6)
ioctl$BINDER_WRITE_READ(r8, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$SNDRV_PCM_IOCTL_REWIND(r8, 0x40044146, &(0x7f00000003c0)=0x1)
r9 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r10 = dup2(r9, r2)
ioctl$BINDER_WRITE_READ(r10, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

[  268.933815][T11893] binder: 11892:11893 ioctl c018620c 20000540 returned -22
14:00:54 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = msgget$private(0x0, 0x0)
msgrcv(r1, 0x0, 0x0, 0x0, 0x0)
msgrcv(r1, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(r1, 0x0)

14:00:54 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x400200, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000040)=""/110)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)

14:00:54 executing program 4:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x50, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffffe, 0xfffffffe, 0x20000000, 0x0, 0x1000}, 0x2}}]}, {0x4}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, r3, 0x1, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)

14:00:54 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$BINDER_WRITE_READ(r6, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$EVIOCGBITSND(r6, 0x80404532, &(0x7f0000000300)=""/23)
ioctl$CAPI_CLR_FLAGS(r3, 0x80044325, &(0x7f00000002c0)=0x1)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r8}}, 0x10)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x5, 0x10, 0xfa00, {&(0x7f0000000040), r8, 0x1}}, 0x18)
r9 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r10 = dup2(r9, r0)
ioctl$BINDER_WRITE_READ(r10, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

[  269.358146][T11905] binder: 11903:11905 ioctl c018620c 20000540 returned -22
14:00:54 executing program 4:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x50, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffffe, 0xfffffffe, 0x20000000, 0x0, 0x1000}, 0x2}}]}, {0x4}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, r3, 0x1, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)

[  269.468029][T11910] binder: 11907:11910 ioctl c018620c 20000540 returned -22
[  269.494500][T11910] binder: 11907:11910 ioctl 80404532 20000300 returned -22
[  269.534777][T11910] binder: 11907:11910 ioctl c018620c 20000540 returned -22
14:00:54 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$SNDRV_PCM_IOCTL_HWSYNC(r2, 0x4122, 0x0)
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r4 = dup3(r3, r0, 0x0)
fanotify_mark(r2, 0x20, 0x30, r4, &(0x7f0000000180)='./file0\x00')
r5 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
writev(r5, &(0x7f0000000100)=[{&(0x7f0000000040)="ae", 0x1}, {&(0x7f0000000080)="75c9149641b8c70298e65634f017ac63407502f41210e1fcbd6bcc550369e4ab21f2303cffd4393ad0e53579dadd54f9d6dd29a045b09dbcc19c44df12f474234f1225958b27bb7358d2131c1322a0210f9399c7", 0x54}], 0x2)
write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x7}, 0x2)

[  269.579126][T11910] binder: 11907:11910 ioctl c018620c 20000540 returned -22
[  269.587043][T11916] binder: 11907:11916 ioctl 80404532 20000300 returned -22
[  269.639705][T11916] binder: 11907:11916 ioctl c018620c 20000540 returned -22
[  269.805754][T11923] binder: 11921:11923 ioctl c018620c 20000540 returned -22
[  269.841919][T11924] binder: 11922:11924 ioctl c018620c 20000540 returned -22
[  269.871020][T11924] binder: 11922:11924 ioctl 4122 0 returned -22
[  269.989188][T11927] misc userio: Invalid payload size
[  270.160542][T11929] IPVS: ftp: loaded support on port[0] = 21
[  270.527461][T11929] chnl_net:caif_netlink_parms(): no params data found
[  270.616205][T11927] binder: 11922:11927 ioctl c018620c 20000540 returned -22
[  270.623961][T12045] binder: 11922:12045 ioctl 4122 0 returned -22
[  270.638958][T12045] misc userio: Invalid payload size
[  270.673815][T11929] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.681868][T11929] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.696653][T11929] device bridge_slave_0 entered promiscuous mode
[  270.711071][T11929] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.718418][T11929] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.732319][T11929] device bridge_slave_1 entered promiscuous mode
[  270.784325][T11929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  270.800167][T11929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  270.878598][T11929] team0: Port device team_slave_0 added
[  270.889217][T11929] team0: Port device team_slave_1 added
[  270.923599][T11929] batman_adv: batadv0: Adding interface: batadv_slave_0
[  270.930751][T11929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  270.957632][T11929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  270.971279][T11929] batman_adv: batadv0: Adding interface: batadv_slave_1
[  270.978827][T11929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  271.005748][T11929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  271.086332][T11929] device hsr_slave_0 entered promiscuous mode
[  271.121780][T11929] device hsr_slave_1 entered promiscuous mode
[  271.150655][T11929] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  271.158779][T11929] Cannot create hsr debugfs directory
[  271.346651][T11929] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  271.407426][T11929] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  271.474767][T11929] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  271.527192][T11929] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  271.694380][T11929] 8021q: adding VLAN 0 to HW filter on device bond0
[  271.715609][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  271.724681][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  271.740652][T11929] 8021q: adding VLAN 0 to HW filter on device team0
[  271.755529][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  271.765569][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  271.775165][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.782592][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[  271.794133][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  271.807999][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  271.817478][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  271.827440][ T6791] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.834848][ T6791] bridge0: port 2(bridge_slave_1) entered forwarding state
[  271.883561][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  271.893557][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  271.904963][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  271.915597][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  271.925920][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  271.936171][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  271.946335][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  271.956262][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  271.979809][T11929] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  271.993268][T11929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  272.003207][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  272.013135][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  272.022832][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  272.059483][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  272.068139][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  272.092059][T11929] 8021q: adding VLAN 0 to HW filter on device batadv0
[  272.185729][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  272.196147][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  272.236344][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  272.246578][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  272.261231][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  272.270323][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  272.285503][T11929] device veth0_vlan entered promiscuous mode
[  272.306961][T11929] device veth1_vlan entered promiscuous mode
[  272.348718][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  272.357669][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  272.367800][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  272.377860][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  272.396573][T11929] device veth0_macvtap entered promiscuous mode
[  272.410190][T11929] device veth1_macvtap entered promiscuous mode
[  272.440279][T11929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  272.452157][T11929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.462258][T11929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  272.472874][T11929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.482951][T11929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  272.493612][T11929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.503678][T11929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  272.514250][T11929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.524357][T11929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  272.534975][T11929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.547749][T11929] batman_adv: batadv0: Interface activated: batadv_slave_0
[  272.558048][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  272.567717][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  272.577426][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  272.589109][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  272.610466][T11929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  272.622210][T11929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.632458][T11929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  272.643121][T11929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.653575][T11929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  272.664461][T11929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.674539][T11929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  272.685159][T11929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.695333][T11929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  272.705942][T11929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.718533][T11929] batman_adv: batadv0: Interface activated: batadv_slave_1
[  272.727284][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  272.737615][ T6791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
14:00:58 executing program 5:

14:00:58 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
write$9p(r5, &(0x7f0000000040)="ea4c9f240b4b65a2a3c9b6488721cdfac0ff84753fa328951bb8ee8fb1509d487c20b6d32cd823cfb3805553ac5e535062255772814ba47b50ca6fe27144b68da7baab363884d18508c61bf3168c430dea647f104b0554cc12fe8d096c396e95a6a83f7a2debf08607171e556361bb4701961698e79032cea907d9cfd940df46c3180968e9fc6c48a0ae6e9c09136d06d8b8b373f351c7486c5d136a37478dda58e329c8b82169cc5b26ab9a65fbf17d2a94fda4f23504e5829ae06b698104593428c8f98666b3a3c00a0daf635abaae9106b2ff3d8b55a3a2b3599211f67b9a67c495448d9898f3d59ea365f00b6fd802f9d70bd26a7f8b88", 0xf9)

14:00:58 executing program 4:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x50, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffffe, 0xfffffffe, 0x20000000, 0x0, 0x1000}, 0x2}}]}, {0x4}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, r3, 0x1, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)

14:00:58 executing program 2:
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))
r0 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0xc4, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000004c0)='NLBL_CALIPSO\x00')
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00', @ANYRES16=r1, @ANYBLOB="00e6e0c4678748f6e55c3c7ce2371ede042abd7000ff06df25020000000800010003000000080001000000000042db15d8053cce63e03048588f33d1005e0ffcb33d0c9993d69a108956c55b78cbfb7d6e5ca0e9a5b0645df91d8661ce9a196b78efd4577cd41097c93fbb834b22b22bad5a94e1a55cc310cedd60755d9978bcb12d17ac09deb605df5df535aae6eb33a71d1d"], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0xe00, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4084004}, 0x40000)

14:00:58 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(r0, 0x0)

14:00:58 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x501000, 0x0)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000240)=[@exit_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x2, 0x2, 0x28}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/155, 0x9b, 0x0, 0x20}}, &(0x7f0000000200)={0x0, 0x1c, 0x34}}}, @exit_looper], 0x1000, 0x0, &(0x7f0000000580)="20ef323bc68a5faf21f2eb6d31e00c1d7228adc60435f9ddbed074ad69ba6ac1b2f1ad567196473123d082a7982f05ec446219a7182aad5ae9e00d19b1ca5a25c1c4ae33c861e5f3d2f7c96ecdee80e5261a28d6b8cc454e5afb7e63903b54f219db50f971368f9d79f29adc7f86711ea88a933ce0018819b1905a7e4cc51f587c7fd058e291efd5a03bc4609ca7f7e965a8d701d55260e7d8690c440116d6b675bed662ff7b7b91d7b3e5c603783e71b54978a217ea8c39f874cadf81339009830f34c040ad17d4e0e6f92523bac62e59e87c657d5518879398f1688a5a90c476f0343f60850d2ad87c5b54aec69bbe37be1caa6bad0e77bcdded7475c480b4f4b623239cafa857786e865c2082b05d3e4f95c6d71c8dd4b935dfbbd627e2699f2455dccb7ee30ca163cd9fd26344c6b02911b805545b4cb6b09dded2e39eebace753e870ac43e9d808b021c41bd91788511533793722c6978493f24d91475a5ae19866d9c0750b2f33167290f2093a6b0da18af0ac1c91eac649cd3e5c1e6e4d442eda8436997a035cc1f1685caad329dd6a0f3c8b4f7b5d0d96ca49dfded402384e7771a094ce61ddc1909c002257191bbb50e21e41aeb8f79edd972634c9b5f267f05b5bb87ed97b0f6484bff241fc434100ab5c410a3c3f58a600c20b8e599b524cfb10e3fba180e5cb2f25682ffcf88067f7f8de4c4e81082682ea2aa1b8246d9b79e8b81fb7a353fce60613cf6307f99c1543ac0b31442692746239abcfb40b73904540f00344baedf0dff1ff3abd22f10188f0080ceb279bafadf8a23423b3952ac7794bf2cd8b557a17ced8eb27dd0014ac69458d6f60bdba861df906bb8ddcbdd8e744b983f1c5d35aafb98308a89d9bd39e34dca4e0802dfab3bb2b1863122137dd40616c6ee1fd434862d067eb47053191835a107673bbc3826c97d7103271217f2173277b64b9c9c505ee2b0f0643b6eeefc9df4052ccf0f23b326a142c8671bcbaa052d31e630944dc54482e47f1e474690f33f95b29a3176ec0cd9c23929b32e14601a0f44ef8ab7036309d289f5cf8bb64adc4e7e206dcdeeed35b7fe3728ab6ff33480c9ec05be0eb30c785860622b0948283d52f770f97de97c83a492d178df22a6a4a4d3b9192944c1a89c9a9ccd488f4ac444780a367f06ffd83760fb2c8846740d6624b6b306051cd1f43383e3528df41011afacbc28e0f4b79afbc04e2b413cc81406be35c499c8265f94aada079993fc8ecb6c34eded8e4741b7fdf3f98a944b2e471c063e53dd168677c8393f1fe4b40c59c2ff44a244f5bf3481b698b0a323a8e94da0abdac0a896994e817a5071ac8f5012420e78692e8c6b9c11e22e052d045d62a5e48d4f504d8a303a681e920117a817792208222b37d8a5e78c6d12561b8d476414b2adcd8afe21690eedccce9d42cccaea984a70ec8332a5a98263e61e7045df5f9a9233d9e242142ad9e10df32d38a10d2522023e03e84fb2ca3e6079421b80cdb1f9873968b3854cd4ad16a0c59c9ea2de698159aaca46d546ec0dc6ab0b0a06070d7f47c555b014a8c8dc2c08ded2355ceed4707fb58f6d97cdc28082eca2eca87ac60bc5cc83527daa640e47916b310541012aa3a3bb0e534872fa7deb6fe0c00c9e6fc0b87eb2ac045f360dd14f58699d3fb30e0c776607d54c55793741b1c272564085c8ea8d9ecc8edc1ab8ee1c64b89c86251d8a29b97ccee23a5bba7298f242dbb64ed9dc202607fcbf8925676ace7163cb5e36413efcb1d54c2e448f90cc927e50e0db9893c44e0253a400d195c5d4ef92f048ab76a4186b39a32bbdab88bebc5b723f439d9790a51da4090600dd6a9af5bdfc19480bc74e977afde580099110855a8942f25ff10abac9078d977432b0ec86d7e556d3f1f62b8c9001bca0e38729268091a1956a3e2468e9f73bbf0ba67060b5a3492982c831c6dd8541c53734d2aacec795c510b9f18c5a9c692c1f68ed4eaba609124f47c750babff2addd9bb760fc4a59278cfb04b45a66d098440f5afd30c526b96a73ecc0d754754b816346f16f055a27f6fc02255022a67a1d5210c3f42bca56e0858a507d77e48b0821310f2523bda5fb9a4e6f4997f0e033fac9ba4854706b544f18c5c779447144e92c049d5635e3090ba84b72e6c4968bc70007899c3bb77d3750045feba24e6c6e2e246a991d2333687d7ba19426ca151a486d545d48ba9bee07c3888645512af4db20160abb59136f56009d0607bb4179c67cd6e665487b7e422eedba3b64ff20d25595c5b2257134c2f677285c3d8d66b9cec0130587b3da7403c874897f98fde8849b8f84572cb000d2c3f2b743f34b2d225d8905f64e62d5724a1c95f065881c629b80531fb314d456038919840788560e36332666ee27f60eba51744fe009550b01d98e02e56352bef6243359cc0128c65f06c32ca879e8a51208ad6c85e32e942661c63e652816f58182b8e5a5bbd4fc1d786c20907975be4009a49f4004a3487cf458cf915210581e2106743452e5a36a952b82388242e9fd35692ad7019fea851868ba8387e04e10b4943ec4817ba84e2415ec156dc437ee3a8669a5db692249747350b75b773d3af344b6b4e653116145077d3e6f9d9a803dd29a39926aa2056aaaa35acf1243007370004492211b010c69ca80aad7eea412b10ae9d8d8f9126daaa63cc18e7d09c941e40a8eabe49de38b5b95b42b0ec8540c58648895a6754fe8f6f1093bdd0fd180c8a1521ef457f2644505eea16457b039fd0b20aee6afe7d890951280dff5f6108ff6507a1abe5b0310db272a204437f97a8e9eabe79df4dbe3d699f643318b34ccd56331da4a2f7415762c88d1a5842096716d1cc13666afe92b952dd01520a1e89eaaf1e40da3adc3438e12f7ac936c87d78b4454a8c4bd127e4ab7a31c93af868ce7d584065f6f49400dd86db5f53fac600580a0cbfbca117653cd0dcfef1aca546f95b176c9dfc7afc0113ea67f74999fe0eae067a7380088d6ab008154d45e6139a9e43e311217eabac3722ea2b1dc7e62b69bb41e3f9d330e268972caecc62522462d465b284694449517034f2a7ce8e5aec1ff593caebafbb4b804c00f5dd22af56c8cda985465432819974b368ff973a7a4ba0a17d579c8d5189cb3edc763c4ff7ef9b57f8c6b091659448f65a98dded5059a42a23fc0dbf9fe22fb8bfcb5bbc0f97093eb1a56bc1c405fd77b9a54f1c5cd5a9d4f373a4a828c6abf18281ed77b53046ccd8e0111a3e831996081f1f3b603cd9bb69336964d192befed2898f041a35b7be1559c66efc9abca002579ab8bfbe5dc8dd471670369e07eeae55834f19e19282c6a8afc121d17647e6acf07b802a5df897129c0283f6face3a8ec8594557593297092cbc09845fa7fbb6ff1243efca6fba5afcaf8e436c2e1866dfa0b04bfc9fa450af73604b4092482a19e449fa1b9bbdf920b71c00a5805ef533bf71016f6c66b0e588644f5d76a48e03cccfac7378de3238786289d175b7b221a8ea8b123d4988051b7893b4dbec7a04cbe01dc945bac5df98610229663702839c372e9259e47f3fbdac2523f53e0754b523649598aec2382992c11d0901cec63e61dbfbed25515dbbeea3c94bc2358cdbe1b3adcfd629091e199de422956e26c0e646ed0bc81ba60c68151155a7bc734e7ef98276fc7ff82aa2154d086d598ab75c62b59f1f3f0fa38a8ee11155c5274f62804b90147ffb8cc373dc94d1d15c0ebb5b653a2cd0f4cb7d4c2dc34bb2430ea3d1a32b5a7bb4a6eed2bf5810ca335853a8e6be03bb37838aee9766f519bfe9ac70079db70a8c804f5f3dec388f2374fcb5981815bafb34a283f7ef1a5c04e1c6eb74f075f41a9691799ca35cb729a110b3be95f689df6f9b4db5ef3c9ede8b642c6f0c10796a6db2a441813d3e9e67a046d04eafff0e300996f4d035c55d6fbb2cc15c45933b8a3ef82618d260b6aa7df10d1bde02f4bac2067586099909418a027c7945c2dfaf45b9e1a5c2ff8484cb7d0aa69687bb6eb361943fba735b761a8a701007d6db45ef98cdd021027983e58738341b6741bc2f9f8c07aebc75e68d0536a913c4e7376a36806493433cdc7fa94d2471259a3a0fdc0ae5b3f00cbd4a9516ce6d9634c55e3b4a004cdbb75d435b90b98420e9b041aa73c1afaa82f316b070c305192b6d2292dc45bc7868d9cb3ff2cd4666cbae52c5a72498280aa49e5aae2f2bb2bc7e2a9d51327ee2b54a391f1e0bf9a1b1231af12097595cc96c91da2378eff3386eb3077cce551c3e8ed660cc135cc0eccbb9f33789ab5623e861bce18d48d0b72a31af1652c66884ce712b99280c2a1c9fda9c6fcaa7d52d8657f16aeb4e177b5744937b2d382b42f4cc9d3fc6014bdd5742f994ce20c6cb65a195c2c56c751f1c70dcc8cb423d1093a5ace454904794876b128d0cd775b79de77a20e6f65491d37e4da98ed574fbd7c288f35bfb7080d5da338242991f1e1e8f2d78234e7a44b3d8f4ffa053dab1f30337a0dfe913a29ddb6f91f2bcc0293556c6d18c397d4b8cc58fb3e11a3962de55cc50900215bdb6fc03a3320be3c8cb5a17cf074d42f28e222f5a78f5f536c6ff0494db00207e39ca57609de4c1f0591bdd4a7886ad489ff6da4930618db41d14789827342777c35c4a6d71e71505ebfedefe831ee9413c2bf7df6f19cfca1f9df9d5f747430459ae289e30afcb4a4abae51c0e1d27c1ae187640cb81d0773d3a168661752d8716a5f982b8cb16b6a6203ba9503f6cb890fc837bd10cbe2e6bab72e372c57aa629b265adfd909fadcbc0670929e8cbd2d37f912b606c8e20358ef596ffe9eb0e53daf4d4b328dfb685da3f02391dda1fc58ebcd945411ea3ea9b9ad40eaa09e9f7156c33b914af51cb7e7348a8b5c4599135a93fb2f435430ebd8ffbecf47a3a7b2c5296619d9020efe48c756355ea4c27ed7c67367547c04775a73c412de77c026b2d140e6901b2805b15d2017134e5dc751557ad789c1e34b4ac96cf99705e8949699bf8dbe380cbcd853b9e406095995539902aea50eed12bf1ac45e9e9979301d21b7897237369794c2900a904c12ef6005b1c136515846ad8f115b0ce4adc9f390d99284b3d09175d8f7654ad9c3a1e21c8d8d40aa48d07ec4f06102c387283330d262830a78f278dff2b427ca5d7d8c9b87466156e1ff6598f1654046bac6fef5bd33699157826f9e0e416654253e656210cde6ad382221a050484fb3262bf228af90c0c83457f5e604084ca265ad4de3775f72442f67762c8d8ef4a4bc4a4c3b51728acd22a89dd76f240854eb9c8d6e16cd69968e278d7e870d4d6bf275b70bf015694654f75edcb8abb719b54f66acd68e81af5b5b8fbf4bc1514d1c14b0608146da1d175fb8638cf4ce4fd2418fd4ab6313ec2d6971e153eb4fe16919df96c9b0db21c48e8faf8fa87dc78bac25c4b106dcee9726d0d272920273d8c86579d3fdd04be3161b55178c3f86d41b6e86a6f26dc685181b085c39dcc71f9848c93afeddaf6a36b066f6def5168636962a226f5f34f4589fc84476e46d6530076fa673fb06028041268ad3d15b28322afbadda4add74f8ead5a56129d7ce74c690fed239511f4becc6a45703d8b2ee63af497b83a772fb762d025ba2bf4d9c081dcc815a5f0025d818bb0a3c11dcb55d02321a649e1611f1fdc5fdd4fd929ad9d89094b8c1f43217a11064bf49b4de335b5001ffa7e00ea49fc7694a569b1c02924e21739e6732800a3aa806fa6066a8bb9"})
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)

[  273.093567][T12164] Dev loop5: unable to read RDB block 4
[  273.099356][T12164]  loop5: unable to read partition table
[  273.105595][T12164] loop5: partition table beyond EOD, truncated
[  273.112597][T12164] loop_reread_partitions: partition scan of loop5 () failed (rc=-5)
[  273.260465][T12170] binder: 12169:12170 ioctl c018620c 20000540 returned -22
14:00:58 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(r0, 0x0)

[  273.318438][T12176] binder: 12174:12176 ioctl c018620c 20000540 returned -22
[  273.335012][T12177] binder: 12172:12177 ioctl c018620c 20000540 returned -22
[  273.379145][T12177] binder: 12172:12177 ioctl c018620c 20000540 returned -22
[  273.416228][T12187] binder: 12174:12187 ioctl c018620c 20000540 returned -22
[  273.447299][T12190] binder: 12172:12190 ioctl c018620c 20000540 returned -22
14:00:58 executing program 4:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x50, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffffe, 0xfffffffe, 0x20000000, 0x0, 0x1000}, 0x2}}]}, {0x4}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
dup2(r1, r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, r3, 0x1, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)

14:00:58 executing program 5:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000cab000)=0xa)
setresuid(0x0, r4, 0x0)
setfsuid(0x0)

14:00:58 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0xc0, 0x0, &(0x7f0000000240)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x70, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/43, 0x2b, 0x1, 0x36}, @fda={0x66646185, 0x7, 0x1, 0x12}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/40, 0x28, 0x0, 0xb}}, &(0x7f0000000140)={0x0, 0x28, 0x44}}}, @decrefs={0x40046307, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0x0, 0x1}, @fda={0x66646185, 0xa, 0x0, 0x3f}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/4096, 0x1000, 0x1, 0x20}}, &(0x7f0000000200)={0x0, 0x18, 0x34}}}, @increfs_done={0x40106308, 0x2}, @request_death={0x400c630e, 0x3}, @exit_looper, @acquire={0x40046305, 0x1}], 0x0, 0x0, 0x0})

14:00:58 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)
ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=0x9)

14:00:59 executing program 4:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x50, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffffe, 0xfffffffe, 0x20000000, 0x0, 0x1000}, 0x2}}]}, {0x4}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, r1, 0x1, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)

[  274.021914][T12206] binder: 12206:12206 ioctl c018620c 20000540 returned -22
14:00:59 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(r0, 0x0)

[  274.074839][T12210] binder: 12200:12210 ioctl c018620c 20000540 returned -22
14:00:59 executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, <r0=>0x0})
sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0)

14:00:59 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$KVM_SMI(r2, 0xaeb7)

14:00:59 executing program 2:
r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x80, 0x490000)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$sock_bt_cmtp_CMTPCONNDEL(r3, 0x400443c9, &(0x7f0000000180)={@fixed={[], 0x12}, 0x5})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="00042bbd7000ffdbdf25210000000400ec00"], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
syz_read_part_table(0xfffffffc, 0x48, &(0x7f0000000000))

14:00:59 executing program 4:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x50, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffffe, 0xfffffffe, 0x20000000, 0x0, 0x1000}, 0x2}}]}, {0x4}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, r1, 0x1, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)

[  274.537918][T12227] binder: 12223:12227 ioctl c018620c 20000540 returned -22
[  274.568029][T12227] binder: 12223:12227 ioctl aeb7 0 returned -22
14:00:59 executing program 3:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(r0, 0x0)

14:00:59 executing program 5:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r4)
socket(0x10, 0x3, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="240000002e0007031dfffd946fa201000100000000000000000000e50c1be3a2f7fffe7e280000005e00ff", 0x2b}], 0x1}, 0x0)
splice(r3, 0x0, r4, 0x0, 0x10000, 0x0)

[  274.615154][T12230] binder: 12229:12230 ioctl c018620c 20000540 returned -22
[  274.628337][T12232] binder: 12223:12232 ioctl c018620c 20000540 returned -22
[  274.671851][T12234] binder: 12229:12234 ioctl 400443c9 20000180 returned -22
14:00:59 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r2 = dup3(r1, r0, 0x80000)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48041}, 0x4094)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
openat$zero(0xffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x400000, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmsg(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
recvmsg(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = dup2(0xffffffffffffffff, r8)
ioctl$BINDER_WRITE_READ(r9, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

14:00:59 executing program 4:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x50, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffffe, 0xfffffffe, 0x20000000, 0x0, 0x1000}, 0x2}}]}, {0x4}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, r1, 0x1, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)

[  275.008157][T12249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12249 comm=syz-executor.5
[  275.204867][T12249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12249 comm=syz-executor.5
14:01:00 executing program 3:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(r0, 0x0)

[  275.329326][T12249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12249 comm=syz-executor.5
14:01:00 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, r1, 0x1, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)

14:01:00 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
recvfrom$rxrpc(r2, &(0x7f00000002c0)=""/200, 0xc8, 0x100, &(0x7f0000000240)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24)
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r5 = dup2(r4, r3)
r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x2000, 0x0)
r7 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r8 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r9 = dup2(r8, r7)
ioctl$BINDER_WRITE_READ(r9, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000140)=""/212, &(0x7f0000000240), &(0x7f0000000580)=""/4096, 0x2000})
fcntl$setflags(r6, 0x2, 0x1)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
set_mempolicy(0x2, &(0x7f00000003c0)=0xc1a0, 0x81)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0xc0bc5351, &(0x7f0000000000)={0x1, 0x1, 'client0\x00', 0x1, "6cd88ffb37a59e05", "5b19366c02bb2b42920eb30ce529f4d695d20d443bad45726e0e694b42cb4417", 0xe2, 0x2})

[  275.397642][T12249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12249 comm=syz-executor.5
[  275.437490][T12249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12249 comm=syz-executor.5
[  275.490700][T12249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12249 comm=syz-executor.5
[  275.528119][T12249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12249 comm=syz-executor.5
[  275.546802][T12249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12249 comm=syz-executor.5
[  275.568258][T12249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12249 comm=syz-executor.5
[  275.589043][T12249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12249 comm=syz-executor.5
[  275.708374][T12270] binder: 12267:12270 ioctl c018620c 20000540 returned -22
14:01:00 executing program 3:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(r0, 0x0)

[  275.783121][T12270] binder: 12267:12270 ioctl c018620c 20000540 returned -22
14:01:00 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x12)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(0xffffffffffffffff, 0x2007fff)
sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe)
r3 = socket(0x2, 0x803, 0xff)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x67)
r4 = dup(r3)
r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
creat(&(0x7f0000000040)='./bus\x00', 0x0)

[  275.828351][T12272] binder: 12267:12272 ioctl 4028af11 20000280 returned -22
[  275.856472][T12270] binder: 12267:12270 ioctl c018620c 20000540 returned -22
[  275.910405][T12272] binder: 12267:12272 ioctl c0bc5351 20000000 returned -22
[  275.957279][T12270] binder: 12267:12270 ioctl c018620c 20000540 returned -22
14:01:01 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, r1, 0x1, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)

14:01:01 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000a00)=0x5, 0x5)
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x400842)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
clock_gettime(0x0, &(0x7f0000006740)={<r4=>0x0, <r5=>0x0})
recvmmsg(r3, &(0x7f0000006600)=[{{&(0x7f0000000080)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000100)=""/150, 0x96}, {&(0x7f00000001c0)=""/81, 0x51}, {&(0x7f0000000240)=""/74, 0x4a}, {&(0x7f00000002c0)=""/111, 0x6f}, {&(0x7f0000000340)=""/241, 0xf1}], 0x5, &(0x7f0000000480)=""/79, 0x4f}, 0x800}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000580)=""/241, 0xf1}, {&(0x7f0000000680)=""/188, 0xbc}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f0000000740)=""/89, 0x59}, {&(0x7f00000007c0)=""/224, 0xe0}], 0x5, &(0x7f0000000900)=""/251, 0xfb}, 0x992d}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000a00)}, {&(0x7f0000000a40)=""/221, 0xdd}, {&(0x7f0000000b40)=""/157, 0x9d}], 0x3, &(0x7f0000000c40)=""/181, 0xb5}, 0x3f}, {{&(0x7f0000000d00)=@phonet, 0x80, &(0x7f0000002200)=[{&(0x7f0000000d80)=""/172, 0xac}, {&(0x7f0000000e40)=""/1, 0x1}, {&(0x7f0000000e80)=""/46, 0x2e}, {&(0x7f0000000ec0)=""/64, 0x40}, {&(0x7f0000000f00)=""/54, 0x36}, {&(0x7f0000000f40)=""/183, 0xb7}, {&(0x7f0000001000)=""/129, 0x81}, {&(0x7f00000010c0)=""/117, 0x75}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/141, 0x8d}], 0xa, &(0x7f0000002280)=""/225, 0xe1}, 0x2}, {{&(0x7f0000002380)=@ipx, 0x80, &(0x7f0000002a80)=[{&(0x7f0000002400)=""/200, 0xc8}, {&(0x7f0000002500)=""/88, 0x58}, {&(0x7f0000002580)=""/252, 0xfc}, {&(0x7f0000002680)=""/34, 0x22}, {&(0x7f00000026c0)=""/166, 0xa6}, {&(0x7f0000002780)=""/142, 0x8e}, {&(0x7f0000002840)=""/157, 0x9d}, {&(0x7f0000002900)=""/72, 0x48}, {&(0x7f0000002980)=""/194, 0xc2}], 0x9, &(0x7f0000002b00)=""/155, 0x9b}, 0xfffffffe}, {{&(0x7f0000002bc0)=@can, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002c40)=""/212, 0xd4}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x3, &(0x7f0000003e80)=""/75, 0x4b}, 0x8}, {{&(0x7f0000003f00)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000004000)=[{&(0x7f0000003f80)=""/70, 0x46}], 0x1, &(0x7f0000004040)=""/4096, 0x1000}, 0x7e00}, {{&(0x7f0000005040)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000061c0)=[{&(0x7f00000050c0)=""/4096, 0x1000}, {&(0x7f00000060c0)=""/221, 0xdd}], 0x2, &(0x7f0000006200)=""/217, 0xd9}, 0x1}, {{&(0x7f0000006300)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f00000065c0)=[{&(0x7f0000006380)=""/200, 0xc8}, {&(0x7f0000006480)=""/5, 0x5}, {&(0x7f00000064c0)=""/117, 0x75}, {&(0x7f0000006540)=""/92, 0x5c}], 0x4}, 0x6}], 0x9, 0x20, &(0x7f0000006780)={r4, r5+30000000})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r7=>0x0}, &(0x7f0000cab000)=0x6)
setresuid(0x0, r7, 0x0)
setresuid(r7, 0x0, 0xffffffffffffffff)
syz_mount_image$erofs(&(0x7f00000067c0)='erofs\x00', &(0x7f0000006800)='./file0\x00', 0x1, 0x2, &(0x7f0000007940)=[{&(0x7f0000006840)="e508a62e2450a55c890d20c1f945080b65b29c0abf31f98fe77e14c3756d76bc4db9b45f544c12dae5c3a050f46a10d4741e9f073b094ab1ba256b1e06650418b3bfc575c58f4beb5d0da5ca644b76f5cc27950b4cf3a0f866cc4e16f84b1ffbff885e390ea75a9e4009e0b5861b44dd584a89ea16d6feadebaa5c13759eff19afd3330d3ccff850566c06bd642e6d93880c89856e0948ed728a39b9b51477376db14544caf08be7436c2c137e6fdd57fa0a24528cd440e73b453d6150f73bf9e50f03861a76cfb41a40e79fb871d4d316bb179d5c82667e5e3a0f9ddec2a0c3", 0xe0, 0x81}, {&(0x7f0000006940)="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", 0x1000, 0xffffffff}], 0x80081, &(0x7f0000007980)={[{@user_xattr='user_xattr'}, {@fault_injection={'fault_injection', 0x3d, 0x5}}, {@noacl='noacl'}, {@acl='acl'}, {@user_xattr='user_xattr'}, {@fault_injection={'fault_injection', 0x3d, 0x3}}, {@user_xattr='user_xattr'}, {@user_xattr='user_xattr'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/binder#\x00'}}, {@fowner_gt={'fowner>', r7}}, {@obj_user={'obj_user', 0x3d, '/dev/binder#\x00'}}, {@dont_measure='dont_measure'}, {@obj_role={'obj_role', 0x3d, '/dev/binder#\x00'}}, {@obj_type={'obj_type', 0x3d, '/dev/sg#\x00'}}]})
r8 = dup2(r2, r1)
ioctl$BINDER_WRITE_READ(r8, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x4b, 0x0, 0x0})

14:01:01 executing program 2:
syz_read_part_table(0x0, 0x6, &(0x7f0000000680)=[{&(0x7f0000000580)="4a1935d8d5d9713f910d4ae5d6d6a12549925ee7bcf2e66f8fdc5057bd26ba681d020f9b7a070a17fff6fa716bf020ece20ab884a333fd23a7d384f68560115d982a4125773fe4c73d259e3d5c202368160ab0df5f8bda54335d735fc68633341c7171fb3a394152c027d0ab2e8816d4b456a4f7f9d2391f4bbd717439e621dc33cc6a10505302b932fd48c47512b038c4c75f8769f6f51a9068fb330c14a41b5e65c2f66453f3b3b3a71f8088898007c38dc4b5ccfcf1cd389fe3e7d39b9eb02c13ddf9c3539d7facae1a3bc016bbbbb5", 0xd1, 0x6460}, {&(0x7f0000000200)="63e6de5b49aa3bcf7a43e42265e0c6a3bbf583a16a1e1f2d275203c02d90795d1aa305315131f29084a61f7bd5de60cff55ab23df71eeb87549f405ebdfad97856a5b908dc492f1423e3dee8f9fec96cecbd6114777e0936ff839e7abad44a2d82b3adad5cc2231de4e0aa92289620f4cc56f2db59ff813db2ff01513fbce5cd705cdcf8760ad1494aa1d3313140", 0x8e, 0xfffff8eb}, {&(0x7f0000000180)="fc522f8c5169ea24b005f8eb39dffb13a83d81689a62fddaf027d55eb5d3e7e063fa92f67cf104a7767838", 0x2b, 0x13393a1d}, {&(0x7f0000000300)="506f1d64294ae8e413eca0393ff833b914a2932054f446d69d4c4f22bdabce88719fa62c384a96a50fe40d8275f0c396ca44610bd0e056942b622f68a08c853f58033ef28c211484d81549d6d6f477456a0eb225654c752c698fdea4f95a02637afa3ea72fb47655c6c20018f590d89f8f4ef77a73456bd10ceb56fd555b44e5423b918bf6", 0x85, 0x400}, {&(0x7f00000003c0)="da0d526bae", 0x5}, {&(0x7f0000000400)="19a4712a4270eca688c728f3c9d4f3766573cb3ffe5d5f5b136cbaeca12ffdfbbbf92a919e58ebd814470dd232ccb5fabd1cd5607352ea5e6bd82c221c93cd7f98d3edf75be3dd7c0bc7c758fa83ef7db28a7146e679b4a61d16", 0x5a, 0xece}])
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0185647, &(0x7f0000000080)={0xf980000, 0x40, 0xe8, <r4=>r3, 0x0, &(0x7f0000000040)={0xa20929, 0x4, [], @p_u32=&(0x7f0000000000)=0x7}})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r4, 0xc0bc5351, &(0x7f00000000c0)={0x4, 0x1, 'client0\x00', 0x4, "b868deed9cc2fb09", "a2dda2a8f58b0444d28e5d9ea8f74b0cba186c55d153be09f49a2a784b84dd38", 0xff, 0x1})

[  276.218463][   T33] audit: type=1804 audit(1586268061.198:17): pid=12287 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir497270937/syzkaller.SvL9pj/5/bus" dev="sda1" ino=16041 res=1
[  276.243860][   T33] audit: type=1804 audit(1586268061.198:18): pid=12287 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir497270937/syzkaller.SvL9pj/5/bus" dev="sda1" ino=16041 res=1
14:01:01 executing program 3:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(r0, 0x0)

14:01:01 executing program 5:
r0 = socket$inet(0x2, 0x2, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f0000319ff0)={0x2, 0x4e20}, 0x10)
sendto$inet(r0, &(0x7f0000000140)='K', 0x1, 0x2400c880, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendto$inet(r0, &(0x7f0000000000)='v', 0x1, 0x0, 0x0, 0x0)

14:01:01 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, r1, 0x1, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)

[  276.509455][T12302] binder: 12294:12302 ioctl c018620c 20000540 returned -22
[  276.596150][   T33] audit: type=1804 audit(1586268061.318:19): pid=12284 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir497270937/syzkaller.SvL9pj/5/bus" dev="sda1" ino=16041 res=1
[  276.621143][   T33] audit: type=1804 audit(1586268061.318:20): pid=12284 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir497270937/syzkaller.SvL9pj/5/bus" dev="sda1" ino=16041 res=1
[  276.649609][T12297] binder: 12294:12297 ioctl c0185647 20000080 returned -22
[  276.843168][T12315] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
14:01:02 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507009e82aa8aa0c1f8591d4237e400"/32, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b2000010000049d67b932043c2e20d691484ba3d34473b8b7d7f2ee4ec12c53dbf"], 0x5}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xf}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2e23}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x3, 0x4a0a}}}]}]}]}}]}, 0x60}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b2000010000049d67b932043c2e20d691484ba3d34473b8b7d7f2ee4ec12c53dbf"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xf}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2e23}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x3, 0x4a0a}}}]}]}]}}]}, 0x60}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x20000)
r8 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r8, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
write$P9_RCREATE(r8, &(0x7f0000000040)={0x18, 0x73, 0x1, {{0x2, 0x3}, 0x1ce2d70a}}, 0x18)

14:01:02 executing program 3:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = msgget$private(0x0, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(r0, 0x0)

14:01:02 executing program 5:
r0 = socket$inet(0x2, 0x2, 0x2200000088)
sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f0000319ff0)={0x2, 0x4e20}, 0x10)
sendto$inet(r0, &(0x7f0000000140)='K', 0x1, 0x0, 0x0, 0x0)

14:01:02 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, r1, 0x1, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)

14:01:02 executing program 3:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = msgget$private(0x0, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(r0, 0x0)

[  277.270018][T12334] binder: 12294:12334 ioctl c018620c 20000540 returned -22
[  277.294866][T12302] binder: 12294:12302 ioctl c0185647 20000080 returned -22
[  277.333330][T12323] binder: 12322:12323 ioctl c018620c 20000540 returned -22
14:01:02 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r2, 0x8)
syz_read_part_table(0x0, 0x6, &(0x7f0000000300)=[{&(0x7f0000000040)="87346032c12f75585abf79120cf8461a4bb90f80b6850ac9698f7e73606e71f4b631e8bc3a2fb759f5bf4c6eb3fbc222923ef26a423936f31010a2dc44895d062f6411a0d64810ca242be29109bd60336206b6bf5c7497fecb39c5a6ad9f65513f5115789d401bae77ce177baede53b5c0b40806b7ad9cbdf43c4ccaa429a9a525cfca2fc5043274245f4a296992752743417e4fcd48e55b4d5d0284286207e387770e939ad0a2600036a9467355476a29d686e409d41625c229e5f4bc9a8645ac6dc9a6d82222200c543443c183734c4654b409e18ba2cb6ca996", 0xdb, 0x6}, {&(0x7f0000000140)="5867bbf6e78c3bf7032356d199587d829044ae2935d3a1d210c5d88d39bf6107ea22f5be8c9a5d99a24c6fa230a9a77fbc33c3aabf4ee205", 0x38}, {&(0x7f0000000180)="606f9ae44aebc3472f05b9e3ee55641e9f5b3655550ad801ebf976d415de9d02829554e9cf862100a313fb600d7ba0751c9db34fcba157af149159f442c10a5c5644906615ef70ef024a429681a078a9197ac89ed188780f013a712cc0997f87a5c8e2d3181f4d3f23ed77d2eb1e13738c769b18b4a6f89186856ba5eca56e", 0x7f, 0x20}, {&(0x7f0000000200)="4e356df29e7db980c4062a20659747890d78657bfa938edb440622a119e80e2fe1bc1ab9c9f423b43f1a1395a6543cea47098a2f1473870af51e", 0x3a, 0x5}, {&(0x7f0000000240)="2f70fa5692cbcc9c444755135af19b0bbae2a6045cdd26dcabc85280ca551b400d6fe0c13d0ab91808fd218a39cf3af87f9b6355013ed9b35395e5c72d622b7d48407b939c7bb6102cf8ea92f8df6b9e06d69c", 0x53, 0x4182}, {&(0x7f00000002c0)="a05d46f384e4dcc562b06cc6dd264c71d0df51536de6e9", 0x17, 0x1}])

14:01:02 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000100)=0x6)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r7 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r8 = dup2(r7, r6)
ioctl$BINDER_WRITE_READ(r8, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r8, 0xc034564b, &(0x7f0000000040)={0x9, 0x47314356, 0x1000, 0x33, 0x2, @stepwise={{0x1f, 0xb71b}, {0x5, 0x5}, {0x20}}})

14:01:02 executing program 5:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000200)={0x80, 0x0, 0x0, 0x0, 0x4}, 0xc2706221583c3268, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

14:01:02 executing program 3:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = msgget$private(0x0, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(r0, 0x0)

14:01:02 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, r0, 0x1, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)

14:01:02 executing program 3:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(r0, 0x0)

14:01:02 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
prctl$PR_GET_FPEMU(0x9, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

[  277.807287][T12355] binder: 12352:12355 ioctl c018620c 20000540 returned -22
[  277.815552][T12353] binder: 12351:12353 ioctl c018620c 20000540 returned -22
[  277.828118][T12356] binder: 12356:12356 ioctl c018620c 20000540 returned -22
[  277.837742][T12355] binder: 12352:12355 ioctl c034564b 20000040 returned -22
14:01:02 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5000000, {}, {}, @control}], 0x1c)
dup2(r0, r1)

[  277.989817][T12353] binder: 12351:12353 ioctl c018620c 20000540 returned -22
14:01:03 executing program 3:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(r0, 0x0)

14:01:03 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="020027bd7000fbdbdf250c0000002800028014000100e000000200000000000000080004002bff07000000000000000003000400000008000100020fbecf24f01cea61000000060007004e200000060007004e2100001400060030cb13c58806dce4ac35265c045d7296050008000b00000014000600ff0100000000000000c4a09379f93a27cb00"/154], 0xa0}, 0x1, 0x0, 0x0, 0x20004885}, 0x4)
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r5 = syz_open_dev$binderN(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r7 = dup2(r6, r5)
ioctl$BINDER_WRITE_READ(r7, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$PPPIOCSNPMODE(r7, 0x4008744b, &(0x7f0000000200)={0x281, 0x1})
r8 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r9 = dup2(r8, r4)
r10 = syz_open_dev$binderN(0x0, 0x0, 0x802)
r11 = dup2(r10, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r11, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$KDFONTOP_SET_DEF(r11, 0x4b72, &(0x7f0000000240)={0x2, 0x1, 0x8, 0x20, 0x19, &(0x7f0000000580)="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"})
ioctl$BINDER_WRITE_READ(r9, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

[  278.106987][T12374] binder: 12371:12374 ioctl c018620c 20000540 returned -22
[  278.125481][T12377] binder: 12377:12377 ioctl c018620c 20000540 returned -22
14:01:03 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, r0, 0x1, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)

14:01:03 executing program 3:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(r0, 0x0)

14:01:03 executing program 2:
r0 = openat$sequencer(0xffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80800, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000040)={0x574, 0x9, 0x8001, 0x1f})
syz_read_part_table(0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0x0, 0x10000}])

[  278.500818][T12394] binder: 12390:12394 ioctl c018620c 20000540 returned -22
14:01:03 executing program 3:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(0x0, 0x0)

14:01:03 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5000000, {}, {}, @control}], 0x1c)
dup2(r0, r1)

[  278.578873][T12397] binder: 12390:12397 ioctl c018620c 20000540 returned -22
[  278.595824][T12399] binder: 12399:12399 ioctl c018620c 20000540 returned -22
14:01:03 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, r0, 0x1, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)

[  278.626407][T12394] binder: 12390:12394 ioctl c018620c 20000540 returned -22
14:01:03 executing program 2:
syz_read_part_table(0x1f, 0x4, &(0x7f0000000380)=[{&(0x7f0000000000)="ee8a160038f37d4c6276e2a7691a8694bec1acff21a0175fc21388d792b2f39e633d6bc621b9caf750bbb9df48045044b03efc68a0aacc28cb7c4bcabace62ce8577d66d3b1bef93fe8abb2992955487747f958d2ef96a54925eac3db17ef30a4b15dced3b3185acbccdc2a2f856cdfb49c4ba3e905168610313d607e6f8a1b1e29574a6f71f03e0bec85d56d54af3ebbe3afba28a0d8e16f7dc6944d526eeda36053f8449581afb62b81bec9a2bf14d3ce09fc48edbc4b147be0b9f78f3d2b0ce1ace8ab0255729df11ee951a1aac202713fbea25c4", 0xd6, 0x5}, {&(0x7f0000000100)="741b423c80975706541e4630f6d4e934b3a8b51ae5b50f6e50f293db04792bad3a5730a070ed7f813e7ea5ca080bb00917e327e11fe9f8016af5ac3db0ee67d4b6fdaf1489e51f16b1c81e7fca878ab6b94f384f58986abb04c622e70dc7501cec6f8c58bf549cf2c7ee9bd81ebf2f15789e9fa462c252199c5f5202197d3a9773ad1ca2ee1bc9fea1160f91492735839db90f3bc30128c6930487e6d7109dd2d76ec56ea4ecff90be8857d189c783c99b950a576e1475dbc129", 0xba, 0x9}, {&(0x7f00000001c0)="6b3797035e6addca2c66b93f6ff6010947766cd010000f9f811cf2696b2a64811ac46c70b70e86ea83fa6272f83beda80a120834047faccfa615ce1ede3c687c9f16e1d11e6e16e7bae9d8bb023444cd7dbe564381aef66e1a5caa0c6406efeff8a9e9406dbb38c8eaf7ff70fb7ef3d8445a5fcdda1e52c541ca31afb75e7f03f28552edf25bd663aa727ca41b04a051cf813043699beb2284b22ffc28411dfbf5dcedf04f3dac466973f181e44daef76262417bd0a4", 0xb6, 0xef}, {&(0x7f0000000280)="334e8d2aba62fb4596e9c1c8e5c0e6541e076bdd4eed3d6a1600d8221921b9e7763c1c4da78a22e2908a5543a0b658a1221b1e036b0c8ca95ce753d31c5381522b691a812ddc4f91ca5528f5a3d2d3766a3ee0b72c918d63481fbec4657d2175f414938c49be4b32944c3eeab50c6381327d648826af485fef4c870d397adf348e59eda87cdafc9fb0b065dd2c74b4875c685d50dc73a87ca5feb2c642ffd75a33a7b4c395c7ca0711697c14c6f9fe31e13c35898905fb97fc7a31b50b0f7472c58813752e578a43aaef21db2044d1782c2419994ed7182021abd3f220e0d578bc930b02c89a6fef0a68b4a903e55cf5c5b00fc1a3ff", 0xf6, 0x9}])
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f00000003c0)={0xc, {0x7, 0x9, 0xc8b, 0x9}})

14:01:03 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
dup2(r1, r0)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
dup2(r3, r2)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$BINDER_WRITE_READ(r6, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$SG_GET_KEEP_ORPHAN(r6, 0x2288, &(0x7f0000000040))

14:01:03 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5000000, {}, {}, @control}], 0x1c)
dup2(r0, r1)

14:01:04 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, 0x0, 0x0)

[  279.080054][T12418] binder: 12416:12418 ioctl c018620c 20000540 returned -22
[  279.134193][T12425] binder: 12416:12425 ioctl c018620c 20000540 returned -22
[  279.168141][T12418] binder: 12416:12418 ioctl 2288 20000040 returned -22
14:01:04 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
r0 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x220400, 0x0)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = dup2(r2, r1)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

14:01:04 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5000000, {}, {}, @control}], 0x1c)
dup2(r0, r1)

14:01:04 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
epoll_pwait(r2, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x12, &(0x7f0000000040)={[0x8c87, 0x9]}, 0x8)
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))

14:01:04 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, 0x0, 0x0)

14:01:04 executing program 3:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(0x0, 0x0)

14:01:04 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
dup2(r0, r1)

14:01:04 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, 0x0, 0x0)

[  279.845949][T12449] binder: 12448:12449 ioctl c018620c 20000540 returned -22
14:01:05 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
dup2(r0, r1)

14:01:05 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)

14:01:05 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
dup2(r0, r1)

14:01:05 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)

[  280.621785][T12451] binder: 12448:12451 ioctl c018620c 20000540 returned -22
14:01:05 executing program 3:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(0x0, 0x0)

14:01:05 executing program 2:
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))
times(&(0x7f0000000000))

14:01:05 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
write$sndseq(r1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5000000, {}, {}, @control}], 0x1c)
dup2(r0, r1)

14:01:05 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x2)
r4 = dup2(r3, r0)
ioctl$BINDER_WRITE_READ(r4, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r6}}, 0x10)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r7 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r8 = dup2(r0, r7)
ioctl$BINDER_WRITE_READ(r8, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f00000001c0), r6, r8}}, 0x18)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={<r9=>0x0, 0x800}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000000c0)={r9, @in={{0x2, 0x4e23, @local}}, 0x6, 0xffffffff, 0x5, 0x800, 0x1}, &(0x7f0000000180)=0x98)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

14:01:06 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)

[  281.110998][T12482] binder: 12481:12482 ioctl c018620c 20000540 returned -22
[  281.168707][T12489] binder: 12481:12489 ioctl c018620c 20000540 returned -22
[  281.258651][T12482] binder: 12481:12482 ioctl c018620c 20000540 returned -22
14:01:06 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
write$sndseq(r1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5000000, {}, {}, @control}], 0x1c)
dup2(r0, r1)

14:01:06 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$BINDER_WRITE_READ(r6, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f00000000c0)={<r7=>0x0})
ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000140)={r7, 0x1})
r8 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0)
fcntl$getownex(r8, 0x10, &(0x7f0000000080))
syncfs(r8)

14:01:06 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
memfd_create(&(0x7f0000000040)='\x00', 0x5)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x800)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

[  281.481705][T12499] misc userio: Invalid payload size
[  281.498358][T12500] binder: 12500:12500 ioctl c018620c 20000540 returned -22
[  281.515350][T12499] binder: 12497:12499 ioctl c018620c 20000540 returned -22
14:01:06 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)

[  281.530484][T12500] binder: 12500:12500 ioctl c0086420 200000c0 returned -22
[  281.594921][T12502] misc userio: Invalid payload size
[  281.626545][T12502] binder: 12497:12502 ioctl c018620c 20000540 returned -22
[  281.658293][T12499] binder: 12497:12499 ioctl c0086420 200000c0 returned -22
[  281.666256][T12502] binder: 12497:12502 ioctl 4008642b 20000140 returned -22
14:01:06 executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x300}, 0x48)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f00000000c0)="b9ff030000ffffff7f9e14f005051fffffff00004000630677fbac141433e000000162079f4b4d2f87e5feca6aab840413f2325f1a390101050a0100010000000000df74e30d7eabe773afef6f6e4798ab117e9f84fa406b913de8ad827a022e1faee50887dc302819a8a3d0cde36b67f337ce8eee124e061f8fea8ab95f1e8f99c7edea980697449b78569ea293c3eed3b28fc3205db63b2c65e77f19ab28c632cc80d9f2f37f9ba67174fffcb5244b0c909eb8e12116bebc47cf97d2ea8acadfb34ca580b64df7c800113e53bae401cd22f50072deabf93dd4d3e626", 0x0, 0x100, 0x0, 0x296, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x28)

14:01:06 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r1 = dup(r0)
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$BINDER_WRITE_READ(r4, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r5 = accept4$rose(r4, 0x0, &(0x7f00000000c0), 0x0)
writev(r5, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)

14:01:06 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
write$sndseq(r1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5000000, {}, {}, @control}], 0x1c)
dup2(r0, r1)

14:01:06 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = dup2(0xffffffffffffffff, r1)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
write$dsp(r2, &(0x7f0000000080)="f6ad380009df2ba2b4276716df1ac9b1c3f5583f966d7782513d8ea49b648be6932146982f1b3f6df748500b4135b0a8d8328e4a87f1c1c4f88c1e678e663f9dd24f0fa6a976da92d07792aa0ffeaa788443c2481a45c2e2397eaeabebceecf3bc77c6d338cd0477fa8b82b84716d6031ff0e156a9cd136dda180810b1e2464952", 0x81)
ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000000040)={0x0, 0x2352, 0x7, 0x2, 0x401})
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r4 = dup2(r3, r0)
ioctl$BINDER_WRITE_READ(r4, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

14:01:07 executing program 2:
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000000)={0x200, 0x1, 0x171, 0x3, [], [], [], 0x18, 0x3, 0x7, 0xff, "a353a126da4d971cccd0fe06c55aab70"})
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))

14:01:07 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)

[  282.210973][T12521] binder: 12519:12521 ioctl c018620c 20000540 returned -22
[  282.228167][T12522] binder: 12518:12522 ioctl c018620c 20000540 returned -22
14:01:07 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)
vmsplice(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="df97cc44f7ed12905e6a45e07cadbfe19bb3b165a3ba7de8ee44fb076a54da3d5430028167e8db0d8230d2a3d788fca9a3bb878d973e654120eab6147c5610cd4a6cf9e8c37a73cd4bf90118d546661e56eef8ef417f90985212e7d7d7ece1d1e1054e448d68967bed76276c7242306c3998b07a7d9335ccf51b7bae58b61422597b468c496b9d9c004ad069e74e44be18bc0f20ede1de99a36f873e9548649b9e1bae3f6051917b324cd0f089ae0936545ee90fe3b3c5f507a6ee735adf74d0c41fb19ad7ee99e6caafc10b8affef9c4667bc87edd599d334a1cf8815f701a892dde8d1aa9175c6ec3a8636a0ce", 0xee}, {&(0x7f0000000040)="77e7c07afac1fef78f9f4d273d102587190bacc71601d491a4fd", 0x1a}], 0x2, 0xa)

14:01:07 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5000000, {}, {}, @control}], 0x1c)
dup2(r0, 0xffffffffffffffff)

14:01:07 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000002c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000})
ioctl$BINDER_WRITE_READ(r4, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r5=>0x0}, &(0x7f0000000080)=0xc)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000180)={{0x1, 0x3, 0x80000001, 0x6, '\x00', 0x4}, 0x0, 0x20000000, 0x9ff7, r5, 0x6, 0x3, 'syz0\x00', &(0x7f00000000c0)=['selfem1-t-ppp1eth1md5sum:}@system@vmnet0\\[eth0\x00', '/dev/binder#\x00', '}]md5sumkeyringposix_acl_access,\\)posix_acl_access\x00', '/dev/binder#\x00', '/dev/binder#\x00', '}){bdevcpuset\x00'], 0x97, [], [0x3, 0x7, 0x1, 0x6]})
r6 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r6, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

14:01:07 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)

14:01:07 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000040))

[  282.615715][T12537] misc userio: Invalid payload size
14:01:07 executing program 0:
clone(0x40800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)

[  283.180605][T12556] IPVS: ftp: loaded support on port[0] = 21
[  283.209369][T12558] misc userio: Invalid payload size
[  283.389207][T12564] IPVS: ftp: loaded support on port[0] = 21
[  283.488375][T12582] misc userio: Invalid payload size
14:01:08 executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x300}, 0x48)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f00000000c0)="b9ff030000ffffff7f9e14f005051fffffff00004000630677fbac141433e000000162079f4b4d2f87e5feca6aab840413f2325f1a390101050a0100010000000000df74e30d7eabe773afef6f6e4798ab117e9f84fa406b913de8ad827a022e1faee50887dc302819a8a3d0cde36b67f337ce8eee124e061f8fea8ab95f1e8f99c7edea980697449b78569ea293c3eed3b28fc3205db63b2c65e77f19ab28c632cc80d9f2f37f9ba67174fffcb5244b0c909eb8e12116bebc47cf97d2ea8acadfb34ca580b64df7c800113e53bae401cd22f50072deabf93dd4d3e626", 0x0, 0x100, 0x0, 0x296, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x28)

14:01:08 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5000000, {}, {}, @control}], 0x1c)
dup2(r0, 0xffffffffffffffff)

14:01:08 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, 0x0, 0x1, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)

14:01:08 executing program 2:
syz_read_part_table(0x0, 0x0, &(0x7f0000000140))

14:01:08 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x238003, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)

14:01:08 executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x300}, 0x48)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f00000000c0)="b9ff030000ffffff7f9e14f005051fffffff00004000630677fbac141433e000000162079f4b4d2f87e5feca6aab840413f2325f1a390101050a0100010000000000df74e30d7eabe773afef6f6e4798ab117e9f84fa406b913de8ad827a022e1faee50887dc302819a8a3d0cde36b67f337ce8eee124e061f8fea8ab95f1e8f99c7edea980697449b78569ea293c3eed3b28fc3205db63b2c65e77f19ab28c632cc80d9f2f37f9ba67174fffcb5244b0c909eb8e12116bebc47cf97d2ea8acadfb34ca580b64df7c800113e53bae401cd22f50072deabf93dd4d3e626", 0x0, 0x100, 0x0, 0x296, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x28)

14:01:08 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5000000, {}, {}, @control}], 0x1c)
dup2(r0, 0xffffffffffffffff)

14:01:08 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, 0x0, 0x1, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)

14:01:09 executing program 2:
lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x1)
syz_read_part_table(0x0, 0x0, &(0x7f0000000000))

14:01:09 executing program 0:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r3 = dup2(r2, r1)
r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$BINDER_WRITE_READ(r6, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
connect$rxrpc(r3, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x8000, 0x0, @rand_addr="090ebec2351089a2c58026f9bbefab90", 0x101}}, 0x24)

[  284.225258][T12631] misc userio: Invalid payload size
[  284.250709][T12633] binder: 12633:12633 ioctl c018620c 20000540 returned -22
14:01:09 executing program 5:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5000000, {}, {}, @control}], 0x1c)
dup2(0xffffffffffffffff, r0)

[  284.292289][T12636] misc userio: Invalid payload size
14:01:09 executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="b702000003f30000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe000000008500000020000000b7000000000000009500000000000000cacbf0b9c4b88449c3a926042512e17e46f7071a463143fb42c20e017feec42107f2e6ddbe1150296c6a6db4afa7c81b2636b1c5fbe24ec8831795562c5ea4eba37fd36b8f904497894ac91fd71c45c6718b16647287eaa4ecbbd060885934574ff45c74efb3bb80077d66d66951c47847e65318b0780f5baba8131b82e73da47c2bece4be7c6245059d5cc0229fe7d64a7f932a320674470c0f976b7b021f1c1e45ced7acc102e84d03aeef8f3f5b542714ae33145c66fb6ac21939ef0b8272734e31ffffb77f06d9ff5d959ec4d395ad553e44fc7f4bb2ede97d2c990000000000000063134758b240ef9d7b5df04d8b58f017229bd54d32308aa4a713543506ca2235e15325fadfcc3ee6e82a2522798e30d72cb32e54442f10c4f728a5a5a0e90300000000000000308dce3f9fda2b9102a39e8ed6"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x300}, 0x48)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f00000000c0)="b9ff030000ffffff7f9e14f005051fffffff00004000630677fbac141433e000000162079f4b4d2f87e5feca6aab840413f2325f1a390101050a0100010000000000df74e30d7eabe773afef6f6e4798ab117e9f84fa406b913de8ad827a022e1faee50887dc302819a8a3d0cde36b67f337ce8eee124e061f8fea8ab95f1e8f99c7edea980697449b78569ea293c3eed3b28fc3205db63b2c65e77f19ab28c632cc80d9f2f37f9ba67174fffcb5244b0c909eb8e12116bebc47cf97d2ea8acadfb34ca580b64df7c800113e53bae401cd22f50072deabf93dd4d3e626", 0x0, 0x100, 0x0, 0x296, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x28)

[  284.324009][T12631] binder: 12628:12631 ioctl c018620c 20000540 returned -22
[  284.333202][T12636] binder: 12628:12636 ioctl ae01 0 returned -22
[  284.349311][T12631] binder: 12628:12631 ioctl c018620c 20000540 returned -22
14:01:09 executing program 0:
r0 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
geteuid()
fcntl$getown(r1, 0x9)
r2 = gettid()
ptrace(0x2d720974386cac52, r2)
r3 = getpid()
ptrace(0x10, r3)
rt_tgsigqueueinfo(r0, r3, 0x3f, &(0x7f0000000040)={0x14, 0x3, 0x9a4})
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20402, 0x0)
writev(r4, &(0x7f0000000000)=[{&(0x7f0000000100)="ae", 0x1}], 0x1)
r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r7 = dup2(r6, r5)
ioctl$BINDER_WRITE_READ(r7, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$SNDCTL_DSP_GETOSPACE(r7, 0x8010500c, &(0x7f00000000c0))

14:01:09 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, 0x0, 0x1, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)

[  284.691950][T12651] misc userio: Invalid payload size
[  284.707505][T12652] binder: 12652:12652 ioctl c018620c 20000540 returned -22
14:01:09 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x300}, 0x48)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

14:01:09 executing program 2:
syz_read_part_table(0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="11574996ea7ec31bc01ad00145f44346ce759a23202f5d7dc216308d0e128a3ad898eedd2d15c7167bc46a98c2f80d62a72f93e178ecb3143556360b4a630d5e418e7c8681e5ed90972f07d25a780a95e7562cd66522f5527ced5591aa960bc230b85f6cdbd3ce96ec0bbd65e44212893f23efb59f554e544cd34fe0a71a57552b9e5faf6e9929fdea28652f2f45b9d71fea6475278f056d57b5c867a59ecb", 0x9f, 0x100}])
r0 = openat$mice(0xffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x20000)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r3 = dup2(r2, r1)
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000280)={0x28, 0x0, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b2000010000049d67b932043c2e20d691484ba3d34473b8b7d7f2ee4ec12c53dbf"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xf}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2e23}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x3, 0x4a0a}}}]}]}]}}]}, 0x60}}, 0x0)
sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80, 0x3}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7fff, 0x1}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x3c}}, 0x20004085)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r9 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000200), 0x800)
dup(r9)
ioctl$SIOCRSACCEPT(r3, 0x89e3)

14:01:09 executing program 5:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5000000, {}, {}, @control}], 0x1c)
dup2(0xffffffffffffffff, r0)

14:01:10 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, r1, 0x0, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)

[  285.141227][T12656] Dev loop2: unable to read RDB block 1
[  285.147159][T12656]  loop2: unable to read partition table
[  285.157468][T12656] loop2: partition table beyond EOD, truncated
[  285.163864][T12656] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
[  285.474019][T12673] misc userio: Invalid payload size
14:01:10 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x300}, 0x48)

14:01:10 executing program 5:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5000000, {}, {}, @control}], 0x1c)
dup2(0xffffffffffffffff, r0)

14:01:10 executing program 0:
syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000040)={0x0, 0x4})

[  285.599521][T12656] Dev loop2: unable to read RDB block 1
[  285.605326][T12656]  loop2: unable to read partition table
[  285.611577][T12656] loop2: partition table beyond EOD, truncated
[  285.617830][T12656] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
14:01:10 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, r1, 0x0, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)

14:01:11 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, r1, 0x0, 0x70bd29, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)

14:01:11 executing program 3:
bpf$PROG_LOAD(0x5, 0x0, 0x0)

14:01:11 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000200), 0xc2706221583c3268, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4004550c, &(0x7f0000000000))

14:01:11 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5000000, {}, {}, @control}], 0x1c)
dup2(r0, r1)

14:01:11 executing program 3:
bpf$PROG_LOAD(0x5, 0x0, 0x0)

14:01:11 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x68, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)

14:01:11 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5000000, {}, {}, @control}], 0x1c)
dup2(r0, r1)

14:01:11 executing program 3:
bpf$PROG_LOAD(0x5, 0x0, 0x0)

14:01:11 executing program 4:
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {0x4}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x0)

14:01:12 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5000000, {}, {}, @control}], 0x1c)
dup2(r0, r1)

14:01:12 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x300}, 0x48)

14:01:12 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r1 = inotify_init1(0x0)
dup2(r0, r1)

14:01:12 executing program 2:
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00')
sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x40, r4, 0x1, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}]}, 0x40}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b2000010000049d67b932043c2e20d691484ba3d34473b8b7d7f2ee4ec12c53dbf"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0xffe0}, {0xf}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x30}}]}, 0x60}}, 0x0)
sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x64, r4, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r9}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x20058041}, 0x20004880)

14:01:12 executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x2f)
r0 = socket$inet6(0xa, 0x100000003, 0x3a)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)

[  287.411293][T12726] binder: 12720:12726 ioctl c018620c 20000540 returned -22
14:01:12 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5000000, {}, {}, @control}], 0x1c)
dup2(r0, r1)

14:01:12 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x300}, 0x48)

14:01:12 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
dup(0xffffffffffffffff)
write(r0, &(0x7f00000000c0)="240000001e005b0214ffffffffffff00"/36, 0x24)

14:01:13 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5000000, {}, {}, @control}], 0x1c)
dup2(r0, r1)

14:01:13 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x300}, 0x48)

[  288.324873][T12749] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  288.426926][T12754] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
14:01:13 executing program 2:
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f00000000c0)={0xa701, 0x1ff, 0x7, 0x600})
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a45320, &(0x7f0000000000)={{0x6, 0xd9}, 'port0\x00', 0x2, 0x585db20c4d15d594, 0xc9f8, 0x1, 0x4, 0x48, 0x7, 0x0, 0x1, 0x8})

14:01:13 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]})

14:01:13 executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x2f)
r0 = socket$inet6(0xa, 0x100000003, 0x3a)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c)

14:01:13 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5000000, {}, {}, @control}], 0x1c)
dup2(r0, r1)

14:01:13 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)

[  288.850482][T12762] binder: 12758:12762 ioctl c018620c 20000540 returned -22
[  288.908717][T12765] binder: 12758:12765 ioctl 4040ae70 200000c0 returned -22
[  288.948246][T12762] binder: 12758:12762 ioctl c018620c 20000540 returned -22
[  288.994262][T12765] binder: 12758:12765 ioctl c0a45320 20000000 returned -22
14:01:14 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5000000, {}, {}, @control}], 0x1c)
dup2(r0, r1)

14:01:14 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x6609, &(0x7f00000001c0))

14:01:14 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x804)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0106434, &(0x7f0000000000)={0x2, <r6=>0x0, 0x1, 0x3})
ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0086438, &(0x7f0000000080)={0x1, r6})
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

14:01:14 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)

14:01:14 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000000)='$\x00', 0x4)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6})

[  289.651298][T12785] binder: 12758:12785 ioctl c018620c 20000540 returned -22
14:01:14 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5000000, {}, {}, @control}], 0x1c)
dup2(r0, r1)

[  289.698132][T12765] binder: 12758:12765 ioctl 4040ae70 200000c0 returned -22
14:01:14 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
syz_open_dev$binderN(0x0, 0x0, 0x2)
r1 = dup2(r0, r0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000280)="f30f0866b8f5ffffff0f23c80f21f866350c00a0000f23f80f32f2a714f001fc29fc2938298a0d000f01df0f73f38a0f8fc579790000", 0x36}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000000)={[0x0, 0x100000]})
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x67, 0x0, 0xfffffffffffffffd, 0x0, 0x8]})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
accept4$rose(r0, &(0x7f00000000c0)=@short={0xb, @dev, @default}, &(0x7f0000000080)=0x1c, 0x80c00)
syz_open_dev$char_usb(0xc, 0xb4, 0x3)
ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r4}, 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000180)={r4, 0x8}, 0x8)

14:01:15 executing program 2:
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))
openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x2, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0x80045530, &(0x7f00000000c0)=""/121)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
write$eventfd(r2, &(0x7f0000000080)=0x7bc, 0x8)

14:01:15 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
ioctl$FIONREAD(r1, 0x80045440, &(0x7f0000000080))

14:01:15 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)

14:01:15 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5000000, {}, {}, @control}], 0x1c)
dup2(r0, r1)

[  290.097958][T12796] binder: 12793:12796 ioctl c018620c 20000540 returned -22
14:01:15 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$BINDER_WRITE_READ(r4, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$VFIO_SET_IOMMU(r4, 0x3b66, 0x8)
r5 = dup2(r1, r0)
r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r6, 0x40046205, &(0x7f0000000040)=0x7f)
r7 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r8 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r9 = dup2(r8, r7)
ioctl$BINDER_WRITE_READ(r9, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$VIDIOC_EXPBUF(r9, 0xc0405610, &(0x7f00000000c0)={0x7, 0x400, 0x5, 0xc00, r9})
r10 = syz_open_dev$binderN(0x0, 0x0, 0x0)
dup2(r10, r6)
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x800)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

[  290.138829][T12797] binder: 12797:12797 ioctl c018620c 20000540 returned -22
14:01:15 executing program 0:
open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0)
clone(0x10008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f0000000180)=',\"ntext')

[  290.335215][T12811] binder: 12804:12811 ioctl c018620c 20000540 returned -22
14:01:15 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x0, &(0x7f00000005c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)

14:01:15 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
unshare(0x20600)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)

[  290.396428][T12812] binder: 12804:12812 ioctl 80045530 200000c0 returned -22
[  290.427434][T12811] binder: 12804:12811 ioctl c018620c 20000540 returned -22
14:01:15 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5000000, {}, {}, @control}], 0x1c)
dup2(r0, r1)

[  290.492000][T12815] binder: 12813:12815 ioctl c018620c 20000540 returned -22
[  290.532230][T12817] proc: Unknown parameter '"ntext'
[  290.537945][T12815] binder: 12813:12815 ioctl 3b66 8 returned -22
[  290.557324][T12819] proc: Unknown parameter '"ntext'
14:01:15 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x20)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @dev}})

[  290.582534][T12815] binder: 12813:12815 ioctl c018620c 20000540 returned -22
[  290.645013][T12822] binder: 12813:12822 ioctl c0405610 200000c0 returned -22
[  290.675197][T12815] binder: 12813:12815 ioctl c018620c 20000540 returned -22
[  290.732339][T12815] binder: 12813:12815 ioctl 3b66 8 returned -22
14:01:15 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x0, &(0x7f00000005c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)

14:01:16 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
fsopen(&(0x7f0000000040)='ufs\x00', 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

[  291.149088][T12840] binder: 12804:12840 ioctl c018620c 20000540 returned -22
[  291.189363][T12812] binder: 12804:12812 ioctl 80045530 200000c0 returned -22
[  291.200010][T12840] binder: 12804:12840 ioctl c018620c 20000540 returned -22
[  291.270710][T12845] binder: 12845:12845 ioctl c018620c 20000540 returned -22
14:01:16 executing program 2:
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000000)={0x400, 0x2})
socket$nl_netfilter(0x10, 0x3, 0xc)

14:01:16 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5000000, {}, {}, @control}], 0x1c)
dup2(r0, r1)

14:01:16 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
unshare(0x20600)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)

14:01:16 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r4, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r7 = dup2(r6, r5)
ioctl$BINDER_WRITE_READ(r7, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r8 = openat$full(0xffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={r4, r7, 0x10, 0x6, r8}, 0x14)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
openat$urandom(0xffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x400000, 0x0)
setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f00000000c0)={0xfffffff9, 0x0, 0xfffffff8, 0x32}, 0x10)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

[  291.358659][T12845] binder: 12845:12845 ioctl c018620c 20000540 returned -22
14:01:16 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x0, &(0x7f00000005c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)

14:01:16 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5000000, {}, {}, @control}], 0x1c)
dup2(r0, r1)

[  291.689706][T12869] binder: 12866:12869 ioctl c018620c 20000540 returned -22
[  291.757918][T12871] binder: 12866:12871 ioctl 4010aeab 20000000 returned -22
14:01:17 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ftruncate(r0, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000240))

14:01:17 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$BINDER_WRITE_READ(r4, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$PPPIOCGIDLE(r4, 0x8008743f, &(0x7f0000000040))
r5 = openat$snapshot(0xffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x100, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/wireless\x00')
preadv(r6, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/160, 0xa0}], 0x1, 0xbc)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x29}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fb010000", @ANYRES16=r7, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0xc4091}, 0x408c0)
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r7, 0x200, 0x70bd25, 0x25dfdbff}, 0x14}}, 0x1)
r8 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r8, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

14:01:17 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$MON_IOCX_GETX(r0, 0xc0109207, 0x0)

14:01:17 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)

14:01:17 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0)
write$sndseq(r1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5000000, {}, {}, @control}], 0x1c)
dup2(r0, r1)

[  292.275125][T12883] binder: 12880:12883 ioctl c018620c 20000540 returned -22
14:01:17 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ftruncate(r0, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000240))

[  292.516141][T12896] binder: 12866:12896 ioctl c018620c 20000540 returned -22
[  292.550704][T12871] binder: 12866:12871 ioctl 4010aeab 20000000 returned -22
14:01:17 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = getpid()
ptrace(0x10, r2)
wait4(r2, &(0x7f0000000100), 0x20000000, &(0x7f0000000080))
r3 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

14:01:17 executing program 0:
open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0)
clone(0x10008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f0000000180)=',nntext')

14:01:17 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)

14:01:17 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0)
write$sndseq(r1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5000000, {}, {}, @control}], 0x1c)
dup2(r0, r1)

14:01:17 executing program 0:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
write$binfmt_aout(r0, 0x0, 0x2)

14:01:17 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ftruncate(r0, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000240))

[  292.864884][T12904] binder: 12901:12904 ioctl c018620c 20000540 returned -22
[  292.890860][T12907] proc: Unknown parameter 'nntext'
[  292.908049][T12909] proc: Unknown parameter 'nntext'
14:01:17 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)

14:01:18 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0)
write$sndseq(r1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5000000, {}, {}, @control}], 0x1c)
dup2(r0, r1)

14:01:18 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000280)=0x6)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b63000e106308400000000000000000"], 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, r3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b0f2eaad", @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000000000000b000000004c00180000000062726f6164636173742d6c696e6b00"/98], 0x68}}, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r6, 0x202, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x80000000, 0x40, 0xfb, 0x24fe}}}, ["", "", ""]}, 0x30}}, 0xc0c0)
r7 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r8 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r9 = dup2(r8, r7)
ioctl$BINDER_WRITE_READ(r9, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$SIOCAX25GETINFO(r4, 0x89ed, &(0x7f0000000200))
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r9, 0x80045530, &(0x7f0000000180)=""/114)

14:01:18 executing program 2:
r0 = semget$private(0x0, 0x3, 0x0)
shmctl$SHM_STAT(r0, 0xd, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x0)
syz_read_part_table(0x3, 0xa, &(0x7f0000000580)=[{&(0x7f0000000000)="457f5c37764a35", 0x7, 0x6}, {&(0x7f0000000040)="bc33aaa50ac33db1ea17c127ba38829ec2fa5b696a57b41f008449a77e492bdc66cc98965a69680c1ea9efafd4fea6301800254d8b5dd9598ff6e9d5eb", 0x3d, 0x100}, {&(0x7f00000000c0)="edac11dcce7cd41c5d03000049da", 0xe, 0x7}, {&(0x7f0000000600)="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", 0x19c, 0x7f}, {&(0x7f00000001c0)="f7132be1afefaf853f770157731c2b2eaf94ccb993eda19a2d084f75555ca4b420aee137cb19245452a5021402d3ede2408d5905afe7eb912f4c293cf814d7e5c8ed9e3da8b5a205888a110e9ad44b9e826d1056c3efd285bce66d85039fc03354afd4dd0fbd1f2605e972bbbe177982e717852c59dd3b7801ffeaefb140c5d0e22b4bfbe995c6b5d3442ec1acdafaeb19742ef48689be4a11a965ccad7451f8fe92000ff1ba5c11736dca6576a4ae999e7a4bb2876017eac0b0c3d522352aaf9515797f30b8cc4fc572df3ed03e8a8e32ea8cfb1ed0c94e4c34009f33876f3e", 0xe0, 0x8}, {&(0x7f00000002c0)="f54707ef2c3fdedcd0abd3c8d24c74766099f016fb87c771fdf9a73f705db688a373e91bfc400e8a0bbadbc66399cf13990c9f1f768a073f33732ff1042fdd22e177a16942daa218d75fc5b9a4757d033c167a603a97a095e73daaf8b1ba43386fdad6cb7367d47aa47e5f4807a6b5d34cf45e76d30d7a", 0x77, 0x8}, {&(0x7f0000000340)="797d1f6f7efffb8a5b66a1bf31997b6f19fe39ce500ed73f89355faa7b80941906ef17477dd3079da3ab371abc3ab64c7091b9732161759cce96263f0ac1dd1b5fe4bbb9cebe6280c699206f2b786231996863a8909f7adaa87eb4ccee615b511fe758b5ba0f0a", 0x67, 0x9}, {&(0x7f00000003c0)="bc15342a098fba2b9b904cbe6ce644f1667ba67c1de7b1951d9523ce47cf329efc3b783681e5512baaf8390a5161ceadfaba25b57d0d658d195ed03430f6c1a2079a2b15e7c6b517ffa940ecd914dd3edfcb7fc8eafaf17cdb45166ef069067d3730c368ead5bc5459c53961e5a30209e540ff8a3c72ecb035c3d1d0d5dc661133bfe486d3e200af1e9c05b571b7a940f7f7553a12c3f5b5eaf038a8685c", 0x9e, 0x6f}, {&(0x7f0000000480)="f454582e10864fa1696594946d51dfd06511aa2c6c75ed04802f7b05971e6471b9cc1b75887324b8fae36cef751a43842ffb49e76c18944f6084ccede4a1a22753c20141f9eecf4309882050bf6d4c1b4b5d91542a66cc511bbb398d98e8589faac14b2ae8de3f5eaa8851dbeafd4ebe7bd7768a37d7e0153978f03af18ec74c7e4391e61bcdd9d04190b7988aa9eeafb7a24fa7d3a9ccac81345bd110762ed13aaf4e897fca466f41d2bf677adb59a6f4e73e34ce1ec3a1d85daf95cd15", 0xbe, 0x7}, {&(0x7f0000000100)="14886c9ba8b8b0f1c5e99438a20a0db96cd55659b75f232c88e737fc35ceca7d1bd66fe94887f9bdfefcf02c2710704d7e0dd9c60bee47b2e3", 0x39, 0x2}])

14:01:18 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x1a, &(0x7f00000005c0)=ANY=[@ANYBLOB="b702000003f30000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe000000008500000020000000b7000000000000009500000000000000cacbf0b9c4b88449c3a926042512e17e46f7071a463143fb42c20e017feec42107f2e6ddbe1150296c6a6db4afa7c81b2636b1c5fbe24ec8831795562c5ea4eba37fd36b8f904497894ac91fd71c45c6718b16647287eaa4ecbbd060885934574ff45c74"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)

14:01:18 executing program 0:
io_setup(0xd, &(0x7f0000000100)=<r0=>0x0)
io_submit(r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
io_submit(r0, 0x3, &(0x7f0000000500)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, r1}, 0x0, 0x0])

14:01:18 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ftruncate(r0, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000240))

[  293.447064][T12931] binder: 12924:12931 ioctl c018620c 20000540 returned -22
[  293.475780][T12931] binder: 12924:12931 ioctl 80045530 20000180 returned -22
[  293.489701][T12930] Dev loop2: unable to read RDB block 1
14:01:18 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5000000, {}, {}, @control}], 0x1c)
dup2(r0, r1)

[  293.495511][T12930]  loop2: unable to read partition table
[  293.502283][T12930] loop2: partition table beyond EOD, truncated
[  293.508848][T12930] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
14:01:18 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x1a, &(0x7f00000005c0)=ANY=[@ANYBLOB="b702000003f30000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe000000008500000020000000b7000000000000009500000000000000cacbf0b9c4b88449c3a926042512e17e46f7071a463143fb42c20e017feec42107f2e6ddbe1150296c6a6db4afa7c81b2636b1c5fbe24ec8831795562c5ea4eba37fd36b8f904497894ac91fd71c45c6718b16647287eaa4ecbbd060885934574ff45c74"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)

14:01:18 executing program 2:
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000000)={0x3, r5})

14:01:18 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5000000, {}, {}, @control}], 0x1c)
dup2(r0, r1)

14:01:18 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ftruncate(r0, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000240))

14:01:18 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0)
wait4(r1, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

[  294.088065][T12956] binder: 12949:12956 ioctl c018620c 20000540 returned -22
14:01:19 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x1a, &(0x7f00000005c0)=ANY=[@ANYBLOB="b702000003f30000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe000000008500000020000000b7000000000000009500000000000000cacbf0b9c4b88449c3a926042512e17e46f7071a463143fb42c20e017feec42107f2e6ddbe1150296c6a6db4afa7c81b2636b1c5fbe24ec8831795562c5ea4eba37fd36b8f904497894ac91fd71c45c6718b16647287eaa4ecbbd060885934574ff45c74"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)

[  294.132807][T12956] binder: 12949:12956 ioctl c018620c 20000540 returned -22
[  294.183765][T12962] binder: 12949:12962 ioctl 4008af21 20000000 returned -22
[  294.271654][T12931] binder: 12924:12931 ioctl c018620c 20000540 returned -22
14:01:19 executing program 1:
clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})

14:01:19 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={<r0=>0xffffffffffffffff})
close(r0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x18)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x80, 0x4)
r2 = socket(0x100000000011, 0x2, 0x0)
bind(r2, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, <r3=>0x0}, &(0x7f00000002c0)=0xfeeb)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4)
bind$xdp(r1, &(0x7f0000000900)={0x2c, 0x0, r3}, 0x10)
sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

14:01:19 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5000000, {}, {}, @control}], 0x1c)
dup2(r0, r1)

14:01:19 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ftruncate(r0, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000240))

14:01:19 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x27, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)

14:01:19 executing program 1:
chdir(0x0)
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca)
removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'osx.', '\x00'})

14:01:19 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ftruncate(r0, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000240))

[  294.886952][T12980] binder: 12949:12980 ioctl c018620c 20000540 returned -22
14:01:20 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, 0x0, 0x0)
dup2(r0, r1)

14:01:20 executing program 0:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xa2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x1, 0x803, 0x0)
recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

14:01:20 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x27, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)

14:01:20 executing program 2:
syz_read_part_table(0x0, 0x4, &(0x7f00000002c0)=[{&(0x7f0000000300)="54bd563b962bbb83d70e1b426d855c6d2b9519ceab80262c4b8367d6a60afb394682fc7aec9c5946b6ea999ee1129c09957e7259b31fe2d1a1ddc6c03c91c53034c4971c43dcc6ee1359ffaea8fb5861bdb257bdd335489b8c3ede11687ad3f9dc7b78393c9c418c1aac3716c7dc2667397b5dee4b2869fc90ecd3972b827a43e86ea2aeba0c92f9d62a94b0e500bfe5b51ef918edd858c0ccdf53a136e7544d0a87157c1aee3fd798c70627665325c26b84d8eaaedcaa332e013e4eb1f65b12a79c92857202fe74b1b083f0a52ab08d5a964d792010d703c705f80f8536e2be6c1c4d06ec3993516c2e1de56ac2f93c38ca3c35864f05369a938bdceb5a07c2a14740f91a27b4c7613374a1a6972ad9a03ed90ab127c2edf36b", 0x11a, 0x9}, {&(0x7f0000000040)="eea27b9e1ca9092a54450cc519d0a644a18db6c66c64f140f13bc20d95394677dfc8a8de70adf1457c8fe4b8db74091d2fed553d6ce68bb3230a9ff12009ea035c883437ac5b45b2bf02c3ca2729ba44022fa3a5217233dac577a2e7ffed3c5e24bdb050b6534df58f31bc139362cff678e769c06f0b6b2ff48c2e921465e4cfd82625dfc5f05b9960946f9bca201140eda03beaf9b63bae42910c825980bc5d624488d436cfab6410329d761284b5de42d9f16d5044f18f297386f2fe945e871b986dc734515d1c1ac5e49311f37a514875513dfc6765a55795725064875a749d6c4162", 0xe4, 0x4}, {&(0x7f0000000140)="e302eab0440304440d0974dcacb19b2a84728492dfe2df8f1e0051d86fdff1d51e08050a553961c886868b58e89d7cd799e016f43756e9923d1b7aef0b18b1c5e413fd53d1803f", 0x47, 0x4}, {&(0x7f00000001c0)="dc358f57f552a8de5359ccb610491e374ca64187955545f30391100268a4901dcf9615597a43286832ab89e717ce911d450bfda1dd6d41de370b6dfcfa5a09e34e4cf14908937e2f9a7ec751f71023624d2ea80c57b51f685ad816bc4cb5aeecb8c87c6f6b8b2bf3a758aedcfd3d4f63111097f9839aaf6cfd4f98eb9dc23a71095108f302c450607bc57ae3d6420d64f9c7857537e97b2260342acc1b66ccc3d9d68586eaecff03ee11faec14ab615f8c0fe4186c68f82e8a0d791c31e7c83c37ac664d2f6aad24a740e73a75752e", 0xcf}])
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, r4, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x7f, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0xc015}, 0x40)

14:01:20 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ftruncate(r0, 0x40)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, &(0x7f0000000240))

14:01:20 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, 0x0, 0x0)
dup2(r0, r1)

14:01:20 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x27, &(0x7f00000005c0)=ANY=[@ANYBLOB="b702000003f30000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe000000008500000020000000b7000000000000009500000000000000cacbf0b9c4b88449c3a926042512e17e46f7071a463143fb42c20e017feec42107f2e6ddbe1150296c6a6db4afa7c81b2636b1c5fbe24ec8831795562c5ea4eba37fd36b8f904497894ac91fd71c45c6718b16647287eaa4ecbbd060885934574ff45c74efb3bb80077d66d66951c47847e65318b0780f5baba8131b82e73da47c2bece4be7c6245059d5cc0229fe7d64a7f932a320674470c0f976b7b021f1c1e45ced7acc102e84d03aeef8f3f5b542714ae33145c66fb6ac21939ef0b8272734e31ffffb77f06d9ff5d959ec4"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)

[  295.467210][T13002] binder: 12996:13002 ioctl c018620c 20000540 returned -22
14:01:20 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0xa, 0x80000007}, {0x1, 0x0, 0x0, 0xffff}]})

[  295.603236][T13009] binder: 12996:13009 ioctl c018620c 20000540 returned -22
14:01:20 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, 0x0, 0x0)
dup2(r0, r1)

14:01:20 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ftruncate(r0, 0x40)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, &(0x7f0000000240))

14:01:21 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0xa, 0x80000001}, {0x1, 0x0, 0x0, 0xffff, 0x8}]})

14:01:21 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x2e, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)

14:01:21 executing program 0:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="f6", 0x1, 0xfffffffffffffffb)
keyctl$unlink(0x9, r0, 0xfffffffffffffffb)

14:01:21 executing program 2:
syz_read_part_table(0x1, 0x6, &(0x7f0000000380)=[{&(0x7f0000000000)="50249b4948e77ed18309845cdc240d9a61013d8aa8f131376fe353aaba8ff00ad178e01ba0740ecdd69616097e54fbfa3844c718f639", 0x36, 0x3}, {&(0x7f0000000040)="bc0abcb6ff24cae3410d514b40faf55f563b141e9cf335180ca06d6fc10d3cd6f9aa2a4fb278ba0e6b5d5383347346dfbd7f015653945e98d5020b70d018b00f3819f060c79d58cf", 0x48, 0x18}, {&(0x7f00000000c0)="f642bb6d37df9f6279f8cc77e0dd4023c94440cd188a2b5c372103cdc8b1af895f7d6e18680c8aae3517ee0bb69b7dda8dfff918c60141dab8cce8b02e4de184435867e902f4df8348014ef2ae2850fa25610f5698195c97409d5b661a8b3c60eeb70228d05e9a8214a6f4a122ad771ad584ad0ac6a40afaf08bc2d3e4937053fcc3e34aabef978b238e5d895860d6dcddcf4df45ffc400b98519fec43a006a835e074a4d32fed4450e3328efe2a4affefa66204222dd39f478832df2d13bd21d900cd34d9a3a8ab040ff69879324a4d8533d93c4170d2cd5fb8b593a4423e8d96", 0xe1, 0x3}, {&(0x7f00000001c0)="1d9f7a8121b739e5cb1a99c42d7f9bf2d7abfd9adbff8cb178f8d4ee7c6da9fa33e843d87c55528084eb7c74abb1549a653d9db6cd3164c1f782ce3d314b688f046600f9b2e584152d21e72cd04acd5972bd3a5394cdfb82a290b56bf755963e6d34bd97e9d11ce859fee625a1d59173fd298b8f3716af", 0x77, 0x1}, {&(0x7f0000000240)="a59721d5b00d297bf4d24da06c35089f4812e1d2b35f499faae8eb998bece8d2e4909bd1104aed93b2ed730a76c30eebbb8f092eeb605703cf1247821542c125ea352b32530d13", 0x47, 0xef}, {&(0x7f00000002c0)="f320cdd959018957e1bf164abdc7b94f9eda2df36ff0a8ba7d96582a25687e228a267c87187bf5565658e7e73417c6ea610305cf9c083e5fd12e9768a5200a08961844f336908a9f0c34e0045e61dd24b9ae18db41e36e23bc976d2ef8f8b85fafb64b7e293ecedcab8d95a28870aac4bdf408d5ffaaf2a42a0eec473447f740b6c5e3879a743f92a3031783757b8a", 0x8f}])
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b2000010000049d67b932043c2e20d691484ba3d34473b8b7d7f2ee4ec12c53dbf"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xf}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2e23}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x3, 0x4a0a}}}]}]}]}}]}, 0x60}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b2000010000049d67b932043c2e20d691484ba3d34473b8b7d7f2ee4ec12c53dbf"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xf}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2e23}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x3, 0x4a0a}}}]}]}]}}]}, 0x60}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002780)={0x5f0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x4812}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x94, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0xed3, 0x2, 0x5, 0x2}, {0x6ddf, 0x3, 0x3, 0x4}, {0x2, 0x45, 0x5, 0x2}, {0x0, 0x8, 0xff, 0x8}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x902a}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x5, 0xe1, 0x40, 0x2}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x74}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xfffffffa}}}]}}]}, 0x5f0}}, 0x4000000)
signalfd(r0, &(0x7f0000000400)={[0x4, 0x3]}, 0x8)

14:01:21 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000001c0), 0x0)
dup2(r0, r1)

14:01:21 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ftruncate(r0, 0x40)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, &(0x7f0000000240))

14:01:21 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x2e, &(0x7f00000005c0)=ANY=[@ANYBLOB="b702000003f30000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe000000008500000020000000b7000000000000009500000000000000cacbf0b9c4b88449c3a926042512e17e46f7071a463143fb42c20e017feec42107f2e6ddbe1150296c6a6db4afa7c81b2636b1c5fbe24ec8831795562c5ea4eba37fd36b8f904497894ac91fd71c45c6718b16647287eaa4ecbbd060885934574ff45c74efb3bb80077d66d66951c47847e65318b0780f5baba8131b82e73da47c2bece4be7c6245059d5cc0229fe7d64a7f932a320674470c0f976b7b021f1c1e45ced7acc102e84d03aeef8f3f5b542714ae33145c66fb6ac21939ef0b8272734e31ffffb77f06d9ff5d959ec4d395ad553e44fc7f4bb2ede97d2c990000000000000063134758b240ef9d7b5df04d8b58f017229bd54d32308aa4a713543506ca22"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)

14:01:21 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000001c0), 0x0)
dup2(r0, r1)

14:01:21 executing program 2:
syz_read_part_table(0x7, 0x2, &(0x7f0000000080)=[{&(0x7f0000000000)="14a9eedf6abb4a78dc5cc866ab021d5666cbe55e579baf", 0x17, 0x4}, {&(0x7f0000000040)="8e0861ba5ca28526b52ea9510ea067cdc4a26cb942df29c71af2e044", 0x1c, 0x1}])

14:01:21 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = gettid()
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f00000001c0)={0x5})
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
openat$cuse(0xffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0)
r2 = open(&(0x7f0000000300)='.\x00', 0x103400, 0x0)
uselib(&(0x7f0000000040)='./file0\x00')
symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r2, &(0x7f0000000180)='./file0/file0\x00')
renameat2(r2, &(0x7f0000000100)='./file0/file0\x00', r2, &(0x7f0000000000)='./file0\x00', 0x0)
readlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000480)=""/15, 0xf)
open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000004c0)={'ip6gretap0\x00', &(0x7f0000000540)=@ethtool_dump={0x40, 0x7, 0x5, 0x2e, "a5a3ff644853ab2b82f3bca1adf6a7233441ff22a4a00b05357a16b3c96fe4c2bc7fc78388b2e037c7375ee158e4"}})
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0)
write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[@ANYBLOB="ac0a700516473370bf3c14ee8b09cc3a2db9044a84d85a94bd9f4a32f2d7a4d178be119569e2b666911c64871f4a19bde1efefdfde67b007050740e858533f0af06440b21ec939d3394a0000000000000073dcbf5508dbca78ca410bc79c2066b688d807641eb98351af9d9ff540612df18fb27572b3519ead", @ANYRES16=0x0, @ANYBLOB], 0x3}}, 0x0)

14:01:21 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0xa, 0x80000001}, {0x1, 0x0, 0x0, 0xffff, 0x8}]})

14:01:21 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000240))

14:01:21 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000001c0), 0x0)
dup2(r0, r1)

14:01:22 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x2e, &(0x7f00000005c0)=ANY=[@ANYBLOB="b702000003f30000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe000000008500000020000000b7000000000000009500000000000000cacbf0b9c4b88449c3a926042512e17e46f7071a463143fb42c20e017feec42107f2e6ddbe1150296c6a6db4afa7c81b2636b1c5fbe24ec8831795562c5ea4eba37fd36b8f904497894ac91fd71c45c6718b16647287eaa4ecbbd060885934574ff45c74efb3bb80077d66d66951c47847e65318b0780f5baba8131b82e73da47c2bece4be7c6245059d5cc0229fe7d64a7f932a320674470c0f976b7b021f1c1e45ced7acc102e84d03aeef8f3f5b542714ae33145c66fb6ac21939ef0b8272734e31ffffb77f06d9ff5d959ec4d395ad553e44fc7f4bb2ede97d2c990000000000000063134758b240ef9d7b5df04d8b58f017229bd54d32308aa4a713543506ca22"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)

14:01:22 executing program 2:
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0185647, &(0x7f0000000040)={0xa10000, 0x4, 0x5, <r3=>0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x990a68, 0x1, [], @value64=0x9}})
setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4)

14:01:22 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000240))

14:01:22 executing program 0:
fanotify_init(0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00')
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
sendfile(r1, r0, 0x0, 0x209)

14:01:22 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0xa, 0x80000001}, {0x1, 0x0, 0x0, 0xffff, 0x8}]})

14:01:22 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0x1c)
dup2(r0, r1)

14:01:22 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x31, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)

[  297.733942][T13116] binder: 13104:13116 ioctl c018620c 20000540 returned -22
[  297.785968][T13119] binder: 13104:13119 ioctl c0185647 20000040 returned -22
14:01:22 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0xa, 0x80000001}, {0x1, 0x0, 0x0, 0xffff, 0x8}]})

14:01:22 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x31, &(0x7f00000005c0)=ANY=[@ANYBLOB="b702000003f30000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe000000008500000020000000b7000000000000009500000000000000cacbf0b9c4b88449c3a926042512e17e46f7071a463143fb42c20e017feec42107f2e6ddbe1150296c6a6db4afa7c81b2636b1c5fbe24ec8831795562c5ea4eba37fd36b8f904497894ac91fd71c45c6718b16647287eaa4ecbbd060885934574ff45c74efb3bb80077d66d66951c47847e65318b0780f5baba8131b82e73da47c2bece4be7c6245059d5cc0229fe7d64a7f932a320674470c0f976b7b021f1c1e45ced7acc102e84d03aeef8f3f5b542714ae33145c66fb6ac21939ef0b8272734e31ffffb77f06d9ff5d959ec4d395ad553e44fc7f4bb2ede97d2c990000000000000063134758b240ef9d7b5df04d8b58f017229bd54d32308aa4a713543506ca2235e15325fadfcc3ee6e82a2522798e30d72cb32e54442f10c4f7"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)

14:01:22 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000240))

14:01:23 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0x1c)
dup2(r0, r1)

14:01:23 executing program 0:

14:01:23 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x31, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)

[  298.507898][T13139] binder: 13104:13139 ioctl c018620c 20000540 returned -22
[  298.552746][T13119] binder: 13104:13119 ioctl c0185647 20000040 returned -22
14:01:23 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0xa, 0x80000001}, {0x1, 0x0, 0x0, 0xffff, 0x8}]})

14:01:23 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ftruncate(r0, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000240))

14:01:23 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0x1c)
dup2(r0, r1)

14:01:23 executing program 0:

14:01:23 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x33, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)

14:01:23 executing program 2:
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES16, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRES64=r0, @ANYRESDEC=r2, @ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32]], 0x8}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xf}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2e23}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x3, 0x4a0a}}}]}]}]}}]}, 0x60}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b2000010000049d67b932043c2e20d691484ba3d34473b8b7d7f2ee4ec12c53dbf"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xf}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2e23}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x3, 0x4a0a}}}]}]}]}}]}, 0x60}}, 0x0)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x14020}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x214, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0x1f8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8}}}]}}]}, 0x214}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000)

14:01:24 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x33, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)

14:01:24 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ftruncate(r0, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000240))

14:01:24 executing program 0:

14:01:24 executing program 5:
openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5000000, {}, {}, @control}], 0x1c)
dup2(0xffffffffffffffff, r0)

14:01:24 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0xa, 0x80000001}, {0x1, 0x0, 0x0, 0xffff, 0x8}]})

14:01:24 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = openat$ttyS3(0xffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x40880, 0x0)
r3 = dup2(r2, r0)
r4 = openat$ipvs(0xffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
socketpair(0x23, 0x5, 0x6, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
ioctl$BINDER_WRITE_READ(r4, 0xc018620c, &(0x7f0000000540)={0x14c, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="12634840020000000000000000000000000000000000000001000000000000000000000050000000000000001800000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r5, @ANYBLOB="000000000000000000000000856164660a000000000000000200000000000000220000000000000085616466080000000000000002000000000000003f00000000000000"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000018000000000000003400000000000000"], @ANYBLOB="400000e6efbbd0ab88a10f400300000001634040000000000000000000000000000000000000000000000000000000000000000050000000000000001800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="856164660a0000000000000001000000000000003100000000000000852a62730f0000000200000000000000000000000000000085616466010000000000000001000000000000002b00000000000000"], @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000001c000000000000003400000000000000"], @ANYBLOB="05630440010000000e630c4000000000000000000000000001634040030000000000000000000000000000000000000001000000000000000000000050000000000000001800000000000000", @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a6873001000000200000000000000000000000000000085616466080000000000000001000000000000001600"/68], @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"], @ANYBLOB="0c630000076304400100000012634840000000000000000000000000000000000000000000000000000000000000000068000000000000001800000000000000", @ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffffffffffff00"/252], @ANYBLOB="fc0000000000000000000000000000003800000000000000852a747000000000", @ANYPTR64=&(0x7f0000000680)=ANY=[@ANYBLOB='\x00'/171], @ANYBLOB="ab0000000000000000000000000000002600000000000000852a6873afe38ff30100"/48], @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYBLOB="000000000000000028000000000000005000000000000100b7b940f6f67a36c43b5c0f78116a88877530d4316f57d12fa355b156de49ea5450ddd31b561f181c30"], @ANYBLOB='@\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})
ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000000))
syz_read_part_table(0x0, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmsg(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000080))

14:01:24 executing program 0:

14:01:24 executing program 5:
openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5000000, {}, {}, @control}], 0x1c)
dup2(0xffffffffffffffff, r0)

14:01:24 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ftruncate(r0, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000240))

14:01:24 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x33, &(0x7f00000005c0)=ANY=[@ANYBLOB="b702000003f30000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe000000008500000020000000b7000000000000009500000000000000cacbf0b9c4b88449c3a926042512e17e46f7071a463143fb42c20e017feec42107f2e6ddbe1150296c6a6db4afa7c81b2636b1c5fbe24ec8831795562c5ea4eba37fd36b8f904497894ac91fd71c45c6718b16647287eaa4ecbbd060885934574ff45c74efb3bb80077d66d66951c47847e65318b0780f5baba8131b82e73da47c2bece4be7c6245059d5cc0229fe7d64a7f932a320674470c0f976b7b021f1c1e45ced7acc102e84d03aeef8f3f5b542714ae33145c66fb6ac21939ef0b8272734e31ffffb77f06d9ff5d959ec4d395ad553e44fc7f4bb2ede97d2c990000000000000063134758b240ef9d7b5df04d8b58f017229bd54d32308aa4a713543506ca2235e15325fadfcc3ee6e82a2522798e30d72cb32e54442f10c4f728a5a5a0e90300000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)

14:01:24 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0xa, 0x80000001}, {0x1, 0x0, 0x0, 0xffff, 0x8}]})

14:01:24 executing program 0:

14:01:24 executing program 5:
openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5000000, {}, {}, @control}], 0x1c)
dup2(0xffffffffffffffff, r0)

14:01:24 executing program 4:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x40)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000240))

14:01:25 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x34, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)

14:01:25 executing program 0:

14:01:25 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0xa, 0x80000001}, {0x1, 0x0, 0x0, 0xffff, 0x8}]})

14:01:25 executing program 2:
socket$inet6_udp(0xa, 0x2, 0x0)
syz_read_part_table(0xfffffffd, 0x5, &(0x7f00000002c0)=[{&(0x7f0000000000)="fe7ba67d55e02a5ff67d477b3404b65cc8a810c5f472b79cba47fb66f3f55e62937931b850bef3154f696f34f145ad9d3b274042f779027fe24b40fb376d47dc89f182d96049d571ecca4dd573998b7ddb6d02e625fd46902609c0b5cd6bf01c5e3e75ba236dfa98e1505f2cf831f0293e3a39d1b63f88c817d662b866cc816f12f1edb142160dd36a66814c6819c2719138639688652fd6b4cd7b91572a08eded980dc826bd20dea621c5b5566030500c0a070d32a26123d10cd4fcf3ae26a393c69d6ae488580eb8bb1501ea3ab2783bb8a6358d90d9bcccc9f95be462c749e4e56ed2587c5726aa407baa8850620066e2cc342d5f76b62ef1bc", 0xfb, 0x1}, {&(0x7f0000000100)="109466621830a6650935593e71405b528263", 0x12, 0xffffffb8}, {&(0x7f0000000140)="9bd23ff8db80d0683a8aff26cb25facd34a3eca507010107995cfcb36d138c", 0x1f, 0x2}, {&(0x7f0000000180)="e472467fc2f2babcc51342a83eda0e153ea3b1", 0x13}, {&(0x7f00000001c0)="6fb7ccfb151a2822fc7893a924f0775dddb0740854c4187cf27ddb83e2c642ba043b54f547fc8388226be6911406908d3d2d943e1b4755ae38bd43b293d111db37a6dd5d4d44dec95f0c4435040311e11d5efd341e925c49e1345c346380602c38ace1a282b1c5b84b0d94ffbf462962896aa553e9ece05f1519f648fcdb12d3451fa1f34f859ee7dac68ee04baf3b0550df5ed7871c3e2d3a7b9b3216681e9b0d2b23daad7a6a4dcc77c11772ab11dbd54480eb3791bc8558bce77f4493c21e2f6ed8823dd1fd1cad72552a9dd24f7acea59b747611d28107aeaae1192c66cd2a053cd52556551d298311049ea56a66bb98", 0xf2, 0x2}])

14:01:25 executing program 4:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x40)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000240))

14:01:25 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5000000, {}, {}, @control}], 0x1c)
dup2(r0, 0xffffffffffffffff)

14:01:25 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0xa, 0x80000001}, {0x1, 0x0, 0x0, 0xffff, 0x8}]})

14:01:25 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x34, &(0x7f00000005c0)=ANY=[@ANYBLOB="b702000003f30000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe000000008500000020000000b7000000000000009500000000000000cacbf0b9c4b88449c3a926042512e17e46f7071a463143fb42c20e017feec42107f2e6ddbe1150296c6a6db4afa7c81b2636b1c5fbe24ec8831795562c5ea4eba37fd36b8f904497894ac91fd71c45c6718b16647287eaa4ecbbd060885934574ff45c74efb3bb80077d66d66951c47847e65318b0780f5baba8131b82e73da47c2bece4be7c6245059d5cc0229fe7d64a7f932a320674470c0f976b7b021f1c1e45ced7acc102e84d03aeef8f3f5b542714ae33145c66fb6ac21939ef0b8272734e31ffffb77f06d9ff5d959ec4d395ad553e44fc7f4bb2ede97d2c990000000000000063134758b240ef9d7b5df04d8b58f017229bd54d32308aa4a713543506ca2235e15325fadfcc3ee6e82a2522798e30d72cb32e54442f10c4f728a5a5a0e90300000000000000308dce3f9fda2b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)

14:01:25 executing program 0:

14:01:25 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5000000, {}, {}, @control}], 0x1c)
dup2(r0, 0xffffffffffffffff)

14:01:25 executing program 4:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x40)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000240))

14:01:25 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0xa, 0x80000001}, {0x1, 0x0, 0x0, 0xffff, 0x8}]})

14:01:26 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x5000000, {}, {}, @control}], 0x1c)
dup2(r0, 0xffffffffffffffff)

14:01:26 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x34, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)

14:01:26 executing program 0:

14:01:26 executing program 2:
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000300)={0x7c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x28d2cfd171d81b0a, 0x0, 0x0, 0x70, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/18, 0x12, 0x1, 0x3}, @fda={0x66646185, 0x4, 0x2, 0x25}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/1, 0x1, 0x2, 0x2000000012}}, &(0x7f0000000440)={0x0, 0x28, 0x44}}, 0x1000}, @clear_death={0x400c630f, 0x1}, @request_death={0x400c630e, 0x2}, @clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0})
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000000)={0x100, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e20, @broadcast}}}, 0x104)

14:01:26 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ftruncate(r0, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000240))

14:01:26 executing program 5:

[  301.367222][T13247] binder: 13244:13247 ioctl c018620c 20000300 returned -22
14:01:26 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x34, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)

14:01:26 executing program 0:

14:01:26 executing program 1:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0xa, 0x80000001}, {0x1, 0x0, 0x0, 0xffff, 0x8}]})

14:01:26 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ftruncate(r0, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000240))

14:01:26 executing program 0:

14:01:26 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x34, &(0x7f00000005c0)=ANY=[@ANYBLOB="b702000003f30000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe000000008500000020000000b7000000000000009500000000000000cacbf0b9c4b88449c3a926042512e17e46f7071a463143fb42c20e017feec42107f2e6ddbe1150296c6a6db4afa7c81b2636b1c5fbe24ec8831795562c5ea4eba37fd36b8f904497894ac91fd71c45c6718b16647287eaa4ecbbd060885934574ff45c74efb3bb80077d66d66951c47847e65318b0780f5baba8131b82e73da47c2bece4be7c6245059d5cc0229fe7d64a7f932a320674470c0f976b7b021f1c1e45ced7acc102e84d03aeef8f3f5b542714ae33145c66fb6ac21939ef0b8272734e31ffffb77f06d9ff5d959ec4d395ad553e44fc7f4bb2ede97d2c990000000000000063134758b240ef9d7b5df04d8b58f017229bd54d32308aa4a713543506ca2235e15325fadfcc3ee6e82a2522798e30d72cb32e54442f10c4f728a5a5a0e90300000000000000308dce3f9fda2b9102a3"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)

14:01:26 executing program 5:

14:01:27 executing program 1:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0xa, 0x80000001}, {0x1, 0x0, 0x0, 0xffff, 0x8}]})

14:01:27 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ftruncate(r0, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000240))

[  302.169279][T13265] binder: 13244:13265 ioctl c018620c 20000300 returned -22
14:01:27 executing program 2:
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r3 = dup2(r2, r1)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
read$rfkill(r3, &(0x7f0000000040), 0x8)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r5 = dup2(r4, r0)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$CAPI_NCCI_OPENCOUNT(r5, 0x80044326, &(0x7f0000000000)=0xe3)
r6 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$alg(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1594a111e765bc05e6a8ebe567c516b84c5cd2a412b653891d52dce1228c288c5ca137c90de5637868a2beff1379c31e76234c03e3673dc1dbdc621882acf8482a579eb3b0e063d8c3eda1", 0x4b}, {&(0x7f0000000100)="54a8343a30439e1a1c4e23dbfe010787b7ced7d0b75d354ded02073c99ebf749e162f74eddd761a343a66734a3f8c7e88e6307c43c5d49f80ca5d20df6ac87999394eedb4f0c6cf67150c480", 0x4c}, {&(0x7f0000000180)="9ad3ef87fa05f8662ac866e9a71d03f27193ed4670f62fd81e4254916955c8a342b2e788f1ef6bd4d79dae46713d16bcb49f1662024d9f48a75bb62c2b704308156de6d12746634da6462f66377b631e80023aacd6e49b694149013704cfb493d44179dd5e21d8f9a1afc07878a34d950e25ee5f163fddc3ee33caed03b9fe2f0fb9be90004ad160ad597d9ef87e1e", 0x8f}], 0x3, 0x0, 0x0, 0x20000000}, 0x48000)

14:01:27 executing program 0:

14:01:27 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x34, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)

14:01:27 executing program 1:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0xa, 0x80000001}, {0x1, 0x0, 0x0, 0xffff, 0x8}]})

14:01:27 executing program 5:

14:01:27 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0)
ftruncate(r0, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000240))

14:01:27 executing program 0:

[  302.693797][T13281] binder: 13277:13281 ioctl c018620c 20000540 returned -22
14:01:27 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0xa, 0x80000001}, {0x1, 0x0, 0x0, 0xffff, 0x8}]})

14:01:27 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x34, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)

[  302.766141][T13281] binder: 13277:13281 ioctl c018620c 20000540 returned -22
[  302.812064][T13286] binder: 13277:13286 ioctl 80044326 20000000 returned -22
14:01:27 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0)
ftruncate(r0, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000240))

14:01:28 executing program 5:

14:01:28 executing program 0:

[  303.491904][T13299] binder: 13277:13299 ioctl c018620c 20000540 returned -22
[  303.510537][T13300] binder: 13277:13300 ioctl 80044326 20000000 returned -22
[  303.510568][T13286] binder: 13277:13286 ioctl c018620c 20000540 returned -22
14:01:28 executing program 2:
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))
mkdir(&(0x7f0000000000)='./file0\x00', 0xa1)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r2}, 0x10)

14:01:28 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0)
ftruncate(r0, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000240))

14:01:28 executing program 5:

14:01:28 executing program 0:

14:01:28 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0xa, 0x80000001}, {0x1, 0x0, 0x0, 0xffff, 0x8}]})

14:01:28 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x34, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)

[  303.783690][T13311] binder: 13303:13311 ioctl c018620c 20000540 returned -22
14:01:29 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x34, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)

14:01:29 executing program 5:

14:01:29 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0xa, 0x80000001}, {0x1, 0x0, 0x0, 0xffff, 0x8}]})

14:01:29 executing program 0:

14:01:29 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r0, 0x0)
ftruncate(r0, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000240))

14:01:29 executing program 5:

[  304.568859][T13314] binder: 13303:13314 ioctl c018620c 20000540 returned -22
14:01:29 executing program 2:
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000000)=0xfffffffffff0bdbf)

14:01:29 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0xa, 0x80000001}, {0x1, 0x0, 0x0, 0xffff, 0x8}]})

14:01:29 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x34, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)

14:01:29 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r0, 0x0)
ftruncate(r0, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000240))

14:01:29 executing program 5:

14:01:30 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x34, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)

[  305.002944][T13338] binder: 13335:13338 ioctl c018620c 20000540 returned -22
14:01:30 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0xa, 0x80000001}, {0x1, 0x0, 0x0, 0xffff, 0x8}]})

14:01:30 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r0, 0x0)
ftruncate(r0, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000240))

[  305.054332][T13340] binder: 13335:13340 ioctl 80044940 20000000 returned -22
14:01:30 executing program 5:

[  305.791037][T13351] binder: 13335:13351 ioctl c018620c 20000540 returned -22
14:01:31 executing program 0:

14:01:31 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0xa, 0x80000001}, {0x1, 0x0, 0x0, 0xffff, 0x8}]})

14:01:31 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x34, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)

14:01:31 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000240))

14:01:31 executing program 5:

14:01:31 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000003c0)={<r4=>0xffffffffffffffff}, 0x13f, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000440)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x2, @remote, 0x7ff}, {0xa, 0x4e20, 0x3, @mcast2}, r4, 0x5}}, 0x48)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = gettid()
r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0)='devlink\x00')
sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0b3e0000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r6, @ANYBLOB="45bf5db629e506"], 0x3c}}, 0x0)
r8 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r9 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r10 = dup2(r9, r8)
ioctl$BINDER_WRITE_READ(r10, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_VERSION(r10, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x60, r11, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0xd, 0x7, @multicast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4004041)
sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, r7, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))

[  306.173467][T13361] binder: 13356:13361 ioctl c018620c 20000540 returned -22
[  306.269387][T13361] binder: 13356:13361 ioctl c018620c 20000540 returned -22
14:01:31 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0xa, 0x80000001}, {0x1, 0x0, 0x0, 0xffff, 0x8}]})

14:01:31 executing program 5:

14:01:31 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000240))

14:01:31 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x34, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x74)

14:01:31 executing program 0:

[  306.927132][T13361] binder: 13356:13361 ioctl c018620c 20000540 returned -22
14:01:32 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x34, &(0x7f00000005c0)=ANY=[@ANYBLOB="b702000003f30000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe000000008500000020000000b7000000000000009500000000000000cacbf0b9c4b88449c3a926042512e17e46f7071a463143fb42c20e017feec42107f2e6ddbe1150296c6a6db4afa7c81b2636b1c5fbe24ec8831795562c5ea4eba37fd36b8f904497894ac91fd71c45c6718b16647287eaa4ecbbd060885934574ff45c74efb3bb80077d66d66951c47847e65318b0780f5baba8131b82e73da47c2bece4be7c6245059d5cc0229fe7d64a7f932a320674470c0f976b7b021f1c1e45ced7acc102e84d03aeef8f3f5b542714ae33145c66fb6ac21939ef0b8272734e31ffffb77f06d9ff5d959ec4d395ad553e44fc7f4bb2ede97d2c990000000000000063134758b240ef9d7b5df04d8b58f017229bd54d32308aa4a713543506ca2235e15325fadfcc3ee6e82a2522798e30d72cb32e54442f10c4f728a5a5a0e90300000000000000308dce3f9fda2b9102a39e8ed6"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x74)

14:01:32 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0xa, 0x80000001}, {0x1, 0x0, 0x0, 0xffff, 0x8}]})

14:01:32 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000240))

[  306.986697][T13361] binder: 13356:13361 ioctl c018620c 20000540 returned -22
14:01:32 executing program 0:

14:01:32 executing program 5:

14:01:32 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000000)={0x1, @bcast, @rose={'rose', 0x0}, 0xfffffe01, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]})

[  307.230853][T13382] binder: 13381:13382 ioctl c018620c 20000540 returned -22
[  307.285984][T13385] binder: 13381:13385 ioctl 890c 20000000 returned -22
[  307.353106][T13382] binder: 13381:13382 ioctl c018620c 20000540 returned -22
[  307.372065][T13385] binder: 13381:13385 ioctl 890c 20000000 returned -22
14:01:32 executing program 0:

14:01:32 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x34, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x74)

14:01:32 executing program 5:

14:01:32 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ftruncate(0xffffffffffffffff, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000240))

14:01:32 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$BINDER_WRITE_READ(r4, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$SOUND_MIXER_INFO(r4, 0x805c4d65, &(0x7f00000000c0))
r5 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$USBDEVFS_RESET(r5, 0x5514)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
recvmsg(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000080)='/dev/binder#\x00', 0x0, r7)
setsockopt$inet_udp_int(r6, 0x11, 0x66, &(0x7f0000000040)=0x10000, 0x4)
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))

14:01:32 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0xa, 0x80000001}, {0x1, 0x0, 0x0, 0xffff, 0x8}]})

14:01:32 executing program 0:

[  307.932249][T13405] binder: 13400:13405 ioctl c018620c 20000540 returned -22
14:01:33 executing program 5:

[  307.989636][T13411] binder: 13400:13411 ioctl 805c4d65 200000c0 returned -22
[  308.029083][T13405] binder: 13400:13405 ioctl c018620c 20000540 returned -22
[  308.050442][T13405] binder: 13400:13405 ioctl 5514 0 returned -22
14:01:33 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x34, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x74)

14:01:33 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ftruncate(0xffffffffffffffff, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000240))

14:01:33 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0xa, 0x80000001}, {0x1, 0x0, 0x0, 0xffff, 0x8}]})

14:01:33 executing program 0:

14:01:33 executing program 5:

14:01:33 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x34, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x74)

14:01:33 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ftruncate(0xffffffffffffffff, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000240))

14:01:33 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0xa, 0x80000001}, {0x1, 0x0, 0x0, 0xffff, 0x8}]})

[  308.705667][T13430] binder: 13400:13430 ioctl c018620c 20000540 returned -22
[  308.713639][T13431] binder: 13400:13431 ioctl 805c4d65 200000c0 returned -22
[  308.772301][T13433] binder: 13400:13433 ioctl c018620c 20000540 returned -22
[  308.796118][T13430] binder: 13400:13430 ioctl 5514 0 returned -22
14:01:34 executing program 0:

14:01:34 executing program 5:

14:01:34 executing program 2:
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioperm(0x2, 0x7, 0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000000)={r3})

14:01:34 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x34, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x74)

14:01:34 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ftruncate(r0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000240))

14:01:34 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0xa, 0x80000001}, {0x1, 0x0, 0x0, 0xffff, 0x8}]})

14:01:34 executing program 5:

14:01:34 executing program 0:

[  309.321601][T13454] binder: 13449:13454 ioctl 6430 0 returned -22
14:01:34 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ftruncate(r0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000240))

[  309.385107][T13460] binder: 13449:13460 ioctl c018620c 20000540 returned -22
[  309.467759][T13460] binder: 13449:13460 ioctl 89e1 20000000 returned -22
14:01:34 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, 0x0)

14:01:34 executing program 3:

14:01:34 executing program 0:

14:01:34 executing program 5:

14:01:34 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ftruncate(r0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000240))

[  310.127858][T13478] binder: 13449:13478 ioctl 6430 0 returned -22
[  310.136010][T13476] binder: 13449:13476 ioctl c018620c 20000540 returned -22
14:01:35 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)=0x401)
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))

14:01:35 executing program 3:

14:01:35 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, 0x0)

14:01:35 executing program 5:

14:01:35 executing program 0:

14:01:35 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ftruncate(r0, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000240))

14:01:35 executing program 0:

[  310.473343][T13491] binder: 13490:13491 ioctl c018620c 20000540 returned -22
14:01:35 executing program 3:

14:01:35 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, 0x0)

14:01:35 executing program 5:

[  310.575271][T13493] binder: 13490:13493 ioctl 40044590 20000000 returned -22
14:01:35 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ftruncate(r0, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000240))

14:01:35 executing program 0:

[  311.241212][T13493] binder: 13490:13493 ioctl 40044590 20000000 returned -22
[  311.249343][T13491] binder: 13490:13491 ioctl c018620c 20000540 returned -22
14:01:36 executing program 3:

14:01:36 executing program 2:
syz_read_part_table(0x3, 0xa, &(0x7f00000006c0)=[{&(0x7f0000000080)="9e37fb78b3ae6164a676c3d9f46593f152aa07757d7697a118fca81a74701d6496f77fed0b1ab4509dc7ed5817b883b1edd29e3fe972bb32c858cf81d93670fd85770a3f0ad72388e17e3d2cc866f095d5119cd488d2e817c9b9fb10454e49d993f604e13a921291e5a6e3a902f05dec37a0529a88aa2e3347910a526f2137b6a5f58e1a26b2074e922b974b17ed42fe42fed40011c48652ac7552b1fdb6faf7460f478e6254c596e2c760e64bdae54b0aed0ee100e3acc1ec25dc731a6c22583708b1dd799b79dc76489a8e3f030b5e66ed3559451239465c00a692dd8729968d", 0xe1, 0x5}, {&(0x7f0000000180)="e6772c519ae95492b54fbed645cadd383383f9b8bc82fc47ce14323397fca938b3561f96ee94f8a4960f2497c289ec8233c196f85d7cbc676f9e7de8a47593664b1a1211cf0c5d0299ed768d08b37267397e99a373f2624f562f827ddb0a88f48535a312c23a83d1bbc3402c31ee8051d29bc0c7a33d8384ae6677e439cc8c7d6e9822bada86e1f56e39ae1d2b05fb281b010086a34b9f44360396301328476ecac245d4239a8da3553346e36885928199450ccd8d7497528f1e51ce3265b3962b", 0xc1, 0x10000}, {&(0x7f0000000740)="a9231d0b2be49aea76e0eafe5b3eb251747c5a6b18bcab99a834b4175d83718086e6a3b7197dbfce3de3fae55f6a99c1f4b1ee437ec2c55b89276a932af40b0823a2607bc7282357fd755f56bf8cd27b72360cb25d8327e13dfb65bf4743031f93af3d83590000e30ea087e80fbbe5afc123d9f15bb2fca47ac611d4e13a3687ca01d508b1641c9b50ad4f50072a797831942fd6e47227348850c3cf5ab530ce650d550d9d0d571f8edc1d1ca87e91748821462e583d98e902755ea893932301e4750e1036a1a4b75c4f4bb08a9a70c06c0e542dd597c436948db17a6b573c7bee734d63cd7d2088326622c4e4327e00", 0xf0, 0x1}, {&(0x7f0000000340)="a953425af81cd08e79769f20f072b93b1a8c1c2108b63bf4db925326c89674b52c362ed52eb5dcf55bd16ea47a17b2972bf7eb78ecee27b937df5698ef085a183f27fc8c17d54280a3ce5a10c79a441e0a9497121a5f7250ba8c0e7300d671d5347d0a6d632cf2d9a01a7d7d4f26c714218a16fe73b175e4b62f9d118a7e9378d148eb92de04ebfd27899e5f4db6eb185decce0278ff9a86054477caf3d4d783f6c9e4e5b6ed7dd193c435a65bdbd9684925ec51176a31c4cf8dbe", 0xbb, 0xffff28c0}, {&(0x7f0000000280)="0d9609441b07196f7f2c699c19282c8cb71ed3caba2ca92e909e2b4aac95940ce1ceefff000000cf61d06d3cafe6c0612244fcf0dee69160c52aaf6c0b23099ed2060f4d4fd86ffb1a878596e88de5bad05bb223888962a0d81c68251f88ddb9d2811cb6b637c4190093f4802fa832a7760b1643231828ceca19d77b9ea087c324f0591935d3672f8f7e8214379b06788fddf6659f98f8472c24784d4936bce6a5035de03112fda7c9129259187cfaef4a", 0xb1, 0xfff}, {&(0x7f0000000440)="48c1105dd6b64441a3c4e73bebeb4cbc8de5f27aa702350c10891b05128d30fbfbab36469580a65d3ea69b116e2b50678a22ae53761008a8cf1230b3312c4efe7dc71586e85f8ed232e99e9e74ac9e806bef37b9bf8c2882a388fa8565627c2f6daa47901789abce0ba17653bb99521e8a2cc3df466aac06598d6553d55b8ca4", 0x80, 0x100}, {&(0x7f00000004c0)="b702b8d4db112ca62c97eb1571e1a29b037f", 0x12, 0x200}, {&(0x7f0000000580)="128b0536c4718c22967535ff256ef86921938a0fb3ea8f2336bee3030b98c6100f00a265f88e1c740407bbaf37465b605e2aaf19a4b5a299e5c18e4ecffa7159f0943f46a88de28a2eddfd7278aec6f0acaf56249689ed0dba8797c9df559b074698b2b5ad8ed133c85cc5786342a69985404a6e36afcc0add4c6614e5b13df0f00659f598e3048d3c1f3f8d7f228d7342fa3feda041c62ec0acaea955cd06bdf3fef81864b5c2f1946b63d5c97f9c25384d7b2a23df38ee", 0xb8}, {&(0x7f0000000500)="0e9e31b45d0af44cc9df1b934a2e80bcce7db84555224efb6e708c27cc94", 0x1e, 0x1000}, {&(0x7f0000000640)="af6e0a114f67369260a6778375cb4b418c306eb0d16dfd14d11203c8080c9a877b6b735fdb06803f4a47c16da4445dc1fda4f7d9f5d9ce807fbf0365b295a34afcaa82a90f9d901a0bc6e781d5d6e302fb80a1f7e15ccab4c3aa86253fd1a3bbb4154b5ba5447d6d0cfcd8830d108f9420c18e1ada", 0x75, 0x3}])
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4)

14:01:36 executing program 5:

14:01:36 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)={0x1, 0x0, [{0xa, 0x80000001}]})

14:01:36 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ftruncate(r0, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000240))

14:01:36 executing program 0:

14:01:36 executing program 3:

14:01:36 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ftruncate(r0, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000240))

[  311.613854][T13527] binder: 13522:13527 ioctl c018620c 20000540 returned -22
14:01:36 executing program 0:

14:01:36 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)={0x1, 0x0, [{0xa, 0x80000001}]})

[  311.693668][T13531] binder: 13522:13531 ioctl c018620c 20000540 returned -22
14:01:36 executing program 5:

14:01:36 executing program 3:

14:01:36 executing program 2:
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5, &(0x7f0000001380)=[{&(0x7f0000000080)="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", 0x1000, 0x3}, {&(0x7f0000001080)="0c15842f46bc1c997dc4dc739128e5a746a9fe0e58af40630a7d4bd5ee32b149ad5fc837ec99ce744c2a39bf18bf65c0e304fcd3d226215553df0605aacf9f1bdd9cedbd42aec4dddd8090ad548d1262da02bb1de7cb8be16138ae3bc44f0af1617004c8c3f8d90248b88d4aec47d80cf0859be1aaba61135ada8bb326be5ee1", 0x80, 0xcbd5}, {&(0x7f0000001100)="aa59e9e7873155f85e149b80df6c7a0129326c109c69a3e752ead93692c54a50560556d53f2e8e997218a3b4ca740e78d94815bac4f3a5a80e45ae93fa9ef955cdd924ce659420c35c1372be562a53027c4d0ded8e6bd9f0ed6bdf0bc913103f3c38a501c3d4103e1688a5dc", 0x6c, 0xffffffff}, {&(0x7f0000001180)="8abef896078a8a341ac3d7366c4949941194ac3b7c9f7e7c1ef0b570a0aeed14cbfc5975f2203edd950823b402e087334fa9ef8ebaf6c3faaa7e35018925d48a3d183288c5df1cb8a3bdd4f9fd736d04557aed80044ec684cd1eefbd9dc476f4e74a6d8ad6d98c2e36ed52295c8d89c75a1a148ceaf744c72c20c8eb54ded4cd569acd16e3b662cd2d07e912687575f6e7b336d1a476b7efa3dbd36b29b94e1bb84956210369be32224ec240f36b10e198a3c818f89dd7442ce506ee52c1a6acebf55e624a29708ec1fecc1e1a99f2", 0xcf, 0xfffff055}, {&(0x7f0000001280)="6507db72f8943190d6917d580a28752751a5bb87c58a0ef1bf990ef865e92caf0158fd4d9e417216e573d58d7eea6b5ad3c5e5db06ddb22d709d3f6299d9fef3b077c694af6517b3811c7a21587d24146cbcad64724d8252ea2099880a278b0514f6b32dbaff1e0e88ef75eead25e88c9b95382a2c947d9877a0ab4299d77d55524203f47a19d9aa333c20e84448aa9180e6836cbc9de659c63a173d97ab82c2405c0ed6362723520126b86b91f165e0e1abba9fb7d2536ea03d040cb6ad330d93e208915392d571798069539470348928f93c1c291e73663eed8f4b206bd089", 0xe0, 0xff}], 0x805, &(0x7f00000013c0)={[{@nodots='nodots'}], [{@context={'context', 0x3d, 'sysadm_u'}}]})

14:01:37 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ftruncate(r0, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000240))

14:01:37 executing program 5:

14:01:37 executing program 0:

14:01:37 executing program 3:

14:01:37 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)={0x1, 0x0, [{0xa, 0x80000001}]})

14:01:37 executing program 5:

14:01:37 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ftruncate(r0, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000240))

14:01:37 executing program 0:

14:01:37 executing program 3:

14:01:38 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0xa, 0x80000001}, {0x0, 0x0, 0x0, 0xffff, 0x8}]})

14:01:38 executing program 5:

14:01:38 executing program 2:
syz_read_part_table(0x0, 0x8, &(0x7f0000000900)=[{&(0x7f0000000a40)="51af4f9ecffa902240e98dffbe9b2c19911087d3a95d0045950baf499359db95c51fafb24b5cd8b7e23efae6408ca23565248dc5ace2c00cea8b4eea057115a1116a23602b90fc75f3d838411996d86d8141854b7ec037784e787d43a90bc875e3b4df09efad854d4027a0a45e2b42762eb5fefe9e013cbec42e05b1dd82b32fc689af0ca35cd9cb2682e458be38011ba51882b1403927e2ab5c506be5089ade8785e9c4035311319a7d718030dc31db46f3", 0xb2, 0xda32}, {&(0x7f00000004c0)="12e7d0c63da5bf6b278b1be1186456e7251d3372b4580c2690893a0c7240be9accaae4811b6492232acaaca7480b9d8327e49d24f04f697e7985cd6d854780eb7e4bbd08aae596666e087da7be1f51", 0x4f, 0x146}, {&(0x7f0000000540)="a0864c34b7bf34e7750fac4090e5c5461939b14a29b1383a95203a36122f038eeb5f38c004f6b3988aaecf834e91cf55d420347b7aa8a8cbebec922fe074818da00631f9d3162c6f6901b4ce143ab48e91fa16e0db5f6e4983e51455dbcd4fb75541f0c7e6d1d62c577b67f96ac70a4c0352d854ff98720fcdb3ae47199c0464899f5bff7d1e10d926a07fcb28d72ffd7e13a25a2025b28ef3f05e9365870ac29b9307ec3b24f7ad20f4bf28a0f450d18668a5886dbf2fd07224ac769f8d17e15c1ba3ecc6f2c97bf8c67ab075b26d2594cd87f16c", 0xd5, 0x400}, {&(0x7f0000000980)="0421d02034976e3895d367ec471fa4bba9c34aa122f188b772d3c5df931c8f4caf631fe8e16b7779a1a10e149f37a51d9b320742575e4fe2089fbf54a3f2264af2a80000566aa954c2a2d88738d8f65b5e47a7828c96f194f85565a2165845bdc6b86612c12636eba9e4e97b1cf298118c6e4506d0747dcf35caba5185024624bee67935b90a0a1fe8ab9902319f", 0x8e, 0x81}, {&(0x7f00000006c0)="d877561ea3306d45cf99019276932cdf7b5ca8fa4bd1b3e2280fa8717c3bf9e75c55a0ed341f36b7bc2f9f5a0c47125ae19c000706c6e6502849df2f6d9f78d16442b7acb706632fd75317f27d7c96ec28c4e268aa27c21d0d7b9d795752f0ad544951c7424e9551beccfa61261dc3", 0x6f, 0x10001}, {&(0x7f0000000740)="f3096fc2828983139f7cf387c8d5c8ad98fcc2f7a10a213a55334f3de42b61fd6aa81d727a2d4bdb8fb49974586dfe51091053b7765db9d2653bc39c7397aa6e985b9062bcfc0f3dd9ca1a85eab70d05f0791b1ee5ad959826803d1b5a4cf3fc478ec227ada48b1c38dbfb74", 0x6c, 0x7}, {&(0x7f00000007c0)="9fbfd480c9f744cbae246d13b5ba1de9aeb383416f07854975bc546a47b3d1ebaf3bba8cfebf41f5cfa3709df28d508580dd339cd6c512c31703c87872017a518afdec37a0e83541758dba6b6a6e7c6386cf1bf353ebc762472140773179", 0xffffff85, 0x2}, {&(0x7f0000000840)="e394464598163f2433ce06af7c2b4c193aba93373cca5c3d97b623696444e5208ec8cadf67497f8e25d4f869ca28d292c581a846bc0bb081475277b846679dd8ee6ccbaadc0a4f8f936ad3ef4f1c711aa41d3e9c413604b6fd031a2d3f2edc92f52bb9fefef7c8fdce28212dde17dd84fa3d6bc01b8739058fbe0d1e56ad5ba2a361d5dd207dbff9411471c83fda6dbd391bd00ea1c3f17b6a06bd939ad15101bcc6f2dcd05622edc7388bda9785", 0xae, 0x6}])
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x10001, 0x6, &(0x7f0000000300)=[{&(0x7f0000000080)="ee63a34d8d90a472115cc585299f59beb557f1697161db99cfa0beb03982b4582e3c7c2ddbe42e8828a0028c6245a2e97fa9cfab86c0731e303901922ecbccd4462c28d02873c6f3dad04bab7fa1", 0x4e, 0xfffffffe}, {&(0x7f0000000100)="bec92b639b1a67c73eb9f87701ca3d35962dcc0361ea1380aefa0c07b4ea8c13a0012adf5c5daeb4c29b8b98050ec51527d2ba9d0634fe1b312fd39737b9f75b4be779f5d39fcf36c421e34125e016b20cf8e9b2150f276669077f44ddcf04dc34805abcaf73822d0a064f0ce6ce7f55", 0x70, 0x1000}, {&(0x7f0000000180)="ec6f3004738bfe3d187abd820dbefae61519c5b88c66295583559acc40c5a584d109f82532ff", 0x26, 0xfffffdc5}, {&(0x7f00000001c0)="526f62b9c569a25ece5c48b8ec4b61f39d0a1beca4af930d30447e13486a92c4ce97f094318a5a797013cda3b627d576feda28718b3d2e58f9b6610158805f3cdbb061e858753490880aad8d7393d2a8473ec05a61ff04444ce4f9c1d2d1461d016fc6df3dfd09cc", 0x68, 0x6}, {&(0x7f0000000240)="3b0697b973e122a86bbb4aedcd44e74694d613e56618fdb1df63c3b85a505e2c", 0x20, 0x3}, {&(0x7f0000000280)="31a2f4121b2b486ad7df9346e5ba0ce27be56f831c5fa5e32c784e9e4044ee9fa182e696d8fd9cc2fba231abd95a687b7cdfc2f4932dc9d46f0efbc926c078b39196b08b36cb", 0x46, 0x8}], 0x9fb31d2cb2bf2538, &(0x7f0000000380)={[{@balloc_test4='block-allocator=test4'}, {@commit={'commit', 0x3d, 0x4}}, {@nolargeio='nolargeio'}, {@nouser_xattr='nouser_xattr'}], [{@measure='measure'}, {@hash='hash'}, {@subj_type={'subj_type', 0x3d, 'hash'}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x5, 0x32, 0xf367a7b99025f14e, 0x31, 0x35, 0x34, 0x6], 0x2d, [0x31, 0x31, 0x37, 0x38], 0x2d, [0x62, 0x34, 0x34, 0x30], 0x2d, [0x36, 0x5b, 0x30, 0x5e], 0x2d, [0x65, 0x34, 0x39, 0x0, 0x31, 0x61, 0x66, 0x33]}}}, {@defcontext={'defcontext', 0x3d, 'root'}}]})

14:01:38 executing program 0:

14:01:38 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ftruncate(r0, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, &(0x7f0000000240))

14:01:38 executing program 3:

14:01:38 executing program 5:

14:01:38 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0xa, 0x80000001}, {0x0, 0x0, 0x0, 0xffff, 0x8}]})

14:01:38 executing program 0:

14:01:38 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ftruncate(r0, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, &(0x7f0000000240))

14:01:38 executing program 3:

14:01:39 executing program 5:

14:01:39 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0xa, 0x80000001}, {0x0, 0x0, 0x0, 0xffff, 0x8}]})

14:01:39 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ftruncate(r0, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, &(0x7f0000000240))

14:01:39 executing program 2:
syz_read_part_table(0x2000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000000)="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", 0xfe, 0x6f}, {&(0x7f0000000100)="ff22a356679e81868174260951c8b161a68e2bf0f6a840e2a7c699afa423f94708e0338ac8e531f2d063542ed005c9e4e40a61016c10853047ce547f6df205e1b15b691e195e4237e0583f6519ea9d3f50eb58ddaf35e844cd54e8ff6ba1cd8c9a9640de689370e0394d055a531e1ea0ef02eeccfe794fd9a791f38e7084dbe939a69ed49f94450db63bb6f94d2d436a328483bfdb7c4a422f8aec00d18825fbf424d019325a02baccb51c758a8be54763f558cc004c936d35b750e3034f0a24d4323cc9d4e435bc3c1d5edc6795df7c924e86563898ced6762b476998056890410c9345f7597c129efd55ce3d0db297de1b67c176ab", 0xf6, 0x6}, {&(0x7f0000000200)="fb8b3174adf3895146ceed2bd8ae5e9ea674afe05e655a95177e01575bad21c1f94b1311a62df61584843ff61f7e3ef35d8d02b7c1027e88ea8a61604af561d9bf899fba9758a249de42f24bdd303f3006e26a4fa745c5f79517407b35cbfe27ce0ade2a18415cc0659a39afc7fa0e5ab16df0faf5597332d8b0a46fde6efd80dc295ddb6f89a593f6bf01880e7c3454180f54a7fb709130cfdac0c6966bdb92386cfd2892c2397742", 0xa9}])
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
getsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4)

14:01:39 executing program 0:

14:01:39 executing program 3:

14:01:39 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0xa, 0x80000001}, {0x1, 0x0, 0x0, 0x0, 0x8}]})

14:01:39 executing program 5:

14:01:39 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ftruncate(r0, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r1, 0x6, 0x0, 0x0, &(0x7f0000000240))

14:01:39 executing program 3:

14:01:40 executing program 5:

14:01:40 executing program 0:

14:01:40 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ftruncate(r0, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r1, 0x6, 0x0, 0x0, &(0x7f0000000240))

14:01:40 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0xa, 0x80000001}, {0x1, 0x0, 0x0, 0x0, 0x8}]})

[  315.077827][T13633] binder: 13628:13633 ioctl c018620c 20000540 returned -22
[  315.104715][T13630]  loop2: unable to read partition table
[  315.110717][T13630] loop2: partition table beyond EOD, truncated
[  315.117175][T13630] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
14:01:40 executing program 3:

[  315.363815][T13635] binder: 13628:13635 ioctl c018620c 20000540 returned -22
[  315.380614][T13630]  loop2: unable to read partition table
[  315.386666][T13630] loop2: partition table beyond EOD, truncated
[  315.393363][T13630] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
14:01:40 executing program 2:
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000000))

14:01:40 executing program 0:

14:01:40 executing program 3:

14:01:40 executing program 5:

14:01:40 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0xa, 0x80000001}, {0x1, 0x0, 0x0, 0x0, 0x8}]})

14:01:40 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ftruncate(r0, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r1, 0x6, 0x0, 0x0, &(0x7f0000000240))

14:01:40 executing program 0:

14:01:40 executing program 3:

14:01:40 executing program 5:

[  315.946412][T13667] binder: 13660:13667 ioctl c018620c 20000540 returned -22
14:01:41 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0xa, 0x80000001}, {0x1, 0x0, 0x0, 0xffff}]})

[  315.999620][T13669] binder: 13660:13669 ioctl 8040552c 20000000 returned -22
14:01:41 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ftruncate(r0, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, 0x0)

14:01:41 executing program 0:

[  316.762571][T13688] binder: 13660:13688 ioctl c018620c 20000540 returned -22
14:01:41 executing program 5:

14:01:41 executing program 3:

14:01:41 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0xa, 0x80000001}, {0x1, 0x0, 0x0, 0xffff}]})

14:01:41 executing program 0:

14:01:41 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
getsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4)
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))

14:01:41 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ftruncate(r0, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, 0x0)

14:01:42 executing program 3:

14:01:42 executing program 5:

14:01:42 executing program 0:

[  317.133801][T13702] binder: 13700:13702 ioctl c018620c 20000540 returned -22
14:01:42 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0xa, 0x80000001}, {0x1, 0x0, 0x0, 0xffff}]})

14:01:42 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ftruncate(r0, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="ffa7d11d6f9036b44eb2995b7edbf3e7", 0x10)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, 0x0)

14:01:42 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='memory.stat\x00', 0x275a, 0x0)
writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000180)='l', 0x1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0x9, &(0x7f0000000100), 0x5)

14:01:42 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmmsg$inet6(r1, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@dontfrag={{0x14}}, @dstopts={{0x18}}], 0x30}}], 0x1, 0x0)

14:01:42 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0xa8d4, 0x6, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc0585609, &(0x7f0000000040)={r1})

14:01:42 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)={0x1, 0x0, [{0x1, 0x0, 0x0, 0xffff, 0x8}]})

14:01:42 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x15, 0x0, 0x0, 0x2}, {0x16}]}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
sendfile(r1, r2, 0x0, 0xa808)

[  317.930089][T13728] binder: 13700:13728 ioctl c018620c 20000540 returned -22
14:01:43 executing program 2:
syz_read_part_table(0x20, 0x0, &(0x7f0000000040))

14:01:43 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0xa8d4, 0x6, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc0585609, &(0x7f0000000040)={r1})

14:01:43 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='memory.stat\x00', 0x275a, 0x0)
writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000180)='l', 0x1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0x9, &(0x7f0000000100), 0x5)

14:01:43 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)={0x1, 0x0, [{0x1, 0x0, 0x0, 0xffff, 0x8}]})

14:01:43 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = openat$snapshot(0xffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x40000, 0x0)
ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r4 = dup2(r3, r1)
ioctl$BINDER_WRITE_READ(r4, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r5 = pidfd_getfd(r4, r0, 0x0)
ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f00000000c0)={0xd0, "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"})
r6 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r7 = dup2(r6, r0)
ioctl$BINDER_WRITE_READ(r7, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f0000000040))
syz_read_part_table(0x0, 0x1, &(0x7f0000000400)=[{&(0x7f0000000580)="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", 0x106, 0x33e}])
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
recvmsg(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r9 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r9, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$SOUND_OLD_MIXER_INFO(r9, 0x80304d65, &(0x7f0000000340))
fcntl$setflags(r8, 0x2, 0x1)

14:01:43 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0xa8d4, 0x6, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc0585609, &(0x7f0000000040)={r1})

14:01:43 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)={0x1, 0x0, [{0x1, 0x0, 0x0, 0xffff, 0x8}]})

14:01:43 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast1, @remote}, 0x8)

14:01:43 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='memory.stat\x00', 0x275a, 0x0)
writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000180)='l', 0x1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0x9, &(0x7f0000000100), 0x5)

[  318.953705][T13774] binder: 13769:13774 ioctl c018620c 20000540 returned -22
[  319.023584][T13774] binder: 13769:13774 ioctl c018620c 20000540 returned -22
[  319.068960][T13781] binder: 13769:13781 ioctl b704 20000040 returned -22
14:01:44 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0x0, 0x80000001}, {0x1, 0x0, 0x0, 0xffff, 0x8}]})

[  319.150141][T13774] Dev loop2: unable to read RDB block 3
[  319.158742][T13774]  loop2: unable to read partition table
[  319.164601][T13774] loop2: partition table beyond EOD, truncated
[  319.171059][T13774] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
14:01:44 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0xa8d4, 0x6, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc0585609, &(0x7f0000000040)={r1})

14:01:44 executing program 4:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x0, 0x0)
r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r2 = dup2(r1, r0)
ioctl$void(r2, 0xc0045878)

14:01:44 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "078cf0251c0e00"})

14:01:44 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='memory.stat\x00', 0x275a, 0x0)
writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000180)='l', 0x1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0x9, &(0x7f0000000100), 0x5)

14:01:44 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc0585609, &(0x7f0000000040))

14:01:44 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0x0, 0x80000001}, {0x1, 0x0, 0x0, 0xffff, 0x8}]})

[  319.747187][T13787] binder: 13769:13787 ioctl b704 20000040 returned -22
[  319.758035][T13774] binder: 13769:13774 ioctl c018620c 20000540 returned -22
14:01:45 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket(0x10, 0x80002, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@fat=@errors_remount='errors=remount-ro'}]})

14:01:45 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "078cf0251c0e00"})

14:01:45 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='memory.stat\x00', 0x275a, 0x0)
writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000180)='l', 0x1}], 0x1)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0x9, &(0x7f0000000100), 0x5)

14:01:45 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc0585609, &(0x7f0000000040))

14:01:45 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0x0, 0x80000001}, {0x1, 0x0, 0x0, 0xffff, 0x8}]})

[  320.226820][T13824] FAT-fs (loop4): bogus number of reserved sectors
[  320.233588][T13824] FAT-fs (loop4): Can't find a valid FAT filesystem
14:01:45 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='memory.stat\x00', 0x275a, 0x0)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0x9, &(0x7f0000000100), 0x5)

14:01:45 executing program 5:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x808045, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
unlink(&(0x7f0000000180)='./file0\x00')

[  320.459754][T13831] FAT-fs (loop4): bogus number of reserved sectors
[  320.467562][T13831] FAT-fs (loop4): Can't find a valid FAT filesystem
14:01:45 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0xa}, {0x1, 0x0, 0x0, 0xffff, 0x8}]})

14:01:45 executing program 4:
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000180))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
pipe(&(0x7f0000000840)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
r3 = gettid()
tkill(r3, 0x16)

14:01:45 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0x9, &(0x7f0000000100), 0x5)

14:01:45 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc0585609, &(0x7f0000000040))

14:01:45 executing program 5:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10)
setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@local, @local}, 0xc)

14:01:46 executing program 0:
setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000100), 0x5)

14:01:46 executing program 4:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x216e2780f01dceba}, 0x10)

14:01:46 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0xa}, {0x1, 0x0, 0x0, 0xffff, 0x8}]})

14:01:46 executing program 3:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x8, 0xa8d4, 0x6, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={r0})

14:01:46 executing program 5:
syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@fat=@codepage={'codepage', 0x3d, '1250'}}]})

14:01:46 executing program 0:
setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000100), 0x5)

14:01:46 executing program 4:
r0 = socket$inet(0x2, 0x3, 0x7e)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000006900)=[{{0x0, 0x0, &(0x7f0000004fc0)=[{0x0}, {&(0x7f0000003e40)=""/244, 0xf4}], 0x2}}], 0x1, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0)

14:01:46 executing program 3:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x8, 0xa8d4, 0x6, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={r0})

14:01:46 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)={0x2, 0x0, [{0xa}, {0x1, 0x0, 0x0, 0xffff, 0x8}]})

[  321.749445][T13881] FAT-fs (loop5): bogus number of reserved sectors
[  321.756190][T13881] FAT-fs (loop5): Can't find a valid FAT filesystem
14:01:46 executing program 0:
setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000100), 0x5)

[  321.975387][T13881] FAT-fs (loop5): bogus number of reserved sectors
[  321.982003][T13881] FAT-fs (loop5): Can't find a valid FAT filesystem
14:01:47 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={[{@size={'size'}}]})
mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20, 0x0)

14:01:47 executing program 4:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000340)=0xe00000, 0x8)

14:01:47 executing program 3:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x8, 0xa8d4, 0x6, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={r0})

14:01:47 executing program 5:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x12e)
r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
dup2(r1, r0)

[  322.223822][T13903] tmpfs: Bad value for 'size'
[  322.334598][T13903] tmpfs: Bad value for 'size'
14:01:47 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0x9, &(0x7f0000000100), 0x5)

14:01:47 executing program 1:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0)
mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x0, 0x7fff)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
syz_mount_image$nfs4(&(0x7f0000000100)='nfs4\x00', &(0x7f0000000340)='./bus\x00', 0x1, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="6360e46864454bea6cd99b388224", 0xe}, {&(0x7f0000000440)="80fd5cf0d0be9ac2f6d4da54e367523b3272f4b7a4dd4c11aabc8ec012bb6ae691c592fe0218b3004ef4c4a82920b7d66af5747ff3961a45fa2f7bfca92d6f929cfa97989165287af9ae4a9d4ff718ea12f4eed6cf9677589312125473dabe573a0f00730c943fdb3dea54a672a7141c75089174f31aa0655a285b86f6437c0f03eaa877961eecd74b5bf655efad5891573cd7d0843522312f", 0x99, 0x439}, {&(0x7f00000003c0)="7d53fddadb0a735db27158d37a8183591a31507a14cd7623b5ae24221f20a0083dc2268d8f9c780935bb18104947d155df879b770d3f20f02aea", 0x3a, 0x20}, {&(0x7f0000000540)="5e8cfa1b1b193d1dfea675", 0xb, 0xfffffffffffffffb}, {&(0x7f0000000580)="310a3d1c5bb80f63372b0dc5678d4de007858f9ad01b4e6d5f3c88e0ef462a90c4bf3011185d769024abc94cc5e8769d8ded62ba3166726aefebf5a2ac2362d6d96d24963569b65298bf476fe79ac3afbb904e671b6a27ba17d0b528005f79cfa619307284616057d93bd4e006a77c8ee62f20acbf2ef3fbda63d1d7cef735f73aff256607375124bf21710447c18c2f01be0c18cd87652d88134a08e157a5f0261e5f8a973a09e7deb48ac8d3b585acfa8d0f1023805fb4f9a3cf74", 0xbc, 0x2}, {&(0x7f0000000640)="507c6ecbbfa8049b280658fc5c2657c2d0428039fdc77cf294d80998282fbae38d26b6ce9d7e5fab2cdb17706c7d220bd91e22c10ed340ad6a41bb2b3f858f7176e5cf3c9e0c9cd38c2ead211197207d2288cee9b5552348ed", 0x59, 0x8}], 0x1, &(0x7f00000007c0)='ppp0\x00')
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="a0e912499a957e8074f2045dd89e"], 0xe)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000280)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
creat(&(0x7f0000000780)='./file0\x00', 0x0)
add_key$user(0x0, &(0x7f0000000400)={'syz'}, &(0x7f0000000000), 0x0, 0xfffffffffffffffd)
ioctl$TCFLSH(r0, 0x540b, 0x2)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

14:01:47 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00')
preadv(r0, &(0x7f00000017c0), 0x3da, 0x2a0)

14:01:47 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0x9, &(0x7f0000000100), 0x5)

14:01:47 executing program 3:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0xa8d4, 0x6, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc0585609, &(0x7f0000000040)={r1})

14:01:47 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)='\n', 0x1)

14:01:48 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0x9, &(0x7f0000000100), 0x5)

14:01:48 executing program 5:
r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

14:01:48 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x16}]}, 0x10)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
dup2(r5, r0)

14:01:48 executing program 3:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0xa8d4, 0x6, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc0585609, &(0x7f0000000040)={r1})

[  323.389861][T13924] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500)
[  323.398109][T13924] FAT-fs (loop1): Filesystem has been set read-only
[  323.410963][T13924] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500)
14:01:48 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000100), 0x5)

14:01:48 executing program 1:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0)
mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x0, 0x7fff)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
syz_mount_image$nfs4(&(0x7f0000000100)='nfs4\x00', &(0x7f0000000340)='./bus\x00', 0x1, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="6360e46864454bea6cd99b388224", 0xe}, {&(0x7f0000000440)="80fd5cf0d0be9ac2f6d4da54e367523b3272f4b7a4dd4c11aabc8ec012bb6ae691c592fe0218b3004ef4c4a82920b7d66af5747ff3961a45fa2f7bfca92d6f929cfa97989165287af9ae4a9d4ff718ea12f4eed6cf9677589312125473dabe573a0f00730c943fdb3dea54a672a7141c75089174f31aa0655a285b86f6437c0f03eaa877961eecd74b5bf655efad5891573cd7d0843522312f", 0x99, 0x439}, {&(0x7f00000003c0)="7d53fddadb0a735db27158d37a8183591a31507a14cd7623b5ae24221f20a0083dc2268d8f9c780935bb18104947d155df879b770d3f20f02aea", 0x3a, 0x20}, {&(0x7f0000000540)="5e8cfa1b1b193d1dfea675", 0xb, 0xfffffffffffffffb}, {&(0x7f0000000580)="310a3d1c5bb80f63372b0dc5678d4de007858f9ad01b4e6d5f3c88e0ef462a90c4bf3011185d769024abc94cc5e8769d8ded62ba3166726aefebf5a2ac2362d6d96d24963569b65298bf476fe79ac3afbb904e671b6a27ba17d0b528005f79cfa619307284616057d93bd4e006a77c8ee62f20acbf2ef3fbda63d1d7cef735f73aff256607375124bf21710447c18c2f01be0c18cd87652d88134a08e157a5f0261e5f8a973a09e7deb48ac8d3b585acfa8d0f1023805fb4f9a3cf74", 0xbc, 0x2}, {&(0x7f0000000640)="507c6ecbbfa8049b280658fc5c2657c2d0428039fdc77cf294d80998282fbae38d26b6ce9d7e5fab2cdb17706c7d220bd91e22c10ed340ad6a41bb2b3f858f7176e5cf3c9e0c9cd38c2ead211197207d2288cee9b5552348ed", 0x59, 0x8}], 0x1, &(0x7f00000007c0)='ppp0\x00')
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="a0e912499a957e8074f2045dd89e"], 0xe)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000280)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
creat(&(0x7f0000000780)='./file0\x00', 0x0)
add_key$user(0x0, &(0x7f0000000400)={'syz'}, &(0x7f0000000000), 0x0, 0xfffffffffffffffd)
ioctl$TCFLSH(r0, 0x540b, 0x2)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

14:01:48 executing program 5:
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
chdir(&(0x7f0000000200)='./file0\x00')
read$FUSE(r0, 0x0, 0x0)

14:01:49 executing program 3:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0xa8d4, 0x6, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc0585609, &(0x7f0000000040)={r1})

14:01:49 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000100), 0x5)

14:01:49 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x8, 0xa8d4, 0x6, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc0585609, &(0x7f0000000040)={r1})

14:01:49 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x16}]}, 0x10)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
dup2(r5, r0)

14:01:49 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000100), 0x5)

14:01:49 executing program 1:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0)
mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x0, 0x7fff)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
syz_mount_image$nfs4(&(0x7f0000000100)='nfs4\x00', &(0x7f0000000340)='./bus\x00', 0x1, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="6360e46864454bea6cd99b388224", 0xe}, {&(0x7f0000000440)="80fd5cf0d0be9ac2f6d4da54e367523b3272f4b7a4dd4c11aabc8ec012bb6ae691c592fe0218b3004ef4c4a82920b7d66af5747ff3961a45fa2f7bfca92d6f929cfa97989165287af9ae4a9d4ff718ea12f4eed6cf9677589312125473dabe573a0f00730c943fdb3dea54a672a7141c75089174f31aa0655a285b86f6437c0f03eaa877961eecd74b5bf655efad5891573cd7d0843522312f", 0x99, 0x439}, {&(0x7f00000003c0)="7d53fddadb0a735db27158d37a8183591a31507a14cd7623b5ae24221f20a0083dc2268d8f9c780935bb18104947d155df879b770d3f20f02aea", 0x3a, 0x20}, {&(0x7f0000000540)="5e8cfa1b1b193d1dfea675", 0xb, 0xfffffffffffffffb}, {&(0x7f0000000580)="310a3d1c5bb80f63372b0dc5678d4de007858f9ad01b4e6d5f3c88e0ef462a90c4bf3011185d769024abc94cc5e8769d8ded62ba3166726aefebf5a2ac2362d6d96d24963569b65298bf476fe79ac3afbb904e671b6a27ba17d0b528005f79cfa619307284616057d93bd4e006a77c8ee62f20acbf2ef3fbda63d1d7cef735f73aff256607375124bf21710447c18c2f01be0c18cd87652d88134a08e157a5f0261e5f8a973a09e7deb48ac8d3b585acfa8d0f1023805fb4f9a3cf74", 0xbc, 0x2}, {&(0x7f0000000640)="507c6ecbbfa8049b280658fc5c2657c2d0428039fdc77cf294d80998282fbae38d26b6ce9d7e5fab2cdb17706c7d220bd91e22c10ed340ad6a41bb2b3f858f7176e5cf3c9e0c9cd38c2ead211197207d2288cee9b5552348ed", 0x59, 0x8}], 0x1, &(0x7f00000007c0)='ppp0\x00')
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="a0e912499a957e8074f2045dd89e"], 0xe)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000280)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
creat(&(0x7f0000000780)='./file0\x00', 0x0)
add_key$user(0x0, &(0x7f0000000400)={'syz'}, &(0x7f0000000000), 0x0, 0xfffffffffffffffd)
ioctl$TCFLSH(r0, 0x540b, 0x2)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

14:01:49 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x8, 0xa8d4, 0x6, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc0585609, &(0x7f0000000040)={r1})

14:01:50 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0x9, 0x0, 0x0)

14:01:50 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="6653f3528d4641144f8176003639405cb4aed12f", 0x14}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff9b, 0x0, 0x0, 0x0, 0x45}, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = creat(&(0x7f00000024c0)='./file1\x00', 0x0)
ioctl(r1, 0x6681, 0x0)
ftruncate(0xffffffffffffffff, 0x8008200)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x48800)
sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x890)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={[], 0x8, 0x6, 0x101, 0x4, 0x1, r3})

14:01:50 executing program 5:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="01"])

14:01:50 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x8, 0xa8d4, 0x6, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc0585609, &(0x7f0000000040)={r1})

[  325.316956][T14003] tmpfs: Unknown parameter '
'
14:01:50 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0x9, 0x0, 0x0)

[  325.479301][T14003] tmpfs: Unknown parameter '
'
14:01:50 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc0585609, &(0x7f0000000040))

14:01:50 executing program 5:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

14:01:51 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0x9, 0x0, 0x0)

14:01:51 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc0585609, &(0x7f0000000040))

[  326.225844][T14025] hfsplus: unable to find HFS+ superblock
14:01:51 executing program 1:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0)
mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x0, 0x7fff)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
syz_mount_image$nfs4(&(0x7f0000000100)='nfs4\x00', &(0x7f0000000340)='./bus\x00', 0x1, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="6360e46864454bea6cd99b388224", 0xe}, {&(0x7f0000000440)="80fd5cf0d0be9ac2f6d4da54e367523b3272f4b7a4dd4c11aabc8ec012bb6ae691c592fe0218b3004ef4c4a82920b7d66af5747ff3961a45fa2f7bfca92d6f929cfa97989165287af9ae4a9d4ff718ea12f4eed6cf9677589312125473dabe573a0f00730c943fdb3dea54a672a7141c75089174f31aa0655a285b86f6437c0f03eaa877961eecd74b5bf655efad5891573cd7d0843522312f", 0x99, 0x439}, {&(0x7f00000003c0)="7d53fddadb0a735db27158d37a8183591a31507a14cd7623b5ae24221f20a0083dc2268d8f9c780935bb18104947d155df879b770d3f20f02aea", 0x3a, 0x20}, {&(0x7f0000000540)="5e8cfa1b1b193d1dfea675", 0xb, 0xfffffffffffffffb}, {&(0x7f0000000580)="310a3d1c5bb80f63372b0dc5678d4de007858f9ad01b4e6d5f3c88e0ef462a90c4bf3011185d769024abc94cc5e8769d8ded62ba3166726aefebf5a2ac2362d6d96d24963569b65298bf476fe79ac3afbb904e671b6a27ba17d0b528005f79cfa619307284616057d93bd4e006a77c8ee62f20acbf2ef3fbda63d1d7cef735f73aff256607375124bf21710447c18c2f01be0c18cd87652d88134a08e157a5f0261e5f8a973a09e7deb48ac8d3b585acfa8d0f1023805fb4f9a3cf74", 0xbc, 0x2}, {&(0x7f0000000640)="507c6ecbbfa8049b280658fc5c2657c2d0428039fdc77cf294d80998282fbae38d26b6ce9d7e5fab2cdb17706c7d220bd91e22c10ed340ad6a41bb2b3f858f7176e5cf3c9e0c9cd38c2ead211197207d2288cee9b5552348ed", 0x59, 0x8}], 0x1, &(0x7f00000007c0)='ppp0\x00')
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="a0e912499a957e8074f2045dd89e"], 0xe)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000280)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
creat(&(0x7f0000000780)='./file0\x00', 0x0)
add_key$user(0x0, &(0x7f0000000400)={'syz'}, &(0x7f0000000000), 0x0, 0xfffffffffffffffd)
ioctl$TCFLSH(r0, 0x540b, 0x2)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

[  326.404664][T14025] hfsplus: unable to find HFS+ superblock
14:01:51 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
sendmmsg(r0, &(0x7f00000069c0)=[{{&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000200)="103a3cd3726a18b57c21f3e24aa0bd659ddb9ae8f2799e6cf25a26476d253b04284070170c877e07302f293913ac0bbfaf276eb67865d0539bfcf5c4161e167e0ba8daec0b51557ba16be255bdeffca711f35981c56826f440beffedb6d40b0d2f833a2fb3a029eb9b701fdcdc9cb96830a788f4baf7c7559a5be2329aff5274e96e2b55d2f60b", 0x87}, {&(0x7f00000002c0)="9a427b0d859537956e8ccc383cd87e43ee3f40f6ead74921c41d56706bf4108ed882b415be8cb5d5d925ba5fd0c0d41b231cd29bcfce00219993e23e30e4ed33f427b79c1bc68245feb7dd302ff224ce0d1a3c4b981cc4af22b1c3a0fcd5e45f76d18f12c849f619788d9c8a5ea2d3e862e41ee61323f31c8a2cf28bbaeea847c485b4ed103c9e976d7edf22db0610d02be3fcd2e18a0983f72345156791f1fd442c", 0xa2}, {&(0x7f0000000380)="b25420b272703e1e2061de6b90cc182b72b75e53b4dfc610d1a11272773322dae7fbe60c32f272e11f70a7b8e7c9e3222ed0f10bd80b02f49ee2f92386f89d81f505f7e1788796927dfd97a1fe290be78ec62236b15edf1317b63f3d13b8b7b55e9fb2eec70da4e088cd3da54f603ca1d511a8e3f8d7a9142cf343b4ac21630c887b6726c6858061f9ecc924ef3b5acd", 0x90}, {&(0x7f0000000180)="da1cafeada0eb70cceb7d6babfbd8ee23e4999fc442634849bc3ee5f4a4a46", 0x1f}, {&(0x7f0000000440)="6cfe194c8a70ccf30788bd577f3e5df3537d7205c627dae64d8f40be4a5b632848f73ca6adf655d21f4b6ac0846c865d1858cdafd7adc6f571b6556e5deff977ad9d0880bc3aaa567a3a5a275a5b6f0c4fdb38a316299a9c53e5c89093491d43b97d0ec215c13b6fb62477a6ca0fb2", 0x6f}], 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"/1432], 0x598}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000007080)=[{0x48, 0x111, 0x2, "3f2613f1ee58807d896ea7e0a90b46ba496c32a0cec0ee6f5b9463577d41aa4fed48f928969abeed28c59f999af5e183a23e1e51"}, {0x18, 0x0, 0x0, "82"}, {0xf8, 0x0, 0x0, "351b974054323fad621d78d1503bd8fb972dbc5cf9e8e157c2b003021d6a23df32717bf8f2e3950967e81bbe38cd01c1faafce6e45ea65556b70b3f477d5bbc72db0d4c92176c38dfb71fc28200b68852e3ab67f5f3a9ba8c420335fef0390ae776fbb22f98be2b3bae19ecd31c15e38c8c0822c30a2c3e47e6a908fb9f17f4c1fc3fab80610072054d11604844d4bfc66b8429b094f874534ef0ce7a645f8fd692fdf5fb83e377459edcf8346e5b9f30316cecb0eafdbe3367d8cf960c00e316902d2e0791d93bb011265894544bbe3a09889acc09f7f5461bdd904cdbf156d57"}, {0x1010, 0x0, 0x0, "b7e19ae702a932a58198f3acc71bb68319a022375b1492907cc80bc37dfe6cff9955ce9f246876650c40ce38c4fafce602eac6b4275ca21e500f3aebba1fbf56ada6ba842b99e8211281faef29b3cca9c31ba848ed49953e40f28c7ff2fb38a85c434afc1e30e125993aa6fca23005a1c711356ffce170feffd8c05acbe15be198d0945c0ab3b8bda1420847c014cf4ef8cd2c8bf1acfcc5132bed6db9ac7274902cdd2e6b642a4e180f06b221a767914233654846a253a5ae7072dc29ff2e4e70a8cc54433f6452f9b0a60ace5fdc3c1106f71aef755ddafc8e8c9a5830916349bf4c21db0e90b8b62dc9195ced4a7ad343f9af5e4ac8756eec98e52a2e8a2f99681ed8c40296884fbb90e6403824e8fa6af251f26409543665efe2e2fc5adc960b8e7bb7d89d01385d72170a3847d9313a238e8e94c40ac964bd10e213e844e02a806173148467bdeaa92fcc3ec1fe75fe7f9dc85f2f038feba8201b2e3541672ea9535066064b5e3a88d65fd930543f9c977d3ccc93ff9d6a8ae2d59ec8325d240b1e5054a3200202f62b7daa14cd5d90c278f1141ba1d95f7ad549810e7e1d661317f147186c7908a3c32880da2349594e54f2f85f9c4a402f111aa7d5a248c292a0e3ee6773d90e5f766cd8779e0992a25837f6f946f1c6e2686907289cbf3e3799ded4f3c86a8c477e19a450545e02c55d28fb6362cfbab11665595302bd6e4d4836a47fb7825692dddd2798ba0ff9215d10395b8358d20175a0333c3bb7c578a12cd59a86e02fc5aff013655cae7784ac0f72daaf67c1a2b6d3eed9e062defac20de2f682e3cd317d25506a23dae9b20843369038d9b78288cc601d78df10e68147fb04b09b8297703bd1b14ee189650468e3f783136afe06d4ccd9caa90d3cbce6b231a0406ca24edcd184ca1d24d8327af272f42f3cedb14a3d01c1741814ed12da362d22d34fa488152bd19ac5af00608685585f068795bf6128376694566d85d41ef9d6f13dd14220489db47e318f8153ed664c9a682a58c8b90f6f9eeead0cefb49b88f90ea27c3856206aebc92846da9a06f457f9012a8c19e0813b3130c153497b71d56dd3becdeb963623b693eb8a492d27f532bcdd0c760863db4e659c758c5534ffddd0d57c704e41aee068168ab096146dc91edf8277af1bfb995fbb9f2b90dd31dbffa31d69ac235b8d590dd558646f7cb25cacaf7f048bf8c2760bdabedff3699ec3c1f14917e3d261d8e6504f3a158a657a6c96ad485970051cdd05e52fe08681083e1ca50b04cc9ccb50abbdfa04fe7c8562c51665f59e864c47ff5a30ded96cbaef0b3b76c0f3b5dd4c41ddc519cbf46ad2bd5792ff4319006667d2e493e7dde66eefb568d4fe11933918d3bc6361d312700a53a6c1bf9c81e32573ef6843c5e5d56c95179f3216e0c127908efb03ce57248ab673877d03bb6f5e47130f971a228105b0633acf8f232921ef93bca0e7877a946f3358c8c3998152fe233c876b9f9555ab7f9b0633855b96bb7d1c166746d7fd192f8c7848bf3c0a531a235cebe3c32fd7d5b1e058c25b1e01fb4b8e474159f720261a70a4c4fe8d8ddaba015a9084456a8ffdad55d2b0665e17b2f5df3ef7fd2c00dd5b738dae81d62f6adb3a558dd2f35cc0de1c148fb7b54df0823c55f717fc07e9ff8fa9ad462da1c8367ba1d6cce8f04fa7a7c982d83734e86162391a0c841a86a775fcd851f17848b03b303c840c381c644881e45deae64e91eeb1b348ba5f7610baf8466bb8142806b0b0e3f5d570cb9af21774551aa32c56f40f23d62e0a2fb41f28baf855b3624aa7566d505c5139367d6341f4b7a71a962cd984aa3c17f7913c15f7471ac684f9722aa8c33123b2895845ed6fb94abda4b2c4684f641a1e8ab33f74103144762ab9e37e2d1e831b56a18e9ad61147721c5d1570dc105811e2111a15a49a73d1b862060e448d5649d0048f4e47bbb5cfedbe379cfa4ecd6a4b12f2483cbc92168fc5b5bb674b6eafbdc48a185e18eb9c34f919d805810e57593ed8b3bb48927ecc82e07360c41f6377599d7f06ab9c1d7a92285156d174e9111eb2a441b82b9e8624232a642467ede7805b4d278c0603ad2ba7c6e9cc66a921812686c98cca6cd09a2ccd5853be2b12dc0aa30366bc12a58c1375fa5aca0f51e73a16cf86f87d9810e41b5e4deffde4916c6a98bd6e7e56b57a13c4e25c955336e4ca14d94b8ff77d9bc9391311150925752dcb047e28580ce335fb69f3e34e0b3b6b605e228e828a8730fe66044c346a7566059f2d474482dd6e35a0a5011e1110ede1ea20de8d3fdf1b21404b27a1063a3b05385613b840dc9a7e78e51f0d6986e14c6bf73c3b8d538c477ae9d49ed16e8803bad8a97ed59db3d497d8e7f77c00956b793b478718bc49afdb33efb01b99f7b5b69421c60ddbd79386de90073b572a0ce0669e780b166dbbe5ce213ee4ce1902596a207dc41b21576401c361752fdd2357f7e13d03b979b9468c44c63511de3c177d4da9259144ca5f3cbebbbb8a51d0a42ef28e4662e05eeaa972b61b6a124e036e5adfd22bf19f79d39772e16abe5b10061fb987f1fe1ffdffc1ddd41a41b5fa27dc7da930e384988922cf016be0e5df2c85d908f0d80a6c348ed666809185048b788291ad5e5f0895b96c5d256ebcb90177ee9bf02dcb86dadb7f825305a58905b60a67c389583837dc64b6fd8256cbbd5086e3e8a0cba12a6f785257f59a97289beefff5a3f161987488de457eba483002626153cad158b22f888616d7a6b3eb58a49d89995a07ec1601ca303d9128884d84cc1b1f65ead0af94968a9fe5c1af535dafa711bb89501a33302c0bd59570f9e6337f836dc614be87eb8e8ef50ff42bdb57dbbefbc89de6839ee9cc26cf9649cf8998f108eac3b317583a90fc6dc2a985b698b9b1d2d3bb9068bfacca79a1f57f03fd8f150766bb17ce2e924a6214b34a614ddbcb86a62142035be4cd7f66f777a977883643c49bfedaa46e46a1f1d212ec7dea33d57b8675107d4f187e81248967ac0bab4f067a4bd9c7bd2b2a38572d69aeb510271b2d12634d67def018fc34a530fd9d694d4001d9e3c986d5f4155c6918e40abe85797bb3bdb754bc25ab267630f409f6aeccdffd454b1de78f758540d0896b775ad1409874f8c2c691789783b9aad9a52e8e1c3b063676e83c408d606699984b0add191b78d70addfeebe1b13cee8ba55defeba1b930c5ad3feece83e6541a46ad0b3b8880f90730567c4497a18a992eb84d011c959f83bbf05c56aa612c78e77acbef6e834770620b3ab49c23549e80f4129f5f81c205359a1fba9b2554f417cbc73146ab52ea414452b603da072258ca6d5753e197fb4bcd0f1d08ee41e872018057882b75137594801974ccdbd4dd4731a1df22cb5386d861f6b4584c857fe6795bb59723ce3149f1de1f68ceb210e8f9022ca4026206cd95a56489b596268b1d426dbac9a8b35bcd1d4d4223503f4d5bdffb4542bcdf35a83cd3d48ffc9eaf1b2a056b01051e5f7e10756d9b0f4552d954949d1981c77d9ce05a0d11e21082924519bd5d013339c3247601313bc2ba822f7010136e3378ecead7542e50231ae5cd31207378f6b0a14f224eb7accd753591526027acf388fb1ace30fb918544b918315a26c70b08752872cac71648960f61790e690920b668ea5baddfddee9b2843cb6b5758752e8152391e921b08d652b3bfd4a161de6d1fa992c1d5d0bf3e4d0b4020086791949c99b6faf72bac2619d9921828e2d51e1936b12e7daea898d89a618ced45f57c5765f4446e54eb3afd478a48e185e2e593532cfb345459312bfd5d117282c8fe443f1cedbff85ac189f8e6db016a9a856db99b3775f8cbc5c26c5d4b5dc03e04be10e9df7fdf0219fbf4f2c2972b3d768ce7bf2a7ec32b73653ca1fb7c0a99c3b1421058aa7a3051836c29e34432f648962d3c5a0bf0c13b3535ed2765d094de9e621acb5d24fff0f9e3127d3e5b076b35e220acb92e069fb5cd054a22ed3e6c207ed37809a1c01460f51e67d00f044c95d58f0c62122026af2bda501846070b971a264a38853bdd86c9fcfc30049863fd05388e39d8c81411db33b8dcd1b75bb1b64a1c5a04880d3f6aa0e0a3c358eeeb47fbe272dea67715885cd9898aee10d2b65a05ccfea3ba37371c249122df1436f28a4938861fb36b44f3dc3223c9359c962d341d8c1fc6897fdff50dbe4fd81b4c2d5dd532f9da1912235cef76ff1a9ee285770b5240fd67a28e299ee4999ffb73693664fec57b75b08b1591c9742f55ac4f8ddd8eac247592e1a45d82d72e6916cbc5eed1064d93f026f28bf78ec366e36f5faa4a3e1d1b317b30e445053c1b7237aac7fcd41a1afe4f14825dba867cab4fbbbcff81e0f34a6b1fccea6bda4c7a8ce55b1a23535a7ab37b690448c7700cd7c14825cda2561f3bedbf4bbff4f56e6e559b5c9f21abb8ea707427b53ab32053f03b074efda6643b5b65cf5ab3757fe646aee049422571c5c7a7afcccd165e12c2f8bb75b5d88e96c6e2a94056fa2e633ae3bb99cbfd03a3737d0751606770111d64415c72662a19953e1190e8de2e580305ddcb6dd2ca9fe75c9f52ec72d1472489815813b4ab2a4b3ec494195150100325b3eb1897c82e7c6e9360f005efb7d78a5039c3c3fff96d9a74ae088282a784e237c0d722d3a3542726801b6d86048abe499390457acc275d267dfb7c011ae458760f0089787cd8f12249c44c0451b689ca16cf0e0cc1e740bfd4466d3bd6cd7ee772e71c9545e82965ae1d1c5dd3375f8b6ca7bf835df7ae604ddef4ac66e2b1096003d84347a1bd53295e571039cc799a4c9805be3528cb7c92ea1cd3cc0d1f42a603cbabae5e48a33c7a3149f8f0e76ef5aa3744d995d7acfb62a3a66a74d419e224e0b3dfaf0ceab4d87020789cbf1f991f94faffd378156b4e66a0fe4af62c556e4e9ae3f567f66c429e294ab2088eea0bd773aa43abb48d3e336db3ba032ff96d9b1084b3d62cd467cfab56dd01c86e2350b4edc09e4ea896e39038f05eaa03a407b7dc2b9163a94b9fb0b7c41001fe495701c8b01276ff9c689be4dabdb824aca269d6bc9e5d411cde02782537987377a317a11bbd8ac24537b63bb6b54f468b809a2252b0b4ee29f2bdc8b35b2a0ce879fe39a36a00941733e823c10866d90098e676e9ef3c23b3c1640c112cf0277b3453742be6c39044d08eba01c84eb4679755d2b78685020f966b8f880ca1229a4e37cb7a48b37e88f5be2e530b0ac24f25ebbf439a1f746b6e7a67b399a1bb38441ca19efaccdeaa46df7513f85e4144d87f6a74fb2d4f1e6eb9903951442afbd289f549c5c1a9e2c2856ff89351d0107d9d3a52f27781a49c452fac7578e5d1fc31d6675d1783cf9533e53a989b936c26f3276ac7f0af0f07f4ae9c31bb1c69cf204d1a3c224c8779f7b4bca1dc6ed013f7e9254f6463716dafc06d5b15cbd857cdb515813276926cef069ed922b10b3fd19410af1d7bc734ee8dc606ee120a8a7908bcc65fbd71ac9a41aaeb1b022ebb1c5260caeb1b029d3772e10a9bf61f7a650ed3106c38a0b5db4865873cf0b0f4b12c654e3087dd49224544ccde1dc374583c12775acc704a6c390e707f883f2f931ff4e0f6d19be5c8f58edf77b282d283e26ea3e7fd6818d55c19bdfaa4947c8cbe5ef1242a35bb80abefae45f747030da835f08e186bf23bc7b07bf848f6a781e83eed013cdb2cbb76576788fc0854573211feedd9254a"}, {0x20, 0x0, 0x0, "cfa55932ba286626c7"}, {0xe80, 0x0, 0x0, "b410a965eab1c4aabc4a8ce84643bd3a94dadca396de2169c39c548366e9db818b425699463ec3cc0867484502bf2d91335e57b45e586cdeec70099319c267a599206faa5c21635e52ace965592f83cc64d7c987849e811130992f4899885121ac30518817a32d017ffefbb393c896cce9ef1075be9384d8fa93136a9e5e96abedc76684bf2d122095387c68013d68378af5750e0483098afdf4b9774a69486dd1aac79bbfcc25e68909e476d9e7f0b7a5228169fbc37682743d63ac8e9cd5c52ebbf39daed681c4d3519d92962d73fc30f16b8a31995b0f816229d721f3149acd317259489fb1ba54a58190e2e3267adbb02fbc36d36521c8039b7793a7d19ac2cecf51adce403e91e9f383fcf4f8fcdc75b98c277021bc3d0e1a9c65e37e0f2d0c5b813fdc0ecddf3c82268098c043dea2c5252e7924fd65a3fab46cf6e79759230d67bb53060910a78d72633a0f81e2bc6cf72454d51f002f1ab9785118a91cc93a3bf5335eef6d4564079f663e67a2dfa7e4f506a9ccdba2b006f3655ca67c076ad8aaac214bdfe9a51df5186652714d85d730596fbd0bb03bab231e90c901751177ab3cf6ea9599ebd8f2af771c7d3ee367509a158a6ec5f9946a8a135506d5a95eb21e08ba4e535b2620e7d9e83d888763e71b108f3453dadcc12a4d67dd27c30670fa8ee9eef814abaaa4d6823eb42fdb721dfbca774e49150c6ea1856b00db6577b67f55cf0dfbe27aa04f078b50e63a43e996f0ba8932e92b7edc36e9ddb194b8e2e67824c60a23f0bc168f0e1be680cb4697129337da48ac5c79a394f091ba153c49c957975e231a92be87178c622217c192aad297d1f8761650c3918c2157a8e8fe91698c1761fd368bad83f96dd11a169c228cc2c9cbf07be7c9a9f879ed22b8d2b13323e7b2c520f68f04d4bcc930178b0dbce87cbfe05cbe0073e1f8e1f893b8c169f41695dba7eaf5a1cbfd95162d4e2684c4e1856144d0244dcfc6fb0b7d9c958869798d5c0057fd45164b67f137f7034e61bdfa84b792c7b0a30d4790fa3ba5c8b1bbdb1a2a61d85c5235c78979848bdea76f5e14f311a82c054feea8970385d35bc422fdfd2646a7ed69d628ed38f39332ba8a7e50667ec27eee9511c4ad6942581cc8179e7a0d285568e32d13f267db4e9d2b170457e3c181752e207d00ebb715c7bc2bd2d65554c4acc88e7a5e11cdf20ef1cbec2d8155e6dd0ff158002394c61bcded6f122c394b1849c7c9a53ca084287c457b46b9badf7aacae28e47c5e0ee94964b0bec66c6e1da86747b537552dd753a9acb850b3113c771c36209cb4495bdffaf0dda0bcdfd81c36ceb3b8f084ad8ee6f45007bfdc06f2c8741cbc6ce9cc80eb9fab7204f4b3bb01b4497737386f6df2b8a6d304b0eef6141282d6ecf47fb213eb0a0414357a3da000b74656035cdff9aaf4634e6ecae1047f641925ca80620e8c0f8fe6106da089bd22714bcdef2fad10522c1c504c1bf431a88747ef59da715738a3074ae2d5b02153e1bd1c34def365055735ec5cd9ddbcfde060effa47d0ed869698f05ce74b1b47773a012ad42acd5742552f2a247e0dd02e1fc8d588921af3b9d23c2121f88748baadc6b0464bcaa6fc0aebdfd12bae42c902aaa819395b0b54d4a06046f3463a78b3385796a5de5453b6fe2932e4b0100ccfb351f2e66734d0dc15345339afe1f3338542d2f64ab36f2cdd378005345f1d4408e6aac472a2d3002cae20096596a87e35b4bdfcd368546b7de2d573d4667d9b1feb358ee948aba8c0791f0da0203ebf69b45f0ed1ec7de50d1773d158c2213a6c993886e4a0962e4b03e00e52a6e8dd064fe1a6deb15d5ead0b781e2553abdbc45a4b30040e984368b83e53eb34f7e905e9de92041fe946149172cfebc61c9379f84f09553d62a96ab3e6526147dc88cf4e0f3be296b39ce8de057f4fa11bd3ff2427d15013ff2fbe055212b7016361d95253d9f899b538c0d132e5a6f18b12c98fc7e4c6d8cf5173cf0de51e161d179fd6bf1e913fccd649ce80c3f332f18d7af582687c33a91863c6b7ad43c1deffdda41cde14e989b7ba2525ab39d275b94f532f420877edba4527ff49aa7000a16d852b260a2b5cb27ad85d49ede1f5b7687f196dba99d5c38825491d290cbcab737394e1463afbbde43896552d3cd5881b49ae4fec71a85dbd2a4d418411b2a6e8fa7f2cd6eb5f72353ecc552b0f12d1aa873b805151b55111680d2d689d8be44b314d04d7d81248315ecd51d6c220eb68b7fcca9c09331ec151327387311d20ef58f2fafdb88bd1744bb865b77b6da609315c9c4a717cc4098868c2a2c1ece8c22fd138247d30507bdafa83bb3f4952bab3c4ab129ca0ff1a9581543988afa847a7822dea1d0dbbad4cacc9e2fe760c12e7a7ada527d8bc32311a9c0a6b6cf3b74f1f50c0be89d8428845c47d71e0a6d4663637d2cdbbc6d8db1eadf4f3803c69959ff9e80582d99a1653ad8b7372aa4a86be87315ffffc12c1cba38366952e0efe25f7c20e50d3ecbb0afa2d36db6ffc6559fc16171610f13771453620705bcaed3ff9035b9e86943e2f82a1a156bb8c93bff2ceaaec8b21564732ebd48e478667830fe9a5bc3234e7dce194e538aad080bf374c8280d3c1506b6e711581899fc8c6ceb619ef413634238b35a86c89b927ded69a93e7d7d4545a0b0c9f5873f6ead83b4da7cf29d082a68e164d9cb0430e5fd646bcc09808ba2de6b8b2284e3c9946c9cafbe2b4918d646d1b561b28a096b0d76a4dc7776f939f0d11be87465b2122894358c3c09b37b0693d253e6c17df207063bfed48de959afcc6e1d2baf9283f2fd087057b970bc1c49e800549cb317a65d1b856f5a8a7fc71c4a98b128109a550c6fd3549cb9384bfd575f30f239167a12b6b26b399a3684dbc0c36b81418446de59fced13517e3aa18acdabfaefa2f4871f115e4ae9488d9f3a143c340b7b9ca1d2a5d67647e9f3514e18bf6c79fd53ea9be6945587e0406ed5090ab1e64620671483f640b58a699aa469d9cd24e17b2405f77ad6b8375a79ce84e54843954b5c2fa061c15a1a9851a1e7103fb316b298c03f9e192ddaf0e2ca132e7e2901236ae5905f1f7d60b04a8d89d90063963e2d3fe1aa306c300eb9e38760b809291ae8ff51e3bc327f956887e659077b8bd6dfabf1dcd4904fa522a290e019be81745ed94106922d819553c0f348c6ebed451cb71871f11195ffb4c4d284df14d5e6483de7304425471de6f3ab59dfa28b74a779fba687ae62f8e2b4268ab5e42e12860b444693bde68e6be9db20a1e4b50163ba165a6ad53c4d89e98e843554ef4184df3caaffb0141144d664c8d4aff3eea2a1d2770283021239ba90f99f5ec96984df99255006278323cc8bf8c117761781d8859319c7d9dddb91ba1688a12471b0edfe60ceb9a051648f2a3dae7442b2260ae8527725cd39559a866f76a7f4055cf49362ec86fbe44f3644c0267a2c75fb82e2cc74262457c1929623d58cc071afcc23f50d8294e35940ac22f325f692b4277ccf2901d3306f6e1f25b7b50f30b15cae9ed4fef9210a0c7da510ffabf5e02ad2c192350bfd107645d7026b4879e4cae2618ac76867b516776c8e4a224c8b24a56e398e162839df78011bf1db1faa33b6055a02b4f6cb469ae808a7fb345e84dfc22fed6db2fc79057ac335e7a209e401cfdb16f186358a4e2b474cfb3c6d0a4e97357f77206bdd978cd97ef4f05e85f66f303acf0f7988fb9332b5d8ec10374ad2bf969af343e7380d3a556e54717ec598f487f27b58993db5062ba5ab80c23c394a07474f8b78cb6e492a10e484dbd16eaa61292e777e59f2d963fbeea13388f8eaccd75ab9483106a67c9a839a8f893381fe9fbefc3b7c6358b707f4779736fabd34dd1ea1de35f466887152c264894e29339a24d2467e5ee8ce679800e0fab7ccafffebeb2d2afbce122306db8079f23ef2f5467aaa5f564aa89965b9d67522ddbac6225b3c872f75b7550b4bed085190b9237eb010387f8c97c8bacbac008a9599a7d7a96c26a4969a2c4a0d9f8b71ffa172c173ffc1dc56a07af4692255f2e16116a64b180f1d301d33436a544a82bc8c9d5e140737773f54e39c7a5a2c8e1d9323b1b39013a17750c85ee7647dde90a62506ed2f17e9f1ff56d20e87d9207e20c57c54d72d7309e57d2a7acd7d3be95e288c15e031a00e3d18c3865752e3e1bc7352d90867f951a2dd70be3a68e8ff02500b274541022e1c842c6c101292fb5bcc6b50b651f5047d28c8d27607f5b45d9641addc1be468a93aa76dbab70073f67cffcf68a5f4f6dcd3b49ca443d74eb8943f223fed4175fa982e99ce5cee28634ab6e910ce24e30b1a3921dddb72a5629e2f62f75f7a556c4a1932c8bc316363e982dcdf45e0248bc87a076a4ad5799ecab1e4270137a442801c64d0611db70bae8347c9d6c4479f2a6fcf4b83e0ca49d8cbccc2748d575269ce681fb27410d2b4c73d9c0843690a748dc0205f7680c299fef85e781c49729516d3c726adbbfe69218ff299db1fd99150b61057b4476fb70af6a2f264c00521da34b964b2bb507e8459ad7d1b1ef33d77498cc6831ea0bbfcebd49b9aaf2a8efdb7f90d188f9a05a3e26f428b579c70f5ab21b9071aedd715049e6b5820aa28b99b1eaf420cfbad21ca693a550e899dcf733f1961619d14e46e195b8f58f2bb74f8259d2ea426134d87533683be108e32ae22f1dedcb81246f2558426dbfb0f91d068d888a782814ffd98fbc602d6cf1c7dcc06d574fd98bbd94b2e3ebe9c23d96af2220785797aa5df0f12df59d7596b9ceed2a000ac42193d9710116cd104d446347e519b906c240843f1ea34bc6db5ab7071532d444164e7661b94eb31b53039d0aae51038aa435b2f031eb675cc92b65f39265f3ecfdd1141cee08b9ade0a731c0339256e05f212f5b03281f3589c2e8f4c113f48be928b8114ac70028fa7c1660ae42642527f8cff7612fb6779665235c7adceb490e2c30a49447aae6e8f8d74522737e06a3bfc2201754d9dd4a377085a88a02577b3120c093882174d2426d622fb1de4effdfcd602ad22367369bf510e9c20f4214a92c86564a0423cea42c0b5fd3aa91372fd444a889404b3e207d86e8ce64dc42f2c097d646f4d7e2cc734cc7acbe1fd58148f30250b8250b07daed970c019b8acd5cc5098c"}], 0x2008}}], 0x2, 0x40040)

14:01:51 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc0585609, &(0x7f0000000040))

14:01:51 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"})
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0xff7a, 0x0, 0x0, 0x0, 0x0, "078cf0251c0e00"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xd})

14:01:53 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]})

14:01:53 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r1)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

14:01:53 executing program 0:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/233)
ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000000))

14:01:53 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0xa8d4, 0x6, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc0585609, &(0x7f0000000040)={r1})

14:01:53 executing program 1:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00')
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
lsetxattr$security_selinux(0x0, &(0x7f0000000040)='security.selinux\x00', 0x0, 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00')
sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="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"], 0x1c}}, 0x0)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in6=@dev}}, &(0x7f0000000280)=0xe8)
sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2010}, 0xc004)

14:01:53 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000140)=0x9, 0x4)
syz_read_part_table(0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000100)="39cd88c4872c5b15567cb37d9ceb9876c565b9e277c2ef32", 0x18, 0x3ea8}])
r3 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x200, 0x6a4400)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r7 = syz_open_dev$binderN(0x0, 0x0, 0x0)
dup2(r7, r6)
r8 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x5)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0xec, 0x0, &(0x7f0000000340)=[@increfs={0x40046304, 0x1}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r5}, @fda={0x66646185, 0xa, 0x0, 0x26}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}, @request_death, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@flat=@weak_handle={0x77682a85, 0x1101, 0x3}, @fda={0x66646185, 0x3, 0x1, 0x3d}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000300)={0x0, 0x18, 0x34}}, 0x1000}, @request_death={0x400c630e, 0x3}, @free_buffer={0x40086303, r8}, @request_death={0x400c630e, 0x2}, @request_death={0x400c630e, 0x1}], 0x6d, 0x0, &(0x7f0000000440)="59558b965b9fb747fdd07b4f9d25e9b76af52394aef87d8c18e2f2f00736dbfbd5d6a468045c984aa47e37bb28dbaff54d5a644cec7148a6c28125f5cb4308061e8abac38d3cabd5500b4c7307a81430c5a7ab72bc147ce5b9e682187e84564bfc187d1bc3265fef8d36ef1425"})
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x41)
ioctl$sock_SIOCDELRT(r9, 0x890c, &(0x7f0000000080)={0x0, @vsock={0x28, 0x0, 0x2711, @hyper}, @nl=@kern={0x10, 0x0, 0x0, 0x4}, @rc={0x1f, @any, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)='ipvlan0\x00', 0x4, 0x1, 0x1})
ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0)

14:01:53 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0xa8d4, 0x6, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc0585609, &(0x7f0000000040)={r1})

[  328.776102][T14070] binder: 14061:14070 ioctl c018620c 20000540 returned -22
[  328.824471][T14068] FAT-fs (loop4): bogus number of reserved sectors
[  328.832687][T14068] FAT-fs (loop4): Can't find a valid FAT filesystem
14:01:54 executing program 0:
ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x40247007, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182)
r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)

14:01:54 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r1)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

[  329.016813][T14068] FAT-fs (loop4): bogus number of reserved sectors
[  329.023939][T14068] FAT-fs (loop4): Can't find a valid FAT filesystem
14:01:54 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0xa8d4, 0x6, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc0585609, &(0x7f0000000040)={r1})

14:01:54 executing program 4:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x1ff, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000001c0), 0x0)

14:01:54 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00')
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30}, 0x30)

[  329.547686][T14091] binder: 14061:14091 ioctl c018620c 20000540 returned -22
14:01:54 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r1)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

14:01:54 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x0, 0x6, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc0585609, &(0x7f0000000040)={r1})

14:01:54 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

14:01:54 executing program 2:
syz_read_part_table(0x6, 0xd, &(0x7f0000000100))

14:01:54 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket(0x10, 0x80002, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@fat=@sys_immutable='sys_immutable'}]})

14:01:55 executing program 4:
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000040c0), 0x14ec)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, 0x1}, 0x50)
chmod(&(0x7f0000000000)='./file0\x00', 0x0)
write$FUSE_ATTR(r0, &(0x7f0000000180)={0x78, 0x0, 0x2}, 0x78)

14:01:55 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x0, 0x6, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc0585609, &(0x7f0000000040)={r1})

14:01:55 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r1)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

14:01:55 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

14:01:55 executing program 0:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={[{@size={'size', 0x3d, [0x70]}}]})

14:01:55 executing program 2:
syz_read_part_table(0x7fffffff, 0x0, &(0x7f0000000000))
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = geteuid()
syz_mount_image$gfs2(&(0x7f0000000140)='gfs2\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x0, &(0x7f0000002640), 0x210802, &(0x7f00000026c0)={[{@nosuiddir='nosuiddir'}, {@discard='discard'}], [{@obj_user={'obj_user', 0x3d, 'keyringem1'}}, {@uid_eq={'uid', 0x3d, r3}}]})
r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000002700)={0x2, 0x2})
ioctl$BINDER_WRITE_READ(r6, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f00000000c0)=0x8)
r10 = openat$vsock(0xffffff9c, &(0x7f0000002780)='/dev/vsock\x00', 0x4000, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f00000027c0)={r9, 0xff}, 0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r9}, 0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000000)={<r11=>r9, 0x4ce, 0x20, 0x7fffffff, 0xa64}, &(0x7f0000000040)=0x18)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000080)={r11, 0x4}, &(0x7f00000000c0)=0x8)

14:01:55 executing program 0:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
listxattr(0x0, 0x0, 0x0)
rmdir(&(0x7f0000000100)='./file0\x00')

14:01:55 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x0, 0x6, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc0585609, &(0x7f0000000040)={r1})

14:01:55 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

14:01:55 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

[  330.816087][T14172] binder: 14166:14172 ioctl c018620c 20000540 returned -22
[  330.946662][T14172] binder: 14166:14172 ioctl 89e0 20002700 returned -22
[  330.967806][T14168] binder: 14166:14168 ioctl c018620c 20000540 returned -22
14:01:56 executing program 0:
getresgid(&(0x7f0000004fc0), &(0x7f0000005000), &(0x7f0000005040))

14:01:56 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0xa8d4, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc0585609, &(0x7f0000000040)={r1})

[  331.040144][T14174] binder: 14166:14174 ioctl c018620c 20000540 returned -22
[  331.146723][T14168] binder: 14166:14168 ioctl c018620c 20000540 returned -22
14:01:56 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0xc4000)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

14:01:56 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

14:01:56 executing program 2:
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$KDGKBMETA(r5, 0x4b62, &(0x7f0000000140))
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
recvfrom$l2tp6(r2, &(0x7f0000000080)=""/149, 0x95, 0x2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x20)
syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802)

14:01:56 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

14:01:56 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0xa8d4, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc0585609, &(0x7f0000000040)={r1})

14:01:56 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket(0x10, 0x80002, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@fat=@showexec='showexec'}]})

[  331.672198][T14210] binder: 14204:14210 ioctl c018620c 20000540 returned -22
[  331.719306][T14214] binder: 14204:14214 ioctl 4b62 20000140 returned -22
[  331.760052][T14210] binder: 14204:14210 ioctl c018620c 20000180 returned -22
14:01:56 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

14:01:56 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @local}, 0x18, {0x2, 0x0, @loopback}, 'batadv_slave_0\x00'})

14:01:57 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

14:01:57 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0xa8d4, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc0585609, &(0x7f0000000040)={r1})

14:01:57 executing program 0:
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x8)

14:01:57 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000073797a31000000000000000000000000000000000000000000000000000000ecdf40e65cc780220000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000100258d7a3500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000030000cf0a000000000000000000000900000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000003b38e967c880c7159740571d05ac8206eaba86b97eec0b2bed1ee23364b10d6aad51020000e2a1db3c6a31e30dee4a2805400039389a804c41c2993fc67e8a14bd6045e14e8a0800550e6a25975bc171f1ff7fa373c0ef65f6ec71f0084254d140187fafa4a1ee6ece53c67385b8838aa36ad24a7dce0973c362bd726a8ab11b0a0b00e77e6c16503cf47ce47302bdd311378eaab7372dab5eef84c31b3cad46a7a0beda0686d2ae4d394286e5c81eae45e3a25ba62b8da11edb578b453acab1d57f25833d4d4c13eef0e0e62be2015eedef3c32984c6c4b2b9c33d8a624cea9f3f167faa13a3f01967f021d6e375c3b3cfffbffffffffffff000000000000000031bd6b1dc352e97b246b346574f3c06415f6cf685cdaa932d48033f2747bb0b8fbec73c462039eceeb261c512c6fefa4f52ecc1faa469f63abb29e6c6154218ab71305b9afe978e20ae45e5bc11469a638d0386de492b48613dda432217b9fdb16bcad7a609969306078ec0c5b6ac963af3fa174fb99eb4e5cf897339cd54b04e441cbbc9afd69d9dffe3d2e585cfbd29e01bed3e6acc64d980bf1dbe805c47ed513219b5de85825711f26b3aad5737d98f5f54e4c10e29cbc9af294be1939202b51b1459c788a25f58aa80e336632252e254c35f0fca0ad3079cfe79572464c22134587932f4572486990628cad05db00dd6aa918b868e6435882318d3c034688fd58aa13db33c63ac6cdd75becaebaaa91f62853954185a19160a6"], 0x12e)
setresgid(0x0, 0x0, 0x0)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
dup2(r3, r2)

14:01:57 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

[  332.477424][T14214] binder: 14204:14214 ioctl c018620c 20000540 returned -22
[  332.490667][T14239] binder: 14204:14239 ioctl 4b62 20000140 returned -22
[  332.514047][T14214] binder: 14204:14214 ioctl c018620c 20000180 returned -22
14:01:57 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0xa8d4, 0x6, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={r1})

[  332.627701][   T17] hid (null): unknown global tag 0xc
[  332.646474][   T17] hid-generic 0000:0000:0000.0001: unknown global tag 0xc
[  332.654114][   T17] hid-generic 0000:0000:0000.0001: item 0 4 1 12 parsing failed
[  332.662964][   T17] hid-generic: probe of 0000:0000:0000.0001 failed with error -22
14:01:57 executing program 2:
syz_read_part_table(0x0, 0x2, &(0x7f0000000140)=[{&(0x7f0000000000)="d43bb73bd2436eac3997eeef9e8b7d4acfe9b5300ff93e5cd4406054ff60272fd6624f5ae3f10795b178154a9d8c3d22beb02f5dd67c6c", 0x37, 0x4}, {&(0x7f0000000040)="f50c99ab8f71144b8bb0f9dca586f48e5ba0fc1845f981b5451018d250fade2ad5fd0b79731b1544d3fc6914a552e2ce379d196587b8b14777afd3ad42034ae5bdc641af76dd91363bba4b0680f206226ff05a72f3d8407507827a513f6b47b82f363182591147bc3d0d79448facaba00f4622fe449f91b83583ca4fabd6119fd3569b44da056da47ad6335bc9447616d091a2c8c36ea4ea45ac6666cdaea97d56b7f5465d425c25bcd62211e55c32de97fd843da9f1f5a386d55435545972551c13d9ee6b634a535d69fed8fbf27f494936bf1db7", 0xd5, 0x4}])
lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="62747e66732e776c616e3021282e2473656355726974796d643573756d0088d6772b1f3fe7409471da05000000b4be4d2ec50da526efebda246303d812c448af18665d0202525c758710720da880396cdc245a54ff7b2521528f6b462fe9c5746412"], &(0x7f0000000200)=""/44, 0x2c)

14:01:57 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
setreuid(0x0, 0x0)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

14:01:57 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0)
mknodat(0xffffffffffffffff, &(0x7f0000000500)='./bus\x00', 0x10, 0x7fff)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
syz_mount_image$nfs4(&(0x7f0000000100)='nfs4\x00', &(0x7f0000000340)='./bus\x00', 0x1, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)}, {&(0x7f0000000440)="80fd5cf0d0be9ac2f6d4da54e367523b3272f4b7a4dd4c11aabc8ec012bb6ae691c592fe0218b3004ef4c4a82920b7d66af5747ff3961a45fa2f7bfca92d6f929cfa97989165287af9ae4a9d4ff718ea12f4eed6cf9677589312125473dabe573a0f00730c943fdb3dea54a672a7141c75089174f31aa0655a285b86f6437c0f03eaa877961eecd74b5bf655efad5891573cd7d0843522312f", 0x99, 0x439}, {&(0x7f00000003c0)="7d53fddadb0a735db27158d37a8183591a31507a14cd7623b5ae24221f20a0083dc2268d8f9c780935bb18104947d155df879b770d3f20f02aea", 0x3a, 0x20}, {&(0x7f0000000540)="5e8cfa1b1b193d1dfea675", 0xb, 0xfffffffffffffffb}, {&(0x7f0000000580)="310a3d1c5bb80f63372b0dc5678d4de007858f9ad01b4e6d5f3c88e0ef462a90c4bf3011185d769024abc94cc5e8769d8ded62ba3166726aefebf5a2ac2362d6d96d24963569b65298bf476fe79ac3afbb904e671b6a27ba17d0b528005f79cfa619307284616057d93bd4e006a77c8ee62f20acbf2ef3fbda63d1d7cef735f73aff256607375124bf21710447c18c2f01be0c18cd87652d88134a08e157a5f0261e5f8a973a09e7deb48ac8d3b585acfa8d0f1023805fb4f9a3", 0xba, 0x2}, {&(0x7f0000000640)="507c6ecbbfa8049b280658fc5c2657c2d0428039fdc77cf294d80998282fbae38d26b6ce9d7e5fab2cdb17706c7d220bd91e22c10ed340ad6a41bb2b3f858f7176e5cf3c9e0c9cd38c2ead211197207d2288cee9b5552348ed", 0x59, 0x8}], 0x1, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="a0e912499a957e8074f2045dd89e"], 0xe)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000280)='./bus\x00')
sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe)
creat(&(0x7f0000000780)='./file0\x00', 0x0)
add_key$user(0x0, &(0x7f0000000400)={'syz'}, &(0x7f0000000000), 0x0, 0xfffffffffffffffd)
ioctl$TCFLSH(r0, 0x540b, 0x2)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
perf_event_open$cgroup(&(0x7f00000008c0)={0x1, 0x70, 0x1, 0x2, 0x6, 0x0, 0x0, 0x6, 0x4200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000880), 0xc}, 0x8000, 0x5, 0x81, 0x4, 0x1, 0x9, 0xe}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000000))

14:01:57 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

14:01:57 executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@fat=@uid={'uid'}}]})

14:01:58 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0xa8d4, 0x6, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={r1})

14:01:58 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0xa8d4, 0x6, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={r1})

14:01:58 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

14:01:58 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
setreuid(0x0, 0x0)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

[  333.423556][T14281] FAT-fs (loop4): bogus number of reserved sectors
[  333.430438][T14281] FAT-fs (loop4): Can't find a valid FAT filesystem
14:01:58 executing program 2:
syz_read_part_table(0x0, 0x1, &(0x7f0000001040)=[{&(0x7f0000000000)="d07453e43275bcefacd0ca232cb14133ffff4abd17505bd334c9212a0ad87c1d0cd942c9528791f170bc1a12f4a2569c04e98121908a2bc69c50d135afdc7920661c39d7e945b5af4e3b5720ef0927109c83d9865acea0cb941998c9f1cc732517a8ffb712620ebfe03967f2d5806536747e1294981e89e08a060c36449553662835b870ff6a54811ccb7d338934de1daef831e6c70ed68bd3561322f7cf431d19d84c9ca2aeecb943577410a41bea1da16e495c6c7555c22b08e8279809fc586497b4cb72bf259caf42663169c9b2a1c6d504d59da48b64606d479555e5795d0dfdfce21b46142a7d3d183c5630a0b583ef9682ad8988583583d0771633f4badaf267394876309a225269410a48cb525e7f47002735bfa2ad721279990a42776eb94a503e09567e432423941ee219f1248e549408becf4a21a7ed9d6c06ea13da1163c5b13d36cbd6e272cf7a4e6e3156e9e78882bf565482a5d79cfbf576cb8b72b7354f9e45b79c26bb618d5f705e6bc40e6584c10b8b15972fae4f17dd8bf34ba02479f5506777888a4adf368bf6edfd8aeec458dca99d30a56b9eed7f327b18f60ae2ba8e20d40a1631d9f6af0f3af63714b2638cb5ae2c29c44182a9e7ea58ef9bb6992a598319523633b8489d1274e89811e8c56ddcc091505e58d7e7f750598dac14d0aba448addb062f90a57012b2ba30490c21d0a42c04177a94b2299ffbb7d80f8d616afacc7f907d90f7bd2d4fdcc159e95042a28bd61e2fa22052daa56953b6a0204f973887deac8c9079742f0a71da2bf49a66345bb31e20f76fd5ebe33e361e550f1e49057ce20de01100b487137d28eb1cb26502ea85353ea5aace19fd3faf03254dc8044d3c2876cbd530ce85ab727980be50c5390a7c7c38ad8d61ed16b27c482faa2350a6b4e175746d31aea4bbecb849bd3a275856f11326d474337a072ae5f5509474c6fd1bb5549e51d9838623396cd307fd4d1bc7b739ad4a77c0236cef151eff45a6b91d66fded88ba407ab560904f96cb861e70d2cae5e7026569e13959f31b843c7685e02837209c829fa401b76aa5ab494da97ebcae55691c034f7844b4d1200198362172fb682d2dd1b96a532164888cd5f58f71f9c19be6f59993a9d4f4a0d1d069f656af420ddf1a018d962c8d6c5809998e75564a508505a932b3a38a8c54d3a3e70658986cc78e54d9df965f38719de7d3783afcfe44184b3d86f46f4ab6d793beedabf54fbce15d7637c7620e90b4973016266ed8dc29b59da4526fa85342951fbc60d42336cd172a3aba8ff3d8391e6fe57092cf2b1837899689addafaae57338acf8acfbc914c89eb92888e6c89eef01f3a2349f4ce61666dab868cc59f320c834c38041fc46e172332ad680621667d0ba8f23debdb2ecc567c0c6e5db8a93fde0f0712dec59208046ef19ed73319db2aa273ae17e8449b5b5987a0b6d160b8f5d2b27ba209f654c9e9828f110eb202578755d2bc89551cd029e76977090aaa6054d25925fa324d77b8c7b94fe35c56de8abe4a3b7233bcfdfe7aab403087945da7d54d5fb7ba052106fd42e2be30a7f928f94fa55e26dcc9695a152255fb55e8955beec95c129eecd6296d6356ffabf0dd31f4aebea60f9a202e0b5f20974903d1c31cd200058dc84b6c77f66f80cc3e116ff36d3b49fa371acb8fa7604d9c97d08c45342d02bdbed52f57a914ac96e38ef4d898c1df89b2625d5dbf3b0f996398bbe199ba076be3eae43419278d48bf009568af431415cc05a721d638cf0b39f8613bfb2503872347903242d1ec244709f4fd62733958051f24463d280c9d624ddce0821fe691b72310c14d004821dc62c2c89aa24f9c0ee64f7f7c99c8f27c0ce8e6215355db3b40fcb24e5f0c7014428d2c4d407e6fc4fd99f0f07080dff5828c76b4e01d7c09a77c365a959aa498ac201a0231d7bc9d5727703e4aeb5e79b2924c710ae6b2b2bef8cc0ee4f1e14b812805c2befde36e56cc801da664dec6f26bc7213b2bfe1934afa462aa711d4fac0376c05d8c59616c3272cf8edc475a93eb4e89cc74bb971eed44c9a35e91b5e30d1239a477b89452931d029e64697840042c9ffbcf703e499273842e13ecc31836603408625b6784f67077af4649a89323cb35c66d4fd05bf87f5bf4a7b57bcbc78c5332af9911d0228be19a0577f3d2d9b18faffd25eb8dae91cf2c192cd78596d0aee385543d3eafd6617f0dcb6d1566e18c09b973cfbb4f56a0e317d39b6f4ad3c25020ab5847ae596bf89eeb801b546cf1e04882deb69c70230a4baa826930a35ff97c79d591483207ba4e90764a28c324f885a0a520e7397ef04d42e5ce854fd6c627b7dc9a2870d6198e52351ddb4efff40c749c360f1c647afc4368853ca63a54f829fd93e0efd5e93fcec425fa632e7a62ad605faf14300036d67054e290adb0a93e24f2331099c4f9462610d1d76e4c43648fbebff773024a5446a935b3eb450a6a916c54f2931c7717bd873509603a962ba6d4fcede0f77b845b188691077fc0a4699bea9fdfa8913f850711fcba56ef6d6e4028cb9f8d31e905e8aa72726e38af8748eb6dccdfc67cc49366308ab64f683f2173c9fdeec8cccb027e1524a11e857876dc258e70ee50cbfcaa45f9c5d743f3e97af12b581de6f47418b7e02b384ea202fcd99930a7adf85e4ab2c3458b339ce653953350db2af23913c36574959487f59f63d247e3c94fcdb5a6a22ba162f8d84c77cfe389a294c349298e7e63d0723626008ce459f2c5f5fbf18758d102d179ca3a856f8dd77be540fd940536000588cfed5f1b5eaf8902a1539a94635bfd1dbf41f48aa544c74f1693956c2fb2bb5c3fdd9dd8e01047b17156ef1744239e4011b79d0539c7c4c1fef566ed94f897d946cc7cbd3fd6174666105d7c3b58c257dfb4433e39462293194aa1320f84bf025d2b6a03f6a92a0a154a6d42df76f81abc709ce0cc8995fbf39a39ed12b7ed3592ea784338705fefceb3dc91f0efe170f6371a3625691c9389fe78a85ee81416745b8c30cf10b8ce26a867dd5023dc5193cc06b25c7f328e2ef9964899c8714cbdb415401c493f581b9fcc1fe7644fd64b4046e91b7e3999a177f7c3d7faaaa732b86f6ece09bee9303a09d70141860ea6490bd88fdb5cf6985bea03d1a79319acd2f5d3ff0422a3a864f51aa6dc20ecc14eddac5e447d0e52771ac14b3ff6258e965a82dcdb62a39d1587a1e0cce8ca78a4579a1b49968358ababe74141b77f2fe6a1dcd3feecbe252c70c99af45747ee77ccb293af2bfad714c007ba604bf66879783d846057f36a8896e4979e437ffad12db4583c535fbd008f78ac70e34d0c508c13f78910ca0454d4d018b88bea2372e1f4c89389e680d5339c365a8acb10d5dfab75ab712e9043556816cd293de213e8bd1ad4f9634099169f8cd86cc8bf60abcc2e211399bfb9b0e6b1d8eae415baa3de0de74cbd6e4040eba55fda2cfcdab0343ae77ae3df9b3cce06cbe325985d108c54c37ed7a110654226a34482e83f7ab3868739a7a85ca075366e8de7afe022d1fef13e35670ed98aae2dd1bf4f9496c076ae1232b5f5a3bb244317439d5e79e425719eaccc2c93ea7253020ecb0588b18de13e9275e0047ce912bb81bab5562eb44ee32dbbb932a6c9a07d27344d932b611cb2cc4e72a82363b77d0a385c031e814caf6e8600f4c69752fa825d97aa0ec59feec4b6ad17d49c4bb0f405a955c5dbbb4b0ec06a4169c8b091d2b69f3021cbe0d9eff6de516ff5f8b16a7f531419f2983f8b78317664ecd5cf86694c17df6744df0eadaedcf61685f228385b407756c31c0734f8a6c29d9f0e7cce8efedb4f6cd71a714bd131da86d0d0631611d69e577b03e257439bb71be15780258edf9d0d91a57f08edb66602f5d74feef2d633b91668a03fa43a3ea8ba4b9cc5203e1a3e4a59d5332dc0effd031c00967eb13faf48b4aaacb87bb6cfea49fb0dcc47eee35bcee7d503952cf861a958d7dd188ce9d7d7ed60e4d5247d2c6753af895533d6f28c92b1d3d883e98c3f7612faf270df2b05446834f36259dd0ca093dfdffae4f04d830ea1d5927f1d7227b532c6585b2347706194581653cbe0dba68629c4c87a703a3133dc5d20f77f498351c3d0f6dab104b7e60bcf40ef19e3f89099794a8caa140f160d023055c95896016f1cbba39d0e3d268866fad3ff78c46f3701668e215b09c8bf7a288931efb082c66ed85357efa5e8088b6551e0a643c2878210850b4737bf5a68e059c46b69e3a8b49771d13e96a87a8fd2cab438fbba20f84653d52250255612288ccf053fa32d2666fcb999161fd220ca2900f7b0cbb998b993274fe67bbf469af483a70c9a210a6dbafcde4d172938707b49e9d28a649fc69080338dd61a44b164db4775818747710c599a6b3c820554a9dcd30cd371a08312e0fae72458377a9d7b6a197804519890bc7917f91328958ee978af66c0a796ed982874de7e6bd1d4859531d53a78a8f5362a6dd8fd7cdb482bcdddafb3e083c22923acdb49c34c4b2776e71712e529b812aa09d5ad60fcb3b36103a5c70f0b80594a2611c2d417efd8a9cd8a4af34d754f8c9c7291700cfb3fd01fd14da648c84a364014dd013cd0d134bb5db51fc29bfe3cbd9bac303867c21182494bec93a51e7f1a8cbf0081fa030f787311e4154d87cec912c3f520a45a5d031af29afd816e046b47f959f19b8d1608876a1013bd757f938132db28f175a836ec372f9b123905cc037d2c2e48cb38dba9bd1db62f31bfd8c714c2fefd00a168b49bc692cbe18dc82c2b7f0971a97252bd1220e937bc8cb262da2821c49888366166e7ac6777927cac250c8a3ee7c056c8f3a97f6edaf90c4a02fb973928351f8608116a3487e8fe455be7081abe3ec8cf1f930b880691579f3da3a159ecbb55c711f6d6763c214cdf682c7e6fda6894c9fd223252f0bbdf7f2816a0f8ca7f2ff64e126ebeb080c079d0b2678c45c222e2a24481facc011c4ce31ef056b3cac454d600ab6cb00d52cb9ddc8501c05912f265069031b45ca6a3f3b9d48073c77eb074777336a99197898dec7e52930be0ca89caee557014ec73d25fabd141d1d88f097a961f04ac3eede91234ec5ddf8cdea0cfa06d51cfad479250f7e280c6f3fca104718c5281e52eda3c4fce02404496da02c34b64f8ac9a4df5a909685a3e0b56ccb41187a30771a9751ca46ca522586bd3a1a846c4aaa6e59688d427b94bba67ba3affa268cf278eb46073819eb6a7ce7a1dc4cff224804baf90e5eecb113970a3a6ec82eeb6b0d6b8401cc306335918aa8792ef541a6007febb67e88acf54719410cb7b659a5debf9eb258efb54696ef707a5e91d58bdf5acfb935a2272d6c32607aa1d78dd6610306a18cc9be1d73affb8be17b9e3002c9a8f3863c3feda017086ea7bdb6e69780ba8ad294152c8a3c2edc2c2460329f99ae7bd23b3dc2e71d292388bb129ca740f2f7c05fc2e8eafcb16945bc247ea1d2179f6fddf28d7cb3474bfed6c5b6c47144bfaf1f83904e0b652f85a1b94a823fbe1aa2b065b3731d7833250cf3fa6f33e90372071e1a81b6a8929901b243a4cd166914da2915a8707e5dbad12c827d313de530c026309d81eea6cbf7a30e4ea8cb16114ea52526d6045ff51971f500054203a574089235a5ada6378355191d8f87cd9a4fa689941c411fe246c00406d923ca2273e52c2fef003ebc487af9c598333135bad825d7ad92b8f8de762b4a4fec6bad12200000000", 0x1000, 0x7}])

[  333.520801][T14281] FAT-fs (loop4): bogus number of reserved sectors
[  333.527496][T14281] FAT-fs (loop4): Can't find a valid FAT filesystem
14:01:58 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

14:01:58 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0xa8d4, 0x6})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc0585609, 0x0)

14:01:58 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
sendmmsg(r0, &(0x7f0000007f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)='\x00', 0xff60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)='!', 0x1}], 0x1}}], 0x2, 0x40040)

14:01:59 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0xa8d4, 0x6})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc0585609, 0x0)

[  333.992722][   T33] audit: type=1804 audit(1586268119.020:21): pid=14301 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir200420643/syzkaller.ps6yWG/228/file0" dev="sda1" ino=16362 res=1
[  334.066526][T14299] Dev loop2: unable to read RDB block 8
[  334.072527][T14299]  loop2: unable to read partition table
[  334.078384][T14299] loop2: partition table beyond EOD, truncated
[  334.085027][T14299] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
14:01:59 executing program 0:
syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@fat=@showexec='showexec'}]})

14:01:59 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

14:01:59 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
setreuid(0x0, 0x0)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

14:01:59 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$dupfd(r1, 0x0, r1)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

[  334.381243][T14299] Dev loop2: unable to read RDB block 8
[  334.387049][T14299]  loop2: unable to read partition table
[  334.393064][T14299] loop2: partition table beyond EOD, truncated
[  334.399512][T14299] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
14:01:59 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0xa8d4, 0x6})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc0585609, 0x0)

[  334.483449][ T5253] Dev loop2: unable to read RDB block 8
[  334.489320][ T5253]  loop2: unable to read partition table
[  334.495147][ T5253] loop2: partition table beyond EOD, truncated
14:01:59 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0)
pipe(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
getrandom(0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, 0x0)
r3 = gettid()
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x1)
write$binfmt_script(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="2302c694c8ab6eaa547ab11efc357628efb4a24fe846892bc04b26c0d8d21d5d6fe0eb92552fba4708006ebedb04000600004c8d000000000000d1ede6c1f37b9c352ef858000043"], 0x48)
prctl$PR_SET_PTRACER(0x59616d61, r3)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r4)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r3, 0x0, 0x0)

14:01:59 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000000)={0x7})
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))

14:01:59 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0xa8d4, 0x6})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc0585609, &(0x7f0000000040))

14:01:59 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r0=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r0)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

14:01:59 executing program 0:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x808045, 0x0)
chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

14:01:59 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

[  335.057060][T14344] binder: 14340:14344 ioctl c018620c 20000540 returned -22
[  335.097437][T14344] binder: 14340:14344 ioctl 401070cd 20000000 returned -22
14:02:00 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0xa8d4, 0x6})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc0585609, &(0x7f0000000040))

14:02:00 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

14:02:00 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket(0x10, 0x80002, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@fat=@nocase='nocase'}]})

14:02:00 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r0=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r0)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

14:02:00 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0xa8d4, 0x6})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc0585609, &(0x7f0000000040))

14:02:00 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

[  335.845805][T14371] binder: 14340:14371 ioctl 401070cd 20000000 returned -22
[  335.845877][T14344] binder: 14340:14344 ioctl c018620c 20000540 returned -22
14:02:02 executing program 4:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@size={'size', 0x3d, [0x67]}}]})

14:02:02 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0)
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r0, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
getrandom(0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg1\x00'})
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, 0x0)
r2 = gettid()
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x1)
write$binfmt_script(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="2302c694c8ab6eaa547ab11efc357628efb4a24fe846892bc04b26c0d8d21d5d6fe0eb92552fba4708006ebedb04000600004c8d000000000000d1ede6c1f37b9c352ef858000043"], 0x48)
prctl$PR_SET_PTRACER(0x59616d61, r2)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r3)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)

14:02:02 executing program 3:
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
setxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='security.ima\x00', 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f00000040c0), 0x14ec)
read$FUSE(r0, 0x0, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, 0x1}, 0x50)

14:02:02 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r0=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r0)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

14:02:02 executing program 2:
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
inotify_init1(0x800)

14:02:02 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

14:02:03 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r1)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

14:02:03 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

14:02:03 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket(0x10, 0x80002, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@fat=@quiet='quiet'}]})

14:02:03 executing program 4:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2db81eb3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000073797a31000000000000000000000000000000000000000000000000000000ecdf40e65cc780220000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000100258d7a3500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000030000cf0a000000000000000000000900000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000003b38e967ac8206eaba86b97eec0b2bed1ee23364b10d6aad51020000e2a1db3c6a31e30dee4a2805400039389a804c41c2993fc67e8a146045e14e8a0800550e6a25975bc171f1ff7fa373c0ef65f6ec71f0084254d140187fafa4a1ee6ece53c67385b8838aa36ad24a7dce0973c362bd726a8ab11b0a0b00e77e6c16503cf47ce47302bdd311378eaab7372dab5eef84c31b3cad46a7a0beda0686d2ae4d394286e5c81eae45e3a25ba62b8da11edb578b453acab1d57f25833d4d4c13eef0e0e62be2015eedef3c32984c6c4b2b9c33d8a624cea9f3f167faa13a3f01967f021d6e375c3b3cfffbffffffffffff000000000000000031bd6b1dc352e97b246b346574f3c06415f6cf685cdaa932d48033f2747bb0b8fbec73c462039eceeb261c512c6fefa4f52ecc1faa469f63abb29e6c6154218ab71305b9afe978e20ae45e5bc11469a638d0386de492b48613dda432217b9fdb16bcad7a609969306078ec0c5b6ac963af3fa174fb99eb4e5cf897339cd54b04e441cbbc9afd69d9dffe3d2e585cfbd29e01bed3e6acc64d980bf1dbe805c47ed513219b5de85825711f26b3aad5737d98f5f54e4c10e29cbc9af294be1939202b51b1459c788a25f58aa80e336632252e254c35f0fca0ad3079cfe79572464c22134587932f4572486990628cad05db00dd6aa918b868e6435882318d3c034688fd58aa13db33c63ac6cdd75becaebaaa91f62853954185a19160dc8d"], 0x12e)
r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
dup2(r1, r0)

14:02:03 executing program 1:
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

14:02:03 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r1)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

[  338.717476][T14428] FAT-fs (loop3): bogus number of reserved sectors
[  338.724238][T14428] FAT-fs (loop3): Can't find a valid FAT filesystem
14:02:03 executing program 1:
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

[  338.835825][T14438] FAT-fs (loop3): bogus number of reserved sectors
[  338.843062][T14438] FAT-fs (loop3): Can't find a valid FAT filesystem
[  339.043233][   T17] hid-generic 0000:0000:0000.0002: ignoring exceeding usage max
[  339.122684][   T17] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on %�z5
[  339.263419][   T17] hid-generic 0000:0000:0000.0003: ignoring exceeding usage max
[  339.302868][   T17] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on %�z5
14:02:05 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000100)={0x2, 0x0, [0x4b564d03, 0x1]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

14:02:05 executing program 2:
syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="bd9e408893ba32581d9d527f8b665b", 0xf, 0xff}])
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r5}, 0x8)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000010c0)={r5, 0x81, 0x1010, "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"}, 0x1018)

14:02:05 executing program 3:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x12e)
write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000080)={0xe, {0x7}}, 0xc)

14:02:05 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r1)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

14:02:05 executing program 1:
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

14:02:05 executing program 4:
r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x3c0a, r0)

[  341.049025][T14490] encrypted_key: insufficient parameters specified
14:02:06 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x43)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200))
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x4c8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  341.103364][T14492] binder: 14480:14492 ioctl c018620c 20000540 returned -22
[  341.132668][ T9704] hid-generic 0000:0000:0000.0004: ignoring exceeding usage max
14:02:06 executing program 1:
r0 = socket$inet(0x2, 0x0, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

14:02:06 executing program 5:
syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r1)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

[  341.278787][T14508] binder: 14480:14508 ioctl c018620c 20000540 returned -22
[  341.331721][ T9704] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on %�z5
14:02:06 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x8}, 0x20)
socket(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

[  341.457498][ T9704] hid-generic 0000:0000:0000.0005: ignoring exceeding usage max
14:02:06 executing program 2:
pkey_alloc(0x0, 0x1)
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))

[  341.582915][T14518] kvm: pic: single mode not supported
[  341.623811][ T9704] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on %�z5
[  341.653140][T14534] BPF:	(anon) type_id=2 bits_offset=0
[  341.658995][T14534] BPF: 
[  341.661829][T14534] BPF:Member exceeds struct_size
[  341.667585][T14534] BPF:
[  341.667585][T14534] 
[  341.817212][T14534] BPF:	(anon) type_id=2 bits_offset=0
[  341.822789][T14534] BPF: 
[  341.825609][T14534] BPF:Member exceeds struct_size
[  341.831273][T14534] BPF:
[  341.831273][T14534] 
14:02:06 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x8}, 0x20)
socket(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

14:02:06 executing program 1:
r0 = socket$inet(0x2, 0x0, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

14:02:07 executing program 3:
accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10, 0x0)
fchdir(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
lchown(0x0, 0x0, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8001)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

14:02:07 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
sendmmsg(r0, &(0x7f0000005300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=[{0x80, 0x119, 0x3, "811c9357d4c87b5f9f51c75457f9937974d47e6643c0a8700cf64e560801251f145b5461f6f48142b55d9dae305e5e918a450e9fdad7d8330d5d4168dd5a47539a0050d65a54370355fb267c78beb487db0999473b408ca0ac20c9b5ae0e5a7ae6345b41a67967ae1245d9cb95"}, {0xc0, 0x10f, 0x7, "01c67abf5fe733d66ec94ebde0841fa78cc6ec58293d8704aadd69b1ba69de6fff09168fc9a156aa083624a6d7992e02b7bcd4bebdb10c9ed65978b48798ec29ea74df4f39c6e52cfcaf93b6f270c8582f240065475f5dc68cf69886f9c53489d8b2ceaeb3a01f1ab3de6aa298bf087589f5415e9728e620794be3314eaea1bbe63274364565a9e4385a292d55ce0b47d57e3aa029c71f40905652e3e306d6b325e4c404bc6df1d2cb596d62"}, {0x50, 0x116, 0x1, "6b351a3f8903982f9e90adeae990d2a27eb8459201a59a8ec5c1635b629b25d00cf84960043f3013dd0de3fe596658c85847904b519e0a49db81a68ed9"}, {0xf8, 0x10f, 0xa0000000, "5359e7998efbd2a79cc172397d00348890c3a036d79d86ea2b5047ff97786f43ce28444f0c29748c3348c234d7406ab835ade33c36a7c34fa570b768b8143cf85a79fb530fc0af5bf93b35c9d7915b29fe1406759fb35f2d0290984d374f61f7b1a6435218e77c6f230aaf1d5750781739aa264e6b62ee281491d09aef6c6b9fbaaed1d1b80f9ed816c010cc76024e42011b766c19a1dcda0a185091cb6b0bea9d58717e97863f402845404c3c2452d6478f720d8794cf954d829f9bfaca22e2c555f361709caef085cda638cb8d5685c7bb3b7d999b6b7fc6eb579b3d1ada3826"}, {0x28, 0x115, 0xc9b, "f88e3cac35c5aebe515bd1bc65cab7e2cbf14c8e"}, {0x70, 0x107, 0xa779, "2308b68447be5a3139270680d857d70cbb9e21e19eb4f8ce3dc65098d5f1cda64624246acc85e829140f525b7c1280f659e2cdacf2e4b61dca8ca512aa5f8ea3a76cbfd51fa42add223b4a196c0f57082ac58ec5d587e6369ccbde"}, {0x1010, 0x10d, 0x100, "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"}, {0x40, 0x10d, 0x800, "583a63b04ec2a088a6aea64ac323383020c116e7143439304a2ab1f9ab9941cadf3d4d833ae349f345b2da69a56eb7aa"}, {0x1010, 0x88, 0x0, "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"}], 0x2380}}], 0x2, 0x0)

14:02:07 executing program 5:
syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r1)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

[  342.146915][T14561] BPF:	(anon) type_id=2 bits_offset=0
[  342.152533][T14561] BPF: 
[  342.155349][T14561] BPF:Member exceeds struct_size
[  342.160977][T14561] BPF:
[  342.160977][T14561] 
[  342.464355][   T33] audit: type=1804 audit(1586268127.493:22): pid=14575 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir069403790/syzkaller.1qtDBg/158/bus" dev="sda1" ino=16417 res=1
14:02:07 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x8}, 0x20)
socket(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

[  342.643757][   T33] audit: type=1804 audit(1586268127.573:23): pid=14575 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir069403790/syzkaller.1qtDBg/158/bus" dev="sda1" ino=16417 res=1
14:02:07 executing program 1:
r0 = socket$inet(0x2, 0x0, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

14:02:07 executing program 4:
r0 = socket$inet(0x2, 0x3, 0x6)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
write$binfmt_aout(r0, 0x0, 0x0)

14:02:07 executing program 3:
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924aa4, 0x0)

[  342.819623][T14589] BPF:	(anon) type_id=2 bits_offset=0
[  342.825272][T14589] BPF: 
[  342.828665][T14589] BPF:Member exceeds struct_size
[  342.833655][T14589] BPF:
[  342.833655][T14589] 
14:02:07 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001280)={&(0x7f0000000080)="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", &(0x7f0000001080)=""/152, &(0x7f0000001140), &(0x7f0000001180)="e476a0c174de879eb2bbad393a781805f0183ebaf78f1c92e46ad53855ac4b4a794a2c944633b9c252033a38f173c23c0e34785c5f65d73ca6133cb01bceab41668247f2397f65b55e56253fe8283006b81002aca6bd92e66464cae5c067002ea8d331f6e3f8496302764b546ce7c0152f80fb163f037d8fdf6a24c63b5a91d580a2884f8e7cd45df152d0b5d6fe4d1ff688a53b6497df1f86f9922a5140f08ddf1a573bfb0464c029d4b4bc6a24409b763e131b89390e9b369398b445fc01a49e83a47b514f5a5de68cf31507b57ab88a182975c852f7bada131c", 0x2, r2}, 0x38)
r3 = openat$snapshot(0xffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x103000, 0x0)
ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000040)={0x0, 0x8, 0x8000})
r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r5 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r6 = dup2(r5, r4)
ioctl$BINDER_WRITE_READ(r6, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000001140)={<r7=>0x0, 0x48, &(0x7f00000012c0)=[@in6={0xa, 0x4e22, 0x8, @loopback, 0x81}, @in6={0xa, 0x4e20, 0x9, @rand_addr="77a9e004ac0915f34d8a06daa2b6fed4", 0x100}, @in={0x2, 0x4e22, @local}]}, &(0x7f0000001340)=0xc)
setsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000001380)={r7, 0x80, 0x2, 0x4}, 0x10)
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))

14:02:07 executing program 5:
syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r1)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

14:02:08 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x8}, 0x20)
socket(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

14:02:08 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

14:02:08 executing program 3:
clone(0x2000900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x228, 0x0, 0x98, 0x0, 0x98, 0x98, 0x190, 0x190, 0x190, 0x190, 0x190, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288)

14:02:08 executing program 4:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0x10, 0x4, 0x3c8, 0x1f8, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_macvtap\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@arp={@multicast1, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wg0\x00', 'ip6tnl0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @multicast2, 0x8}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wg2\x00', 'team_slave_1\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x97e3, 0xf80e}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x418)

[  343.322311][T14615] BPF:	(anon) type_id=2 bits_offset=0
[  343.328606][T14615] BPF: 
[  343.328776][T14614] binder: 14606:14614 ioctl c018620c 20000540 returned -22
[  343.331651][T14615] BPF:Member exceeds struct_size
[  343.344289][T14615] BPF:
[  343.344289][T14615] 
[  343.399462][T14614] binder: 14606:14614 ioctl c018620c 20000540 returned -22
14:02:08 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x8}, 0x20)
socket(0x0, 0x0, 0x0)

14:02:08 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r1)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

14:02:08 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0)
set_robust_list(&(0x7f0000000540)={0x0, 0x10000, &(0x7f0000000240)={&(0x7f0000000080)}}, 0x18)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100766574680000c6bfeb21e2e24ee4a8716ee40000"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010008105000000000000000000200000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000b0001006970766c616e00000c000200060001000200000008000500", @ANYRES32=r3, @ANYBLOB="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"], 0x44}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0)

14:02:08 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

14:02:08 executing program 3:
perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99b, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x100000400000003a)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
sendmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="82a2", 0x2}, {&(0x7f00000000c0)="c51a2f042eab9f016829e8d8d9f2234b5cab5fdb5564fdba", 0x18}], 0x2}}], 0x1, 0x2406a464)
write(r0, &(0x7f0000000100)="d840", 0x2)

[  343.845188][T14640] BPF:	(anon) type_id=2 bits_offset=0
[  343.850958][T14640] BPF: 
[  343.853882][T14640] BPF:Member exceeds struct_size
[  343.859042][T14640] BPF:
[  343.859042][T14640] 
14:02:09 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x8}, 0x20)

[  344.031922][T14649] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  344.090972][T14651] binder: 14606:14651 ioctl c018620c 20000540 returned -22
[  344.140256][T14657] binder: 14606:14657 ioctl c018620c 20000540 returned -22
[  344.242942][T14672] BPF:	(anon) type_id=2 bits_offset=0
[  344.248707][T14672] BPF: 
[  344.251541][T14672] BPF:Member exceeds struct_size
[  344.256749][T14672] BPF:
[  344.256749][T14672] 
14:02:09 executing program 2:
syz_read_part_table(0xfffffffd, 0x3, &(0x7f0000000380)=[{&(0x7f0000000000)="a8bb73dc1c5c866e8bf06fce0988c34e98d83afeb873233b22aefc6992319633485bd85d169d91559078f0b93d74babc81fbd8d9dad71fa7d11dd04f588df6e513b51d11669f09d3084ca173297ca16869b53dfff342c3f6f377ba15645fc0bcd13194285ade199661431c43e9811d17f992013c98e556d1065b80fa1d34ebf8f824e0916940a3700f4bd88cd0b18c9e404150866b6448abfc39be35e6ec33d21323f3c5d3164920e238dd7e23503160149decc83dcec4f8e236f3b64adc4626458f589415cb136bf5cd2ffa2e0adbae982b694515", 0x8f, 0x10001}, {&(0x7f0000000100)="01f1a8df908b502df19b9a79339c5ccd6e7b6de8016a188cef273861cd62cec95cb93ad1a0deafdb5c8a57a46bda48e14cd53a6634435dea26a921ae1c64e0e84127f9fd0efa", 0x46, 0x1}, {&(0x7f0000000180)="116250c2a37a9fff835406836904af8a97aefb09aa4009217a5f535689d5c3ffc79d5e917d39ee8b97c72d1f982f72572136e193cddf139642abfd58b7437e7d94b81b5e945d7ba1b52434c7ee74be18e3db077394ea2e8e8222c29dc274a2811e0536e05ad06ff20e0dd5b82b55a6e5bbd75886063715b229d7fa05da45ffddd0ebefed7d925150bdcead78810936a9d27ccbb672cf5cd3097658c11dc363c691b3e36e37d7bf325f66289b005476937e3fe61f20172d216f669243063b4112aa57a5b1ffcd883ae56d88fa938ab1f3e0bf029f252f39beef0bab92b33620fd284e14d437aa8465f89d07696d34aa4359f16e", 0xf3, 0x1}, {&(0x7f00000002c0)="b03baad3a1f319b0517da81a382ac6f31ad20752c0cf77dc3cc36b91343a38adcba7f44e9bab899f4061a9f92f2ca519124eb5cf387a6540e710c54f4fa6f035d8b752b58a57666478555896c4f58fc307695942696edf44f1d9abfb1cf30fee8058ae17a9c077f71a0f3878c1f0bc7414a66b9bf1f851ff15422facacbeae2779aa9ce843d9c42579935499e3af04d1986cefcd2ac779445de3c59fdb665cb8509b9f0999ab4c2c026330cb845f6267b38dd3af3d3f3ffa77f9978b78c5", 0x0, 0x6}])
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@empty, @in=@multicast1, 0x4e24, 0xff15, 0x4e22, 0x5, 0x2, 0x80, 0x80, 0x87}, {0x0, 0xffffffff, 0x0, 0xe4b, 0x4d, 0x401, 0x3, 0x1}, {0x5, 0x2, 0x1, 0xffff}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in6=@mcast2, 0x0, 0x4, 0x3, 0x1f, 0x6d56, 0x1, 0x1}}, 0xe4)
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
accept4$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14, 0x800)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@mcast1, @in6=@mcast1}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f00000004c0)=0xffffffffffffff13)

14:02:09 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r1)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

14:02:09 executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x8}, 0x20)

[  344.440303][T14658] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
14:02:09 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

14:02:09 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120401", 0x30, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3a}], @ndisc_redir={0x89, 0x0, 0x0, [], @loopback, @local}}}}}}, 0x0)

[  344.621259][T14691] BPF:	(anon) type_id=2 bits_offset=0
[  344.626893][T14691] BPF: 
[  344.629814][T14691] BPF:Member exceeds struct_size
[  344.634826][T14691] BPF:
[  344.634826][T14691] 
14:02:09 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r1)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

14:02:09 executing program 4:

14:02:09 executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x8}, 0x20)

[  344.751491][T14699] binder: 14694:14699 ioctl c018620c 20000540 returned -22
[  344.782629][T14699] binder: 14694:14699 ioctl c018620c 20000540 returned -22
[  344.891636][T14699] binder: 14694:14699 ioctl c018620c 20000540 returned -22
[  345.129211][T14720] BPF:	(anon) type_id=2 bits_offset=0
[  345.134679][T14720] BPF: 
[  345.137847][T14720] BPF:Member exceeds struct_size
[  345.142848][T14720] BPF:
[  345.142848][T14720] 
14:02:10 executing program 3:

14:02:10 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xfebe)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'hsr0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14)
sendto$inet6(r1, &(0x7f0000000300)="0503000189063e0000000100c52cf7c25975e697b02f892f6b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdb8, 0x80, 0x0, 0xfffffffffffffe57)

14:02:10 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r1)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

14:02:10 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

14:02:10 executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x8}, 0x20)

14:02:10 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xfebe)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'hsr0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14)
sendto$inet6(r1, &(0x7f0000000300)="05032f5589063e0000000100c52cf7c25975e697b02f892f6b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdb8, 0x80, 0x0, 0xfffffffffffffe57)

[  345.781796][T14737] BPF:	(anon) type_id=2 bits_offset=0
[  345.787561][T14737] BPF: 
[  345.790452][T14737] BPF:Member exceeds struct_size
[  345.795629][T14737] BPF:
[  345.795629][T14737] 
14:02:10 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

14:02:10 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)

14:02:11 executing program 0:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x8}, 0x20)

14:02:11 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r1)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

14:02:11 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071")
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x2c}}, 0x0)
sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0)
sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x0)

14:02:11 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

14:02:11 executing program 4:

[  346.472367][T14761] BPF:	(anon) type_id=2 bits_offset=0
[  346.478040][T14761] BPF: 
[  346.480977][T14761] BPF:Member exceeds struct_size
[  346.486145][T14761] BPF:
[  346.486145][T14761] 
14:02:11 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000180)=0x7fffffff, 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

14:02:11 executing program 0:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x8}, 0x20)

14:02:11 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071")
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x2c}}, 0x0)
sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0)
sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x0)

14:02:11 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r1)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

14:02:12 executing program 4:

14:02:12 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000180)=0x7fffffff, 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

[  347.043998][T14782] BPF:	(anon) type_id=2 bits_offset=0
[  347.049716][T14782] BPF: 
[  347.052553][T14782] BPF:Member exceeds struct_size
[  347.057971][T14782] BPF:
[  347.057971][T14782] 
14:02:12 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071")
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x2c}}, 0x0)
sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0)
sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x0)

14:02:12 executing program 0:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x8}, 0x20)

14:02:12 executing program 4:

14:02:12 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000180)=0x7fffffff, 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

14:02:12 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r0=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r0)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

14:02:12 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071")
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x2c}}, 0x0)
sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0)
sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x0)

[  347.806586][T14804] BPF:	(anon) type_id=2 bits_offset=0
[  347.812123][T14804] BPF: 
[  347.815260][T14804] BPF:Member exceeds struct_size
[  347.820387][T14804] BPF:
[  347.820387][T14804] 
14:02:13 executing program 4:

14:02:13 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, 0x0)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

14:02:13 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

14:02:13 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071")
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x2c}}, 0x0)
sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0)

14:02:13 executing program 4:

14:02:13 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r0=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r0)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

14:02:13 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

14:02:13 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, 0x0)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

14:02:13 executing program 4:

14:02:13 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071")
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x2c}}, 0x0)
sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

14:02:14 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r0=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r0)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

14:02:14 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

14:02:14 executing program 4:

14:02:14 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, 0x0)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

14:02:14 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071")
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x2c}}, 0x0)
sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x0)

14:02:14 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000340)=""/142, 0x0, 0x8e, 0x8}, 0x20)

14:02:15 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000340)=""/142, 0x0, 0x8e, 0x8}, 0x20)

[  350.061026][T14853] BPF:hdr_len not found
14:02:15 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000))
setreuid(0x0, 0x0)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

14:02:15 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180), 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

14:02:15 executing program 4:

[  350.363480][T14865] BPF:hdr_len not found
14:02:15 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071")
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x2c}}, 0x0)

14:02:15 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000340)=""/142, 0x0, 0x8e, 0x8}, 0x20)

14:02:15 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000))
setreuid(0x0, 0x0)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

14:02:15 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180), 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

14:02:15 executing program 4:

14:02:15 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, [], 0x1a}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x21}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x80)
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))

14:02:15 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x3a, 0x8e, 0x8}, 0x20)

[  350.805068][T14877] BPF:hdr_len not found
14:02:15 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071")
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x2c}}, 0x0)

[  350.927744][T14885] binder: 14882:14885 ioctl c018620c 20000540 returned -22
14:02:16 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180), 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

14:02:16 executing program 4:

14:02:16 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x3a, 0x8e, 0x8}, 0x20)

14:02:16 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000))
setreuid(0x0, 0x0)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

14:02:16 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x3a, 0x8e, 0x8}, 0x20)

14:02:16 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071")
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x2c}}, 0x0)

14:02:16 executing program 4:

14:02:16 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, 0x0)
setreuid(0x0, r1)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

14:02:16 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x46, 0x8e, 0x8}, 0x20)

[  351.740928][T14913] binder: 14882:14913 ioctl c018620c 20000540 returned -22
14:02:16 executing program 2:
syz_read_part_table(0x1, 0x3, &(0x7f00000010c0)=[{&(0x7f0000000000)="43bff557bee773a759beadae718eada35cb511333809b7e1e4db582499c63e8046e7ba916db1be53a1cce2003ab87d17cdf34035cb28490b265e49864670bbc449134d223b4609858483aa27c3a6a06bbed6fb336b24f838019fec48bd02c176d8ef9e8de1c7f4ab43cd2c4664c97aaf6f0c33a3bd", 0x75, 0x7fff}, {&(0x7f0000000080)="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", 0x1000, 0x3ff000}, {&(0x7f0000001080)="76df35313c74e13721b2898673b580dd40e8f69a98fc2d167001f87f4ea3d8f92ae87d4078c98a7ff6f950596f2d38ea0a0b", 0x32, 0x101}])
utimensat(0xffffffffffffffff, &(0x7f0000001100)='./file0\x00', &(0x7f0000001140)={{0x0, 0x2710}, {0x0, 0x7530}}, 0x0)

14:02:16 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

14:02:16 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x46, 0x8e, 0x8}, 0x20)

14:02:16 executing program 4:

14:02:17 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071")
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x2c}}, 0x0)

14:02:17 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, 0x0)
setreuid(0x0, r1)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

14:02:17 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

14:02:17 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071")
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x2c}}, 0x0)

14:02:17 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x46, 0x8e, 0x8}, 0x20)

14:02:17 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, 0x0)
setreuid(0x0, r1)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

14:02:17 executing program 4:

14:02:17 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

14:02:17 executing program 2:
syz_read_part_table(0x0, 0x15555555555557b6, &(0x7f0000000000))
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r4 = dup2(r3, r2)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000200)={0x3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @broadcast}]})
ioctl$BINDER_WRITE_READ(r4, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f00000002c0), 0x4)
write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0xfffffffffffffff5, 0x1, {0x7, 0x1f, 0x35a1, 0x1218b00, 0x1, 0xfffb, 0x0, 0x2}}, 0x50)
r5 = dup2(r1, r0)
clock_nanosleep(0x1, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000300)={0x0, 0x3, 0x1, 'queue0\x00'})
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
read$dsp(r5, &(0x7f00000003c0)=""/216, 0xd8)

14:02:17 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x8}, 0x20)

14:02:17 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071")
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x2c}}, 0x0)

[  352.821917][T14965] BPF:	(anon) type_id=0 bits_offset=0
[  352.828239][T14965] BPF: 
[  352.831064][T14965] BPF:Invalid type_id
[  352.835260][T14965] BPF:
[  352.835260][T14965] 
14:02:17 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x8}, 0x20)

14:02:17 executing program 4:

14:02:18 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071")
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x2c}}, 0x0)

[  352.984104][T14974] binder: 14968:14974 ioctl 800442d2 20000200 returned -22
14:02:18 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
connect$inet(r0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

[  353.059253][T14978] binder: 14968:14978 ioctl c018620c 20000540 returned -22
[  353.126613][T14978] binder: 14968:14978 ioctl c018620c 20000540 returned -22
14:02:18 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x8}, 0x20)

[  353.171458][T14981] BPF:	(anon) type_id=0 bits_offset=0
[  353.177428][T14981] BPF: 
[  353.180251][T14981] BPF:Invalid type_id
[  353.184814][T14981] BPF:
[  353.184814][T14981] 
14:02:18 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
setreuid(0x0, 0x0)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

14:02:18 executing program 4:

14:02:18 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
connect$inet(r0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

[  353.538709][T14994] BPF:	(anon) type_id=0 bits_offset=0
[  353.544434][T14994] BPF: 
[  353.547267][T14994] BPF:Invalid type_id
[  353.551289][T14994] BPF:
[  353.551289][T14994] 
14:02:18 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071")
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x2c}}, 0x0)

[  353.827572][T15000] binder: 14968:15000 ioctl c018620c 20000540 returned -22
14:02:19 executing program 2:
r0 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x600, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000040)={0x4, {{0xa, 0x4e24, 0x9, @mcast2, 0x5}}, 0x1, 0x1, [{{0xa, 0x4e24, 0x101, @rand_addr="0ce001cb0fce51d0f09c723c7b762170", 0xc009}}]}, 0x10c)

14:02:19 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x42, 0x8e, 0x8}, 0x20)

14:02:19 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
setreuid(0x0, 0x0)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

14:02:19 executing program 4:

14:02:19 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
connect$inet(r0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

14:02:19 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071")
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x2c}}, 0x0)

[  354.145123][T15013] BPF:[2] UNION (anon) 
[  354.149497][T15013] BPF:size=0 vlen=1
[  354.153770][T15013] BPF: 
[  354.156581][T15013] BPF:Loop detected
[  354.160424][T15013] BPF:
[  354.160424][T15013] 
14:02:19 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

14:02:19 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x42, 0x8e, 0x8}, 0x20)

14:02:19 executing program 4:

14:02:19 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x42, 0x8e, 0x8}, 0x20)

[  354.395186][T15028] BPF:[2] UNION (anon) 
[  354.399856][T15028] BPF:size=0 vlen=1
[  354.403974][T15028] BPF: 
[  354.406783][T15028] BPF:Loop detected
[  354.410719][T15028] BPF:
[  354.410719][T15028] 
14:02:19 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
setreuid(0x0, 0x0)
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

14:02:19 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071")
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x2c}}, 0x0)

14:02:19 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

[  354.639565][T15033] BPF:[2] UNION (anon) 
[  354.644183][T15033] BPF:size=0 vlen=1
[  354.648056][T15033] BPF: 
[  354.650992][T15033] BPF:Loop detected
[  354.654938][T15033] BPF:
[  354.654938][T15033] 
14:02:19 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x8}, 0x20)

14:02:20 executing program 4:

14:02:20 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x8}, 0x20)

14:02:20 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x2c}}, 0x0)

14:02:20 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r1)
removexattr(0x0, &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

14:02:20 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

14:02:20 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x8}, 0x20)

14:02:20 executing program 4:

14:02:20 executing program 3:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x2c}}, 0x0)

14:02:20 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x46, 0x8e, 0x8}, 0x20)

14:02:21 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r1)
removexattr(0x0, &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

14:02:21 executing program 4:

14:02:21 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

[  356.423494][T15076] BPF:[2] UNION (anon) 
[  356.427834][T15076] BPF:size=0 vlen=1
[  356.431805][T15076] BPF: 
[  356.434935][T15076] BPF:Loop detected
[  356.438794][T15076] BPF:
[  356.438794][T15076] 
14:02:21 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x46, 0x8e, 0x8}, 0x20)

14:02:21 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x2c}}, 0x0)

14:02:21 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r1)
removexattr(0x0, &(0x7f00000000c0)=@random={'user.', 'tmpfs\x00'})

[  356.779262][T15089] BPF:[2] UNION (anon) 
[  356.783964][T15089] BPF:size=0 vlen=1
[  356.787842][T15089] BPF: 
[  356.790832][T15089] BPF:Loop detected
[  356.795068][T15089] BPF:
[  356.795068][T15089] 
14:02:21 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

14:02:21 executing program 4:

14:02:21 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x46, 0x8e, 0x8}, 0x20)

14:02:22 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x2c}}, 0x0)

[  357.201200][T15103] BPF:[2] UNION (anon) 
[  357.205732][T15103] BPF:size=0 vlen=1
[  357.209594][T15103] BPF: 
[  357.212631][T15103] BPF:Loop detected
[  357.216486][T15103] BPF:
[  357.216486][T15103] 
14:02:22 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x0, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x8}, 0x20)

14:02:22 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r1)
removexattr(&(0x7f0000000080)='./file0\x00', 0x0)

14:02:22 executing program 4:

14:02:22 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x2c}}, 0x0)

14:02:22 executing program 4:

14:02:22 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/149, 0x95}}], 0x2, 0x62, 0x0)

[  357.650498][T15119] BPF:[1] FWD (anon) 
[  357.655149][T15119] BPF:struct
[  357.658521][T15119] BPF: 
[  357.661621][T15119] BPF:Invalid name
[  357.665471][T15119] BPF:
[  357.665471][T15119] 
14:02:22 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r1)
removexattr(&(0x7f0000000080)='./file0\x00', 0x0)

14:02:22 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x0, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x8}, 0x20)

14:02:23 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x0, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x8}, 0x20)

[  357.988659][T15134] BPF:[1] FWD (anon) 
[  357.992917][T15134] BPF:struct
[  357.996166][T15134] BPF: 
[  357.998976][T15134] BPF:Invalid name
[  358.002906][T15134] BPF:
[  358.002906][T15134] 
14:02:23 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r1)
removexattr(&(0x7f0000000080)='./file0\x00', 0x0)

14:02:23 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x62, 0x0)

14:02:23 executing program 4:

14:02:23 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x2c}}, 0x0)

14:02:23 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x9, 0x4, 0x8000, 0x0, 0x1}, 0x40)
socket$kcm(0x29, 0x5, 0x0)
r1 = socket$kcm(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$sock(r1, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000080)="8a", &(0x7f00000000c0)=""/189}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)

[  358.391020][T15147] BPF:[1] FWD (anon) 
[  358.395659][T15147] BPF:struct
[  358.399059][T15147] BPF: 
[  358.401952][T15147] BPF:Invalid name
[  358.405727][T15147] BPF:
[  358.405727][T15147] 
14:02:23 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000340)=""/142, 0x51, 0x8e, 0x8}, 0x20)

14:02:23 executing program 4:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0xd0, 0xd0, 0xd0, 0xd0, 0xd0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x5)
wait4(0x0, 0x0, 0x0, 0x0)

14:02:23 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x62, 0x0)

[  358.671431][T15160] BPF:[1] FWD  
[  358.675129][T15160] BPF:struct
[  358.678429][T15160] BPF: 
[  358.681234][T15160] BPF:Invalid name
[  358.685615][T15160] BPF:
[  358.685615][T15160] 
14:02:23 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000340)=""/142, 0x51, 0x8e, 0x8}, 0x20)

14:02:23 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0xd0, 0xd0, 0xd0, 0xd0, 0xd0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298)

14:02:23 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x2c}}, 0x0)

14:02:23 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000340)=""/142, 0x51, 0x8e, 0x8}, 0x20)

[  358.921421][T15170] BPF:[1] FWD  
[  358.925173][T15170] BPF:struct
[  358.928533][T15170] BPF: 
[  358.931344][T15170] BPF:Invalid name
[  358.935554][T15170] BPF:
[  358.935554][T15170] 
14:02:24 executing program 5:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
clock_gettime(0x2, &(0x7f0000000280)={0x0, <r1=>0x0})
rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f00000002c0)={0x0, r1+30000000}, 0x8)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00')
ftruncate(r2, 0x2020007ffffbff)

14:02:24 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000000)={0x130, 0x0, [0xffff]})

14:02:24 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x62, 0x0)

[  359.230540][T15182] BPF:[1] FWD  
[  359.234246][T15182] BPF:struct
[  359.237499][T15182] BPF: 
[  359.240416][T15182] BPF:Invalid name
[  359.244391][T15182] BPF:
[  359.244391][T15182] 
14:02:24 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x8}, 0x20)

14:02:25 executing program 5:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)

14:02:25 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x2c}}, 0x0)

14:02:25 executing program 4:

14:02:25 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}}], 0x1, 0x62, 0x0)

[  360.157746][T15203] BPF:[1] FWD  
[  360.161644][T15203] BPF:struct
[  360.164997][T15203] BPF: 
[  360.167797][T15203] BPF:Invalid name
[  360.171825][T15203] BPF:
[  360.171825][T15203] 
14:02:25 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x8}, 0x20)

14:02:25 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0)

14:02:25 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x2c}}, 0x0)

14:02:25 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="b702000004000100bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000000800006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0f7af2b75d0d1f034b1b5526bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55aa8ff822ca943354aa8a6d2c1ba15edfe0969a9ddc125b6"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0x44, 0xbe, &(0x7f0000000200)="e460cdfbef24080000000a9386dd6a00000000072beb3014cd3ec8a755c1e1380081ffad000036e8d5000000010000001400000500240609880bd320d98a61a90057c9bf", 0x0, 0x401}, 0x28)

[  360.561105][T15215] BPF:[1] FWD  
[  360.565009][T15215] BPF:struct
[  360.568473][T15215] BPF: 
[  360.571442][T15215] BPF:Invalid name
[  360.575323][T15215] BPF:
[  360.575323][T15215] 
14:02:25 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x8}, 0x20)

14:02:25 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0), 0x0, 0x62, 0x0)

[  360.714145][T15218] BPF:[1] FWD  
[  360.717819][T15218] BPF:struct
[  360.721194][T15218] BPF: 
[  360.724147][T15218] BPF:Invalid name
[  360.727911][T15218] BPF:
[  360.727911][T15218] 
14:02:25 executing program 2:
syz_read_part_table(0x8, 0xa, &(0x7f00000001c0)=[{&(0x7f0000000000)="f71f7cfb567059f70f44c011de31f7ac89153a1d7f1267614fc629a86eff136b669ba0c42f24007647b93c84f4e20059c9ad88c0789d0bc3dad30931257e53bd7c2c22f9ce3b85f7e3863ed8d7aacc1a577845f57811d21035bdcf6a428dd34fe7ca85fb4eec9180a8ff194174e4dfa5cc42fe8a0e51a6904ff1479c1ad5dd365ad3daf1c18f7c21a8eef836198ef041117fc76e467dd7af020b1374c5da01cc235e0214444fc8294ea16d9a797b0455d48733e4c42a7131f008263e4b06e8649233c9a4a07c498be1b62a7fdeb92e72e66f528cfebf54e34b328fd6aec2fd8886", 0xe1}, {&(0x7f0000000100)="e9f1012e170f784e74a5aa24eb98b885a78ec31a5130dc33c4cd840196b84c3e31", 0x21, 0x8002}, {&(0x7f0000000200)="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", 0x10e, 0x2006}])
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000140))

14:02:25 executing program 0:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x51, 0x8e, 0x8}, 0x20)

14:02:26 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_DEL_STATION(r0, 0x0, 0x0)

[  360.963789][T15233] binder: 15226:15233 ioctl c018620c 20000540 returned -22
[  360.987305][T15229] binder: 15226:15229 ioctl 4008642a 20000140 returned -22
[  361.050388][T15239] binder: 15226:15239 ioctl c018620c 20000540 returned -22
14:02:26 executing program 4:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0x10}}, 0x0)

14:02:26 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x7e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000011c0), 0x0, 0x62, 0x0)

14:02:26 executing program 2:
syz_read_part_table(0x0, 0x6, &(0x7f0000001280)=[{&(0x7f0000000000)="f72d638459d7fe6e249058f2349c4e8d8ce9bce200dcf027ba5f9f79fe9d44d0ef7a155236371bebc3338b039214bf9f99286da00cdabb1da4fb13ae0d03c8585cd874a8d25e6b9ae08853be8db2cbf83f3b71612f34af867298153b49093cbbb048c84a671e48e1778e82266229", 0x6e, 0xff}, {&(0x7f0000000080)="0ec043ab1b", 0x5, 0x10003}, {&(0x7f00000000c0)="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", 0x1000, 0x200}, {&(0x7f0000001300)="fed6826491e042abf79a1d0ff5e7cf6ac0e3405cd7152c8af300ce810b6394e7ba75be5830c46a42b934efd59d69e5cd1bb3dcb3d3c46f28f620b4a37ed8844018028a6b4004ba07e6aba5af0f2997f3abccf9b236538bc080e085ac0b9046d643fd3505715ae0bf0060437ecb15cdab6872f675b0eff721b0c17036eb4650a7f42747a2480498ee803df594590dadfccf1f3c65c40b57aa441e873158bb71502368f93330011c75b2f1aee75b1286578d86e5007b4efe9ef4cd5cac464557917f5af565f1bd3ffcc605dc615323ef39fc5674740a895674ff6dbaad128c36efa6d6c097b997fa94ed0000000000000000", 0xf1, 0x9}, {&(0x7f00000011c0)="82607897f56b6debac819706ed93662a6bce3bc7c9f8ecea4af4cd39f84fe2d913586c60bf436eb31a176496989d", 0x2e, 0x40}, {&(0x7f0000001200)="dc4ed6999fe4e97e2c209177a67c15830e5932872b6353292a543249c286d2bb32e6f17076c02a9df4e8450941972b19479ed1e0cb7360734ccd302a7012d6348a4bf0809cd2adfb4ddd8ae8fc1873633ae3f27dc19aa2c2774824dbdded2494d7496e14b12fa13abee15fa9abaca92da800af802e6154", 0x77, 0x80}])
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x402)
r2 = dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r2, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$BINDER_WRITE_READ(r5, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r7 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r8 = dup2(r7, r6)
ioctl$BINDER_WRITE_READ(r8, 0xc018620c, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f00000010c0)={<r9=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x80082102, &(0x7f0000001140)=r9)
epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r4)

[  361.335933][T15245] BPF:[1] FWD  
[  361.339568][T15245] BPF:struct
[  361.343075][T15245] BPF: 
[  361.345894][T15245] BPF:Invalid name
[  361.349931][T15245] BPF:
[  361.349931][T15245] 
[  361.356415][T15247] =====================================================
[  361.363398][T15247] BUG: KMSAN: uninit-value in string+0x522/0x690
[  361.369748][T15247] CPU: 1 PID: 15247 Comm: syz-executor.4 Not tainted 5.6.0-rc7-syzkaller #0
[  361.378424][T15247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  361.389108][T15247] Call Trace:
[  361.392430][T15247]  dump_stack+0x1c9/0x220
[  361.397419][T15247]  kmsan_report+0xf7/0x1e0
[  361.402013][T15247]  __msan_warning+0x58/0xa0
[  361.406705][T15247]  string+0x522/0x690
[  361.410804][T15247]  vsnprintf+0x207d/0x31b0
[  361.415605][T15247]  audit_log_vformat+0x583/0xcd0
[  361.420551][T15247]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[  361.426354][T15247]  audit_log_format+0x220/0x260
[  361.431224][T15247]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[  361.437055][T15247]  audit_receive+0x18a4/0x6d50
[  361.441821][T15247]  ? __msan_metadata_ptr_for_load_2+0x10/0x20
[  361.447877][T15247]  ? netlink_deliver_tap+0xdba/0xea0
[  361.453169][T15247]  ? kmsan_get_metadata+0x11d/0x180
[  361.458364][T15247]  netlink_unicast+0xf9e/0x1100
[  361.463213][T15247]  ? audit_net_exit+0xd0/0xd0
[  361.467892][T15247]  netlink_sendmsg+0x1246/0x14d0
[  361.472848][T15247]  ? netlink_getsockopt+0x1440/0x1440
[  361.478207][T15247]  ____sys_sendmsg+0x12b6/0x1350
[  361.483157][T15247]  __sys_sendmsg+0x451/0x5f0
[  361.487764][T15247]  ? kmsan_get_metadata+0x11d/0x180
[  361.493566][T15247]  ? kmsan_get_metadata+0x11d/0x180
[  361.498757][T15247]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[  361.504562][T15247]  ? __msan_metadata_ptr_for_load_4+0x10/0x20
[  361.510620][T15247]  ? prepare_exit_to_usermode+0x1ca/0x520
[  361.516337][T15247]  ? kmsan_get_metadata+0x4f/0x180
[  361.521441][T15247]  ? kmsan_get_metadata+0x4f/0x180
[  361.526653][T15247]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[  361.532485][T15247]  __ia32_compat_sys_sendmsg+0xed/0x130
[  361.538056][T15247]  ? compat_mc_getsockopt+0x19a0/0x19a0
[  361.543613][T15247]  do_fast_syscall_32+0x3c7/0x6e0
[  361.548652][T15247]  entry_SYSENTER_compat+0x68/0x77
[  361.553754][T15247] RIP: 0023:0xf7f12d99
[  361.558531][T15247] Code: 90 e8 0b 00 00 00 f3 90 0f ae e8 eb f9 8d 74 26 00 89 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  361.578142][T15247] RSP: 002b:00000000f5d0d0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  361.586577][T15247] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100
[  361.595267][T15247] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  361.603238][T15247] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  361.611209][T15247] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  361.619181][T15247] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  361.627160][T15247] 
[  361.629475][T15247] Uninit was created at:
[  361.633713][T15247]  kmsan_internal_poison_shadow+0x66/0xd0
[  361.639422][T15247]  kmsan_slab_alloc+0x8a/0xe0
[  361.644088][T15247]  __kmalloc_node_track_caller+0xb40/0x1200
[  361.649970][T15247]  __alloc_skb+0x2fd/0xac0
[  361.654373][T15247]  netlink_sendmsg+0x7d3/0x14d0
[  361.659211][T15247]  ____sys_sendmsg+0x12b6/0x1350
[  361.664137][T15247]  __sys_sendmsg+0x451/0x5f0
[  361.668731][T15247]  __ia32_compat_sys_sendmsg+0xed/0x130
[  361.674282][T15247]  do_fast_syscall_32+0x3c7/0x6e0
[  361.679335][T15247]  entry_SYSENTER_compat+0x68/0x77
[  361.684433][T15247] =====================================================
[  361.691370][T15247] Disabling lock debugging due to kernel taint
[  361.697542][T15247] Kernel panic - not syncing: panic_on_warn set ...
[  361.704129][T15247] CPU: 1 PID: 15247 Comm: syz-executor.4 Tainted: G    B             5.6.0-rc7-syzkaller #0
[  361.714178][T15247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  361.726045][T15247] Call Trace:
[  361.729336][T15247]  dump_stack+0x1c9/0x220
[  361.733664][T15247]  panic+0x3d5/0xc3e
[  361.737583][T15247]  kmsan_report+0x1df/0x1e0
[  361.742085][T15247]  __msan_warning+0x58/0xa0
[  361.746581][T15247]  string+0x522/0x690
[  361.750570][T15247]  vsnprintf+0x207d/0x31b0
[  361.755005][T15247]  audit_log_vformat+0x583/0xcd0
[  361.759955][T15247]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[  361.765764][T15247]  audit_log_format+0x220/0x260
[  361.770632][T15247]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[  361.776443][T15247]  audit_receive+0x18a4/0x6d50
[  361.781221][T15247]  ? __msan_metadata_ptr_for_load_2+0x10/0x20
[  361.787289][T15247]  ? netlink_deliver_tap+0xdba/0xea0
[  361.792582][T15247]  ? kmsan_get_metadata+0x11d/0x180
[  361.797779][T15247]  netlink_unicast+0xf9e/0x1100
[  361.802627][T15247]  ? audit_net_exit+0xd0/0xd0
[  361.807416][T15247]  netlink_sendmsg+0x1246/0x14d0
[  361.812377][T15247]  ? netlink_getsockopt+0x1440/0x1440
[  361.817837][T15247]  ____sys_sendmsg+0x12b6/0x1350
[  361.822796][T15247]  __sys_sendmsg+0x451/0x5f0
[  361.827395][T15247]  ? kmsan_get_metadata+0x11d/0x180
[  361.832586][T15247]  ? kmsan_get_metadata+0x11d/0x180
[  361.837781][T15247]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[  361.843583][T15247]  ? __msan_metadata_ptr_for_load_4+0x10/0x20
[  361.849652][T15247]  ? prepare_exit_to_usermode+0x1ca/0x520
[  361.855367][T15247]  ? kmsan_get_metadata+0x4f/0x180
[  361.860490][T15247]  ? kmsan_get_metadata+0x4f/0x180
[  361.865622][T15247]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[  361.871460][T15247]  __ia32_compat_sys_sendmsg+0xed/0x130
[  361.877119][T15247]  ? compat_mc_getsockopt+0x19a0/0x19a0
[  361.882671][T15247]  do_fast_syscall_32+0x3c7/0x6e0
[  361.887711][T15247]  entry_SYSENTER_compat+0x68/0x77
[  361.893695][T15247] RIP: 0023:0xf7f12d99
[  361.897755][T15247] Code: 90 e8 0b 00 00 00 f3 90 0f ae e8 eb f9 8d 74 26 00 89 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[  361.917346][T15247] RSP: 002b:00000000f5d0d0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  361.925744][T15247] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100
[  361.933706][T15247] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  361.941842][T15247] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  361.949807][T15247] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  361.957765][T15247] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  361.967489][T15247] Kernel Offset: 0x21000000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
[  361.979230][T15247] Rebooting in 86400 seconds..