0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000df00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:05:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:05:51 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x7, 0x800020, &(0x7f0000009000)}) 02:05:51 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000600)='trusted.overlay.upper\x00', &(0x7f0000000c80)={0x0, 0xfb, 0x15, 0x2, 0x9, "66e35860f0cd02f3c728d37800"}, 0x15, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:05:51 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) [ 3122.695561] binder: 8323:8325 unknown command 536915920 [ 3122.701576] binder: 8323:8325 ioctl c0306201 20008000 returned -22 [ 3122.711590] binder_alloc: binder_alloc_mmap_handler: 8323 20000000-20002000 already mapped failed -16 [ 3122.722288] binder: BINDER_SET_CONTEXT_MGR already set [ 3122.728564] binder: 8323:8325 ioctl 40046207 0 returned -16 [ 3122.735007] binder: 8323:8327 unknown command 536915920 02:05:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000200"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:05:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3122.742084] binder: 8323:8327 ioctl c0306201 20008000 returned -22 [ 3122.804451] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. 02:05:51 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x48, 0x800020, &(0x7f0000009000)}) 02:05:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0018000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:05:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000001a0ffffffff00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3122.975808] binder: 8345:8346 unknown command 536915920 [ 3122.991789] binder: 8345:8346 ioctl c0306201 20008000 returned -22 [ 3123.009241] binder_alloc: binder_alloc_mmap_handler: 8345 20000000-20002000 already mapped failed -16 [ 3123.031027] binder: BINDER_SET_CONTEXT_MGR already set [ 3123.038912] binder: 8345:8346 ioctl 40046207 0 returned -16 02:05:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:05:52 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000600)='trusted.overlay.upper\x00', &(0x7f0000000c80)={0x0, 0xfb, 0x15, 0x2, 0x9, "66e35860f0cd02f3c728d37800"}, 0x15, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:05:52 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x500000000000000, 0x800020, &(0x7f0000009000)}) 02:05:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0ffffffff], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:05:52 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:05:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000001a000"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:05:52 executing program 5: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f00000002c0)='./file0\x00', 0xb3b, 0x2, &(0x7f0000000340)=[{&(0x7f0000000400)="b7fbdb733cd1aa8545938adf407908d2dac86061940ee60f9f38d3fb5afb1e1ff6b653ccd728ae2823b37f637bdc1f80119ca81b56e17b922aa5b5d86398213847b547165f813c6ff204ee9c796e57b98e53858e6a3587a31a0e1533de389b568b3d069a87f662d4223dbaddb55e6208110c3db9a55ecb7a8b08d3f287eae6fcc58249d38e04422aaa469db125edf8352c4ad00d480994068199bc020942bcae8f5a098992a7f1dc441328d0001164e8d7ff6380905de14ca66be606fca5a44a05c271284f3ee269b31999b7944b2a2f4b21cf961963829eff251e380a1d31d2740d3130e2038a5ef5c1466c5f66e03b725e86274ac8", 0xf6, 0x3}, {&(0x7f0000000300), 0x0, 0x4}], 0x11, &(0x7f0000000500)={[{@noautodefrag='noautodefrag'}, {@notreelog='notreelog'}, {@fragment_data='fragment=data'}, {@acl='acl'}], [{@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@smackfsdef={'smackfsdef', 0x3d, ',mime_type'}}, {@measure='measure'}]}) sysfs$1(0x1, &(0x7f0000000180)='\x00') ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000003c0)) socket$inet(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000200], 0x0, &(0x7f0000000040), &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {}, {0x0, '\x00', 0x1}]}, 0x108) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = socket(0x15, 0x80005, 0x0) bind(r0, &(0x7f00000000c0)=@generic={0xa, "9bab822c32e608631f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf370539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0xffffff19) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 02:05:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000008800"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3123.854354] binder: 8374:8383 unknown command 536915920 [ 3123.883816] binder: 8374:8383 ioctl c0306201 20008000 returned -22 02:05:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001a0ffffffff], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3123.894473] RDS: rds_bind could not find a transport for 863:1f5c:14d5:57d5:200:5efe:123.184.11.134, load rds_tcp or rds_rdma? [ 3123.940760] binder_alloc: binder_alloc_mmap_handler: 8374 20000000-20002000 already mapped failed -16 [ 3124.040649] binder: BINDER_SET_CONTEXT_MGR already set 02:05:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:05:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3124.062395] binder: 8374:8383 ioctl 40046207 0 returned -16 [ 3124.112455] binder: 8374:8407 unknown command 536915920 [ 3124.147284] binder: 8374:8407 ioctl c0306201 20008000 returned -22 02:05:53 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000600)='trusted.overlay.upper\x00', &(0x7f0000000c80)={0x0, 0xfb, 0x15, 0x2, 0x9, "66e35860f0cd02f3c728d37800"}, 0x15, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:05:53 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x7a000000, 0x800020, &(0x7f0000009000)}) [ 3124.300277] binder: 8416:8417 unknown command 536915920 [ 3124.355022] binder: 8416:8417 ioctl c0306201 20008000 returned -22 [ 3124.427707] binder_alloc: binder_alloc_mmap_handler: 8416 20000000-20002000 already mapped failed -16 [ 3124.447847] binder: BINDER_SET_CONTEXT_MGR already set [ 3124.460282] binder: 8416:8417 ioctl 40046207 0 returned -16 [ 3124.477178] binder: 8416:8424 unknown command 536915920 [ 3124.490487] binder: 8416:8424 ioctl c0306201 20008000 returned -22 02:05:53 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000600)='trusted.overlay.upper\x00', &(0x7f0000000c80)={0x0, 0xfb, 0x15, 0x2, 0x9, "66e35860f0cd02f3c728d37800"}, 0x15, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:05:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:05:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000df00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:05:53 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x500, 0x800020, &(0x7f0000009000)}) 02:05:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:05:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000008800"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:05:53 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) [ 3124.841680] binder: 8441:8442 unknown command 536915920 [ 3124.860703] binder: 8441:8442 ioctl c0306201 20008000 returned -22 02:05:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000001100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3124.883668] binder_alloc: binder_alloc_mmap_handler: 8441 20000000-20002000 already mapped failed -16 [ 3124.906267] binder: BINDER_SET_CONTEXT_MGR already set [ 3124.916996] binder: 8441:8442 ioctl 40046207 0 returned -16 02:05:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf00], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3124.948216] binder: 8441:8447 unknown command 536915920 [ 3124.982624] binder: 8441:8447 ioctl c0306201 20008000 returned -22 02:05:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000df00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:05:54 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000600)='trusted.overlay.upper\x00', &(0x7f0000000c80)={0x0, 0xfb, 0x15, 0x2, 0x9, "66e35860f0cd02f3c728d37800"}, 0x15, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:05:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:05:54 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x4c, 0x800020, &(0x7f0000009000)}) 02:05:54 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000600)='trusted.overlay.upper\x00', &(0x7f0000000c80)={0x0, 0xfb, 0x15, 0x2, 0x9, "66e35860f0cd02f3c728d37800"}, 0x15, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:05:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000001100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:05:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0018000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:05:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000008800"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3125.424351] binder: 8470:8475 unknown command 536915920 [ 3125.445458] binder: 8470:8475 ioctl c0306201 20008000 returned -22 [ 3125.498779] binder_alloc: binder_alloc_mmap_handler: 8470 20000000-20002000 already mapped failed -16 [ 3125.553280] binder: BINDER_SET_CONTEXT_MGR already set [ 3125.572984] binder: 8470:8475 ioctl 40046207 0 returned -16 [ 3125.587928] binder: 8470:8484 unknown command 536915920 02:05:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001a0], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3125.603974] binder: 8470:8484 ioctl c0306201 20008000 returned -22 [ 3125.906024] __ntfs_error: 17 callbacks suppressed [ 3125.906060] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3125.976146] ntfs: (device loop3): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 3125.995770] ntfs: (device loop3): ntfs_fill_super(): Not an NTFS volume. [ 3126.037709] ntfs: (device loop5): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3126.046350] ntfs: (device loop5): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 3126.058830] ntfs: (device loop5): ntfs_fill_super(): Not an NTFS volume. 02:05:55 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:05:55 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000001a0ffffffff00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:05:55 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x74, 0x800020, &(0x7f0000009000)}) 02:05:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3126.187525] binder: 8502:8503 unknown command 536915920 [ 3126.217245] binder: 8502:8503 ioctl c0306201 20008000 returned -22 [ 3126.288989] binder_alloc: binder_alloc_mmap_handler: 8502 20000000-20002000 already mapped failed -16 [ 3126.303718] binder: BINDER_SET_CONTEXT_MGR already set [ 3126.309207] binder: 8502:8503 ioctl 40046207 0 returned -16 [ 3126.315088] binder: 8502:8511 unknown command 536915920 [ 3126.321939] binder: 8502:8511 ioctl c0306201 20008000 returned -22 [ 3126.425525] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3126.445983] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 3126.468760] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. 02:05:55 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000600)='trusted.overlay.upper\x00', &(0x7f0000000c80)={0x0, 0xfb, 0x15, 0x2, 0x9, "66e35860f0cd02f3c728d37800"}, 0x15, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000b80), 0xa0, &(0x7f0000000c40)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:05:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:05:55 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x6, 0x800020, &(0x7f0000009000)}) 02:05:55 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000ffffffffa00100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:05:55 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000600)='trusted.overlay.upper\x00', &(0x7f0000000c80)={0x0, 0xfb, 0x15, 0x2, 0x9, "66e35860f0cd02f3c728d37800"}, 0x15, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:05:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001a0ffffffff], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3126.706755] binder: 8523:8528 unknown command 536915920 [ 3126.712194] binder: 8523:8528 ioctl c0306201 20008000 returned -22 [ 3126.740934] binder_alloc: binder_alloc_mmap_handler: 8523 20000000-20002000 already mapped failed -16 02:05:55 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000000000100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3126.789158] binder: BINDER_SET_CONTEXT_MGR already set [ 3126.815659] binder: 8523:8528 ioctl 40046207 0 returned -16 [ 3126.850572] binder: 8523:8538 unknown command 536915920 02:05:55 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000001100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3126.910289] binder: 8523:8538 ioctl c0306201 20008000 returned -22 [ 3127.198440] ntfs: (device loop5): read_ntfs_boot_sector(): Primary boot sector is invalid. 02:05:56 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:05:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000008800"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:05:56 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:05:56 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x6000, 0x800020, &(0x7f0000009000)}) [ 3127.377933] binder: 8564:8565 unknown command 536915920 [ 3127.406617] binder: 8564:8565 ioctl c0306201 20008000 returned -22 [ 3127.435254] binder_alloc: binder_alloc_mmap_handler: 8564 20000000-20002000 already mapped failed -16 [ 3127.491331] binder: BINDER_SET_CONTEXT_MGR already set [ 3127.510701] binder: 8564:8565 ioctl 40046207 0 returned -16 [ 3127.518545] binder: 8564:8570 unknown command 536915920 [ 3127.524094] binder: 8564:8570 ioctl c0306201 20008000 returned -22 02:05:56 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0018000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:05:56 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000600)='trusted.overlay.upper\x00', &(0x7f0000000c80)={0x0, 0xfb, 0x15, 0x2, 0x9, "66e35860f0cd02f3c728d37800"}, 0x15, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000b80), 0xa0, &(0x7f0000000c40)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:05:56 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x7400, 0x800020, &(0x7f0000009000)}) 02:05:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000001100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:05:56 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000600)='trusted.overlay.upper\x00', &(0x7f0000000c80)={0x0, 0xfb, 0x15, 0x2, 0x9, "66e35860f0cd02f3c728d37800"}, 0x15, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000b80), 0xa0, &(0x7f0000000c40)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) [ 3127.736506] ip6_tunnel: fs xmit: Local address not yet configured! [ 3127.841380] binder: 8579:8580 unknown command 536915920 [ 3127.861618] binder: 8579:8580 ioctl c0306201 20008000 returned -22 02:05:56 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:05:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000df00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3127.895119] binder_alloc: binder_alloc_mmap_handler: 8579 20000000-20002000 already mapped failed -16 [ 3127.995406] binder: BINDER_SET_CONTEXT_MGR already set 02:05:56 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3128.020793] binder: 8579:8580 ioctl 40046207 0 returned -16 [ 3128.051996] binder: 8579:8595 unknown command 536915920 [ 3128.070568] binder: 8579:8595 ioctl c0306201 20008000 returned -22 02:05:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf00000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:05:57 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000000df00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:05:57 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x10000000, &(0x7f0000009000)}) 02:05:57 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000600)='trusted.overlay.upper\x00', &(0x7f0000000c80)={0x0, 0xfb, 0x15, 0x2, 0x9, "66e35860f0cd02f3c728d37800"}, 0x15, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000b80), 0xa0, &(0x7f0000000c40)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:05:57 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) [ 3128.604306] binder: 8617:8621 unknown command 536915920 [ 3128.638036] binder: 8617:8621 ioctl c0306201 20008000 returned -22 [ 3128.655210] binder_alloc: binder_alloc_mmap_handler: 8617 20000000-20002000 already mapped failed -16 [ 3128.699402] binder: BINDER_SET_CONTEXT_MGR already set [ 3128.728496] binder: 8617:8621 ioctl 40046207 0 returned -16 [ 3128.734253] binder: 8617:8625 unknown command 536915920 [ 3128.740291] binder: 8617:8625 ioctl c0306201 20008000 returned -22 02:05:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000600)='trusted.overlay.upper\x00', &(0x7f0000000c80)={0x0, 0xfb, 0x15, 0x2, 0x9, "66e35860f0cd02f3c728d37800"}, 0x15, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000b80), 0xa0, &(0x7f0000000c40)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:05:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:05:57 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000008000a000"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:05:57 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000600)='trusted.overlay.upper\x00', &(0x7f0000000c80)={0x0, 0xfb, 0x15, 0x2, 0x9, "66e35860f0cd02f3c728d37800"}, 0x15, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000b80), 0xa0, &(0x7f0000000c40)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:05:57 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800025, &(0x7f0000009000)}) 02:05:58 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0010000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3129.106870] binder: 8636:8638 unknown command 536915920 [ 3129.136463] binder: 8636:8638 ioctl c0306201 20008000 returned -22 02:05:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000001a000"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3129.192724] binder_alloc: binder_alloc_mmap_handler: 8636 20000000-20002000 already mapped failed -16 02:05:58 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3129.288210] binder: BINDER_SET_CONTEXT_MGR already set 02:05:58 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001a0], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3129.340261] binder: 8636:8638 ioctl 40046207 0 returned -16 [ 3129.397196] binder: 8636:8660 unknown command 536915920 02:05:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000a00100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:05:58 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf00], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3129.463665] binder: 8636:8660 ioctl c0306201 20008000 returned -22 02:05:58 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:05:58 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000600)='trusted.overlay.upper\x00', &(0x7f0000000c80)={0x0, 0xfb, 0x15, 0x2, 0x9, "66e35860f0cd02f3c728d37800"}, 0x15, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000b80), 0xa0, &(0x7f0000000c40)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:05:58 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:05:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000008800"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:05:58 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:05:58 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800060, &(0x7f0000009000)}) 02:05:58 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:05:59 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3130.074283] binder: 8682:8685 unknown command 536915920 [ 3130.106088] binder: 8682:8685 ioctl c0306201 20008000 returned -22 02:05:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000000000200"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3130.167187] binder_alloc: binder_alloc_mmap_handler: 8682 20000000-20002000 already mapped failed -16 [ 3130.179682] binder: 8682:8701 unknown command 536915920 02:05:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3130.246445] binder: 8682:8701 ioctl c0306201 20008000 returned -22 02:05:59 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:05:59 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x80003d, &(0x7f0000009000)}) [ 3130.458050] binder: 8714:8720 unknown command 536915920 [ 3130.538676] binder: 8714:8720 ioctl c0306201 20008000 returned -22 [ 3130.662608] binder_alloc: binder_alloc_mmap_handler: 8714 20000000-20002000 already mapped failed -16 [ 3130.718502] binder: BINDER_SET_CONTEXT_MGR already set [ 3130.751627] binder: 8714:8720 ioctl 40046207 0 returned -16 [ 3130.777230] binder: 8714:8731 unknown command 536915920 [ 3130.815033] binder: 8714:8731 ioctl c0306201 20008000 returned -22 02:05:59 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:05:59 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:05:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000001100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:05:59 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800048, &(0x7f0000009000)}) 02:06:00 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setpgid(0x0, 0x0) 02:06:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) recvmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000001a80)=@nfc_llcp, 0x80, &(0x7f00000020c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, &(0x7f00000010c0)=""/164, 0xa4}}, {{&(0x7f0000002240)=@can, 0x80, &(0x7f0000002580), 0x0, &(0x7f0000001180)=""/246, 0xf6}}], 0x31d, 0x40000002, 0x0) sendto$inet(r0, &(0x7f0000c95ffd), 0x49b8, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) 02:06:00 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0ffffffff], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000a0008000"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3131.107788] binder: 8738:8739 unknown command 536915920 [ 3131.116123] binder: 8738:8739 ioctl c0306201 20008000 returned -22 [ 3131.161270] binder_alloc: binder_alloc_mmap_handler: 8738 20000000-20002000 already mapped failed -16 [ 3131.200870] binder: BINDER_SET_CONTEXT_MGR already set 02:06:00 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3131.256092] binder: 8738:8739 ioctl 40046207 0 returned -16 02:06:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000df00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:00 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x80002f, &(0x7f0000009000)}) [ 3131.353792] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 02:06:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r1, 0x80000080045017, &(0x7f00000004c0)) [ 3131.488603] binder: 8768:8771 unknown command 536915920 [ 3131.522201] binder: 8768:8771 ioctl c0306201 20008000 returned -22 [ 3131.593536] binder_alloc: binder_alloc_mmap_handler: 8768 20000000-20002000 already mapped failed -16 [ 3131.649472] binder: 8768:8776 unknown command 536915920 [ 3131.654898] binder: 8768:8776 ioctl c0306201 20008000 returned -22 [ 3131.658475] binder: BINDER_SET_CONTEXT_MGR already set [ 3131.675178] __ntfs_error: 26 callbacks suppressed [ 3131.675208] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3131.690735] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 3131.702375] binder: 8768:8779 ioctl 40046207 0 returned -16 [ 3131.703202] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. 02:06:00 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:00 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:00 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000180)=&(0x7f0000000100)) 02:06:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000200"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:00 executing program 3: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000100)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@acquire={0x40406300}], 0x0, 0x0, &(0x7f00000000c0)}) 02:06:00 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x80000a, &(0x7f0000009000)}) 02:06:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000008800"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:01 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0018000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3132.120783] binder: 8786:8791 unknown command 536915920 [ 3132.132604] binder: 8790:8792 ioctl c0306201 20a20000 returned -14 [ 3132.142054] binder: 8786:8791 ioctl c0306201 20008000 returned -22 02:06:01 executing program 5: socketpair(0x1f, 0x80000, 0x80000001, &(0x7f0000000000)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080), 0x0) [ 3132.186219] binder_alloc: binder_alloc_mmap_handler: 8786 20000000-20002000 already mapped failed -16 [ 3132.201379] binder: 8790:8792 ioctl c0306201 20a20000 returned -14 [ 3132.231226] binder: BINDER_SET_CONTEXT_MGR already set 02:06:01 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:01 executing program 3: r0 = memfd_create(&(0x7f0000000140)='md5sumbdev.vmnet1lo\x00', 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) chroot(&(0x7f0000000340)='./file0\x00') pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(0xffffffffffffffff, &(0x7f0000a34fff), 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listxattr(&(0x7f0000000040)='./file0/../file0/file0\x00', &(0x7f0000000200)=""/78, 0x4e) 02:06:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000200"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3132.253512] binder: 8786:8791 ioctl 40046207 0 returned -16 [ 3132.283285] binder: 8786:8809 unknown command 536915920 [ 3132.345944] binder: 8786:8809 ioctl c0306201 20008000 returned -22 [ 3132.685364] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3132.704592] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 3132.718788] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. 02:06:02 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:02 executing program 3: 02:06:02 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:02 executing program 5: 02:06:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000008000a0ffffffff00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:02 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:02 executing program 3: 02:06:02 executing program 5: 02:06:02 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3133.299138] binder: 8836:8837 unknown command 536915920 [ 3133.304572] binder: 8836:8837 ioctl c0306201 20008000 returned -22 02:06:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000000001100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3133.355741] binder_alloc: binder_alloc_mmap_handler: 8836 20000000-20002000 already mapped failed -16 [ 3133.386329] binder: BINDER_SET_CONTEXT_MGR already set [ 3133.392039] binder: 8836:8843 unknown command 536915920 02:06:02 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3133.431532] binder: 8836:8837 ioctl 40046207 0 returned -16 [ 3133.459027] binder: 8836:8843 ioctl c0306201 20008000 returned -22 02:06:02 executing program 3: [ 3133.772100] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3133.804590] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 3133.822238] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. 02:06:03 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) r3 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x9, 0x400000) r4 = dup2(r1, r3) utimensat(r4, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x100) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x7b595ee, 0x1f, 0x1, 0x6, 0x0, 0x7, 0x40300, 0x2, 0x81da, 0xd06, 0x2, 0x40000000000, 0x7, 0x101, 0x1, 0x7, 0x55c, 0x1, 0x1, 0x0, 0x845, 0x7, 0x9, 0x40, 0x0, 0x44, 0x8, 0x8, 0x7, 0x16fff9a7, 0xa0, 0x31, 0x7, 0xd9, 0x7, 0x7fffffff, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000000), 0x9}, 0x800, 0x8c, 0x3, 0xf, 0x6, 0x2, 0xe70}, 0x0, 0x5, r3, 0x8) 02:06:03 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000000008800"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:03 executing program 5: 02:06:03 executing program 3: 02:06:03 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:03 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0x0, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:03 executing program 3: 02:06:03 executing program 5: 02:06:03 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001a0ffffffff], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:03 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000ffffffffa0008000"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3134.364507] binder: 8870:8876 unknown command 536915920 [ 3134.395612] binder: 8870:8876 ioctl c0306201 20008000 returned -22 [ 3134.441820] binder_alloc: binder_alloc_mmap_handler: 8870 20000000-20002000 already mapped failed -16 [ 3134.467674] binder: BINDER_SET_CONTEXT_MGR already set 02:06:03 executing program 3: 02:06:03 executing program 5: [ 3134.512572] binder: 8870:8876 ioctl 40046207 0 returned -16 [ 3134.546858] binder: 8870:8893 unknown command 536915920 [ 3134.598231] binder: 8870:8893 ioctl c0306201 20008000 returned -22 02:06:03 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000000)={0x0, 0x6, {0x53, 0xfffffffffffffff8, 0x0, {0x6, 0x7}, {0x100, 0x8}, @cond=[{0xef, 0x5, 0x0, 0x3, 0xe3f6, 0x4cdd171c}, {0x0, 0x7, 0x80000001, 0x9, 0x5, 0x6}]}, {0x52, 0xffffffffffffffe1, 0x7, {0x1, 0xfffffffffffffff7}, {0x7, 0x40}, @const={0x4f1, {0x9b, 0x2, 0x3, 0x80000000}}}}) 02:06:03 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0018000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:03 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000df00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:03 executing program 3: 02:06:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) pselect6(0x40, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) [ 3134.788570] binder: 8902:8904 unknown command 536915920 [ 3134.812731] binder: 8902:8904 ioctl c0306201 20008000 returned -22 [ 3134.896676] binder_alloc: binder_alloc_mmap_handler: 8902 20000000-20002000 already mapped failed -16 [ 3134.907441] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3134.929589] binder: BINDER_SET_CONTEXT_MGR already set [ 3134.940995] binder: 8902:8916 unknown command 536915920 [ 3134.954072] binder: 8902:8915 ioctl 40046207 0 returned -16 [ 3134.958427] binder: 8902:8916 ioctl c0306201 20008000 returned -22 02:06:04 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0x0, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:04 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x40000000801) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x100020011, r1, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x4000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x1, 0x3}, &(0x7f0000000180)=0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={r3, @in={{0x2, 0x4e24, @broadcast}}, 0x3, 0x0, 0x3, 0x24, 0x4}, 0x98) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) getuid() openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x200000000202040, 0x0) 02:06:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00'}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000040), 0x4) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x700000000000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x200000000000000}}, 0x20}}, 0x0) 02:06:04 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:04 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000008800"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:04 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0018000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3135.379348] binder_alloc: binder_alloc_mmap_handler: 8923 20001000-20002000 already mapped failed -16 02:06:04 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000a00100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:04 executing program 3: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000000c0)) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/94, 0x5e}], 0x1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000162, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], &(0x7f0000000140)=0x1) [ 3135.425592] binder: BINDER_SET_CONTEXT_MGR already set 02:06:04 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3135.452222] binder: 8923:8924 ioctl 40046207 0 returned -16 02:06:04 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000df00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:04 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@mcast2, @in=@multicast2}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) fstat(r1, &(0x7f0000000140)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000240)) mount(&(0x7f00000007c0)=ANY=[@ANYBLOB="274c01006e231fb4cc123aac2bf1fe6cd0830f1fd51e4aad74364fbb6dda98166c8c982f8f6746b54cfeb1a7bc6d7fad85a8b4adbc8277333fec7533f0889ccff512234962d80500c7c13f7e77f8573a2eb10acb8ffdc94b88e39d88a8d4775e6353bfe0d5d52fe570972e30a29cf4340abba6562a51b91c8586f855d85c900625cb19acc2e0e1b5c43a6354b671dab5cf120973fb4e4f34b07677e5ed4e"], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000740)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r5 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xffffffffffff8001, 0x80400) setsockopt$inet6_MRT6_DEL_MFC(r5, 0x29, 0xcd, &(0x7f0000000280)={{0xa, 0x4e20, 0xffffffffffffffff, @local}, {0xa, 0x4e21, 0x3, @mcast2, 0x5}, 0x748, [0x0, 0x1, 0x6, 0x6de, 0x3f, 0xc43e, 0x8001, 0x3ff]}, 0x5c) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000480)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10000, 0x8) getpgid(0xffffffffffffffff) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@loopback}}, {{@in=@rand_addr}, 0x0, @in6=@mcast2}}, &(0x7f00000005c0)=0xe8) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000680)) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x8000}], 0x1, 0x3) connect(r3, &(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80) sendmsg$can_bcm(r3, &(0x7f0000000000)={&(0x7f0000004000), 0x10, &(0x7f0000002ff0)={&(0x7f0000000940)=ANY=[@ANYBLOB="00000000090000000000000000000000b1000000000000006d8fea08b5a5f1a519f37e5b3dcb76fec12f6019c7ea5a1e8c9d46370d2dbbaee0e05edc5dce5cb9329cbf474ef14ebb89e75662a50792e2fddcfed6e98d48c715511d8b6b5205aff6d8ac8599f1e35e9c109aff424d786c6b702d985fa100a5ef9b977d0054adeb1ca6b09084afe41de002f8fc274af14188d7a0f57f0ab6af53bc14"], 0x1}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mq_timedreceive(r6, &(0x7f0000000880)=""/185, 0xb9, 0x0, &(0x7f0000000700)={0x0, 0x1c9c380}) sendmsg$can_bcm(r3, &(0x7f0000000440)={&(0x7f00002ccff0), 0x10, &(0x7f00000017c0)={&(0x7f00000aef80)={0x5, 0x900, 0x0, {}, {0x0, 0x7530}, {0x20000}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "260503dd3e3c0a6afe3f7b377378f2e013e66ff1bf538a0f1abc5b8beb605be3d9448c99787c873249ed9c34e040a29606427925d8dd9065c240a288783179ce"}}, 0x80}}, 0x0) 02:06:04 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000200)="8caa285928b233877c86412b", 0xc, 0x3}], 0x80, &(0x7f0000000440)={[{@uni_xlate='uni_xlate=1'}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@uni_xlate='uni_xlate=1'}]}) [ 3135.753766] binder_alloc: binder_alloc_mmap_handler: 8949 20000000-20002000 already mapped failed -16 [ 3135.759302] FAT-fs (loop5): bogus number of reserved sectors [ 3135.846077] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3135.906647] FAT-fs (loop5): bogus number of reserved sectors [ 3135.919733] FAT-fs (loop5): Can't find a valid FAT filesystem 02:06:05 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0x0, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:05 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x0, 0xd5}, {r2}], 0x2, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @local}, 0x10) ioctl(r4, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x0, 0x6}, &(0x7f00000002c0)=0x8) 02:06:05 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001a0], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:05 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000200"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:05 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="3bfbf9a47b40b7e64d1b2ee1f8c7be59be000000000000"]], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:05 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:05 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:05 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000001100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3136.510802] binder: 8977:8979 unknown command 536870912 [ 3136.522116] binder: 8977:8979 ioctl c0306201 20008000 returned -22 [ 3136.539733] binder_alloc: binder_alloc_mmap_handler: 8977 20000000-20002000 already mapped failed -16 [ 3136.582496] binder: BINDER_SET_CONTEXT_MGR already set [ 3136.610963] binder: 8977:8979 ioctl 40046207 0 returned -16 02:06:05 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:05 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000200"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:05 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3136.844577] binder: 8999:9001 unknown command 536915920 02:06:05 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf00], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3136.896154] binder: 8999:9001 ioctl c0306201 20008000 returned -22 [ 3136.945429] binder_alloc: binder_alloc_mmap_handler: 8999 20000000-20002000 already mapped failed -16 [ 3137.033056] binder: BINDER_SET_CONTEXT_MGR already set [ 3137.050349] __ntfs_error: 5 callbacks suppressed [ 3137.050402] ntfs: (device loop5): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3137.080767] ntfs: (device loop5): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 3137.080826] binder: 8999:9001 ioctl 40046207 0 returned -16 [ 3137.093045] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3137.093072] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 3137.129213] ntfs: (device loop5): ntfs_fill_super(): Not an NTFS volume. [ 3137.189533] binder: 8999:9017 unknown command 536915920 [ 3137.207153] binder: 8999:9017 ioctl c0306201 20008000 returned -22 [ 3137.243675] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. 02:06:06 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:06 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000008000a0ffffffff00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:06 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x3633d3e2d60d0734, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:06 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x0, 0xd5}, {r2}], 0x2, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @local}, 0x10) ioctl(r4, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x0, 0x6}, &(0x7f00000002c0)=0x8) 02:06:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x0, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:06 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0x0, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:06 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000000000100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:06 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3137.508810] binder: 9026:9029 unknown command 536915920 [ 3137.536017] binder: 9026:9029 ioctl c0306201 20008000 returned -22 [ 3137.555448] binder: BINDER_SET_CONTEXT_MGR already set [ 3137.573888] binder: 9026:9032 unknown command 536915920 02:06:06 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3137.623421] binder: 9026:9029 ioctl 40046207 0 returned -16 [ 3137.626023] binder: 9026:9032 ioctl c0306201 20008000 returned -22 02:06:06 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000008800"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:06 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x208102, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:06 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000a0008000"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:06 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3137.876454] binder: 9055:9056 unknown command 536915920 [ 3137.915267] binder: 9055:9056 ioctl c0306201 20008000 returned -22 02:06:06 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000001100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3137.976869] binder: BINDER_SET_CONTEXT_MGR already set [ 3138.014727] binder: 9055:9056 unknown command 536915920 02:06:07 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3138.051224] binder: 9055:9056 ioctl c0306201 20008000 returned -22 [ 3138.088886] binder: 9055:9061 ioctl 40046207 0 returned -16 [ 3138.276989] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3138.287870] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 3138.300310] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. 02:06:07 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x0, 0xd5}, {r2}], 0x2, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @local}, 0x10) ioctl(r4, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x0, 0x6}, &(0x7f00000002c0)=0x8) 02:06:07 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0x0, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:07 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000df00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:07 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0ffffffff], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x0, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:07 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000016e59da6841a09f47b51b82ab9381b57eb706ac6431d9bed076ac95855fc7f2c26f4b0"]], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:07 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000ffffffffa00100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3138.532898] binder: 9082:9083 unknown command 536870912 [ 3138.546398] binder: 9082:9083 ioctl c0306201 20008000 returned -22 02:06:07 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:07 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000000000df00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3138.594427] binder_alloc: binder_alloc_mmap_handler: 9082 20000000-20002000 already mapped failed -16 [ 3138.689250] binder: BINDER_SET_CONTEXT_MGR already set 02:06:07 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000001a000"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3138.754351] binder: 9082:9083 ioctl 40046207 0 returned -16 02:06:07 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:07 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000df00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3138.807329] binder: 9082:9090 unknown command 536870912 [ 3138.823300] binder: 9082:9090 ioctl c0306201 20008000 returned -22 [ 3139.083303] ntfs: (device loop5): read_ntfs_boot_sector(): Primary boot sector is invalid. 02:06:08 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x0, 0xd5}, {r2}], 0x2, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @local}, 0x10) ioctl(r4, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x0, 0x6}, &(0x7f00000002c0)=0x8) 02:06:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0x0, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:08 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:08 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$setstatus(r1, 0x4, 0x40c00) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:08 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x0, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:08 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000000008800"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3139.539057] binder: 9125:9126 unknown command 536915920 [ 3139.557522] binder: 9125:9126 ioctl c0306201 20008000 returned -22 02:06:08 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf00000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3139.594662] binder_alloc: binder_alloc_mmap_handler: 9125 20000000-20002000 already mapped failed -16 [ 3139.630872] binder: BINDER_SET_CONTEXT_MGR already set 02:06:08 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000000000200"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:08 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3139.692340] binder: 9125:9126 ioctl 40046207 0 returned -16 02:06:08 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x400, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xffff, 0x2, 0x45, 0x7, 0x1}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000100)={r3, 0x9, 0x0, 0x6, 0x0, 0xd7}, 0x14) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={r3, 0x1}, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="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"]], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:08 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000000001100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3139.872699] binder: 9149:9150 unknown command 536871424 02:06:08 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0010000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3139.921807] binder: 9149:9150 ioctl c0306201 20008000 returned -22 [ 3139.976318] binder: 9149:9150 unknown command 536871424 [ 3139.993237] binder: 9149:9150 ioctl c0306201 20008000 returned -22 02:06:09 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x0, 0xd5}, {r2}], 0x2, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @local}, 0x10) ioctl(r4, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:09 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000ffffffffa0008000"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:09 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x0, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:09 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:09 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0x0, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:09 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x0, 0xd5}, {r2}], 0x2, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @local}, 0x10) 02:06:09 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:09 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000008000a000"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:09 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000002c0)={'filter\x00', 0x0, 0x3, 0x94, [], 0x4, &(0x7f0000000180)=[{}, {}, {}, {}], &(0x7f0000000200)=""/148}, &(0x7f0000000340)=0x78) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="004aad7baa14b0067e8b05a154e842ea2aedd33b2e9e478cfa769f088e9c8e179e03e3fbbd73055342ac72996550ecbd65108126b81e4d7790f4d2a965cc1ff9b87140549811ede3dabfe923d9e6471fcc0e902b373a56832a8d6791e61e37dfd330b48bc1c86d9123529d12a6c511ce9b4de2af6889af6bd4349d41a414474d3a4a457ad4250f1f296b6f0b83315ad246c8f1c72984774c50"]], 0x0, 0x800020, &(0x7f0000009000)}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000140)='net/netfilter\x00') getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000000380)=""/244, &(0x7f0000000480)=0xf4) 02:06:09 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:09 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3140.779608] binder: 9185:9188 unknown command 536870912 [ 3140.785108] binder: 9185:9188 ioctl c0306201 20008000 returned -22 02:06:09 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000001100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:09 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3140.904204] binder_alloc: binder_alloc_mmap_handler: 9185 20000000-20002000 already mapped failed -16 [ 3140.918209] binder: BINDER_SET_CONTEXT_MGR already set [ 3140.960004] binder: 9185:9193 ioctl 40046207 0 returned -16 02:06:09 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000008800"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3141.022795] binder: 9185:9188 unknown command 536870912 [ 3141.032349] binder: 9185:9188 ioctl c0306201 20008000 returned -22 02:06:10 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x0, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:10 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x200100, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r3, 0x770a, 0x0) [ 3141.686026] binder: 9225:9226 unknown command 536915920 [ 3141.693184] binder: 9225:9226 ioctl c0306201 20008000 returned -22 [ 3141.706360] binder_alloc: binder_alloc_mmap_handler: 9225 20000000-20002000 already mapped failed -16 [ 3141.716198] binder: 9225:9227 unknown command 536915920 [ 3141.722867] binder: BINDER_SET_CONTEXT_MGR already set [ 3141.738576] binder: 9225:9227 ioctl c0306201 20008000 returned -22 [ 3141.742923] binder: 9225:9226 ioctl 40046207 0 returned -16 02:06:10 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000001a0ffffffff00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:10 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:10 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x0, 0xd5}, {r2}], 0x2, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @local}, 0x10) 02:06:10 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x801c1, 0x58) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000080)=&(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:10 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0x0, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:10 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0ffffffff], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3141.998006] binder: 9237:9238 unknown command 536915920 [ 3142.003451] binder: 9237:9238 ioctl c0306201 20008000 returned -22 02:06:10 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000008000a0ffffffff00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3142.048796] binder_alloc: binder_alloc_mmap_handler: 9237 20000000-20002000 already mapped failed -16 [ 3142.090223] binder: BINDER_SET_CONTEXT_MGR already set 02:06:11 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf00000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3142.110480] binder: 9237:9248 unknown command 536915920 [ 3142.144804] binder: 9237:9238 ioctl 40046207 0 returned -16 02:06:11 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000200"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:11 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0010000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3142.167348] binder: 9237:9248 ioctl c0306201 20008000 returned -22 02:06:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0x0, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:11 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000100)="0a5c2d024031624e67703346767010bd7388a67013b52a5550f0b4c8a1c642ed9a2faa5f9ab06efd380ac82f9233d7b0936aac53faded0819a090e311665f5f53c20ff49383656706a02e2769a0ea1f72ef7739cf7adda0d36b75eed29ac204b29ad58bf1f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000057dc8f527c55d54dc654d2f55c6f5e36e3673c98d907e23b57f826b64b7975295a94624cd56db59adac15cd03a08c90e5b57861914c388e9cad8d513c35e2165c704785ec846"]], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:11 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000000000000200"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:11 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0018000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:11 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x0, 0xd5}, {r2}], 0x2, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @local}, 0x10) [ 3142.697708] __ntfs_error: 20 callbacks suppressed [ 3142.697746] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3142.711777] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 3142.724445] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. 02:06:11 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000000000001100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3142.796355] binder: 9273:9276 unknown command 536870912 [ 3142.801798] binder: 9273:9276 ioctl c0306201 20008000 returned -22 [ 3142.873624] binder_alloc: binder_alloc_mmap_handler: 9273 20000000-20002000 already mapped failed -16 [ 3142.917726] binder: BINDER_SET_CONTEXT_MGR already set [ 3142.966230] binder: 9273:9276 ioctl 40046207 0 returned -16 [ 3142.966288] binder: 9273:9281 unknown command 536870912 [ 3142.978642] binder: 9273:9281 ioctl c0306201 20008000 returned -22 02:06:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0x0, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:12 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:12 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000ffffffffa00100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:12 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r3 = dup3(r0, r1, 0x80000) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000040)={0xe5a0, "1c3bd74cc682a917f938ed3746482dc446658df4b7267e732f29a28c836a722e", 0x1, 0x900, 0x1, 0x101, 0xc, 0x2, 0x0, 0x8}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="0057a600000000d2206a8a5200"]], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:12 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:12 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000a0008000"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3143.273704] binder_alloc: binder_alloc_mmap_handler: 9296 20000000-20002000 already mapped failed -16 [ 3143.307632] ntfs: (device loop5): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3143.441714] ntfs: (device loop5): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 3143.576722] ntfs: (device loop5): ntfs_fill_super(): Not an NTFS volume. [ 3143.661621] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3143.670242] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 3143.700740] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. 02:06:12 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0x0, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:12 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001a0ffffffff], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:12 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = shmget$private(0x0, 0x1000, 0x78000900, &(0x7f0000000000/0x1000)=nil) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}}}, &(0x7f0000000140)=0xe8) getresgid(&(0x7f0000000180), &(0x7f0000000300)=0x0, &(0x7f0000000340)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000380)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000440)={{0x4702a5b7, r2, r3, r4, r5, 0x10, 0x8001}, 0xd8, 0x4, 0x2, 0x81, r6, r7, 0x3}) r8 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r9 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:12 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000008800"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:12 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x0, 0xd5}, {r2}], 0x2, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r4, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:12 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3143.975841] binder: 9323:9326 unknown command 536915920 [ 3144.003979] binder: 9323:9326 ioctl c0306201 20008000 returned -22 [ 3144.037010] binder: 9323:9334 unknown command 536915920 [ 3144.066544] binder: 9323:9334 ioctl c0306201 20008000 returned -22 02:06:13 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:13 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000df00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:13 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:13 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="000000705bee0f420000000100"]], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:13 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:13 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000008800"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3144.360906] binder: 9345:9347 unknown command 536870912 [ 3144.392047] binder: 9345:9347 ioctl c0306201 20008000 returned -22 [ 3144.432382] binder_alloc: binder_alloc_mmap_handler: 9345 20000000-20002000 already mapped failed -16 [ 3144.494761] binder: BINDER_SET_CONTEXT_MGR already set [ 3144.500571] binder: 9345:9354 unknown command 536870912 [ 3144.532619] binder: 9345:9347 ioctl 40046207 0 returned -16 [ 3144.533060] binder: 9345:9354 ioctl c0306201 20008000 returned -22 [ 3144.646157] ntfs: (device loop5): read_ntfs_boot_sector(): Primary boot sector is invalid. 02:06:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0x0, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000001a0ffffffff00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:14 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x8000, 0x20, 0x2, 0x55}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r1, 0x8, 0x30}, &(0x7f0000000140)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r3 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r1, 0x7, 0xa82}, 0xffffffe6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB="5d899c4c422b8524"]], 0x0, 0x800020, &(0x7f0000009000)}) getpeername(r0, &(0x7f0000000ac0)=@hci={0x1f, 0x0}, &(0x7f0000000b40)=0x80) sendmsg$can_bcm(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x1d, r5}, 0x10, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x3, 0x71fdb11faea70c43, 0x7, {}, {}, {0x2, 0x81, 0x400, 0x8001}, 0x1, @can={{0x0, 0x3ff, 0x8, 0x1d0}, 0x5, 0x1, 0x0, 0x0, "2b6b64dc48bf199a"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 02:06:14 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x0, 0xd5}, {r2}], 0x2, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3145.190244] binder: 9373:9378 unknown command 536915920 [ 3145.196804] binder: 9373:9378 ioctl c0306201 20008000 returned -22 [ 3145.220635] binder_alloc: binder_alloc_mmap_handler: 9373 20000000-20002000 already mapped failed -16 [ 3145.243161] binder: BINDER_SET_CONTEXT_MGR already set [ 3145.261252] binder: 9373:9378 ioctl 40046207 0 returned -16 [ 3145.275331] binder: 9373:9379 unknown command 536915920 [ 3145.305118] binder: 9373:9379 ioctl c0306201 20008000 returned -22 02:06:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000df00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:14 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x400, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008910, &(0x7f0000000080)="a8") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x300000000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x7ff, 0x100) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="0cbfe1b29baeb577a99107b6456f815d9c012321d0067b94047ba0038747c4195ffe09d1345323198884"]], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000000000000100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3145.518510] binder: 9395:9397 unknown command 536870912 [ 3145.541181] binder: 9395:9397 ioctl c0306201 20008000 returned -22 02:06:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3145.595388] binder: 9395:9397 unknown command 536870912 [ 3145.656801] binder: 9395:9397 ioctl c0306201 20008000 returned -22 02:06:15 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:15 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x0, 0xd5}, {r2}], 0x2, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000000000008800"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0018000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:15 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB="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"]], 0x0, 0x800020, &(0x7f0000009000)}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0xc) setreuid(r3, r4) 02:06:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3146.412148] binder: 9423:9424 unknown command 536871680 [ 3146.427149] binder: 9423:9424 ioctl c0306201 20008000 returned -22 [ 3146.516234] binder_alloc: binder_alloc_mmap_handler: 9423 20000000-20002000 already mapped failed -16 [ 3146.538960] binder: 9423:9430 unknown command 536871680 [ 3146.548003] binder: BINDER_SET_CONTEXT_MGR already set [ 3146.553556] binder: 9423:9430 ioctl c0306201 20008000 returned -22 [ 3146.560811] binder: 9423:9424 ioctl 40046207 0 returned -16 02:06:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000ffffffffa0008000"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:15 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x003\x00"']], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:15 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) [ 3146.664218] binder: 9440:9441 unknown command 536915920 02:06:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000001a000"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3146.706731] binder: 9440:9441 ioctl c0306201 20008000 returned -22 [ 3146.766300] binder_alloc: binder_alloc_mmap_handler: 9440 20000000-20002000 already mapped failed -16 [ 3146.797434] binder: BINDER_SET_CONTEXT_MGR already set [ 3146.825279] binder: 9440:9441 ioctl 40046207 0 returned -16 02:06:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000600)='trusted.overlay.upper\x00', &(0x7f0000000c80)={0x0, 0xfb, 0x15, 0x2, 0x9, "66e35860f0cd02f3c728d37800"}, 0x15, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000b80), 0xa0, &(0x7f0000000c40)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:16 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:16 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000001100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:16 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:16 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x0, 0xd5}, {r2}], 0x2, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:16 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000df00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:16 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3147.667137] binder: 9469:9475 unknown command 536915920 [ 3147.699094] binder: 9469:9475 ioctl c0306201 20008000 returned -22 02:06:16 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) [ 3147.727884] binder_alloc: binder_alloc_mmap_handler: 9469 20000000-20002000 already mapped failed -16 02:06:16 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:16 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000001100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3147.809976] binder: BINDER_SET_CONTEXT_MGR already set [ 3147.815314] binder: 9469:9488 ioctl 40046207 0 returned -16 02:06:16 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001a0], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:16 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB]], 0x0, 0x800020, &(0x7f0000009000)}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/hci\x00') setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000040)={0x3f, @loopback, 0x4e22, 0x0, 'lc\x00', 0x0, 0x5d41, 0x1d}, 0x2c) creat(&(0x7f0000000080)='./file0\x00', 0x28) [ 3148.079339] binder: 9504:9505 unknown command 536915920 [ 3148.101535] binder: 9504:9505 ioctl c0306201 20008000 returned -22 [ 3148.136703] binder_alloc: binder_alloc_mmap_handler: 9504 20000000-20002000 already mapped failed -16 [ 3148.187652] binder: 9504:9508 unknown command 536915920 [ 3148.193299] binder: 9504:9508 ioctl c0306201 20008000 returned -22 [ 3148.198579] binder: BINDER_SET_CONTEXT_MGR already set [ 3148.206716] binder: 9504:9505 ioctl 40046207 0 returned -16 [ 3148.446551] __ntfs_error: 17 callbacks suppressed [ 3148.446581] ntfs: (device loop5): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3148.479478] ntfs: (device loop5): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 3148.492021] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3148.500629] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 3148.514034] ntfs: (device loop5): ntfs_fill_super(): Not an NTFS volume. [ 3148.524864] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. 02:06:17 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000600)='trusted.overlay.upper\x00', &(0x7f0000000c80)={0x0, 0xfb, 0x15, 0x2, 0x9, "66e35860f0cd02f3c728d37800"}, 0x15, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x2) r2 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000b80), 0xa0, &(0x7f0000000c40)) io_setup(0x4, &(0x7f0000000800)) 02:06:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:17 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = semget$private(0x0, 0x3, 0x10) semctl$GETZCNT(r3, 0x7, 0xf, &(0x7f0000000000)=""/27) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="00001f0000000000dc793d0c1467c72a50f3fc1b068732b27a9fb74aacc26e63514ae49cc03576ef0dd9376ef424ed1d698979295cf79194c91fd7ddfa7d1dfb84f64a9d279021083762b0ce08f786b2c227459a594c32de7dca9bb8d5a067903a49b77b43fe4053e5e76411884b871c8b9bddbceffca724f73c5bdfa8bada60fbd109c1b2000000005ad3"]], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:17 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:17 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x0, 0xd5}, {r2}], 0x2, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r4, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:17 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf00], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000200"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3148.957306] binder: 9525:9530 unknown command 536871168 [ 3148.962996] binder: 9525:9530 ioctl c0306201 20008000 returned -22 [ 3148.972653] binder_alloc: binder_alloc_mmap_handler: 9525 20000000-20002000 already mapped failed -16 [ 3148.982711] binder: BINDER_SET_CONTEXT_MGR already set [ 3148.988795] binder: 9525:9530 ioctl 40046207 0 returned -16 02:06:18 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:18 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:18 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:18 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000001100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3149.150677] binder: 9546:9548 ioctl c0306201 20008000 returned -14 [ 3149.190090] binder: BINDER_SET_CONTEXT_MGR already set 02:06:18 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3149.204786] binder: 9546:9550 ioctl c0306201 20008000 returned -14 [ 3149.218375] binder: 9546:9548 ioctl 40046207 0 returned -16 02:06:18 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:18 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000600)='trusted.overlay.upper\x00', &(0x7f0000000c80)={0x0, 0xfb, 0x15, 0x2, 0x9, "66e35860f0cd02f3c728d37800"}, 0x15, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x2) r2 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000b80), 0xa0, &(0x7f0000000c40)) io_setup(0x4, &(0x7f0000000800)) 02:06:18 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000a00100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:18 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0018000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:18 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x0, 0xd5}, {r2}], 0x2, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r4, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:18 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3149.862300] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3149.890588] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. 02:06:18 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3149.912088] binder: 9569:9579 unknown command 536915920 [ 3149.940110] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. [ 3149.949905] binder: 9569:9579 ioctl c0306201 20008000 returned -22 [ 3150.029185] binder_alloc: binder_alloc_mmap_handler: 9569 20000000-20002000 already mapped failed -16 [ 3150.077034] binder: BINDER_SET_CONTEXT_MGR already set [ 3150.082372] binder: 9569:9579 ioctl 40046207 0 returned -16 [ 3150.156656] binder: 9569:9595 unknown command 536915920 [ 3150.176977] binder: 9569:9595 ioctl c0306201 20008000 returned -22 02:06:19 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000000000000df00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:19 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:19 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200, 0x0) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000380)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$sndseq(r2, &(0x7f0000000280)=[{0x1f, 0x3, 0xd1, 0xff, @time={r3, r4+30000000}, {0xde1, 0x7f}, {0x2, 0x1000}, @result={0x48a5, 0xb53}}, {0x7ff, 0x9, 0x8, 0x3, @time={0x0, 0x989680}, {0xed, 0x4}, {0x3ff, 0x10000}, @control={0x400, 0x20, 0x3f}}, {0x1000, 0x8, 0x333, 0x2, @time={0x0, 0x989680}, {0x3, 0xde}, {0x1, 0x4}, @ext={0xac, &(0x7f0000000100)="ad30020b7e2dcbbaba90ff3c7b175dd3ff3d43166602c3e3a85fb6bdb9c01514ecaf4d1234838d4076a29d75f17fbabc323a18c8e74f443dc056c72ccd33fa4949f75180697fce20ad2dfb39b033317cbf6b8a0936d2e1b6e0fd8caa18e28dce766f281bd91d3d0ffef9a98a7986190574036316b39dfcd2e8dd1cf6004c4c0d512b1f4e8a6d87e59647e41b6e436e87d9ae2dbad020c38adfbf72f5e8fb5d47246f3ea3156ed0cb0daef501"}}, {0x10001, 0x62, 0xfff, 0x8, @tick=0x100, {0xf4, 0x8}, {0xfe}, @ext={0x1000, &(0x7f0000001040)="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"}}, {0xe50, 0x3, 0xffffffffffffffff, 0x70000000000, @tick=0x7f, {0x8, 0x4}, {0x80000001}, @quote={{0x380f, 0x6}, 0x400, &(0x7f0000000240)={0xfffffffffffffff7, 0x401, 0x7, 0x8001, @tick=0xffffffff, {0x0, 0x83a}, {0x6, 0x7ff}, @ext={0x2, &(0x7f0000000200)="6082"}}}}], 0xf0) r5 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) [ 3150.294798] ntfs: (device loop5): read_ntfs_boot_sector(): Primary boot sector is invalid. 02:06:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:19 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000600)='trusted.overlay.upper\x00', &(0x7f0000000c80)={0x0, 0xfb, 0x15, 0x2, 0x9, "66e35860f0cd02f3c728d37800"}, 0x15, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x2) r2 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000b80), 0xa0, &(0x7f0000000c40)) io_setup(0x4, &(0x7f0000000800)) 02:06:19 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000008000a000"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3150.397292] binder: 9607:9608 unknown command 536915920 [ 3150.406883] binder: 9607:9608 ioctl c0306201 20008000 returned -22 [ 3150.419203] binder_alloc: binder_alloc_mmap_handler: 9607 20000000-20002000 already mapped failed -16 [ 3150.478241] binder: BINDER_SET_CONTEXT_MGR already set [ 3150.478683] binder: 9607:9609 unknown command 536915920 [ 3150.483563] binder: 9607:9617 ioctl 40046207 0 returned -16 02:06:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:19 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000008800"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3150.560120] binder: 9607:9609 ioctl c0306201 20008000 returned -22 02:06:19 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB="0013000000000000"]], 0x0, 0x800020, &(0x7f0000009000)}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x1ac, 0xa, 0x2, 0x300, 0x70bd2a, 0x25dfdbfd, {0x1, 0x0, 0xa}, [@nested={0x184, 0x81, [@generic="ac095a17eca8dc08901ad6a8a1aa9c6f451d4f5aa0cfc89d69ef7b6a12c608047a3b1edb10692942a893ed51b5768b41dceb8472d7e389e896649708d50d1a8f0700a117c79f195a290ae575145a6fe242d418e7fb5a40a00c8c70bc3f0b8d42710f72a2f2b87ae2e181beca9ca862d1abd032fb9daa5ab04cc9b5a556456ebab74b545a6b70b62743536694e649f3618080f17b3382bdf7e3495aab0312acf0b2e05d0c72fcc26cc9b7523f6979faca0dc18417f75586548cff53996cad04dd9e123431ab9a08c97b327c583791497fc85c51a521b64fcde8bd81c6a73d8942", @typed={0xc, 0x0, @u64=0xe61e}, @generic="5345691fd71a56a92cd32e085f9171f1134bfb12696f26ed76e358dfb94b33f87a1a6f380f1d63cfa727a04f666c375840eebd2c0eb979adec6c591207ede6f4f565865686111aff1060b942630dc009751ed1655de25c25c86355156c284b9fd00941bf6834c05cd240e96549738574c6481eb4af9963f4c13c28203b326348c617ca3e44", @generic="c04a4b98a12ed9f3ed28edd332d7"]}, @typed={0x14, 0x2b, @ipv6}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 02:06:19 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x0, 0xd5}, {r2}], 0x2, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r4, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:19 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000008800"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3150.765627] binder: 9632:9633 unknown command 536915920 [ 3150.794779] binder: 9632:9633 ioctl c0306201 20008000 returned -22 02:06:19 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000ffffffffa0008000"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3150.883644] binder_alloc: binder_alloc_mmap_handler: 9632 20000000-20002000 already mapped failed -16 [ 3150.936583] binder: BINDER_SET_CONTEXT_MGR already set 02:06:19 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0ffffffff], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3150.977254] binder: 9632:9633 ioctl 40046207 0 returned -16 [ 3151.019212] binder: 9632:9654 unknown command 536915920 02:06:20 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000df00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3151.087019] binder: 9632:9654 ioctl c0306201 20008000 returned -22 02:06:20 executing program 5: munlock(&(0x7f0000a18000/0x4000)=nil, 0x4000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x200, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x8001004, 0x81}) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000600000000006a85000000000000000000000000"]) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 02:06:20 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf00000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:20 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x200000, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) 02:06:20 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000000000000008800"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:20 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3151.317014] binder: 9671:9672 unknown command 536915920 [ 3151.334788] binder: 9671:9672 ioctl c0306201 20008000 returned -22 [ 3151.438483] binder_alloc: binder_alloc_mmap_handler: 9671 20000000-20002000 already mapped failed -16 [ 3151.456759] binder: BINDER_SET_CONTEXT_MGR already set [ 3151.507850] binder: 9671:9672 ioctl 40046207 0 returned -16 [ 3151.520939] binder: 9671:9683 unknown command 536915920 [ 3151.541818] binder: 9671:9683 ioctl c0306201 20008000 returned -22 02:06:20 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) getsockname(r0, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:20 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001a0], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:20 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r3, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffffe0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) [ 3151.743166] binder: 9695:9696 unknown command 536915920 [ 3151.757957] binder: 9695:9696 ioctl c0306201 20008000 returned -22 [ 3151.779833] binder_alloc: binder_alloc_mmap_handler: 9695 20000000-20002000 already mapped failed -16 [ 3151.794212] binder: BINDER_SET_CONTEXT_MGR already set [ 3151.806173] binder: 9695:9696 ioctl 40046207 0 returned -16 02:06:20 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:20 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000ffffffffa00100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:20 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r3, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:20 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="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"]], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:20 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)={0x1, 0x9}) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000340)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0xc) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)=0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000180)={r0, r1, 0x1000}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) [ 3152.035733] binder: 9713:9714 unknown command 536871424 [ 3152.056349] binder: 9713:9714 ioctl c0306201 20008000 returned -22 [ 3152.074128] binder_alloc: binder_alloc_mmap_handler: 9713 20000000-20002000 already mapped failed -16 02:06:21 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:21 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000008000a000"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3152.090511] binder: BINDER_SET_CONTEXT_MGR already set [ 3152.113105] binder: 9713:9714 ioctl 40046207 0 returned -16 02:06:21 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000000)="bc667e8e") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:21 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000008800"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:21 executing program 5: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0xffffff19) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000340)) socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x80000000000, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x7) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x4, &(0x7f0000000000)=[{0x8, 0x5, 0x9, 0x54b}, {0x9, 0x2, 0x7, 0x5}, {0x3f, 0x8, 0x1f, 0x1f}, {0xffffffffffff6cc4, 0x7fff, 0x7, 0x1}]}) 02:06:21 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3152.338026] binder: 9739:9741 unknown command 536915920 [ 3152.343575] binder: 9739:9741 ioctl c0306201 20008000 returned -22 [ 3152.385052] binder_alloc: binder_alloc_mmap_handler: 9739 20000000-20002000 already mapped failed -16 [ 3152.413435] binder: BINDER_SET_CONTEXT_MGR already set [ 3152.434020] binder: 9739:9746 unknown command 536915920 [ 3152.461693] binder: 9739:9741 ioctl 40046207 0 returned -16 [ 3152.482037] binder: 9739:9746 ioctl c0306201 20008000 returned -22 02:06:21 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:21 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000001100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:21 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f00000001c0)={0x9, 0x837, 0x0, 0x0, 0xc6d0}) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000005fc4e03cdb6d2286ba1f0004000000000000000000000000000000ad75f20b745eeeb4ac86bab46cb032b7431633888750297810f07272d0d859de4efeaedfefa27f43421265ac97065ddae46b682fbd3fb7943d281ea8fc35dc9905850d9840e1495a30f0217b681e477993e7bc4a34af6622250bf4a8e0a589fb"]) socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 02:06:21 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:21 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffd) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={r0}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000100)=0x1000, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) socketpair$inet(0x2, 0xa, 0x5, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x2, 0x0, &(0x7f0000004fbc)=ANY=[@ANYRES16=r0], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:21 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r3, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000000000000df00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3153.080628] binder_alloc: binder_alloc_mmap_handler: 9754 20000000-20002000 already mapped failed -16 [ 3153.113495] binder: BINDER_SET_CONTEXT_MGR already set [ 3153.140579] binder: 9754:9760 ioctl 40046207 0 returned -16 02:06:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:22 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") modify_ldt$write(0x1, &(0x7f0000000040)={0x9, 0x20000000, 0x0, 0x6, 0x3, 0x7, 0x7ff, 0x6, 0x8000, 0x7}, 0x10) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x2, 0x0, &(0x7f0000004fbc)=ANY=[@ANYRES16=r2], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000000000000000100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:22 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) [ 3153.362948] binder: 9782:9786 ioctl c0306201 20000000 returned -14 [ 3153.429345] binder_alloc: binder_alloc_mmap_handler: 9782 20000000-20002000 already mapped failed -16 [ 3153.470378] binder: BINDER_SET_CONTEXT_MGR already set [ 3153.482831] binder: 9782:9792 ioctl 40046207 0 returned -16 [ 3153.736021] __ntfs_error: 11 callbacks suppressed [ 3153.736054] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3153.752975] ntfs: (device loop5): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3153.777434] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 3153.791527] ntfs: (device loop5): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 3153.804055] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. [ 3153.811537] ntfs: (device loop5): ntfs_fill_super(): Not an NTFS volume. 02:06:23 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:23 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000000000000000200"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:23 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x80, 0x0) write$evdev(r3, &(0x7f00000000c0)=[{{}, 0x15, 0x0, 0x80000000}, {{0x77359400}, 0x17, 0x1, 0x7}, {{0x0, 0x7530}, 0x17, 0x100000000, 0xa3}], 0x48) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) fcntl$getownex(r2, 0x10, &(0x7f0000000000)) 02:06:23 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) ppoll(&(0x7f0000000040)=[{r0, 0x0, 0xd5}, {r2}], 0x2, &(0x7f0000000180), &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r3, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf00], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:23 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000001100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3154.361442] binder: 9807:9808 unknown command 536915920 [ 3154.383011] binder: 9807:9808 ioctl c0306201 20008000 returned -22 [ 3154.401308] binder_alloc: binder_alloc_mmap_handler: 9807 20000000-20002000 already mapped failed -16 02:06:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3154.456807] binder: BINDER_SET_CONTEXT_MGR already set [ 3154.462324] binder: 9807:9808 ioctl 40046207 0 returned -16 [ 3154.495233] binder: 9807:9808 unknown command 536915920 02:06:23 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000008800"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001a0ffffffff], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3154.547213] binder: 9807:9808 ioctl c0306201 20008000 returned -22 02:06:23 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200, 0x0) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000000100)=""/165) [ 3154.795831] binder: 9841:9842 unknown command 536915920 [ 3154.805450] binder: 9841:9842 ioctl c0306201 20008000 returned -22 [ 3154.816535] binder_alloc: binder_alloc_mmap_handler: 9841 20000000-20002000 already mapped failed -16 [ 3154.826811] binder: BINDER_SET_CONTEXT_MGR already set [ 3154.832294] binder: 9841:9842 ioctl 40046207 0 returned -16 [ 3154.838955] binder: 9841:9843 unknown command 536915920 [ 3154.844594] binder: 9841:9843 ioctl c0306201 20008000 returned -22 [ 3155.085042] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3155.093879] ntfs: (device loop5): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3155.112697] ntfs: (device loop5): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 3155.125071] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. 02:06:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0010000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000a00100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:24 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x2000000) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:24 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:24 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) ppoll(&(0x7f0000000040)=[{r0, 0x0, 0xd5}, {r2}], 0x2, &(0x7f0000000180), &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r3, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:24 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000000000000000000000000100000000000000000000000000bfda45ad385cfaef621659b9240dfe8d8af188ba73ec37e5f19b73791c3400b48080d95d9d7b3107db3fe62db3ab109d5d9157bdc94caf4cfbf2d0a28e714bb66f157df57696ceb14b98460554f482d222f77caca56672cfd17d60c66935a6a2cfa8b3a3e02500b1ee5bbf8be47b35e0fe779d682bf27215da2f1b72478131d7b1a5cdb5e21e0a0f97710629b109daa2afcd5846fbb31a3d7740c46a1f4f5c766db8c6668e04bcc3f55915ed98b115ce03604d7cd931402dea93deacf7d62cd4d154b8e772b121ed2ad930"]) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0xb2) socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 02:06:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000000df00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0018000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3155.607014] binder: 9856:9857 unknown command 536915920 [ 3155.623212] binder: 9856:9857 ioctl c0306201 20008000 returned -22 [ 3155.644323] binder: BINDER_SET_CONTEXT_MGR already set 02:06:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0018000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3155.721654] binder: 9856:9862 ioctl 40046207 0 returned -16 02:06:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000200"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:24 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xe) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000008000a0ffffffff00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3155.916634] binder: 9881:9882 unknown command 536915920 [ 3155.941089] binder: 9881:9882 ioctl c0306201 20008000 returned -22 [ 3156.011039] binder_alloc: binder_alloc_mmap_handler: 9881 20000000-20002000 already mapped failed -16 02:06:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0ffffffff], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3156.083404] binder: BINDER_SET_CONTEXT_MGR already set 02:06:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000000000000001100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3156.124180] binder: 9881:9888 ioctl 40046207 0 returned -16 [ 3156.124190] binder: 9881:9895 unknown command 536915920 [ 3156.124209] binder: 9881:9895 ioctl c0306201 20008000 returned -22 02:06:25 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000008, 0x20015, r1, 0x3) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x30000) mount$9p_rdma(&(0x7f0000000240)='127.0.0.1\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x10000, &(0x7f0000000300)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@rq={'rq', 0x3d, 0x6}}, {@common=@posixacl='posixacl'}, {@common=@access_client='access=client'}, {@sq={'sq', 0x3d, 0x200}}, {@common=@mmap='mmap'}, {@rq={'rq', 0x3d, 0x1000}}, {@timeout={'timeout'}}, {@sq={'sq', 0x3d, 0x7}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x7e, @remote, 0x1000}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000004c0)=ANY=[@ANYRES32=r4, @ANYBLOB="020004000500483f1fa9b87c5c3fda9b5977e8854dcae6daff6254d88ce411973a1ef42a9ceb9e35b87bf50a04410addf71ee448c749209867e04195d2f67395f2126bf2f0c20f46d069fa77bab9c639655b5a4f03b0025aa1ae1c9bfe89d4e269de76b6b2a1b3e91675520d1653b6a6fc6a0caca5bf0325ffd2a5da40afe759a81ac8b9511becd21de493c923e1a5a646"], 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f0000000440)={0x0, 0x1ff, 0x80000000, &(0x7f0000000400)=0x5}) sendfile(r2, r1, &(0x7f0000000480), 0x100000001) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x5, @ipv4={[], [], @broadcast}, 0x6}, @in6={0xa, 0x4e22, 0x7f, @local, 0x100000001}], 0x38) 02:06:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000a0008000"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:25 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) ppoll(&(0x7f0000000040)=[{r0, 0x0, 0xd5}, {r2}], 0x2, &(0x7f0000000180), &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r3, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:25 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1008031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x402002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[]}}, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000200)={'filter\x00'}, &(0x7f0000000140)=0x44) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x9, 0x9, 0x9, 0x0, 0x0, 0x184}]}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f00000000c0)={0x9, "e4fe88023205766c5a0d3b023bf038d558c939805ce60d20e3908b692b642a6b", 0x8, 0xb62, 0x3ff80000000, 0x2, 0x1}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 02:06:25 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x100) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000000200"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0010000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3156.727832] binder: 9910:9917 unknown command 536915920 [ 3156.743102] binder: 9910:9917 ioctl c0306201 20008000 returned -22 [ 3156.746863] IPVS: ftp: loaded support on port[0] = 21 [ 3156.779893] binder: BINDER_SET_CONTEXT_MGR already set [ 3156.785244] binder: 9910:9922 ioctl 40046207 0 returned -16 02:06:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000001100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3156.846419] binder: 9910:9924 unknown command 536915920 [ 3156.851944] binder: 9910:9924 ioctl c0306201 20008000 returned -22 02:06:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:25 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000001a0ffffffff00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:26 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3157.093611] binder: 9942:9943 unknown command 536915920 02:06:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000df00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3157.139851] binder: 9942:9943 ioctl c0306201 20008000 returned -22 [ 3157.200878] binder_alloc: binder_alloc_mmap_handler: 9942 20000000-20002000 already mapped failed -16 02:06:26 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3157.267481] binder: 9942:9952 unknown command 536915920 [ 3157.274633] binder: BINDER_SET_CONTEXT_MGR already set [ 3157.284065] binder: 9942:9952 ioctl c0306201 20008000 returned -22 02:06:26 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x0, 0xd5}, {}], 0x2, &(0x7f0000000180)={0x0, r2+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r3, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") [ 3157.343188] binder: 9942:9955 ioctl 40046207 0 returned -16 02:06:26 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1008031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x402002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[]}}, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000200)={'filter\x00'}, &(0x7f0000000140)=0x44) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x9, 0x9, 0x9, 0x0, 0x0, 0x184}]}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f00000000c0)={0x9, "e4fe88023205766c5a0d3b023bf038d558c939805ce60d20e3908b692b642a6b", 0x8, 0xb62, 0x3ff80000000, 0x2, 0x1}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 02:06:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000001a000"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:26 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:26 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00']], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:26 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:26 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x0, 0xd5}, {}], 0x2, &(0x7f0000000180)={0x0, r2+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r3, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:26 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3157.939959] binder: 9973:9977 unknown command 536915920 [ 3157.962688] binder: 9973:9977 ioctl c0306201 20008000 returned -22 02:06:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000000100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3158.000212] IPVS: ftp: loaded support on port[0] = 21 02:06:27 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000080)={0x3, 0xff}) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e23, @rand_addr=0x100000000}}) r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000005d6d1f188f8638b1aeaae33ad257ddb3fd66819b39ffb231668f48fb858df6abb2e1aab366124e138c2cdf6f3c92e6cee1021b6e12919ff0bad03c637429739ba83456ab195480b6ac4f6aea845a09cdb9facf7c03af47aca6e21d620bf06336550757156d2a9daf35c8c704d6c507091513f18c9518a11dd7327bd4c9"]], 0x0, 0x800020, &(0x7f0000009000)}) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000100)=0xef, &(0x7f0000000140)=0x215) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x7) ioctl$RTC_PIE_ON(r0, 0x7005) 02:06:27 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000000000000000100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:27 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:27 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000001a000"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3158.230068] binder: 9999:10001 ioctl 40086200 20000000 returned -22 [ 3158.243835] binder: 9999:10001 unknown command 536871424 [ 3158.260189] binder: 9999:10001 ioctl c0306201 20008000 returned -22 [ 3158.326472] binder: 9999:10009 ioctl 40086200 20000000 returned -22 [ 3158.360459] binder: BINDER_SET_CONTEXT_MGR already set [ 3158.389242] binder: 9999:10001 unknown command 536871424 [ 3158.414564] binder: 9999:10001 ioctl c0306201 20008000 returned -22 [ 3158.469131] binder: 9999:10010 ioctl 40046207 0 returned -16 02:06:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1008031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x402002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[]}}, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000200)={'filter\x00'}, &(0x7f0000000140)=0x44) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x9, 0x9, 0x9, 0x0, 0x0, 0x184}]}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f00000000c0)={0x9, "e4fe88023205766c5a0d3b023bf038d558c939805ce60d20e3908b692b642a6b", 0x8, 0xb62, 0x3ff80000000, 0x2, 0x1}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 02:06:27 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:27 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000000000200"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:27 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x0, 0xd5}, {}], 0x2, &(0x7f0000000180)={0x0, r2+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r3, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:27 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:27 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000200"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3159.123545] binder: 10027:10033 unknown command 536915920 [ 3159.139171] binder: 10027:10033 ioctl c0306201 20008000 returned -22 [ 3159.141775] IPVS: ftp: loaded support on port[0] = 21 02:06:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf00000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3159.179808] binder_alloc: binder_alloc_mmap_handler: 10027 20000000-20002000 already mapped failed -16 [ 3159.237543] binder: BINDER_SET_CONTEXT_MGR already set 02:06:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000001100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3159.269105] binder: 10027:10033 ioctl 40046207 0 returned -16 [ 3159.295578] binder: 10027:10047 unknown command 536915920 [ 3159.350627] binder: 10027:10047 ioctl c0306201 20008000 returned -22 02:06:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0018000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:28 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x8, 0x88000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000100)=[@acquire={0x40046305, 0x2}], 0x2b, 0x0, &(0x7f0000000140)="924c4b324f02035d094ec3e447473a2125d9e63c72d2a5d0715c0a1a724be10e32587d78bb7bacf8bbfac0"}) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x42, 0x0) connect$llc(r2, &(0x7f0000000040)={0x1a, 0x334, 0x1, 0x8, 0x9, 0x3ff, @random="058d9c5d9fed"}, 0x10) r3 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x1000000, 0x40010, r4, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x50, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="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"]], 0x0, 0x800020, &(0x7f0000009000)}) [ 3159.581259] binder: 10058:10061 unknown command 536871424 [ 3159.614356] binder: 10058:10061 ioctl c0306201 20008000 returned -22 [ 3159.668265] binder: BINDER_SET_CONTEXT_MGR already set [ 3159.694845] binder: 10058:10067 ioctl 40046207 0 returned -16 [ 3159.714161] binder: 10058:10061 unknown command 536871424 [ 3159.742476] binder: 10058:10061 ioctl c0306201 20008000 returned -22 [ 3159.764048] __ntfs_error: 11 callbacks suppressed [ 3159.764075] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3159.896087] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 3159.942729] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. 02:06:29 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1008031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x402002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[]}}, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000200)={'filter\x00'}, &(0x7f0000000140)=0x44) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x9, 0x9, 0x9, 0x0, 0x0, 0x184}]}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f00000000c0)={0x9, "e4fe88023205766c5a0d3b023bf038d558c939805ce60d20e3908b692b642a6b", 0x8, 0xb62, 0x3ff80000000, 0x2, 0x1}) 02:06:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000000000000000df00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:29 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x0, 0xd5}, {r2}], 0x2, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r4, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:29 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-control\x00', 0x40, 0x0) write$P9_RREMOVE(r2, &(0x7f0000000140)={0x7, 0x7b, 0x1}, 0x7) r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) utimensat(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000680)={0x1, {r5, r6+10000000}, 0xfa4, 0x8}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r3, 0x8}, {r4, 0x1220}, {r1, 0xc}, {r1, 0x4}], 0x4, &(0x7f0000000240)={r7, r8+10000000}, &(0x7f0000000280)={0xdca3}, 0x8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) r9 = request_key(&(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='/dev/dlm-control\x00', 0xfffffffffffffffb) keyctl$describe(0x6, r9, &(0x7f0000000400)=""/220, 0xdc) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r4, 0xc0106401, &(0x7f0000000600)={0xed, &(0x7f0000000500)=""/237}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="000000003e87bb5a152b00100000fc0000592d6a20ee0ccbb302d646bf751b7f3bf413855f3ddd166a0024ebdc753b13aed7bfcb1e8c3a15bf1f51a74291e4a75fdb5a6b30971a11abab00674321e50cab044422f02116e2db193f0c175205c0b0a9f20000000000000000"]], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:29 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x2) r2 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000000008800"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001a0], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3160.302256] IPVS: ftp: loaded support on port[0] = 21 [ 3160.311280] binder: 10075:10086 unknown command 536871616 [ 3160.319953] binder: 10075:10086 ioctl c0306201 20008000 returned -22 02:06:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf00], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000008800"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000000000000008800"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3160.835287] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3160.848734] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 3160.861210] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. [ 3161.042909] binder_alloc: binder_alloc_mmap_handler: 10075 20000000-20002000 already mapped failed -16 [ 3161.090647] binder: BINDER_SET_CONTEXT_MGR already set [ 3161.114763] binder: 10075:10086 ioctl 40046207 0 returned -16 02:06:30 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000ffffffffa0008000"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:30 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:30 executing program 3: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x0, 0xd5}, {r0}], 0x2, &(0x7f0000000180)={0x0, r1+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:30 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x400000, 0x0) r4 = getpgrp(0xffffffffffffffff) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x7, 0x3, 0xaf, 0x800000000000000, 0x9, r4}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:30 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1008031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x402002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[]}}, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000200)={'filter\x00'}, &(0x7f0000000140)=0x44) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x9, 0x9, 0x9, 0x0, 0x0, 0x184}]}) socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 02:06:30 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x2) r2 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:30 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3161.648375] binder: 10122:10123 unknown command 536915920 [ 3161.669064] binder: 10122:10123 ioctl c0306201 20008000 returned -22 02:06:30 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000a0008000"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3161.717120] binder_alloc: binder_alloc_mmap_handler: 10122 20000000-20002000 already mapped failed -16 [ 3161.724608] IPVS: ftp: loaded support on port[0] = 21 02:06:30 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3161.845466] binder: BINDER_SET_CONTEXT_MGR already set 02:06:30 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000000df00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3161.877255] binder: 10122:10134 ioctl 40046207 0 returned -16 02:06:30 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001a0ffffffff], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:30 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, {0x8, 0x2, 0x8000, 0x40, 0x5a4, 0x2}, 0x1, 0x6}, 0xe) r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:31 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000000000100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3162.114822] binder: 10153:10154 unknown command 536915920 [ 3162.156518] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3162.164197] binder: 10153:10154 ioctl c0306201 20008000 returned -22 02:06:31 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x0, 0xd5}, {r2}], 0x2, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r4, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3162.205134] binder_alloc: binder_alloc_mmap_handler: 10153 20000000-20002000 already mapped failed -16 [ 3162.219461] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 3162.267467] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. [ 3162.296168] binder: BINDER_SET_CONTEXT_MGR already set [ 3162.301671] binder: 10153:10162 ioctl 40046207 0 returned -16 [ 3162.342952] binder: 10153:10171 unknown command 536915920 [ 3162.354417] binder: 10153:10171 ioctl c0306201 20008000 returned -22 02:06:31 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1008031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x402002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[]}}, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000200)={'filter\x00'}, &(0x7f0000000140)=0x44) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x9, 0x9, 0x9, 0x0, 0x0, 0x184}]}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 02:06:31 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000000001100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:31 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) r3 = getpgrp(0x0) ptrace$setsig(0x4203, r3, 0x4, &(0x7f0000000000)={0xd, 0x5, 0x1, 0x76565846}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:31 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x2) r2 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001a0], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:31 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000008000a0ffffffff00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3162.890662] binder: 10183:10188 unknown command 536915920 [ 3162.931779] binder: 10183:10188 ioctl c0306201 20008000 returned -22 [ 3162.950665] IPVS: ftp: loaded support on port[0] = 21 [ 3162.959267] binder_alloc: binder_alloc_mmap_handler: 10183 20000000-20002000 already mapped failed -16 02:06:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3162.996978] binder: BINDER_SET_CONTEXT_MGR already set [ 3163.016885] binder: 10183:10188 ioctl 40046207 0 returned -16 02:06:32 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000000000000001100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:32 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x2000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x2, 0x40}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000280)={r2, 0x9000000000000, 0x3}, 0x8) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000040)={{0x7ff, 0x8001, 0x10001}, 'syz0\x00', 0x42}) r4 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000007dbd73dd17c6f269123292408374c45d34a87ff9631924388bf24b75bb88603e52f801d93cf2fdade2fcfdb27a4823c8569e7d88ad293f4f5a8c83d9fa824d7823cb2ad2f5701dc0b25b296aa8e4d288ede498d019a4079b2b0e2bd60b7c8535d15ea2780627cd09864a1476c5f7"]], 0x0, 0x800020, &(0x7f0000009000)}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0xfffffffffffffe00) 02:06:32 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x0, 0xd5}, {r2}], 0x2, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r4, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3163.284525] binder: 10208:10212 unknown command 536871424 [ 3163.303630] binder: 10208:10212 ioctl c0306201 20008000 returned -22 [ 3163.350114] binder_alloc: binder_alloc_mmap_handler: 10208 20000000-20002000 already mapped failed -16 [ 3163.366940] binder: BINDER_SET_CONTEXT_MGR already set [ 3163.406581] binder: 10208:10218 ioctl 40046207 0 returned -16 [ 3163.412733] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3163.443447] binder: 10208:10212 unknown command 536871424 [ 3163.477103] binder: 10208:10212 ioctl c0306201 20008000 returned -22 02:06:32 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000008800"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:32 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x2001f, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000200)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8) r4 = getegid() fchown(r2, r3, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:32 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x0, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:32 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x0, 0xd5}, {r2}], 0x2, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r4, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:32 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1008031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x402002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[]}}, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000200)={'filter\x00'}, &(0x7f0000000140)=0x44) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 02:06:32 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000ffffffffa00100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3164.036769] binder: 10235:10237 unknown command 536915920 [ 3164.056091] binder: 10235:10237 ioctl c0306201 20008000 returned -22 02:06:33 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3164.083554] binder: BINDER_SET_CONTEXT_MGR already set [ 3164.097077] IPVS: ftp: loaded support on port[0] = 21 [ 3164.119761] binder: 10235:10237 ioctl 40046207 0 returned -16 02:06:33 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000000000000000200"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:33 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000040)=0x80000001, 0x4) r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:33 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3164.362557] binder: 10259:10260 unknown command 536915920 [ 3164.388578] binder: 10259:10260 ioctl c0306201 20008000 returned -22 02:06:33 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000008000a000"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:33 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0018000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3164.424174] binder_alloc: binder_alloc_mmap_handler: 10259 20000000-20002000 already mapped failed -16 02:06:33 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000a00100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3164.548337] binder: 10259:10263 unknown command 536915920 02:06:33 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf00], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3164.590559] binder: BINDER_SET_CONTEXT_MGR already set [ 3164.607139] binder: 10259:10263 ioctl c0306201 20008000 returned -22 [ 3164.620316] binder: 10259:10270 ioctl 40046207 0 returned -16 02:06:33 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x0, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:33 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x1}, &(0x7f0000000040)=0xff63) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000480)=ANY=[@ANYRES32=r1, @ANYBLOB="0400ed00cf9f37f7e6cc7b0883e37c68b530c5f0fcd8711dfcef3492de93ece44d30472bd84ce36b29e5ac1fa47e40a553fa3480295596dea1a88a57ab6cb70ffe91be0133e78a9db7afe5edab58994ac47ac2424c1db0791d2e47fd77c9153ea7109a5af9efe9905ed68f13bce97d7d2d26bbb21dd17c824c6aef00b7c58b90644c1ceef595503693add959cd821679f5eea4428947c5c848267e2acd922f32642c67568e9608c77deb711feed144ec184641ce7cf677ec85963a9fe41b0dc8b623372f4dddea6880578d03ef5e8249e51949e3ea9ed3fa311f4907e8ed0f6d2f5d9a80d4d8464d03f638f8f562226dcc319d074b9c88da091a3b173f5f28f2050288a3b47a8d6eba172c9bd6cc66f4174e518abfda6fd9874a9aace3a025a0bd131b1840caf946efc978bbcad6714b62b7cbdbc52cee6007511032b87e64cd4f051a0b53833675841d78781ad6c34210c535aabf66fcbc1e3f1af7edd0937a47c42433e1c11755372051f4a500950e7f2832c4370c3af731"], 0xf5) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x280, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000740)={0x1, {{0xa, 0x4e23, 0x1, @loopback, 0x1}}, 0x1, 0x4, [{{0xa, 0x4e20, 0x8, @mcast1, 0x1}}, {{0xa, 0x4e23, 0x5d12, @remote, 0x5}}, {{0xa, 0x4e21, 0x35, @loopback, 0x81}}, {{0xa, 0x4e22, 0x8, @mcast1, 0x9}}]}, 0x290) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x4, 0x0, 0x9, 0xc2f, 0x3ff, 0xffff, 0x10000, 0x25, 0x0, 0x1, 0x7}, {0x1, 0xf000, 0xb, 0x1ff, 0x1ff, 0x5, 0x800, 0x9, 0xf265, 0x3, 0x5, 0x6}, {0x2000, 0x103000, 0xe, 0x6, 0x80000001, 0x10000, 0x48000000000000, 0x1, 0x8, 0x617, 0x20, 0x6}, {0x2000, 0x6000, 0x4, 0x1, 0x0, 0x3ff, 0x7fff, 0x9, 0x6, 0x5, 0xdc9}, {0x3004, 0xf002, 0xf, 0x9, 0x4, 0x101, 0xffffffff80000000, 0xb9, 0x600, 0xff, 0x1ff, 0x3}, {0x5000, 0xd000, 0x10, 0x80000000, 0x9, 0x4, 0x10000, 0xcc, 0x1916cfc0, 0xf5c, 0x40, 0xcea}, {0xd004, 0xf000, 0xd, 0x9, 0x80000001, 0xffff, 0xa10c, 0x6, 0x7ff, 0xfffffffffffffffb, 0xa20, 0x5}, {0x10006, 0xf000, 0xf, 0x1, 0x2, 0x2, 0x6, 0xffffffff, 0x0, 0x6, 0x2, 0x3ff}, {0x4, 0x100000}, {0xf000}, 0x20000002, 0x0, 0x0, 0x8, 0x6, 0x1, 0xf000, [0x6, 0x100000000, 0x3, 0x100000001]}) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) fstatfs(r2, &(0x7f0000000200)=""/222) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000440)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000700)={0xb, 0x10, 0xfa00, {&(0x7f0000000600), r5, 0x4}}, 0x18) r6 = fcntl$dupfd(r3, 0x0, r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000080)={r1, 0x1f}, &(0x7f0000000100)=0x8) [ 3164.944818] binder: 10283:10284 unknown command 536915920 [ 3164.961610] binder: 10283:10284 ioctl c0306201 20008000 returned -22 [ 3165.004225] binder: BINDER_SET_CONTEXT_MGR already set [ 3165.035545] binder: 10283:10284 ioctl 40046207 0 returned -16 [ 3165.062871] binder: 10283:10285 unknown command 536915920 [ 3165.073736] binder: 10283:10285 ioctl c0306201 20008000 returned -22 [ 3165.293698] __ntfs_error: 5 callbacks suppressed [ 3165.293745] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3165.307695] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 3165.320075] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. 02:06:34 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1008031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x402002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[]}}, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000200)={'filter\x00'}, &(0x7f0000000140)=0x44) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 02:06:34 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x0, 0xd5}, {r2}], 0x2, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r4, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:34 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:34 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000df00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:34 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) 02:06:34 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0018000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3165.468522] binder: 10299:10300 unknown command 536915920 02:06:34 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000001a0ffffffff00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:34 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001a0ffffffff], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3165.511702] binder: 10299:10300 ioctl c0306201 20008000 returned -22 [ 3165.519577] IPVS: ftp: loaded support on port[0] = 21 [ 3165.588361] binder_alloc: binder_alloc_mmap_handler: 10299 20000000-20002000 already mapped failed -16 02:06:34 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3165.646237] binder: BINDER_SET_CONTEXT_MGR already set [ 3165.658562] binder: 10299:10300 ioctl 40046207 0 returned -16 02:06:34 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000df00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3165.688252] binder: 10299:10323 unknown command 536915920 [ 3165.758203] binder: 10299:10323 ioctl c0306201 20008000 returned -22 02:06:34 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x0, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:34 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3166.326292] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3166.336037] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 3166.364288] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. 02:06:35 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1008031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x402002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[]}}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 02:06:35 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x220000) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="00000000014f78a9206d9d9129b671000000"]], 0x0, 0x800020, &(0x7f0000009000)}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) connect$can_bcm(r3, &(0x7f0000000040), 0x10) 02:06:35 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000001100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:35 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0010000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:35 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x0, 0xd5}], 0x1, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r4, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:35 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:35 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000000000000000000200"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3166.564808] binder: 10350:10353 unknown command 536871040 [ 3166.587140] binder: 10350:10353 ioctl c0306201 20008000 returned -22 [ 3166.654705] IPVS: ftp: loaded support on port[0] = 21 02:06:35 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3166.680067] binder_alloc: binder_alloc_mmap_handler: 10350 20000000-20004000 already mapped failed -16 [ 3166.682934] binder: BINDER_SET_CONTEXT_MGR already set 02:06:35 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000008000a000"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3166.770526] binder: 10350:10364 ioctl 40046207 0 returned -16 02:06:35 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:35 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440), 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:35 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3167.347269] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3167.357586] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 3167.369871] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. 02:06:36 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1008031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x402002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[]}}, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 02:06:36 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000000000200"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:36 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x400000, 0x10) write$input_event(r2, &(0x7f0000000040)={{0x77359400}, 0x7, 0x80000001, 0x5530}, 0x18) r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="2800faffffff0055b4"]], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:36 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0ffffffff], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:36 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x0, 0xd5}], 0x1, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r4, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:36 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf00000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:36 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000000001100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3167.666739] binder: 10395:10397 unknown command 536871040 [ 3167.696045] binder: 10395:10397 ioctl c0306201 20008000 returned -22 [ 3167.732867] IPVS: ftp: loaded support on port[0] = 21 [ 3167.760178] binder_alloc: binder_alloc_mmap_handler: 10395 20000000-20002000 already mapped failed -16 02:06:36 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000008000a0ffffffff00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:36 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3167.823635] binder: BINDER_SET_CONTEXT_MGR already set [ 3167.852142] binder: 10395:10397 ioctl 40046207 0 returned -16 [ 3167.876815] binder: 10395:10418 unknown command 536871040 [ 3167.916827] binder: 10395:10418 ioctl c0306201 20008000 returned -22 02:06:36 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x2000, 0x820, &(0x7f0000000000/0x2000)=nil) shmat(r3, &(0x7f0000000000/0x3000)=nil, 0x4000) ioctl$FICLONE(r2, 0x40049409, r0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x1, 0x0) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000040)={0x1}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB="d6707412dbded600"]], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:36 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:36 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440), 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) [ 3168.094736] binder: 10425:10429 unknown command 536915920 [ 3168.118881] binder: 10425:10429 ioctl c0306201 20008000 returned -22 [ 3168.159454] binder_alloc: binder_alloc_mmap_handler: 10425 20000000-20002000 already mapped failed -16 [ 3168.200209] binder: BINDER_SET_CONTEXT_MGR already set [ 3168.221436] binder: 10425:10433 ioctl 40046207 0 returned -16 [ 3168.494904] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. 02:06:37 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:37 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000001100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:37 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:37 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x0, 0xd5}], 0x1, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r4, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:37 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1008031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x402002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) [ 3168.696534] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! 02:06:37 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3168.767496] binder: 10453:10455 unknown command 536915920 [ 3168.786236] binder: 10453:10455 ioctl c0306201 20008000 returned -22 [ 3168.797782] binder_alloc: binder_alloc_mmap_handler: 10453 20000000-20002000 already mapped failed -16 [ 3168.805001] IPVS: ftp: loaded support on port[0] = 21 02:06:37 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000ffffffffa0008000"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3168.819689] binder: BINDER_SET_CONTEXT_MGR already set [ 3168.840551] binder: 10453:10455 ioctl 40046207 0 returned -16 02:06:37 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x40000, 0x0) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000080)=0x3) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x2, 0x7ff, 0x9, 0x7ff}) r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:37 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001a0ffffffff], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:37 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000ffffffffa00100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3169.056499] binder: 10468:10469 unknown command 536915920 [ 3169.075775] binder: 10468:10469 ioctl c0306201 20008000 returned -22 02:06:38 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0010000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3169.123245] binder: BINDER_SET_CONTEXT_MGR already set [ 3169.123367] binder_alloc: binder_alloc_mmap_handler: 10468 20000000-20002000 already mapped failed -16 [ 3169.143675] binder: 10468:10476 ioctl 40046207 0 returned -16 02:06:38 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440), 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000000008800"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:38 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x8000) bind$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x3, 0x20c00) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x101000, 0x0) 02:06:38 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001a0], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000008800"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:38 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1008031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x402002, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 02:06:38 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x0, 0xd5}, {}], 0x2, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r4, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:38 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:38 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x1, 0x4) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000100)={0x7fffffff, 0xf7777b5f, 0x4, 0x5, 0x3, @stepwise={{0x7, 0x1c9}, {0x8, 0x100000001}, {0x6, 0x2}}}) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0', [{0x20, '/dev/binder#\x00'}, {}, {0x20, 'vmnet0'}, {0x20, 'trustedposix_acl_access'}, {0x20, '/dev/binder#\x00'}], 0xa, "95d189db4ae0bdb2b96135a2bb4b3615511540e149029a1f4ddb6ab433931e90e5bfdfb8ccf7fd2820261b"}, 0x72) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000000df00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:39 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:39 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000200"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3170.130234] binder: 10508:10509 unknown command 536915920 [ 3170.158856] binder: 10508:10509 ioctl c0306201 20008000 returned -22 [ 3170.208005] binder_alloc: binder_alloc_mmap_handler: 10508 20000000-20002000 already mapped failed -16 [ 3170.238780] IPVS: ftp: loaded support on port[0] = 21 [ 3170.287517] binder: BINDER_SET_CONTEXT_MGR already set [ 3170.294728] binder: 10508:10519 unknown command 536915920 [ 3170.316322] binder: 10508:10519 ioctl c0306201 20008000 returned -22 02:06:39 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:39 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:39 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000000000df00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3170.377522] binder: 10508:10526 ioctl 40046207 0 returned -16 02:06:39 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$can_raw(0x1d, 0x3, 0x1) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl(r1, 0xc28, &(0x7f0000000000)="6d87f5ba16667c02ae7a89d0f1b616db9fa5d4ff4861f5cf8831655da8d9152af4c02c9cd0583dc8546d8c9b484a2075cd9c5ae1032c4907ebe5c6e0692fdee1e6103781af451fba03e40e659fe7a52f3c2a39a0bcc75c4cc2661dbf24e3aab3083abeb170262494db098b1ad7d3baf4a1ee0b36f6eaa0d9435e") ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB="b742cb4b774b4761"]], 0x0, 0x800020, &(0x7f0000009000)}) r3 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x9, 0x1) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000140)='/dev/binder#\x00') fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000080)) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x3, 0x1, 0x2, {0xa, 0x4e21, 0xa7, @ipv4={[], [], @loopback}, 0xffffffff}}}, 0x3a) 02:06:39 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000df00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3170.598430] binder: 10535:10539 ioctl c28 20000000 returned -22 [ 3170.621877] binder: 10535:10539 unknown command 536915920 [ 3170.671026] binder: 10535:10539 ioctl c0306201 20008000 returned -22 [ 3170.992531] __ntfs_error: 5 callbacks suppressed [ 3170.992592] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3171.006843] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 3171.020251] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. 02:06:40 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1008031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 02:06:40 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0ffffffff], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:40 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000000000000000000df00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:40 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x0, 0xd5}, {}], 0x2, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r4, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:40 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:40 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000000000000000000100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3171.326447] binder_alloc: binder_alloc_mmap_handler: 10535 20000000-20002000 already mapped failed -16 [ 3171.343486] binder: 10535:10572 ioctl c28 20000000 returned -22 02:06:40 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3171.376319] binder: BINDER_SET_CONTEXT_MGR already set [ 3171.411892] binder: 10535:10546 ioctl 40046207 0 returned -16 [ 3171.440779] binder: 10535:10572 unknown command 536915920 [ 3171.459936] binder: 10535:10572 ioctl c0306201 20008000 returned -22 02:06:40 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:40 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000a00100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:40 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3171.934742] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3171.944714] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 3171.958854] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. 02:06:41 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x77, 0x800020, &(0x7f0000000000)="af6a12c2e986908777a97b8fef51b2f76648f601ff72a688686bf6eda6c6d919f4e931c864f932baecf39f937a3a8ae13b5dcdc7b09a7d13bb66d90f2c8e1e6e5b6700298146e27a96941c4a3a48f928264aca29b558dfe95d949241b35e7883afe7c2da60e9ae5ca206859a67287a62d46cb9027ef600"}) 02:06:41 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf00], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:41 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000000001a000"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:41 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x0, 0xd5}, {}], 0x2, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r4, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:41 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1008031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 02:06:41 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x3, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:41 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000a0008000"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3172.861463] IPVS: ftp: loaded support on port[0] = 21 [ 3172.870664] binder: 10603:10609 unknown command 536915920 [ 3172.880337] binder: 10603:10609 ioctl c0306201 20008000 returned -22 [ 3172.896761] binder_alloc: binder_alloc_mmap_handler: 10603 20000000-20002000 already mapped failed -16 [ 3172.933299] binder: BINDER_SET_CONTEXT_MGR already set 02:06:41 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3172.958246] binder: 10603:10609 ioctl 40046207 0 returned -16 02:06:41 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000000000100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:42 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000800008912, &(0x7f0000000000)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r2) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x8000}}, [0x1, 0x20, 0x5, 0x5, 0xb1e9, 0x1, 0x10000, 0xf6d, 0x1, 0x5, 0x6, 0x83a3, 0x9, 0xb156, 0x80]}, &(0x7f0000000080)=0x100) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000200)={r4, 0x6}, 0x8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x12002, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="00001d8f000000001de6b73038ccde904da54f28db8afcb41eb02ce622cd5bddb412b98d2588f4031c120550ae762bd5c454faa70ef6c4fd"]], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:42 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3173.190310] Unknown ioctl 1074029063 02:06:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000001100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:42 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3173.218325] binder: 10625:10626 unknown command 536871552 [ 3173.243948] binder: 10625:10626 ioctl c0306201 20008000 returned -22 02:06:42 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf00000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000000001a0ffffffff00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3173.495743] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3173.572735] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 3173.603857] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. 02:06:42 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r2}], 0x1, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r4, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:42 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1008031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 02:06:42 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x0, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000008800"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:42 executing program 0: msgget(0x1, 0x40) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x400000, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f0000000200)={{0x0, @addr=0x8}, "53d9a7348426da20e2ea567cac1f721a122b7cb65b38d221d394418140f9afe3", 0x1}) r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:42 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0018000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000000000000000001100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:43 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0018000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3174.079477] binder: 10662:10663 unknown command 536915920 [ 3174.106840] binder: 10662:10663 ioctl c0306201 20008000 returned -22 [ 3174.150052] binder_alloc: binder_alloc_mmap_handler: 10662 20000000-20002000 already mapped failed -16 [ 3174.154781] binder: BINDER_SET_CONTEXT_MGR already set [ 3174.169763] IPVS: ftp: loaded support on port[0] = 21 [ 3174.188007] binder: 10662:10672 ioctl 40046207 0 returned -16 02:06:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000000000000000008800"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:43 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000200)="fdb7f66c2cd437fb82107aecb1a300405bf0a99f1b9b135bf1f4b6631a11013c1973de85f2d9a6e01bdafd22540da86b2bf6213fda6118a58ecd703b50cf61221a0b10a047d6d5caf9fb8910489ceb3199564328431b5a99917f27aa871809664a59f335503ded5fbff91f9bc302c70af810b2bee05bd87022f2a4d560e77350008259a9b5705b7bad97778a2487ce9e0fe9438161f336ddfef2fe5b7612c7d20fbe1fdce6f85936d1f8eadd6d6c5ed06a98c335ce8c106513a046056dd2feffa1893d56") r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB="0000013b736846e3"]], 0x0, 0x800020, &(0x7f0000009000)}) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x400, {0x2, 0x6, @multicast2}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x2, 0x4e20}, 0x180, 0x0, 0x1880, 0x6, 0xffffffff, &(0x7f0000000000)='syzkaller1\x00', 0x9, 0xcad, 0x4}) 02:06:43 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:43 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3174.449194] QAT: Invalid ioctl [ 3174.455524] binder: 10688:10693 unknown command 536915920 [ 3174.494464] binder: 10688:10693 ioctl c0306201 20008000 returned -22 02:06:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000008800"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3174.563778] binder: 10688:10698 ioctl 890b 20000040 returned -22 [ 3174.596061] QAT: Invalid ioctl [ 3174.599979] binder: BINDER_SET_CONTEXT_MGR already set [ 3174.605342] binder: 10688:10693 ioctl 40046207 0 returned -16 [ 3174.612695] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3174.634866] binder_alloc: binder_alloc_mmap_handler: 10688 20000000-20002000 already mapped failed -16 [ 3174.686890] binder: 10688:10693 ioctl 890b 20000040 returned -22 [ 3174.693220] binder: 10688:10689 unknown command 536915920 [ 3174.712958] binder: 10688:10689 ioctl c0306201 20008000 returned -22 02:06:44 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1008031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 02:06:44 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{}], 0x1, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r4, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000000000000000000011"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:44 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000000)=0x9, 0x4) r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:44 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x0, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000000000000000000088"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3175.184830] binder: 10712:10713 unknown command 536915920 [ 3175.206398] binder: 10712:10713 ioctl c0306201 20008000 returned -22 02:06:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3175.243850] binder_alloc: binder_alloc_mmap_handler: 10712 20000000-20002000 already mapped failed -16 [ 3175.285499] binder: BINDER_SET_CONTEXT_MGR already set [ 3175.292970] IPVS: ftp: loaded support on port[0] = 21 [ 3175.329942] binder: 10712:10713 ioctl 40046207 0 returned -16 02:06:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000000a00100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:44 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r3, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="f9"], 0x1) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)) write$cgroup_pid(r5, &(0x7f0000000000), 0xfffffea6) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) r6 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x2, 0x442) setsockopt$inet_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000140)={0x7}, 0x4) ioctl$UI_SET_SWBIT(r6, 0x4004556d, 0xa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB="000000000000efd4"]], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000000000000100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3175.553615] binder: 10741:10742 ioctl 4004556d a returned -22 [ 3175.617040] binder: 10741:10745 unknown command 536915920 [ 3175.647372] binder: 10741:10745 ioctl c0306201 20008000 returned -22 [ 3175.702443] binder_alloc: binder_alloc_mmap_handler: 10741 20000000-20002000 already mapped failed -16 [ 3175.766469] binder: BINDER_SET_CONTEXT_MGR already set [ 3175.771817] binder: 10741:10742 ioctl 40046207 0 returned -16 [ 3175.843579] binder: 10741:10751 ioctl 4004556d a returned -22 02:06:45 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000000001100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:45 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:45 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{}], 0x1, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r4, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:45 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000000)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB="0000000004000000"]], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:45 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1008031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 02:06:45 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x0, 0x0, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:45 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000000008800"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3176.293475] binder: 10760:10764 unknown command 536915920 [ 3176.319053] binder: 10760:10764 ioctl c0306201 20008000 returned -22 02:06:45 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3176.349808] binder_alloc: binder_alloc_mmap_handler: 10760 20000000-20002000 already mapped failed -16 [ 3176.386136] binder: BINDER_SET_CONTEXT_MGR already set [ 3176.391589] binder: 10760:10767 unknown command 536915920 02:06:45 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000000000000000000df"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3176.439516] binder: 10760:10764 ioctl 40046207 0 returned -16 [ 3176.468565] IPVS: ftp: loaded support on port[0] = 21 [ 3176.469063] binder: 10760:10767 ioctl c0306201 20008000 returned -22 02:06:45 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:45 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x2000000000890b, &(0x7f0000000180)="082a4dff5b2d77e054dd94e5b06bd25d8f46181c7459000080000000000000000000000000") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x800, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000040)=0x400) 02:06:45 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000000000000000000001"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:45 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0018000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:45 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000000000000000000002"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3176.735115] binder: 10790:10794 unknown command 536915920 [ 3176.763769] binder: 10790:10794 ioctl c0306201 20008000 returned -22 [ 3176.815301] binder_alloc: binder_alloc_mmap_handler: 10790 20000000-20002000 already mapped failed -16 [ 3176.859014] binder: BINDER_SET_CONTEXT_MGR already set [ 3176.886389] binder: 10790:10791 ioctl 40046207 0 returned -16 [ 3176.916979] binder: 10790:10801 unknown command 536915920 [ 3176.939329] binder: 10790:10801 ioctl c0306201 20008000 returned -22 02:06:45 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{}], 0x1, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r4, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:45 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3177.034847] __ntfs_error: 5 callbacks suppressed [ 3177.034887] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3177.096259] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 3177.151569] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. 02:06:46 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1008031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 02:06:46 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10000, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000080), 0xfffffffffffffe33) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="0000e265c531c16d425b9841069685000000000000ceca9e2e3914ac821394a7c5ca625937456b0f9407cf21c5d7187bc4d7c41563e2a765982519d870c62f915cab9a1c4467c627d169c8fd63ba9c97538d54dc722a4bf038d89ba5c51655c7445712b720d0737568b4c58777f5b676f78f9d9dc92abf0b3a46f10fc64c6ee495f8ba0577f85d5e22604bf746dc9ff38469303a9670ad7678ae9fd5aa67d9894d7c93081a2d19e40fa69638addb464428fdc3e6eaceade936c1affb0508a30fa7bd77ba699c4108b98f6999118c75f251382958ceedc97f76385c9d130a7ab91c4bdf80820493ee0bc75fdcf5a8f403a1d624a088fe5b96"]], 0x0, 0x800020, &(0x7f0000009000)}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x1f, 0x0, 0x800, 0x8, r4}, &(0x7f0000000180)=0x10) 02:06:46 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000000008000a000"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf00], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:46 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x0, 0x0, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:46 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)) ppoll(&(0x7f0000000040)=[{r2}], 0x1, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r3, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:46 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000000000001a000"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3177.549797] binder: 10818:10824 unknown command 536871424 [ 3177.581836] binder: 10818:10824 ioctl c0306201 20008000 returned -22 [ 3177.630046] binder_alloc: binder_alloc_mmap_handler: 10818 20000000-20002000 already mapped failed -16 [ 3177.665133] binder: BINDER_SET_CONTEXT_MGR already set 02:06:46 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000000000001100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3177.685831] binder: 10818:10824 ioctl 40046207 0 returned -16 [ 3177.693811] IPVS: ftp: loaded support on port[0] = 21 [ 3177.708784] binder: 10818:10840 unknown command 536871424 [ 3177.727703] binder: 10818:10840 ioctl c0306201 20008000 returned -22 02:06:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:46 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair(0x3, 0x80000, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000100)={0x0, @bt={0x9e3, 0x8, 0x0, 0x3, 0xcafa, 0x0, 0x0, 0x7fff, 0x8, 0x0, 0xffffffffffff2964, 0x0, 0x9, 0x9, 0x15, 0x3c}}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:46 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000000000008800"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3178.046858] binder: 10852:10854 unknown command 536915920 [ 3178.056124] binder: 10852:10854 ioctl c0306201 20008000 returned -22 [ 3178.082553] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3178.127470] binder_alloc: binder_alloc_mmap_handler: 10852 20000000-20002000 already mapped failed -16 [ 3178.160636] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 3178.173286] binder: 10852:10860 unknown command 536915920 [ 3178.181481] binder: 10852:10860 ioctl c0306201 20008000 returned -22 [ 3178.220830] binder: BINDER_SET_CONTEXT_MGR already set [ 3178.225763] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. [ 3178.234935] binder: 10852:10854 ioctl 40046207 0 returned -16 02:06:47 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1008031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 02:06:47 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x0, 0x0, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000000a0008000"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:47 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)) ppoll(&(0x7f0000000040)=[{r2}], 0x1, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r3, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:47 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = semget$private(0x0, 0x2, 0x302) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000000)=""/127) r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x200000000000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB="0500000000000000"]], 0x0, 0x800020, &(0x7f0000009000)}) r4 = socket(0xa, 0x0, 0x1000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm_plock\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="f9ff5aea6d848cff42300156a2feefeb870000000000000000000000000000"], &(0x7f0000000100)=0xc) creat(&(0x7f00000002c0)='./file0\x00', 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={r5, 0x80, &(0x7f0000000140)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, @in6={0xa, 0x4e21, 0x2, @loopback, 0x4}, @in6={0xa, 0x4e24, 0x5, @local, 0x1}, @in6={0xa, 0x4e24, 0x2c6, @remote, 0x6}, @in6={0xa, 0x4e20, 0x100000000, @remote, 0xffffffffffffffc0}]}, &(0x7f0000000240)=0x10) 02:06:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3178.624079] binder: 10870:10872 unknown command 536915920 [ 3178.642656] binder: 10870:10872 ioctl c0306201 20008000 returned -22 02:06:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000000df00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3178.746815] binder_alloc: binder_alloc_mmap_handler: 10870 20000000-20002000 already mapped failed -16 02:06:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0ffffffff], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3178.793895] binder: BINDER_SET_CONTEXT_MGR already set [ 3178.800153] IPVS: ftp: loaded support on port[0] = 21 [ 3178.833177] binder: 10870:10872 ioctl 40046207 0 returned -16 02:06:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000000200"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3178.847597] binder: 10870:10892 unknown command 536915920 [ 3178.884219] binder: 10870:10892 ioctl c0306201 20008000 returned -22 02:06:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000000000000200"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3179.128679] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3179.171588] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 3179.200711] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. 02:06:48 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1008031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 02:06:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:48 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000484f9790af74ba0207521547662671fc5efd319e6b7a50cc83d1b343a17b15552657d2bc306ae1ab2c3af2d02cb258bb9a0065e3bffb6c603feb41e24b8ddf1e0c5bab1884a3e23a57dde754fc16786d45326c66f0e1d5cf005c3aa7fa00561ad9a2266b26cad963a9e0310b9c249cb01c7f1c0894f4b41e9d66b8ea9aa93feb761aae3038db2a433244d9978ece41e79185cec7633ba1d99cb70b663b1c28185005d1a1c7e18717b3d4b0f532fb226dc2ed2a9c0b6a9b7c40ced67df3ca42"]], 0x0, 0x800020, &(0x7f0000009000)}) r3 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x5, 0x4000) write$UHID_INPUT(r3, &(0x7f0000001040)={0x8, "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", 0x1000}, 0x1006) 02:06:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000000000000df00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:48 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)) ppoll(&(0x7f0000000040)=[{r2}], 0x1, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r3, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:48 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x0, 0x21cd, 0x0, 0x0, 0x0, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000001100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3179.549575] binder: 10912:10915 unknown command 536871424 [ 3179.555180] binder: 10912:10915 ioctl c0306201 20008000 returned -22 02:06:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000000008000a0ffffffff"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3179.653919] binder_alloc: binder_alloc_mmap_handler: 10912 20000000-20002000 already mapped failed -16 [ 3179.714913] binder: BINDER_SET_CONTEXT_MGR already set [ 3179.714930] binder: 10912:10915 ioctl 40046207 0 returned -16 [ 3179.752357] IPVS: ftp: loaded support on port[0] = 21 02:06:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000000000001a0ffffffff"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3179.777806] binder: 10912:10938 unknown command 536871424 [ 3179.801747] binder: 10912:10938 ioctl c0306201 20008000 returned -22 02:06:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:48 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x20040, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) [ 3180.063596] binder: 10948:10952 unknown command 536915920 [ 3180.086321] binder: 10948:10952 ioctl c0306201 20008000 returned -22 [ 3180.121823] binder_alloc: binder_alloc_mmap_handler: 10948 20000000-20002000 already mapped failed -16 [ 3180.156508] binder: BINDER_SET_CONTEXT_MGR already set [ 3180.186463] binder: 10948:10952 ioctl 40046207 0 returned -16 [ 3180.202693] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. 02:06:49 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1008031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 02:06:49 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000000ffffffffa0008000"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:49 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r2}], 0x1, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r4, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:49 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000240)={'bcsh0\x00', 0xb66a}) r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r4, 0x80045500, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="f9a13fc5b712c1d1f79bc9c57057b7d644199249ea2be9a9adc80b7379bab61053aef0"]], 0x0, 0x800020, &(0x7f0000009000)}) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000180)={0x6, &(0x7f0000000140)=[{0x1, 0x59, 0x6, 0x7fff80000000000}, {0x3, 0x0, 0x4, 0x1}, {0x7fff, 0x5, 0x9, 0x800}, {0xfffffffffffffffc, 0x1000, 0x7fffffff, 0x1}, {0x1, 0x92, 0x8, 0x6}, {0x1, 0x3ff, 0xf, 0x1}]}, 0x10) socket$bt_rfcomm(0x1f, 0x1, 0x3) 02:06:49 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x0, 0x21cd, 0x0, 0x0, 0x0, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:49 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000000ffffffffa00100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3180.820935] binder: 10961:10963 ioctl 80045500 20000100 returned -22 [ 3180.845567] binder: 10961:10963 unknown command 536871424 [ 3180.891107] binder: 10961:10963 ioctl c0306201 20008000 returned -22 02:06:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000000df00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3180.965729] binder_alloc: binder_alloc_mmap_handler: 10961 20000000-20002000 already mapped failed -16 [ 3180.984830] IPVS: ftp: loaded support on port[0] = 21 02:06:49 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf00000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3181.056495] binder: 10961:10963 ioctl 80045500 20000100 returned -22 [ 3181.100065] binder: BINDER_SET_CONTEXT_MGR already set 02:06:50 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000000000000008800"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3181.143002] binder: 10961:10987 ioctl 40046207 0 returned -16 [ 3181.177647] binder: 10961:10963 unknown command 536871424 [ 3181.183232] binder: 10961:10963 ioctl c0306201 20008000 returned -22 02:06:50 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) unshare(0x40000400) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 02:06:50 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:50 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000000a00100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:50 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r2}], 0x1, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r4, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:50 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x0, 0x21cd, 0x0, 0x0, 0x0, 0x1c0000000000000, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000000001100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3181.907275] binder: 11006:11007 unknown command 536915920 [ 3181.944400] binder: 11006:11007 ioctl c0306201 20008000 returned -22 02:06:50 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3181.988109] binder_alloc: binder_alloc_mmap_handler: 11006 20000000-20002000 already mapped failed -16 02:06:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000000000001a0ffffff"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3182.105352] IPVS: ftp: loaded support on port[0] = 21 02:06:51 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000001040)={0x0, 0x0, 0x2080}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3182.302114] binder: 11039:11045 unknown command 536915920 [ 3182.340727] binder: 11039:11045 ioctl c0306201 20008000 returned -22 [ 3182.387224] binder_alloc: binder_alloc_mmap_handler: 11039 20000000-20002000 already mapped failed -16 [ 3182.517738] __ntfs_error: 5 callbacks suppressed [ 3182.517776] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3182.581948] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 3182.612457] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. 02:06:51 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) unshare(0x40000400) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 02:06:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001a0ffffffff], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:51 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000200)={0xbf, 0x2, 0xffffffffffffff8a, "8712b1830d2201cc94fe986ccfad399f82f268f607059b3c6423ac93292ef6104466231130f39190aa4b2fbe8ab630d6d5f0cab1e8d68c48f6ba7a0a04a065f6b8031e29d72e78dbdfe1b8909b3d178d4d9ba52683f292f83d3c16a9d3b96b305f37b086646eb0432ef1f349ca25156e1bee875f9941bba24796217654080ee95d917ad9efd42483d37ef4f418941ce4c0e3dbe0c8a09e955f17d243854e873dc580b48854614e27cfaf45a0b1d0067125da09ce7b641138f67a8958aa2f90"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc)=ANY=[], 0x43, 0x800020, &(0x7f0000009000)}) [ 3182.794049] IPVS: ftp: loaded support on port[0] = 21 02:06:51 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r2}], 0x1, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r4, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:51 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x0, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x0, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000000000000000100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0010000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000000008800"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:51 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) unshare(0x40000400) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 02:06:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0018000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000000df00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001a0], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3183.243256] IPVS: ftp: loaded support on port[0] = 21 02:06:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000000ffffffffa00100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3183.540590] binder_alloc: binder_alloc_mmap_handler: 11053 20000000-20002000 already mapped failed -16 [ 3183.554752] binder: BINDER_SET_CONTEXT_MGR already set [ 3183.560350] binder: 11053:11106 ioctl 40046207 0 returned -16 02:06:52 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) r3 = dup(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='/dev/binder#\x00', r3}, 0x10) 02:06:52 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r2}], 0x1, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r4, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:52 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x0, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x0, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:52 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1008031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) [ 3183.718626] binder: 11111:11112 unknown command 536915920 [ 3183.724317] binder: 11111:11112 ioctl c0306201 20008000 returned -22 [ 3183.753577] binder_alloc: binder_alloc_mmap_handler: 11111 20000000-20002000 already mapped failed -16 02:06:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000000000000df00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3183.817762] binder: BINDER_SET_CONTEXT_MGR already set [ 3183.825711] binder: 11111:11112 ioctl 40046207 0 returned -16 [ 3183.840023] binder: 11111:11113 unknown command 536915920 [ 3183.860132] binder: 11111:11113 ioctl c0306201 20008000 returned -22 02:06:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0ffffffff], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000000001100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:52 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x10741, 0x0) r3 = dup3(r0, r0, 0x80000) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000200)=r3) r4 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x2, 0x0) r6 = creat(&(0x7f0000000100)='./file0\x00', 0x3) renameat2(r5, &(0x7f0000000080)='./file0\x00', r6, &(0x7f0000000140)='./file0\x00', 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000000008800"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3184.188992] binder: 11142:11143 ioctl c0306201 20000040 returned -14 [ 3184.260103] binder_alloc: binder_alloc_mmap_handler: 11142 20000000-20002000 already mapped failed -16 [ 3184.313337] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3184.332979] binder: BINDER_SET_CONTEXT_MGR already set [ 3184.364785] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 3184.373156] binder: 11142:11152 ioctl c0306201 20000040 returned -14 [ 3184.386268] binder: 11142:11143 ioctl 40046207 0 returned -16 [ 3184.456271] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. 02:06:53 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r2}], 0x1, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r4, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:53 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x0, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x0, 0x2, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:53 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1008031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 02:06:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000000000200"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:53 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fdatasync(r0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x20200, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) bind$packet(r3, &(0x7f0000000140)={0x11, 0x18, r4, 0x1, 0x200, 0x6, @local}, 0x14) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000003251a65495cad2345b394f1a1b539f31ce9a9a012af3b2f6d411d7b271ccf5b1a410055ae7cc709497"]], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000000008000a0ffffff"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3184.820358] binder: 11169:11170 unknown command 536870912 [ 3184.846030] binder: 11169:11170 ioctl c0306201 20008000 returned -22 [ 3184.893515] binder_alloc: binder_alloc_mmap_handler: 11169 20000000-20002000 already mapped failed -16 [ 3184.965968] binder: BINDER_SET_CONTEXT_MGR already set 02:06:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001a0ffffffff], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3184.995301] binder: 11169:11170 ioctl 40046207 0 returned -16 [ 3185.028665] binder: 11169:11188 unknown command 536870912 02:06:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3185.070192] binder: 11169:11188 ioctl c0306201 20008000 returned -22 02:06:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0010000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:54 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r2}], 0x1, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r4, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:54 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup2(r0, r0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x10003, 0x1, 0x117001, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffb) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="09000000000000006dc7fc0a3a0a43d0b45d9ba9dde4f3a4dad4c1cb16c738a4a80c1320b7307adb725ea3ba135db0a4006f452baf4ccf33ba324bc198ac48dcedac968bfa3c5d4bb0b8347adc6fcb54d0b6fb5cfe9fdc7ea394c5f2e1ab9b4dc62b8ce3aca831dafc37de5451e4e6df47711be8e79ddf3b69473ac976a55eca18dd4ead30185d37393351f710d7b7a94a3fd59c"]], 0x0, 0x800020, &(0x7f0000009000)}) [ 3185.478192] binder: 11202:11203 unknown command 536870912 [ 3185.484570] binder: 11202:11203 ioctl c0306201 20008000 returned -22 [ 3185.491387] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3185.502808] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 3185.530728] binder: 11202:11208 unknown command 536870912 [ 3185.543519] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. [ 3185.545560] binder: 11202:11208 ioctl c0306201 20008000 returned -22 02:06:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000000008000a000"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:54 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="6254c9e114cd379da453b9476a7da1babd22bbce1af8a62a3f2afb50d3c850cbb74f900d3af31f7f600c83ca7ac1e26cac292f5b8351a692fb43ed9f842d38969d35ea8adeee94f41a3bbfe328bcac8e9fd31663108ab083719d4a0a5ab73d9441f72ed6e4c33110c1382ae7982b91f0cff6873adab28c1cf77479b92bdcd252ba14d188e0688ab899fcc65a84d5b3bf675eb8a4a8aa05111ed75c08a9302bb9157060e2010681321f099ff8bc610eb3d0d2698f3b3a560d06c311dd5b632e7bd2f684c41efa6e"]], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:54 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1008031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 02:06:54 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x0, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x0, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3185.890663] binder: 11218:11220 unknown command 536871424 [ 3185.896608] binder: 11218:11220 ioctl c0306201 20008000 returned -22 [ 3185.916118] binder_alloc: binder_alloc_mmap_handler: 11218 20000000-20002000 already mapped failed -16 02:06:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000000a0008000"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3185.965185] binder: BINDER_SET_CONTEXT_MGR already set 02:06:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3186.048378] binder: 11218:11225 ioctl 40046207 0 returned -16 02:06:55 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) r1 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000180)={0x0, r2+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r3, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:55 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000000000df00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:55 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1000, 0x600000) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000100)={r4}) ioctl$TIOCLINUX5(r3, 0x541c, &(0x7f0000000040)={0x5, 0x9, 0x8, 0x1, 0x2}) 02:06:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:55 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000000ffffffffa00080"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0018000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3186.319769] binder: 11249:11250 unknown command 536915920 [ 3186.371924] binder: 11249:11250 ioctl c0306201 20008000 returned -22 02:06:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001a0], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3186.433679] binder_alloc: binder_alloc_mmap_handler: 11249 20000000-20002000 already mapped failed -16 [ 3186.456174] binder: 11249:11257 unknown command 536915920 [ 3186.463379] binder: BINDER_SET_CONTEXT_MGR already set [ 3186.514689] binder: 11249:11257 ioctl c0306201 20008000 returned -22 [ 3186.570169] binder: 11249:11250 ioctl 40046207 0 returned -16 [ 3186.596642] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. 02:06:55 executing program 5: unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1008031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0xffffff19) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) [ 3186.947547] IPVS: ftp: loaded support on port[0] = 21 02:06:55 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x0, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x0, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:55 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:55 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) socketpair(0x11, 0x80004, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r3, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="0000000400"], 0x410}}, 0x40000) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000000000/0x2000)=nil, 0x2000}, 0x1}) 02:06:56 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r2}], 0x1, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r4, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:56 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000000000001a000"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3187.030747] binder: 11279:11280 unknown command 536915920 [ 3187.053697] binder: 11279:11280 ioctl c0306201 20008000 returned -22 [ 3187.105209] binder: 11279:11280 ioctl c020aa04 20000000 returned -22 [ 3187.145330] binder_alloc: binder_alloc_mmap_handler: 11279 20000000-20002000 already mapped failed -16 02:06:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000000000000000200"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:56 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3187.186248] binder: BINDER_SET_CONTEXT_MGR already set [ 3187.249158] binder: 11279:11280 ioctl 40046207 0 returned -16 [ 3187.267042] binder: 11279:11288 unknown command 536915920 02:06:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000000000000001100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:56 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf00000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3187.311921] binder: 11279:11288 ioctl c0306201 20008000 returned -22 [ 3187.702810] __ntfs_error: 2 callbacks suppressed [ 3187.702851] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3187.756050] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 3187.788544] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. 02:06:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1008031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 02:06:57 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x0, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x0, 0x2, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:57 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x2000000000890e, &(0x7f0000000100)="0a5c85717070fa4b616238202c35e82ceebeaebf02e7d727ec21213d24ea6a98b58772ee0222ec051d1e89ccf176b0dfc66b0089df6e50140738bdd9783e0750c762974abf8f8fd78893cebd6cd4851a8433cc73017ab9dcdc66919f7dbbb92fc89b5d7c682fdbcb3d0d22067512bc1820b1948305") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:57 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000000000a0008000"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:57 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r2}], 0x1, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r4, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:57 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a31000000000000000000000000000000000000df00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3188.586334] binder: 11328:11330 unknown command 536915920 02:06:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3188.632865] binder: 11328:11330 ioctl c0306201 20008000 returned -22 [ 3188.681265] binder_alloc: binder_alloc_mmap_handler: 11328 20000000-20002000 already mapped failed -16 02:06:57 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000000000008000a0ffff"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3188.733493] binder: 11328:11330 unknown command 536915920 [ 3188.734676] binder: BINDER_SET_CONTEXT_MGR already set 02:06:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3188.775821] binder: 11328:11344 ioctl 40046207 0 returned -16 [ 3188.800901] binder: 11328:11330 ioctl c0306201 20008000 returned -22 02:06:57 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000000000000001a0ffff"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:57 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'L-', 0x4}, 0x28, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) [ 3189.010378] binder: 11353:11357 unknown command 536915920 [ 3189.043351] binder: 11353:11357 ioctl c0306201 20008000 returned -22 [ 3189.094605] binder_alloc: binder_alloc_mmap_handler: 11353 20000000-20002000 already mapped failed -16 [ 3189.139992] binder: BINDER_SET_CONTEXT_MGR already set [ 3189.159222] binder: 11353:11357 ioctl 40046207 0 returned -16 [ 3189.198393] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3189.243299] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 3189.304904] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. 02:06:58 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1008031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 02:06:58 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000000000200"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:58 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:58 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r2}], 0x1, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r4, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:58 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x0, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x0, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000000001100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:58 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3189.602282] binder: 11367:11374 unknown command 536915920 [ 3189.634568] binder: 11367:11374 ioctl c0306201 20008000 returned -22 [ 3189.671783] binder_alloc: binder_alloc_mmap_handler: 11367 20000000-20002000 already mapped failed -16 [ 3189.734452] binder: BINDER_SET_CONTEXT_MGR already set 02:06:58 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0018000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000000000ffffffffa001"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3189.774772] binder: 11367:11374 ioctl 40046207 0 returned -16 [ 3189.814199] binder: 11367:11390 unknown command 536915920 [ 3189.879192] binder: 11367:11390 ioctl c0306201 20008000 returned -22 02:06:58 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf00], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000000000000000200"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3190.226116] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3190.239629] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 3190.252218] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. 02:06:59 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1008031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 02:06:59 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:59 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000006dad4a0c9d2aadd89c7374c04d8f14c7aae91e8195edd0000"]], 0x0, 0x800020, &(0x7f0000009000)}) 02:06:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000000000df00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:59 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r2}], 0x1, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:06:59 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x0, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x0, 0x104, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:06:59 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3190.584571] binder: 11415:11417 unknown command 536870912 [ 3190.617349] binder: 11415:11417 ioctl c0306201 20008000 returned -22 02:06:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000000000ffffffffa000"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3190.651879] binder_alloc: binder_alloc_mmap_handler: 11415 20000000-20002000 already mapped failed -16 [ 3190.716688] binder: 11415:11422 unknown command 536870912 02:06:59 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0018000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3190.757204] binder: BINDER_SET_CONTEXT_MGR already set [ 3190.775396] binder: 11415:11422 ioctl c0306201 20008000 returned -22 02:06:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3190.799986] binder: 11415:11431 ioctl 40046207 0 returned -16 02:06:59 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0ffffffff], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:06:59 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c6556452d6285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) [ 3191.072652] binder: 11446:11448 unknown command 536915920 [ 3191.124970] binder: 11446:11448 ioctl c0306201 20008000 returned -22 [ 3191.178541] binder_alloc: binder_alloc_mmap_handler: 11446 20000000-20002000 already mapped failed -16 [ 3191.215067] binder: 11446:11452 unknown command 536915920 [ 3191.215468] binder: BINDER_SET_CONTEXT_MGR already set [ 3191.234758] binder: 11446:11452 ioctl c0306201 20008000 returned -22 [ 3191.313887] binder: 11446:11448 ioctl 40046207 0 returned -16 [ 3191.345657] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. 02:07:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:07:00 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001a0ffffffff], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:07:00 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x1008031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 02:07:00 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000200)="0a5c2d023184857172709ee66e0f83de9e4cb914abb413db388476a79097b95a34ff6e5b2fda0b817ec61440191f494edc379a698eca06ef3ad2e856cd2eaab12ba0ef74db54be1f737fba27d1e087c1f23ae54e758073") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80000, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000000040)={0x1, 0x1, [0x8000, 0x20, 0x0, 0x4, 0x9, 0x7, 0xef, 0x2]}) r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x400) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4010, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000000ed54f8fe0c29f1cd02b3075817ec17e5e338aea4ddc0b4ef10ad6f543440042ea61f9823ae48b4339f8613e8283e5fd9eb3960a752859fbf050a4580a17dfda2e669302d56f80fa26a4b6082b93c938f947c0ed4185a03b80bd532df97683e2cbfb763336efb4525a192f4e2d888f1ef87e99677c117f1e54e56e47866db2716f44b0cf12d05b410477eb3086525c9d230"]], 0x0, 0x800020, &(0x7f0000009000)}) 02:07:00 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r2}], 0x1, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:07:00 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x0, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x0, 0x0, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:07:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000000000008000a000"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3191.654984] binder: 11461:11462 unknown command 536871168 [ 3191.692072] binder: 11461:11462 ioctl c0306201 20008000 returned -22 02:07:00 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3191.739830] binder: BINDER_SET_CONTEXT_MGR already set [ 3191.764107] binder: 11461:11468 unknown command 536871168 [ 3191.779013] binder: 11461:11462 ioctl 40046207 0 returned -16 [ 3191.811542] binder: 11461:11468 ioctl c0306201 20008000 returned -22 02:07:00 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x101000, 0x0) setsockopt$inet_dccp_int(r3, 0x21, 0x11, &(0x7f0000000080)=0x80000001, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) unshare(0x400) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="000000500fd43e19b181d8f124e5ac00"]], 0x0, 0x800020, &(0x7f0000009000)}) 02:07:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000000000000000100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:07:00 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3192.008246] binder: 11482:11483 unknown command 536870912 [ 3192.012724] IPVS: ftp: loaded support on port[0] = 21 [ 3192.013857] binder: 11482:11483 ioctl c0306201 20008000 returned -22 02:07:01 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3192.131903] binder_alloc: binder_alloc_mmap_handler: 11482 20000000-20002000 already mapped failed -16 [ 3192.132320] binder: BINDER_SET_CONTEXT_MGR already set 02:07:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000000000000000df00"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3192.237294] binder: 11482:11483 ioctl 40046207 0 returned -16 02:07:01 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:07:01 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 02:07:01 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x8, 0x800) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000100)={0x2, 0x6, 0x4, 0x4, 'syz0\x00', 0x5}) r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB="000000000000f7ff"]], 0x0, 0x800020, &(0x7f0000009000)}) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x2a00, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000040)={0x5e, 0x8001, 0x2, 0x2, 0x9, 0x9, 0x2}, 0xc) 02:07:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000000008800"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3192.548343] binder: 11511:11515 unknown command 536915920 [ 3192.562138] binder: 11511:11515 ioctl c0306201 20008000 returned -22 [ 3192.587491] binder_alloc: binder_alloc_mmap_handler: 11511 20000000-20002000 already mapped failed -16 [ 3192.599341] IPVS: ftp: loaded support on port[0] = 21 [ 3192.628194] binder: BINDER_SET_CONTEXT_MGR already set [ 3192.656071] binder: 11511:11515 ioctl 40046207 0 returned -16 [ 3192.664598] binder: 11511:11517 unknown command 536915920 [ 3192.691258] binder: 11511:11517 ioctl c0306201 20008000 returned -22 02:07:01 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x0, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x0, 0x0, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:07:01 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r2}], 0x1, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:07:01 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0010000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:07:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:07:01 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x4) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x101040, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@ipv4={[], [], @loopback}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@loopback}}, &(0x7f0000000080)=0xe8) r5 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast2, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f0000000100)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000800)=0x14) lstat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r3, &(0x7f0000000c40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x86800001}, 0xc, &(0x7f0000000c00)={&(0x7f0000000900)=@acquire={0x2ec, 0x17, 0xb00, 0x70bd29, 0x25dfdbff, {{@in6=@ipv4={[], [], @multicast1}, 0x4d6, 0xff}, @in6, {@in6=@remote, @in6=@mcast1, 0x4e22, 0x8, 0x4e21, 0x4, 0xa, 0x20, 0x80, 0xff, r4, r5}, {{@in6=@local, @in=@broadcast, 0x4e23, 0x9, 0x4e21, 0x800, 0x18d803f98498a074, 0x80, 0x80, 0x0, 0x0, r6}, {0x5, 0x7fff, 0x8, 0x7, 0x5, 0xb951, 0x80000001, 0x2a91}, {0x1, 0x4, 0x3, 0xfffffffffffffd66}, 0x0, 0x6e6bb6, 0x2, 0x0, 0x2, 0x1}, 0x8, 0x1, 0x5, 0x70bd28}, [@coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x1a}}, @policy={0xac, 0x7, {{@in6=@remote, @in=@rand_addr=0x2, 0x4e24, 0x9, 0x4e21, 0x7fffffff, 0xa, 0xa0, 0x20, 0x6e, r7, r8}, {0x7fffffff, 0x9, 0x5, 0x81, 0x58c, 0x8, 0x3ba, 0x81}, {0x94eb, 0x4, 0x401, 0x3}, 0xc7, 0x0, 0x1, 0x1, 0x3, 0x3}}, @lifetime_val={0x24, 0x9, {0x1f, 0x1, 0x2324b7d1}}, @policy_type={0xc}, @address_filter={0x28, 0x1a, {@in6=@mcast2, @in=@multicast1, 0xa, 0x100000000, 0x6}}, @sec_ctx={0xac, 0x8, {0xa7, 0x8, 0x1, 0x4, 0x9f, "aad90dc387cc45f8ff737cbb7d13a8e61e3f842a4891f8a920a0bb26cff7c873b45dcfa9bba077ee7b764d6da2febec0ac74f8ff50c6ae22fef684fbe209f0cf350faa229593c4e7c5765830864a98bf7da42c2986506eeeb4b69e2c1f7d621f120148faa7a7e036db63df26b8273641119e824f0ed8b40fe9a0d50702f170773aa37d3e5bda0696234b9e56e59c54a76fe4e2faf1d3bd7dc2ea19f2828071"}}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) write$FUSE_IOCTL(r3, &(0x7f0000000140)={0x20, 0x0, 0x1, {0x4, 0x0, 0x5, 0x34ec}}, 0x20) 02:07:01 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) [ 3192.929429] IPVS: ftp: loaded support on port[0] = 21 [ 3192.938902] binder: 11528:11535 unknown command 536915920 [ 3192.944628] binder: 11528:11535 ioctl c0306201 20008000 returned -22 02:07:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:07:01 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3192.977520] binder_alloc: binder_alloc_mmap_handler: 11528 20000000-20002000 already mapped failed -16 02:07:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3193.074242] binder: 11528:11535 unknown command 536915920 [ 3193.082457] binder: BINDER_SET_CONTEXT_MGR already set [ 3193.090306] binder: 11528:11535 ioctl c0306201 20008000 returned -22 [ 3193.100547] binder: 11528:11551 ioctl 40046207 0 returned -16 02:07:02 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001a0], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:07:02 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f0000000040)={0x3, 0x1, [0xa38, 0x4, 0xac, 0x9, 0x8, 0x3, 0x9, 0x6]}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) write$FUSE_OPEN(r4, &(0x7f0000000100)={0x20, 0x0, 0x8, {0x0, 0x5}}, 0x20) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) 02:07:02 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3193.302304] binder: 11562:11563 unknown command 536915920 [ 3193.358348] binder: 11562:11563 ioctl c0306201 20008000 returned -22 [ 3193.426914] binder_alloc: binder_alloc_mmap_handler: 11562 20000000-20002000 already mapped failed -16 [ 3193.512862] binder: BINDER_SET_CONTEXT_MGR already set [ 3193.552326] binder: 11562:11571 unknown command 536915920 [ 3193.552339] binder: 11562:11563 ioctl 40046207 0 returned -16 [ 3193.610933] binder: 11562:11571 ioctl c0306201 20008000 returned -22 [ 3193.616148] __ntfs_error: 5 callbacks suppressed [ 3193.616179] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3193.665467] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 3193.678704] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. 02:07:02 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 02:07:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000000000000001100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:07:02 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf00000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:07:02 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000100)={0x80000001, {0x2, 0x4e21}, {0x2, 0x4e22, @remote}, {0x2, 0x4e23, @loopback}, 0x1, 0x8, 0x6, 0x6, 0x2, &(0x7f0000000040)='ipddp0\x00', 0x1, 0x1, 0x9}) 02:07:02 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r2}], 0x1, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r4, 0x0, &(0x7f00000001c0)="0a5c2d0240316285717070") 02:07:02 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x0, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x0, 0x0, 0x5, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) [ 3193.970444] binder: 11578:11579 unknown command 536915920 [ 3193.986376] binder: 11578:11579 ioctl c0306201 20008000 returned -22 [ 3193.999882] IPVS: ftp: loaded support on port[0] = 21 02:07:02 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3194.015611] binder: 11578:11579 ioctl 890c 20000100 returned -22 02:07:03 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000000000a00100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3194.067451] binder_alloc: binder_alloc_mmap_handler: 11578 20000000-20002000 already mapped failed -16 [ 3194.122972] binder: BINDER_SET_CONTEXT_MGR already set [ 3194.163262] binder: 11578:11590 ioctl 40046207 0 returned -16 02:07:03 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:07:03 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000000000000001a000"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3194.211728] binder: 11578:11602 unknown command 536915920 [ 3194.234686] binder: 11578:11602 ioctl c0306201 20008000 returned -22 02:07:03 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1008031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 02:07:03 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3, 0x10480) write$P9_RLOCK(r2, &(0x7f0000000040)={0x8, 0x35, 0x2}, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f000000afd0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x800020, &(0x7f0000009000)}) 02:07:03 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:07:03 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a3100000000000000000000000000000000000000008800"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3194.471042] binder: 11613:11616 unknown command 536915920 [ 3194.490344] IPVS: ftp: loaded support on port[0] = 21 [ 3194.527649] binder: 11613:11616 ioctl c0306201 20008000 returned -22 02:07:03 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:07:03 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000000000001100"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:07:03 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r2}], 0x1, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r4, 0x0, &(0x7f00000001c0)="0a5c2d0240316285717070") [ 3194.954186] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 3195.012978] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 3195.026834] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. 02:07:04 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="070029bd7000bae91e000015000e3c8c6097b08ee60702187c"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000680)={0xffff, {{0xa, 0x4e20, 0xffff, @loopback}}}, 0x88) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000340)) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) r3 = open(&(0x7f0000000480)='./file0\x00', 0x20a00, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000003c0)="2e0f08c482791d220f20c666b894000f00d066b8f2008ec8420f07e40447fcc4e181740b360f00da", 0x28}], 0x1, 0x5, &(0x7f00000008c0), 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0xffffffffffff6bfa}, 0x4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000740)={[{0xff, 0xc9aa, 0x0, 0x5, 0x8001, 0x33, 0x100, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0x4}, {0x1, 0x2, 0x9, 0xff, 0x0, 0x4, 0x10009, 0x1f, 0x700000000000, 0x9, 0x1, 0x1, 0xab}, {0x0, 0x21cd, 0x0, 0x0, 0x49000000000000, 0x1c0000000000000, 0x2, 0x0, 0x104, 0x0, 0x1, 0x9, 0x9477}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x324, &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000007c0)={0x3, 0x7f}) io_setup(0x4, &(0x7f0000000800)) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) 02:07:04 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x54f8f046, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xffffffffffffffc1, 0x8000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0xd0, &(0x7f0000000300)=[@in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e20, 0xf0, @empty, 0xffff}, @in={0x2, 0x4e21}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e24, 0xfa5, @local, 0x100000001}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @rand_addr=0x5}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e20, 0x7, @empty, 0x4}, @in6={0xa, 0x4e24, 0x100, @ipv4={[], [], @multicast1}, 0x7f75}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000140)={r4, 0xbe, 0x8, [0x0, 0x1ff, 0x10000, 0x2, 0x3, 0x50f, 0x8, 0x8]}, 0x18) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x8, 0x0, &(0x7f0000004fbc)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000ebae53aa93f6da3a3f6266de51b0929f94ea4813881d072ec50482ab4a9d13492c07cedc33ed0444a066f72d064e782136df951eb58b46a039ed4abbded7071be8cc6e4996afcf2af8d3612c15210d08b3b836a4009c877519817c1a22d1aad0adafc286e275ae5b0642bfe804d492edf1a184c922b8ade8b9e33a0314ff374ba30eae9358c3cd32c3ae8c87b7367387d550fc02c08a9c9d80a652a680a70c18f287ed1820cbcd258eab385b913150e924a3878c27943680d22d75b6b4c0d1eef914df1c409c8efd91edc38b187478da16"]], 0x0, 0x800020, &(0x7f0000009000)}) socket$inet6_udplite(0xa, 0x2, 0x88) 02:07:04 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:07:04 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000000000008800"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3195.178009] binder: 11647:11648 ioctl 5387 20000040 returned -22 [ 3195.203090] binder: 11647:11648 unknown command 536871424 02:07:04 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3195.226024] binder: 11647:11648 ioctl c0306201 20008000 returned -22 [ 3195.245388] binder_alloc: binder_alloc_mmap_handler: 11647 20000000-20002000 already mapped failed -16 [ 3195.272263] binder: 11647:11653 ioctl 5387 20000040 returned -22 [ 3195.306283] binder: BINDER_SET_CONTEXT_MGR already set [ 3195.311628] binder: 11647:11648 ioctl 40046207 0 returned -16 [ 3195.337698] binder: 11647:11653 unknown command 536871424 [ 3195.370150] binder: 11647:11653 ioctl c0306201 20008000 returned -22 02:07:04 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)="6d656d74008a113ee2f5625951f6f28c726ff826bd4c18bbfa60a83c9fb5032fb493d0a5a00a6618fd2d62c273cc560e33", 0x26e1, 0x0) unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1008031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff19) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 02:07:04 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {"73797a310000000000000000000000000000000000000000008800"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:07:04 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) 02:07:04 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="4c000000000000000000000000000002"]}) 02:07:04 executing program 0: r0 = socket$packet(0x11, 0xa, 0x300) sendmmsg(r0, &(0x7f0000002140)=[{{&(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}], 0x1, 0x0) 02:07:04 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x478, 0x118, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@arp={@dev, @remote, 0x0, 0x0, @empty, {}, @mac=@remote, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@arp={@dev, @broadcast, 0x0, 0x0, @mac=@remote, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ipddp0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @broadcast}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'veth1_to_bond\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 3195.640446] IPVS: ftp: loaded support on port[0] = 21 [ 3195.741368] ================================================================== [ 3195.749191] BUG: KASAN: use-after-free in skb_release_data+0x1a3/0x880 [ 3195.755870] Write of size 4 at addr ffff8881b7f19b60 by task syz-executor0/11683 [ 3195.763405] [ 3195.765065] CPU: 0 PID: 11683 Comm: syz-executor0 Not tainted 4.20.0-rc3+ #341 [ 3195.772441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3195.781802] Call Trace: [ 3195.781834] dump_stack+0x244/0x39d [ 3195.781881] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3195.781906] ? printk+0xa7/0xcf [ 3195.796547] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 3195.801313] print_address_description.cold.7+0x9/0x1ff [ 3195.806715] kasan_report.cold.8+0x242/0x309 [ 3195.811133] ? skb_release_data+0x1a3/0x880 [ 3195.815472] check_memory_region+0x13e/0x1b0 [ 3195.815492] kasan_check_write+0x14/0x20 [ 3195.815521] skb_release_data+0x1a3/0x880 [ 3195.815557] ? refcount_inc_not_zero_checked+0x2f0/0x2f0 [ 3195.833599] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3195.839175] ? check_preemption_disabled+0x48/0x280 [ 3195.844204] ? skb_tx_error+0x2f0/0x2f0 [ 3195.848220] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3195.853768] ? sock_wfree+0xcc/0x180 [ 3195.857503] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3195.863057] skb_release_all+0x4a/0x60 [ 3195.866951] kfree_skb+0x1bb/0x580 [ 3195.870521] ? ip6_tnl_start_xmit+0xb0c/0x25a0 [ 3195.875129] ? __kfree_skb+0x20/0x20 [ 3195.878850] ? zap_class+0x640/0x640 [ 3195.882568] ? tpacket_rcv+0x229/0x3190 [ 3195.886565] ? ktime_get_with_offset+0x38b/0x470 02:07:04 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000000000001f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r2}], 0x1, &(0x7f0000000180)={0x0, r3+30000000}, &(0x7f00000001c0), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r4, 0x20000000008912, &(0x7f00000001c0)) [ 3195.886603] ip6_tnl_start_xmit+0xb0c/0x25a0 [ 3195.886624] ? ip6_tnl_xmit+0x3730/0x3730 [ 3195.886640] ? lock_downgrade+0x900/0x900 [ 3195.886659] ? check_preemption_disabled+0x48/0x280 [ 3195.886684] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3195.899994] ? kasan_check_read+0x11/0x20 [ 3195.900010] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3195.900027] ? rcu_softirq_qs+0x20/0x20 [ 3195.923503] ? find_held_lock+0x36/0x1c0 [ 3195.923523] ? zap_class+0x640/0x640 [ 3195.923545] ? dev_queue_xmit_nit+0x967/0xc90 [ 3195.939758] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3195.945315] ? check_preemption_disabled+0x48/0x280 [ 3195.950351] ? __lock_is_held+0xb5/0x140 [ 3195.954490] dev_hard_start_xmit+0x295/0xc80 [ 3195.958920] ? dev_direct_xmit+0x6b0/0x6b0 [ 3195.963170] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3195.968724] ? netif_skb_features+0x690/0xb70 [ 3195.973233] ? validate_xmit_xfrm+0x1ef/0xda0 [ 3195.977742] ? validate_xmit_skb+0x80c/0xf30 [ 3195.982164] ? netif_skb_features+0xb70/0xb70 [ 3195.986706] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3195.986726] ? check_preemption_disabled+0x48/0x280 [ 3195.986741] ? check_preemption_disabled+0x48/0x280 [ 3195.986762] __dev_queue_xmit+0x2f71/0x3ad0 [ 3195.986790] ? netdev_pick_tx+0x310/0x310 [ 3195.986808] ? __lock_acquire+0x62f/0x4c20 [ 3195.986828] ? ___sys_sendmsg+0x51d/0x930 [ 3196.002381] ? __sys_sendmmsg+0x246/0x6d0 [ 3196.002398] ? __x64_sys_sendmmsg+0x9d/0x100 [ 3196.002428] ? do_syscall_64+0x1b9/0x820 [ 3196.002463] ? mark_held_locks+0x130/0x130 [ 3196.002486] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 3196.019294] ? rcu_pm_notify+0xc0/0xc0 [ 3196.031915] ? __kmalloc_node_track_caller+0x3c/0x70 [ 3196.031932] ? zap_class+0x640/0x640 [ 3196.031950] ? rcu_read_lock_sched_held+0x14f/0x180 [ 3196.031967] ? kmem_cache_alloc_node_trace+0x34b/0x740 [ 3196.031988] ? kasan_unpoison_shadow+0x35/0x50 [ 3196.045609] ? kasan_kmalloc+0xc7/0xe0 [ 3196.045648] ? find_held_lock+0x36/0x1c0 [ 3196.045692] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3196.045727] ? refcount_sub_and_test_checked+0x203/0x310 [ 3196.064813] ? refcount_inc_not_zero_checked+0x2f0/0x2f0 [ 3196.064834] ? iov_iter_advance+0x306/0x13f0 [ 3196.064852] ? lock_release+0xa00/0xa00 [ 3196.064868] ? perf_trace_sched_process_exec+0x860/0x860 [ 3196.064882] ? refcount_dec_if_one+0x180/0x180 [ 3196.064908] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3196.082933] ? apparmor_capable+0x355/0x6c0 [ 3196.082951] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3196.082970] ? full_name_hash+0xb8/0x110 [ 3196.082988] ? apparmor_cred_transfer+0x590/0x590 [ 3196.083006] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3196.083025] ? cap_capable+0x1f9/0x260 [ 3196.083047] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3196.151494] ? security_capable+0x99/0xc0 [ 3196.155651] dev_queue_xmit+0x17/0x20 [ 3196.159469] ? dev_queue_xmit+0x17/0x20 [ 3196.163471] packet_sendmsg_spkt+0xf44/0x16e9 [ 3196.167982] ? packet_rcv_fanout+0x8e0/0x8e0 [ 3196.172395] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 3196.177348] ? apparmor_socket_sendmsg+0x29/0x30 [ 3196.182107] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3196.187651] ? security_socket_sendmsg+0x94/0xc0 [ 3196.192428] ? packet_rcv_fanout+0x8e0/0x8e0 [ 3196.196864] sock_sendmsg+0xd5/0x120 [ 3196.200581] ___sys_sendmsg+0x51d/0x930 [ 3196.204561] ? lockdep_init_map+0x9/0x10 [ 3196.208636] ? copy_msghdr_from_user+0x580/0x580 [ 3196.213396] ? zap_class+0x640/0x640 [ 3196.217134] ? psi_task_change.cold.11+0x1ac/0x1ac [ 3196.222097] ? __fget_light+0x2e9/0x430 [ 3196.226077] ? fget_raw+0x20/0x20 [ 3196.229532] ? zap_class+0x640/0x640 [ 3196.233291] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3196.238827] ? sockfd_lookup_light+0xc5/0x160 [ 3196.243330] __sys_sendmmsg+0x246/0x6d0 [ 3196.247316] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3196.251674] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3196.257220] ? put_timespec64+0x10f/0x1b0 [ 3196.261388] ? nsecs_to_jiffies+0x30/0x30 [ 3196.265547] ? do_syscall_64+0x9a/0x820 [ 3196.269526] ? do_syscall_64+0x9a/0x820 [ 3196.273512] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3196.278101] ? trace_hardirqs_on+0xbd/0x310 [ 3196.282429] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3196.287969] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3196.293333] ? trace_hardirqs_off_caller+0x310/0x310 [ 3196.298454] __x64_sys_sendmmsg+0x9d/0x100 [ 3196.302701] do_syscall_64+0x1b9/0x820 [ 3196.306589] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3196.311958] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3196.316889] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3196.321734] ? trace_hardirqs_on_caller+0x310/0x310 [ 3196.326753] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3196.331773] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3196.337063] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3196.341918] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3196.347136] RIP: 0033:0x457569 [ 3196.350329] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3196.369225] RSP: 002b:00007fb0356a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3196.376950] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 3196.384218] RDX: 0000000000000001 RSI: 0000000020002140 RDI: 0000000000000003 [ 3196.391484] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3196.398763] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb0356a56d4 [ 3196.406028] R13: 00000000004c37d5 R14: 00000000004d5970 R15: 00000000ffffffff [ 3196.413330] [ 3196.414956] Allocated by task 11683: [ 3196.418683] save_stack+0x43/0xd0 [ 3196.422130] kasan_kmalloc+0xc7/0xe0 [ 3196.425844] __kmalloc_node_track_caller+0x50/0x70 [ 3196.430804] __kmalloc_reserve.isra.40+0x41/0xe0 [ 3196.435557] __alloc_skb+0x155/0x770 [ 3196.439266] sock_wmalloc+0x16d/0x1f0 [ 3196.443084] packet_sendmsg_spkt+0x48a/0x16e9 [ 3196.447579] sock_sendmsg+0xd5/0x120 [ 3196.451293] ___sys_sendmsg+0x51d/0x930 [ 3196.455266] __sys_sendmmsg+0x246/0x6d0 [ 3196.459464] __x64_sys_sendmmsg+0x9d/0x100 [ 3196.463707] do_syscall_64+0x1b9/0x820 [ 3196.467600] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3196.472794] [ 3196.474438] Freed by task 11683: [ 3196.477810] save_stack+0x43/0xd0 [ 3196.481265] __kasan_slab_free+0x102/0x150 [ 3196.485498] kasan_slab_free+0xe/0x10 [ 3196.489295] kfree+0xcf/0x230 [ 3196.492402] skb_free_head+0x99/0xc0 [ 3196.496129] skb_release_data+0x6a4/0x880 [ 3196.500288] skb_release_all+0x4a/0x60 [ 3196.504172] consume_skb+0x1ae/0x570 [ 3196.507885] tpacket_rcv+0x224/0x3190 [ 3196.511732] dev_queue_xmit_nit+0x927/0xc90 [ 3196.516053] dev_hard_start_xmit+0x186/0xc80 [ 3196.520461] __dev_queue_xmit+0x2f71/0x3ad0 [ 3196.524780] dev_queue_xmit+0x17/0x20 [ 3196.528580] packet_sendmsg_spkt+0xf44/0x16e9 [ 3196.533078] sock_sendmsg+0xd5/0x120 [ 3196.536789] ___sys_sendmsg+0x51d/0x930 [ 3196.540768] __sys_sendmmsg+0x246/0x6d0 [ 3196.544744] __x64_sys_sendmmsg+0x9d/0x100 [ 3196.549168] do_syscall_64+0x1b9/0x820 [ 3196.553069] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3196.558247] [ 3196.559876] The buggy address belongs to the object at ffff8881b7f19a80 [ 3196.559876] which belongs to the cache kmalloc-512 of size 512 [ 3196.572537] The buggy address is located 224 bytes inside of [ 3196.572537] 512-byte region [ffff8881b7f19a80, ffff8881b7f19c80) [ 3196.584404] The buggy address belongs to the page: [ 3196.589343] page:ffffea0006dfc640 count:1 mapcount:0 mapping:ffff8881da800940 index:0x0 [ 3196.597657] flags: 0x2fffc0000000200(slab) [ 3196.601906] raw: 02fffc0000000200 ffffea0007586ec8 ffffea0006d3d408 ffff8881da800940 [ 3196.609792] raw: 0000000000000000 ffff8881b7f19080 0000000100000006 0000000000000000 [ 3196.617664] page dumped because: kasan: bad access detected [ 3196.623381] [ 3196.625008] Memory state around the buggy address: [ 3196.629936] ffff8881b7f19a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3196.637294] ffff8881b7f19a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3196.644650] >ffff8881b7f19b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3196.652037] ^ [ 3196.658526] ffff8881b7f19b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3196.665881] ffff8881b7f19c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3196.673232] ================================================================== [ 3196.680597] Disabling lock debugging due to kernel taint [ 3196.686244] Kernel panic - not syncing: panic_on_warn set ... [ 3196.692150] CPU: 0 PID: 11683 Comm: syz-executor0 Tainted: G B 4.20.0-rc3+ #341 [ 3196.696603] kobject: 'tunl0' (0000000095e77ac6): kobject_add_internal: parent: 'net', set: 'devices' [ 3196.700915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3196.700921] Call Trace: [ 3196.700947] dump_stack+0x244/0x39d [ 3196.700966] ? dump_stack_print_info.cold.1+0x20/0x20 [ 3196.700988] panic+0x2ad/0x55c [ 3196.734152] ? add_taint.cold.5+0x16/0x16 [ 3196.738317] ? trace_hardirqs_on+0xb4/0x310 [ 3196.742649] ? trace_hardirqs_on+0xb4/0x310 [ 3196.746991] kasan_end_report+0x47/0x4f [ 3196.747348] kobject: 'tunl0' (0000000095e77ac6): kobject_uevent_env [ 3196.750967] kasan_report.cold.8+0x76/0x309 [ 3196.751000] ? skb_release_data+0x1a3/0x880 [ 3196.751052] check_memory_region+0x13e/0x1b0 [ 3196.770197] kobject: 'tunl0' (0000000095e77ac6): fill_kobj_path: path = '/devices/virtual/net/tunl0' [ 3196.770507] kasan_check_write+0x14/0x20 [ 3196.783839] skb_release_data+0x1a3/0x880 [ 3196.788045] ? refcount_inc_not_zero_checked+0x2f0/0x2f0 [ 3196.791068] kobject: 'queues' (000000009da23c5d): kobject_add_internal: parent: 'tunl0', set: '' [ 3196.793523] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3196.793545] ? check_preemption_disabled+0x48/0x280 [ 3196.793564] ? skb_tx_error+0x2f0/0x2f0 [ 3196.817554] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3196.817886] kobject: 'queues' (000000009da23c5d): kobject_uevent_env [ 3196.823096] ? sock_wfree+0xcc/0x180 [ 3196.823115] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3196.823133] skb_release_all+0x4a/0x60 [ 3196.823151] kfree_skb+0x1bb/0x580 [ 3196.846279] ? ip6_tnl_start_xmit+0xb0c/0x25a0 [ 3196.849700] kobject: 'queues' (000000009da23c5d): kobject_uevent_env: filter function caused the event to drop! [ 3196.850890] ? __kfree_skb+0x20/0x20 [ 3196.850907] ? zap_class+0x640/0x640 [ 3196.850922] ? tpacket_rcv+0x229/0x3190 [ 3196.850943] ? ktime_get_with_offset+0x38b/0x470 [ 3196.874815] kobject: 'rx-0' (0000000056b76f72): kobject_add_internal: parent: 'queues', set: 'queues' [ 3196.877295] ip6_tnl_start_xmit+0xb0c/0x25a0 [ 3196.877314] ? ip6_tnl_xmit+0x3730/0x3730 [ 3196.877330] ? lock_downgrade+0x900/0x900 [ 3196.877355] ? check_preemption_disabled+0x48/0x280 [ 3196.877373] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 3196.909366] ? kasan_check_read+0x11/0x20 [ 3196.913558] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 3196.914198] kobject: 'rx-0' (0000000056b76f72): kobject_uevent_env [ 3196.918835] ? rcu_softirq_qs+0x20/0x20 [ 3196.918854] ? find_held_lock+0x36/0x1c0 [ 3196.918871] ? zap_class+0x640/0x640 [ 3196.918891] ? dev_queue_xmit_nit+0x967/0xc90 [ 3196.918913] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3196.946943] ? check_preemption_disabled+0x48/0x280 [ 3196.951968] ? __lock_is_held+0xb5/0x140 [ 3196.956050] dev_hard_start_xmit+0x295/0xc80 [ 3196.960460] ? dev_direct_xmit+0x6b0/0x6b0 [ 3196.964713] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3196.970293] ? netif_skb_features+0x690/0xb70 [ 3196.974790] ? validate_xmit_xfrm+0x1ef/0xda0 [ 3196.979301] ? validate_xmit_skb+0x80c/0xf30 [ 3196.983713] ? netif_skb_features+0xb70/0xb70 [ 3196.988217] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3196.993762] ? check_preemption_disabled+0x48/0x280 [ 3196.998803] ? check_preemption_disabled+0x48/0x280 [ 3197.003816] __dev_queue_xmit+0x2f71/0x3ad0 [ 3197.008154] ? netdev_pick_tx+0x310/0x310 [ 3197.012299] ? __lock_acquire+0x62f/0x4c20 [ 3197.016532] ? ___sys_sendmsg+0x51d/0x930 [ 3197.020680] ? __sys_sendmmsg+0x246/0x6d0 [ 3197.024844] ? __x64_sys_sendmmsg+0x9d/0x100 [ 3197.029249] ? do_syscall_64+0x1b9/0x820 [ 3197.033317] ? mark_held_locks+0x130/0x130 [ 3197.037556] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 3197.043092] ? rcu_pm_notify+0xc0/0xc0 [ 3197.046987] ? __kmalloc_node_track_caller+0x3c/0x70 [ 3197.052107] ? zap_class+0x640/0x640 [ 3197.055825] ? rcu_read_lock_sched_held+0x14f/0x180 [ 3197.060841] ? kmem_cache_alloc_node_trace+0x34b/0x740 [ 3197.066120] ? kasan_unpoison_shadow+0x35/0x50 [ 3197.070704] ? kasan_kmalloc+0xc7/0xe0 [ 3197.074593] ? find_held_lock+0x36/0x1c0 [ 3197.078659] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3197.084198] ? refcount_sub_and_test_checked+0x203/0x310 [ 3197.089645] ? refcount_inc_not_zero_checked+0x2f0/0x2f0 [ 3197.095096] ? iov_iter_advance+0x306/0x13f0 [ 3197.099501] ? lock_release+0xa00/0xa00 [ 3197.103477] ? perf_trace_sched_process_exec+0x860/0x860 [ 3197.108923] ? refcount_dec_if_one+0x180/0x180 [ 3197.113511] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3197.119047] ? apparmor_capable+0x355/0x6c0 [ 3197.123364] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3197.128904] ? full_name_hash+0xb8/0x110 [ 3197.132960] ? apparmor_cred_transfer+0x590/0x590 [ 3197.137802] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3197.143342] ? cap_capable+0x1f9/0x260 [ 3197.147232] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3197.152775] ? security_capable+0x99/0xc0 [ 3197.156951] dev_queue_xmit+0x17/0x20 [ 3197.160756] ? dev_queue_xmit+0x17/0x20 [ 3197.164733] packet_sendmsg_spkt+0xf44/0x16e9 [ 3197.169232] ? packet_rcv_fanout+0x8e0/0x8e0 [ 3197.173652] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 3197.178606] ? apparmor_socket_sendmsg+0x29/0x30 [ 3197.183363] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3197.188901] ? security_socket_sendmsg+0x94/0xc0 [ 3197.193654] ? packet_rcv_fanout+0x8e0/0x8e0 [ 3197.198075] sock_sendmsg+0xd5/0x120 [ 3197.201790] ___sys_sendmsg+0x51d/0x930 [ 3197.205769] ? lockdep_init_map+0x9/0x10 [ 3197.209834] ? copy_msghdr_from_user+0x580/0x580 [ 3197.214588] ? zap_class+0x640/0x640 [ 3197.218301] ? psi_task_change.cold.11+0x1ac/0x1ac [ 3197.223240] ? __fget_light+0x2e9/0x430 [ 3197.227212] ? fget_raw+0x20/0x20 [ 3197.230663] ? zap_class+0x640/0x640 [ 3197.234427] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3197.239964] ? sockfd_lookup_light+0xc5/0x160 [ 3197.244457] __sys_sendmmsg+0x246/0x6d0 [ 3197.248479] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3197.252830] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3197.258399] ? put_timespec64+0x10f/0x1b0 [ 3197.262582] ? nsecs_to_jiffies+0x30/0x30 [ 3197.266728] ? do_syscall_64+0x9a/0x820 [ 3197.270732] ? do_syscall_64+0x9a/0x820 [ 3197.274710] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 3197.279310] ? trace_hardirqs_on+0xbd/0x310 [ 3197.283628] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3197.289166] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3197.294526] ? trace_hardirqs_off_caller+0x310/0x310 [ 3197.299631] __x64_sys_sendmmsg+0x9d/0x100 [ 3197.303900] do_syscall_64+0x1b9/0x820 [ 3197.307779] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 3197.313142] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3197.318097] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3197.322942] ? trace_hardirqs_on_caller+0x310/0x310 [ 3197.327959] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 3197.332976] ? prepare_exit_to_usermode+0x291/0x3b0 [ 3197.337994] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3197.342845] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3197.348031] RIP: 0033:0x457569 [ 3197.351225] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3197.370117] RSP: 002b:00007fb0356a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3197.377825] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 3197.385089] RDX: 0000000000000001 RSI: 0000000020002140 RDI: 0000000000000003 [ 3197.392350] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 3197.399615] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb0356a56d4 [ 3197.406873] R13: 00000000004c37d5 R14: 00000000004d5970 R15: 00000000ffffffff [ 3197.415129] Kernel Offset: disabled [ 3197.418750] Rebooting in 86400 seconds..