, 0xb, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) [ 2956.535116][ T6599] binder: 6597:6599 ioctl c0306201 20000340 returned -14 00:15:52 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x12, 0x0, 0x0}) 00:15:52 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$tun(r0, &(0x7f0000000000)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@val={0x88a8, 0x1, 0x1, 0x2}, {0x8100, 0x0, 0x0, 0x1}}, {@llc_tr={0x11, {@llc={0xff, 0x80, "b520", "e28617012717967792ab609d595cffce55ca78d2733844b200779f5d6b98569fd1d8aab0ded1e5ea8c09afeef4f2b1d2f3b8945e507308d6d072c95f5504b1380bcbdae6ee4fc4"}}}}}}, 0x61) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000012c0)={'nicvf0\x00', 0x200}) (async) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/153, 0x99}], 0x2) fremovexattr(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6f73322e224ce693e95c746c97d679feb042dc95c275437475e853ce15d0051b29476d64f25bfe64f1f3e617155781662788e32b591c632a19e57c132c9356bce3341a699959a8c66430ca4a11ae4fd78794652e4715ec690f4655812320210fbcc28b55c1824df6e7270d25099d3bae081086dff166aafbe577f098c5243f3b0e768544258ea957562ff44688d18d4a6dce8414b79d411cbfdc820750b82be69f927d0ac0f5e5816ddd4334ac52ec7f754f25d5eaf36cb9d35a5ebcfaf3fa7b925fe5"]) 00:15:52 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x18, 0x0, 0x0}) [ 2956.615143][ T6611] binder: 6603:6611 unknown command 0 [ 2956.641275][ T6613] binder: 6612:6613 ioctl c0306201 20000340 returned -14 [ 2956.652704][ T6611] binder: 6603:6611 ioctl c0306201 20000440 returned -22 00:15:52 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0xc, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:15:52 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') [ 2956.711462][ T6620] binder: 6618:6620 ioctl c0306201 20000340 returned -14 00:15:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xd2) 00:15:52 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x25, 0x0, 0x0}) 00:15:52 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)) (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') [ 2956.787703][ T6623] binder: 6621:6623 unknown command 0 [ 2956.811728][ T6623] binder: 6621:6623 ioctl c0306201 20000440 returned -22 00:15:52 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0xd, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:52 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x5c, 0x0, 0x0}) [ 2956.844428][ T6630] binder: 6628:6630 ioctl c0306201 20000340 returned -14 00:15:52 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:15:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) [ 2956.917912][ T6636] binder: 6635:6636 unknown command 0 [ 2956.931828][ T6636] binder: 6635:6636 ioctl c0306201 20000440 returned -22 00:15:52 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0xe, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r2, @ANYRES16=r1], 0xd2) [ 2956.962776][ T6638] binder: 6637:6638 ioctl c0306201 20000340 returned -14 00:15:52 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x300, 0x0, 0x0}) 00:15:52 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@random={'btrfs.', 'Pys\xc2\xf1\x1f$\x02\xbc\x85\xc8\\[tem.\x8eosix_\xc7XJ'}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x414581, 0x42) connect$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 00:15:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) [ 2957.083401][ T6649] binder: 6645:6649 ioctl c0306201 20000340 returned -14 [ 2957.084745][ T6646] binder: 6642:6646 unknown command 0 00:15:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@random={'btrfs.', 'Pys\xc2\xf1\x1f$\x02\xbc\x85\xc8\\[tem.\x8eosix_\xc7XJ'}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x414581, 0x42) connect$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) fremovexattr(r0, &(0x7f0000000040)=@random={'btrfs.', 'Pys\xc2\xf1\x1f$\x02\xbc\x85\xc8\\[tem.\x8eosix_\xc7XJ'}) (async) open(&(0x7f0000000000)='./file0\x00', 0x414581, 0x42) (async) connect$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) 00:15:53 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x500, 0x0, 0x0}) 00:15:53 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x10, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2957.129999][ T6646] binder: 6642:6646 ioctl c0306201 20000440 returned -22 00:15:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@random={'btrfs.', 'Pys\xc2\xf1\x1f$\x02\xbc\x85\xc8\\[tem.\x8eosix_\xc7XJ'}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x414581, 0x42) connect$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 00:15:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r2, @ANYRES16=r1], 0xd2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) (async) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r2, @ANYRES16=r1], 0xd2) (async) [ 2957.226811][ T6658] binder: 6656:6658 ioctl c0306201 20000340 returned -14 00:15:53 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x600, 0x0, 0x0}) 00:15:53 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x11, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2957.279538][ T6661] binder: 6659:6661 unknown command 0 [ 2957.292717][ T6661] binder: 6659:6661 ioctl c0306201 20000440 returned -22 00:15:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000040)={0x3, 0x80000000}) 00:15:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) [ 2957.376719][ T6669] binder: 6668:6669 ioctl c0306201 20000340 returned -14 00:15:53 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x700, 0x0, 0x0}) 00:15:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000040)={0x3, 0x80000000}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000040)={0x3, 0x80000000}) (async) [ 2957.418250][ T6673] binder: 6670:6673 unknown command 0 [ 2957.431237][ T6673] binder: 6670:6673 ioctl c0306201 20000440 returned -22 00:15:53 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x12, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) (async) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r2, @ANYRES16=r1], 0xd2) 00:15:53 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x900, 0x0, 0x0}) [ 2957.504581][ T6678] binder: 6676:6678 ioctl c0306201 20000340 returned -14 00:15:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:15:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000040)={0x3, 0x80000000}) [ 2957.578814][ T6684] binder: 6683:6684 unknown command 402653184 [ 2957.601702][ T6684] binder: 6683:6684 ioctl c0306201 20000440 returned -22 00:15:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') close_range(0xffffffffffffffff, r0, 0x2) 00:15:53 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x18, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:53 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0xa00, 0x0, 0x0}) [ 2957.631802][ T6691] binder: BINDER_SET_CONTEXT_MGR already set [ 2957.653952][ T6691] binder: 6689:6691 ioctl 4018620d 20000040 returned -16 [ 2957.661715][ T6691] binder: 6689:6691 ioctl c0306201 20000340 returned -14 00:15:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0xfffd, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa68e0300f5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) 00:15:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') close_range(0xffffffffffffffff, r0, 0x2) 00:15:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c00"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) [ 2957.768518][ T6699] binder: 6696:6699 unknown command 0 [ 2957.781086][ T6699] binder: 6696:6699 ioctl c0306201 20000440 returned -22 [ 2957.806135][ T6702] binder: 6700:6702 ioctl c0306201 20000340 returned -14 00:15:53 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0xb00, 0x0, 0x0}) 00:15:53 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x25, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') close_range(0xffffffffffffffff, r0, 0x2) 00:15:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0xfffd, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa68e0300f5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) 00:15:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@random={'osx.', '-\x00'}) [ 2957.913097][ T6710] binder: 6708:6710 unknown command 0 [ 2957.924923][ T6711] binder: BINDER_SET_CONTEXT_MGR already set [ 2957.933695][ T6710] binder: 6708:6710 ioctl c0306201 20000440 returned -22 [ 2957.956156][ T6711] binder: 6709:6711 ioctl 4018620d 20000040 returned -16 00:15:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c00"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:15:53 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x5c, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:53 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0xc00, 0x0, 0x0}) [ 2957.967375][ T6711] binder: 6709:6711 ioctl c0306201 20000340 returned -14 00:15:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@random={'osx.', '-\x00'}) 00:15:53 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x300, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:54 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0xd00, 0x0, 0x0}) [ 2958.073396][ T6723] binder: 6722:6723 ioctl c0306201 20000340 returned -14 00:15:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@random={'osx.', '-\x00'}) 00:15:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 64) r2 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0xfffd, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa68e0300f5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) 00:15:54 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x500, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c00"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:15:54 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0xc1, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000040), &(0x7f00000000c0)=@v1={0x2, "4be05b6f7d3f819efa5819533841dc"}, 0x10, 0x5) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r1, &(0x7f0000000080)=@known='system.posix_acl_default\x00') [ 2958.200631][ T6732] binder: 6729:6732 ioctl c0306201 20000340 returned -14 00:15:54 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0xc1, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000040), &(0x7f00000000c0)=@v1={0x2, "4be05b6f7d3f819efa5819533841dc"}, 0x10, 0x5) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r1, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:15:54 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x600, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:54 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0xe00, 0x0, 0x0}) 00:15:54 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0xc1, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000040), &(0x7f00000000c0)=@v1={0x2, "4be05b6f7d3f819efa5819533841dc"}, 0x10, 0x5) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r1, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:15:54 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x1100, 0x0, 0x0}) [ 2958.357528][ T6747] binder: 6745:6747 ioctl c0306201 20000340 returned -14 00:15:54 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x700, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:15:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x4ea683, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:15:54 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x1200, 0x0, 0x0}) [ 2958.472644][ T6753] binder: 6752:6753 ioctl c0306201 20000340 returned -14 00:15:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x4ea683, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x4ea683, 0x0) (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) 00:15:54 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x900, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:15:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r2], 0xd2) 00:15:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x4ea683, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') [ 2958.588919][ T6763] binder: 6761:6763 ioctl c0306201 20000340 returned -14 00:15:54 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x1800, 0x0, 0x0}) 00:15:54 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0xa00, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:15:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x6000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000100)={'wg2\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0000003900000000000000000000000088480000000073aad430e2e6a7595e76000003000000000000000000000000000201f0ea8de75000103281708722e5e7941604ced789ead1c812564a020f59439520b66d16bc69a612eb85615069f70981ca263919764c61001a452772bcedadabfe240bb17430b8c60000da4e00efefb05499a9bf4d2d39eb1e"], 0x8a) fremovexattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.impure\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa00, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) fchdir(r2) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) fcntl$lock(r3, 0x24, &(0x7f0000000180)={0x0, 0x1, 0xffffffffffffffff}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'veth0_to_team\x00', 0x1}) close(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r5, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x48014}, 0x4000802) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x2c}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@acquire={0x133c, 0x17, 0x0, 0x70bd2d, 0x25dfdbfc, {{@in6=@loopback, 0x4d3, 0x6c}, @in=@local, {@in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x45}, 0x4e21, 0xfff, 0x4e20, 0x0, 0x2, 0x20, 0x20, 0x4, r6, r8}, {{@in6=@mcast2, @in=@empty, 0x4e20, 0x9, 0x4e24, 0x1000, 0xa, 0x80, 0x20, 0x32, r6, r8}, {0x7fffffffffffffff, 0x3, 0x200, 0x2, 0x100, 0x8}, {0x81, 0x375, 0x5, 0x1f}, 0x7c3, 0x6e6bb0, 0x0, 0x0, 0x0, 0x1}, 0x3, 0x800, 0xfff, 0x70bd26}, [@replay_val={0x10, 0xa, {0x70bd29, 0x70bd25, 0x1}}, @algo_comp={0x1048, 0x3, {{'deflate\x00'}, 0x8000, "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"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3fc0}, @proto={0x5, 0x19, 0x6c}, @user_kmaddress={0x2c, 0x13, {@in=@private=0xa010102, @in=@multicast2, 0x0, 0xa}}, @algo_crypt={0x127, 0x2, {{'cbc-aes-ce\x00'}, 0x6f8, "8131b13278691b13bfe9aa8e800401c45acf5cd9e46e978a82fff5a1ea093f1287e65c78930b197fbe9f53107245d98d8c8a6bd675decc313a12284f9253b96f6731040f6a7b8904e7231f9d9a951edaa18335d38eded9a01653b2dacad54df39cc18e4242c162236ade92758917b378c07c933776dbee7870460466818236a66df2a611af0c263a4c0cb53e7006f1660d2eae0724087b0127af15403706e07d05c52985155aad70a0f520914b6e81da3dcc8cf50b80402cc9e1872f41bbcbe37df5eef479434c77465b075f44195ac89c18e96ab176c1e02a913324b90413"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @XFRMA_SET_MARK={0x8, 0x1d, 0x80}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd26, 0x70bd28, 0x70bd2c, 0x70bd2d, 0x40, [0x9]}}, @address_filter={0x28, 0x1a, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x1, 0x45}}]}, 0x133c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000001980)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) openat$cgroup_ro(r9, &(0x7f00000019c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x2c, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40090}, 0x20054011) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x0, 0x0, 0x44, 0x0, "9ee4a43135ddc21df35339cb9fdbb4817523c3827f29d2d09f556e2d2def79215f8dc0f2bce015b107849183586ec9633fc489de30d063233cac0ef592b7da78197b4a860ab7bf6a06d75428fc5a461c"}, 0xd8) 00:15:54 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x2500, 0x0, 0x0}) [ 2958.741105][ T6776] binder: 6775:6776 ioctl c0306201 20000340 returned -14 00:15:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r2], 0xd2) (async) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r2], 0xd2) 00:15:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c00020018000200"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:15:54 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0xb00, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x6000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000100)={'wg2\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0000003900000000000000000000000088480000000073aad430e2e6a7595e76000003000000000000000000000000000201f0ea8de75000103281708722e5e7941604ced789ead1c812564a020f59439520b66d16bc69a612eb85615069f70981ca263919764c61001a452772bcedadabfe240bb17430b8c60000da4e00efefb05499a9bf4d2d39eb1e"], 0x8a) fremovexattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.impure\x00') (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa00, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) fchdir(r2) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) fcntl$lock(r3, 0x24, &(0x7f0000000180)={0x0, 0x1, 0xffffffffffffffff}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'veth0_to_team\x00', 0x1}) (async) close(r2) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r5, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x48014}, 0x4000802) (async) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x2c}}, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@acquire={0x133c, 0x17, 0x0, 0x70bd2d, 0x25dfdbfc, {{@in6=@loopback, 0x4d3, 0x6c}, @in=@local, {@in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x45}, 0x4e21, 0xfff, 0x4e20, 0x0, 0x2, 0x20, 0x20, 0x4, r6, r8}, {{@in6=@mcast2, @in=@empty, 0x4e20, 0x9, 0x4e24, 0x1000, 0xa, 0x80, 0x20, 0x32, r6, r8}, {0x7fffffffffffffff, 0x3, 0x200, 0x2, 0x100, 0x8}, {0x81, 0x375, 0x5, 0x1f}, 0x7c3, 0x6e6bb0, 0x0, 0x0, 0x0, 0x1}, 0x3, 0x800, 0xfff, 0x70bd26}, [@replay_val={0x10, 0xa, {0x70bd29, 0x70bd25, 0x1}}, @algo_comp={0x1048, 0x3, {{'deflate\x00'}, 0x8000, "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"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3fc0}, @proto={0x5, 0x19, 0x6c}, @user_kmaddress={0x2c, 0x13, {@in=@private=0xa010102, @in=@multicast2, 0x0, 0xa}}, @algo_crypt={0x127, 0x2, {{'cbc-aes-ce\x00'}, 0x6f8, "8131b13278691b13bfe9aa8e800401c45acf5cd9e46e978a82fff5a1ea093f1287e65c78930b197fbe9f53107245d98d8c8a6bd675decc313a12284f9253b96f6731040f6a7b8904e7231f9d9a951edaa18335d38eded9a01653b2dacad54df39cc18e4242c162236ade92758917b378c07c933776dbee7870460466818236a66df2a611af0c263a4c0cb53e7006f1660d2eae0724087b0127af15403706e07d05c52985155aad70a0f520914b6e81da3dcc8cf50b80402cc9e1872f41bbcbe37df5eef479434c77465b075f44195ac89c18e96ab176c1e02a913324b90413"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @XFRMA_SET_MARK={0x8, 0x1d, 0x80}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd26, 0x70bd28, 0x70bd2c, 0x70bd2d, 0x40, [0x9]}}, @address_filter={0x28, 0x1a, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x1, 0x45}}]}, 0x133c}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000001980)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) openat$cgroup_ro(r9, &(0x7f00000019c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x2c, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40090}, 0x20054011) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x0, 0x0, 0x44, 0x0, "9ee4a43135ddc21df35339cb9fdbb4817523c3827f29d2d09f556e2d2def79215f8dc0f2bce015b107849183586ec9633fc489de30d063233cac0ef592b7da78197b4a860ab7bf6a06d75428fc5a461c"}, 0xd8) [ 2958.885352][ T6784] binder: 6783:6784 ioctl c0306201 20000340 returned -14 00:15:54 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x5c00, 0x0, 0x0}) 00:15:54 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0xc00, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x6000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000100)={'wg2\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0000003900000000000000000000000088480000000073aad430e2e6a7595e76000003000000000000000000000000000201f0ea8de75000103281708722e5e7941604ced789ead1c812564a020f59439520b66d16bc69a612eb85615069f70981ca263919764c61001a452772bcedadabfe240bb17430b8c60000da4e00efefb05499a9bf4d2d39eb1e"], 0x8a) fremovexattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.impure\x00') (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa00, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) fchdir(r2) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) fcntl$lock(r3, 0x24, &(0x7f0000000180)={0x0, 0x1, 0xffffffffffffffff}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'veth0_to_team\x00', 0x1}) (async) close(r2) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r5, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x48014}, 0x4000802) (async) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x2c}}, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@acquire={0x133c, 0x17, 0x0, 0x70bd2d, 0x25dfdbfc, {{@in6=@loopback, 0x4d3, 0x6c}, @in=@local, {@in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x45}, 0x4e21, 0xfff, 0x4e20, 0x0, 0x2, 0x20, 0x20, 0x4, r6, r8}, {{@in6=@mcast2, @in=@empty, 0x4e20, 0x9, 0x4e24, 0x1000, 0xa, 0x80, 0x20, 0x32, r6, r8}, {0x7fffffffffffffff, 0x3, 0x200, 0x2, 0x100, 0x8}, {0x81, 0x375, 0x5, 0x1f}, 0x7c3, 0x6e6bb0, 0x0, 0x0, 0x0, 0x1}, 0x3, 0x800, 0xfff, 0x70bd26}, [@replay_val={0x10, 0xa, {0x70bd29, 0x70bd25, 0x1}}, @algo_comp={0x1048, 0x3, {{'deflate\x00'}, 0x8000, "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"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3fc0}, @proto={0x5, 0x19, 0x6c}, @user_kmaddress={0x2c, 0x13, {@in=@private=0xa010102, @in=@multicast2, 0x0, 0xa}}, @algo_crypt={0x127, 0x2, {{'cbc-aes-ce\x00'}, 0x6f8, "8131b13278691b13bfe9aa8e800401c45acf5cd9e46e978a82fff5a1ea093f1287e65c78930b197fbe9f53107245d98d8c8a6bd675decc313a12284f9253b96f6731040f6a7b8904e7231f9d9a951edaa18335d38eded9a01653b2dacad54df39cc18e4242c162236ade92758917b378c07c933776dbee7870460466818236a66df2a611af0c263a4c0cb53e7006f1660d2eae0724087b0127af15403706e07d05c52985155aad70a0f520914b6e81da3dcc8cf50b80402cc9e1872f41bbcbe37df5eef479434c77465b075f44195ac89c18e96ab176c1e02a913324b90413"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @XFRMA_SET_MARK={0x8, 0x1d, 0x80}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd26, 0x70bd28, 0x70bd2c, 0x70bd2d, 0x40, [0x9]}}, @address_filter={0x28, 0x1a, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x1, 0x45}}]}, 0x133c}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000001980)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) openat$cgroup_ro(r9, &(0x7f00000019c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x2c, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40090}, 0x20054011) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x0, 0x0, 0x44, 0x0, "9ee4a43135ddc21df35339cb9fdbb4817523c3827f29d2d09f556e2d2def79215f8dc0f2bce015b107849183586ec9633fc489de30d063233cac0ef592b7da78197b4a860ab7bf6a06d75428fc5a461c"}, 0xd8) 00:15:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c00020018000200"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) [ 2959.019011][ T6797] binder: 6796:6797 ioctl c0306201 20000340 returned -14 00:15:54 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x1000000, 0x0, 0x0}) 00:15:54 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0xd00, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:55 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xa7) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg0\x00', 0x20}) fremovexattr(r1, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:15:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c00020018000200"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:15:55 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0xe00, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:55 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xa7) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg0\x00', 0x20}) fremovexattr(r1, &(0x7f0000000080)=@known='system.posix_acl_default\x00') openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xa7) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg0\x00', 0x20}) (async) fremovexattr(r1, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) [ 2959.184858][ T6812] binder: 6810:6812 ioctl c0306201 20000340 returned -14 00:15:55 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x2000000, 0x0, 0x0}) 00:15:55 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r2], 0xd2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0x0, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) (async) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r2], 0xd2) (async) 00:15:55 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x1100, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:15:55 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xa7) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg0\x00', 0x20}) (async) fremovexattr(r1, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:15:55 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x1200, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2959.316441][ T1231] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.323198][ T1231] ieee802154 phy1 wpan1: encryption failed: -22 [ 2959.348478][ T6823] binder: 6820:6823 ioctl c0306201 20000340 returned -14 00:15:55 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x3000000, 0x0, 0x0}) 00:15:55 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000000)=0x1) 00:15:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:15:55 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x1800, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:55 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000000)=0x1) 00:15:55 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd000000000000000000006034908c009c1100fe880000000000000000000000000001fe8000000000000000000000000000aa4e220000009c90780100000000000000ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4db2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308dade73d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8f45619875a42b3d622818ca1f762c82071e8cd17eac6cb736bbbbe42d21f1f2759dcd52c0600000000000000998cf5ec04df45d6aafebcd5ceee7b576e4c201841fcd8e8e58a1585f15953d605ce57ff84dbe240e80c8fe0f65465eb35"], 0xd2) [ 2959.502479][ T6844] binder: BINDER_SET_CONTEXT_MGR already set [ 2959.510336][ T6844] binder: 6842:6844 ioctl 4018620d 20000040 returned -16 [ 2959.521138][ T6844] binder: 6842:6844 ioctl c0306201 20000340 returned -14 00:15:55 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x4000000, 0x0, 0x0}) 00:15:55 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x2500, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:55 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000000)=0x1) 00:15:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:15:55 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x5c00, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:55 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x5000000, 0x0, 0x0}) [ 2959.708677][ T6856] binder: 6853:6856 ioctl c0306201 20000340 returned -14 00:15:55 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x1000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:55 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@random={'security.', 'syqtem.advise\x00'}) 00:15:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:15:55 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x2000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2959.805867][ T6864] binder: 6863:6864 ioctl c0306201 20000340 returned -14 00:15:55 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd000000000000000000006034908c009c1100fe880000000000000000000000000001fe8000000000000000000000000000aa4e220000009c90780100000000000000ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4db2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308dade73d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8f45619875a42b3d622818ca1f762c82071e8cd17eac6cb736bbbbe42d21f1f2759dcd52c0600000000000000998cf5ec04df45d6aafebcd5ceee7b576e4c201841fcd8e8e58a1585f15953d605ce57ff84dbe240e80c8fe0f65465eb35"], 0xd2) 00:15:55 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x6000000, 0x0, 0x0}) 00:15:55 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@random={'security.', 'syqtem.advise\x00'}) 00:15:55 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@random={'security.', 'syqtem.advise\x00'}) 00:15:55 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x3000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:55 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x7000000, 0x0, 0x0}) [ 2959.954372][ T6878] binder: 6876:6878 ioctl c0306201 20000340 returned -14 00:15:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:15:55 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd000000000000000000006034908c009c1100fe880000000000000000000000000001fe8000000000000000000000000000aa4e220000009c90780100000000000000ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4db2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308dade73d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8f45619875a42b3d622818ca1f762c82071e8cd17eac6cb736bbbbe42d21f1f2759dcd52c0600000000000000998cf5ec04df45d6aafebcd5ceee7b576e4c201841fcd8e8e58a1585f15953d605ce57ff84dbe240e80c8fe0f65465eb35"], 0xd2) (async) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd000000000000000000006034908c009c1100fe880000000000000000000000000001fe8000000000000000000000000000aa4e220000009c90780100000000000000ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4db2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308dade73d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8f45619875a42b3d622818ca1f762c82071e8cd17eac6cb736bbbbe42d21f1f2759dcd52c0600000000000000998cf5ec04df45d6aafebcd5ceee7b576e4c201841fcd8e8e58a1585f15953d605ce57ff84dbe240e80c8fe0f65465eb35"], 0xd2) 00:15:55 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x4000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:55 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10040, 0x89}, 0x18) write$tun(r1, &(0x7f00000000c0)={@void, @void, @eth={@multicast, @broadcast, @val={@val={0x88a8, 0x2, 0x1, 0x2}, {0x8100, 0x3, 0x0, 0x2}}, {@llc_tr={0x11, {@snap={0xab, 0xab, "b6", "1ff47d", 0x886c, "0bf846a882a2b079de97658f7eac30e5cb67bc2bfb2bd82e73333ae402885e443c0e20380aa1201cfb0a1d212e17447d75aec61fc8cfcf59b0fe348d550194f9b4ca4ed8a187cc725320b136454abdc0ad2e6a40c24871d9978069f5de551da890d9bfa30424df5fedd4def9902ecc2bf9c8457726718e660b33e1f3801a46df913869658fc3bc8cd01f"}}}}}}, 0xa8) 00:15:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) [ 2960.108654][ T6888] binder: BINDER_SET_CONTEXT_MGR already set [ 2960.129133][ T6888] binder: 6886:6888 ioctl 4018620d 20000040 returned -16 [ 2960.140730][ T6888] binder: 6886:6888 ioctl c0306201 20000340 returned -14 00:15:56 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) (async) r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10040, 0x89}, 0x18) write$tun(r1, &(0x7f00000000c0)={@void, @void, @eth={@multicast, @broadcast, @val={@val={0x88a8, 0x2, 0x1, 0x2}, {0x8100, 0x3, 0x0, 0x2}}, {@llc_tr={0x11, {@snap={0xab, 0xab, "b6", "1ff47d", 0x886c, "0bf846a882a2b079de97658f7eac30e5cb67bc2bfb2bd82e73333ae402885e443c0e20380aa1201cfb0a1d212e17447d75aec61fc8cfcf59b0fe348d550194f9b4ca4ed8a187cc725320b136454abdc0ad2e6a40c24871d9978069f5de551da890d9bfa30424df5fedd4def9902ecc2bf9c8457726718e660b33e1f3801a46df913869658fc3bc8cd01f"}}}}}}, 0xa8) 00:15:56 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x8000000, 0x0, 0x0}) 00:15:56 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x5000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:56 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async, rerun: 64) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) (async, rerun: 64) r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10040, 0x89}, 0x18) write$tun(r1, &(0x7f00000000c0)={@void, @void, @eth={@multicast, @broadcast, @val={@val={0x88a8, 0x2, 0x1, 0x2}, {0x8100, 0x3, 0x0, 0x2}}, {@llc_tr={0x11, {@snap={0xab, 0xab, "b6", "1ff47d", 0x886c, "0bf846a882a2b079de97658f7eac30e5cb67bc2bfb2bd82e73333ae402885e443c0e20380aa1201cfb0a1d212e17447d75aec61fc8cfcf59b0fe348d550194f9b4ca4ed8a187cc725320b136454abdc0ad2e6a40c24871d9978069f5de551da890d9bfa30424df5fedd4def9902ecc2bf9c8457726718e660b33e1f3801a46df913869658fc3bc8cd01f"}}}}}}, 0xa8) 00:15:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:15:56 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'macvlan1\x00', @local}) r2 = socket$packet(0x11, 0x2, 0x300) read(r0, &(0x7f0000000540)=""/4096, 0x1000) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000340)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@icmpv6={0xe, 0x6, "ff81cc", 0x1ac, 0x3a, 0x0, @mcast1, @local, {[@srh={0x89, 0x10, 0x4, 0x8, 0x1, 0x8, 0x3, [@rand_addr=' \x01\x00', @mcast2, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x3f}, @mcast2]}, @srh={0x11, 0x2, 0x4, 0x1, 0x13, 0x40, 0x81, [@mcast1]}, @routing={0x0, 0x6, 0x2, 0x9, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x42}, @private0]}, @fragment={0x1d, 0x0, 0x40, 0x0, 0x0, 0x1a, 0x66}, @dstopts={0x8, 0x8, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0x8, 0x9b4, [0x6, 0xfffffffffffffffa, 0x3f, 0x5, 0xffffffffffffffff, 0x1, 0x9]}}]}], @mlv2_query={0x82, 0x0, 0x0, 0x2, 0x200, @loopback, 0x6, 0x1, 0x3, 0x7, 0x6, [@private1, @dev={0xfe, 0x80, '\x00', 0x18}, @private2, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}]}}}}}, 0x1e2) [ 2960.250980][ T6901] binder: 6900:6901 ioctl c0306201 20000340 returned -14 00:15:56 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x9000000, 0x0, 0x0}) 00:15:56 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:15:56 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x6000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2960.354739][ T6908] binder: 6904:6908 ioctl c0306201 20000340 returned -14 00:15:56 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0xa000000, 0x0, 0x0}) 00:15:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:15:56 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0xb000000, 0x0, 0x0}) 00:15:56 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') [ 2960.461809][ T6918] binder: 6913:6918 ioctl c0306201 20000340 returned -14 00:15:56 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x7000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:56 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:15:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) [ 2960.562241][ T6924] binder: 6921:6924 ioctl c0306201 20000340 returned -14 00:15:56 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'macvlan1\x00', @local}) r2 = socket$packet(0x11, 0x2, 0x300) read(r0, &(0x7f0000000540)=""/4096, 0x1000) (async) read(r0, &(0x7f0000000540)=""/4096, 0x1000) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000340)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@icmpv6={0xe, 0x6, "ff81cc", 0x1ac, 0x3a, 0x0, @mcast1, @local, {[@srh={0x89, 0x10, 0x4, 0x8, 0x1, 0x8, 0x3, [@rand_addr=' \x01\x00', @mcast2, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x3f}, @mcast2]}, @srh={0x11, 0x2, 0x4, 0x1, 0x13, 0x40, 0x81, [@mcast1]}, @routing={0x0, 0x6, 0x2, 0x9, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x42}, @private0]}, @fragment={0x1d, 0x0, 0x40, 0x0, 0x0, 0x1a, 0x66}, @dstopts={0x8, 0x8, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0x8, 0x9b4, [0x6, 0xfffffffffffffffa, 0x3f, 0x5, 0xffffffffffffffff, 0x1, 0x9]}}]}], @mlv2_query={0x82, 0x0, 0x0, 0x2, 0x200, @loopback, 0x6, 0x1, 0x3, 0x7, 0x6, [@private1, @dev={0xfe, 0x80, '\x00', 0x18}, @private2, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}]}}}}}, 0x1e2) 00:15:56 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0xc000000, 0x0, 0x0}) 00:15:56 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x8000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:56 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='system.sockprotoname\x00') 00:15:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:15:56 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='system.sockprotoname\x00') 00:15:56 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x9000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2960.737458][ T6935] binder: 6934:6935 ioctl c0306201 20000340 returned -14 00:15:56 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0xd000000, 0x0, 0x0}) 00:15:56 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'macvlan1\x00', @local}) r2 = socket$packet(0x11, 0x2, 0x300) read(r0, &(0x7f0000000540)=""/4096, 0x1000) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000340)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@icmpv6={0xe, 0x6, "ff81cc", 0x1ac, 0x3a, 0x0, @mcast1, @local, {[@srh={0x89, 0x10, 0x4, 0x8, 0x1, 0x8, 0x3, [@rand_addr=' \x01\x00', @mcast2, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x3f}, @mcast2]}, @srh={0x11, 0x2, 0x4, 0x1, 0x13, 0x40, 0x81, [@mcast1]}, @routing={0x0, 0x6, 0x2, 0x9, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x42}, @private0]}, @fragment={0x1d, 0x0, 0x40, 0x0, 0x0, 0x1a, 0x66}, @dstopts={0x8, 0x8, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0x8, 0x9b4, [0x6, 0xfffffffffffffffa, 0x3f, 0x5, 0xffffffffffffffff, 0x1, 0x9]}}]}], @mlv2_query={0x82, 0x0, 0x0, 0x2, 0x200, @loopback, 0x6, 0x1, 0x3, 0x7, 0x6, [@private1, @dev={0xfe, 0x80, '\x00', 0x18}, @private2, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}]}}}}}, 0x1e2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'macvlan1\x00', @local}) (async) socket$packet(0x11, 0x2, 0x300) (async) read(r0, &(0x7f0000000540)=""/4096, 0x1000) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) (async) write$tun(r0, &(0x7f0000000340)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@icmpv6={0xe, 0x6, "ff81cc", 0x1ac, 0x3a, 0x0, @mcast1, @local, {[@srh={0x89, 0x10, 0x4, 0x8, 0x1, 0x8, 0x3, [@rand_addr=' \x01\x00', @mcast2, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x3f}, @mcast2]}, @srh={0x11, 0x2, 0x4, 0x1, 0x13, 0x40, 0x81, [@mcast1]}, @routing={0x0, 0x6, 0x2, 0x9, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x42}, @private0]}, @fragment={0x1d, 0x0, 0x40, 0x0, 0x0, 0x1a, 0x66}, @dstopts={0x8, 0x8, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0x8, 0x9b4, [0x6, 0xfffffffffffffffa, 0x3f, 0x5, 0xffffffffffffffff, 0x1, 0x9]}}]}], @mlv2_query={0x82, 0x0, 0x0, 0x2, 0x200, @loopback, 0x6, 0x1, 0x3, 0x7, 0x6, [@private1, @dev={0xfe, 0x80, '\x00', 0x18}, @private2, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}]}}}}}, 0x1e2) (async) 00:15:56 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0xa000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2960.830929][ T6941] __nla_validate_parse: 58 callbacks suppressed [ 2960.830947][ T6941] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 00:15:56 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='system.sockprotoname\x00') (async) fremovexattr(r0, &(0x7f0000000040)=@known='system.sockprotoname\x00') [ 2960.876954][ T6948] binder: 6946:6948 ioctl c0306201 20000340 returned -14 [ 2960.885548][ T6941] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 00:15:56 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0xe000000, 0x0, 0x0}) 00:15:56 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0xb000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:56 executing program 1: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000000c0)={@any, 0x5, 0x6, 0xfe01, 0x3fe, 0x81, "151867c0639f0f9c86a72934bd50e0dac9dd8a735bd704c6bf2e7c21d3a313d9bf9603b18d7658ac2a29a6f7587e2751c115c90be72471cf4246a391b6195be0f28a5908eb7cc50726815a7717942b0f91fe55e31e2a7f3e5e739a29853bf3458e686f5695261452023ecbeb8baf1d76c3fbca38b0d56b7e8c5a37e022548a5c"}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x464001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = getpgid(0xffffffffffffffff) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x2, 0x8125132fa2dfc32c, 0x1, 0x6, r2}) fremovexattr(r1, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:15:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:15:56 executing program 1: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000000c0)={@any, 0x5, 0x6, 0xfe01, 0x3fe, 0x81, "151867c0639f0f9c86a72934bd50e0dac9dd8a735bd704c6bf2e7c21d3a313d9bf9603b18d7658ac2a29a6f7587e2751c115c90be72471cf4246a391b6195be0f28a5908eb7cc50726815a7717942b0f91fe55e31e2a7f3e5e739a29853bf3458e686f5695261452023ecbeb8baf1d76c3fbca38b0d56b7e8c5a37e022548a5c"}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x464001, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = getpgid(0xffffffffffffffff) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x2, 0x8125132fa2dfc32c, 0x1, 0x6, r2}) fremovexattr(r1, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:15:56 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x28001, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0xff, r0, 0x1}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'macvlan1\x00', 0x4000}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r3}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd000000000000000000006034908c009c1100fe880000000000000000000000000001fe8000000000000000000000000000aa4e220000009c90780100000000000000ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4db2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62862fd64b3fa67f998ce9c2ec1d541b4fcd9100"/210], 0xd2) 00:15:57 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x10000000, 0x0, 0x0}) [ 2961.027644][ T6961] binder: 6960:6961 ioctl c0306201 20000340 returned -14 [ 2961.056101][ T6967] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2961.066575][ T6967] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 00:15:57 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0xc000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:57 executing program 1: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000000c0)={@any, 0x5, 0x6, 0xfe01, 0x3fe, 0x81, "151867c0639f0f9c86a72934bd50e0dac9dd8a735bd704c6bf2e7c21d3a313d9bf9603b18d7658ac2a29a6f7587e2751c115c90be72471cf4246a391b6195be0f28a5908eb7cc50726815a7717942b0f91fe55e31e2a7f3e5e739a29853bf3458e686f5695261452023ecbeb8baf1d76c3fbca38b0d56b7e8c5a37e022548a5c"}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x464001, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = getpgid(0xffffffffffffffff) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x2, 0x8125132fa2dfc32c, 0x1, 0x6, r2}) (async) fremovexattr(r1, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:15:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) [ 2961.180936][ T6973] binder: 6969:6973 ioctl c0306201 20000340 returned -14 00:15:57 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x11000000, 0x0, 0x0}) 00:15:57 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0xd000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:57 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x4) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') [ 2961.242496][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2961.254538][ T6980] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 00:15:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x28001, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0xff, r0, 0x1}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'macvlan1\x00', 0x4000}) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r3}) (async) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd000000000000000000006034908c009c1100fe880000000000000000000000000001fe8000000000000000000000000000aa4e220000009c90780100000000000000ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4db2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62862fd64b3fa67f998ce9c2ec1d541b4fcd9100"/210], 0xd2) 00:15:57 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x4) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x4) (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) 00:15:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:15:57 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0xe000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2961.322521][ T6984] binder: 6982:6984 ioctl c0306201 20000340 returned -14 00:15:57 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x12000000, 0x0, 0x0}) 00:15:57 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x10000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2961.441368][ T6995] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2961.453778][ T6995] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 00:15:57 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x4) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x4) (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) 00:15:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:15:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x28001, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0xff, r0, 0x1}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'macvlan1\x00', 0x4000}) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040), 0x4) (async) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r3}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd000000000000000000006034908c009c1100fe880000000000000000000000000001fe8000000000000000000000000000aa4e220000009c90780100000000000000ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4db2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62862fd64b3fa67f998ce9c2ec1d541b4fcd9100"/210], 0xd2) [ 2961.488693][ T6995] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. 00:15:57 executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x2, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pwritev2(r0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="1467383d2abea60331709370e8c49da4876bd6841b0b39e63d4da088412ee54cc55c8cce14a1c4f76a5b419a428b621aeaac0886e508f5c59d0f0d5f3a809c70a79af0121cd94926d39526e81339680f23ca9cf6d7b37744a074400bc5997a5f8f2e52f0fa44ec0bd1644bb112892a3a2a3e439e5349b5eed6c69a3f7743fdebbb9c6e07348beda94ecdc56cde51f46937986398cacb68d579762319939cfb60cee0fa20295f1eb7bbf05f334376bbe9a97747e478c21106d51c79ffaa7603f46f947eca42c787bf1e7911e592cd2054f088f226c5eb6962c8e439a8", 0xdc}, {&(0x7f0000000200)="3c4b4b7b4a4a4a19f477b0714600c3eae8dde821917ab936e51a0ff3f565577a447e1cdc7e39cfaf33781333a908cee0ff5f69f3dec4485d675f06068e376c9f0410363238daac14901c67935d", 0x4d}, {&(0x7f0000000280)="0cecd02ff5f1fe43f42e14508e605ae0f22e1a2c22c9250a3a5cefa7f8e75696607efb66a80106c122d41175ec52063f8ebb65e0ec9722444263fc1f037f7e155780d5468cecbd1e54f1027b12652f76f1344c5decee0ece3659e8c55221477e6f0328c3cc5e1558fe6e8d7626c2c2", 0x6f}, {&(0x7f0000000040)="612823112c639bcfba1fb5eea4be57e4dea650fd527ea5da8d3845b33372813e7d56a9039b9fb275cafb7f9ccbd43920f40bee2e", 0x34}, {&(0x7f0000000300)="37c910922c53ed35dcc10b39cc9c4bb51bb6cc93c33f4ba8b58c4b0608d575f650856bbcaed9f0b499ecb37fbeaa04f4173dd8ee635d2afaa3818c3dc0ee9b4c29a42f1e41b2e01024cab29fc7f23a7109278d86df88dcc44e77902f09d8cd78619a839c4101acc7c9368545147347d70a8a17831e9073d0fa314c44d0ecaaa0e2109f0c8cd833aac8b6389166a80af39368825db0efaac7f991e9fcf8d108818f0485603264cbdbb30da35a2db0b589b0339cbe9dc749619e3cd243f5e3d46c456747ffd2beb8", 0xc7}, {&(0x7f0000000400)="3be0a5a73b2c939476895f2ad25778d15800d68870031010c6e54e68034e8536cea195e95d4f0a263e4bcfdd6d9cbf811caaf2b98a7679100972c399b790d58efb3f791ca3c994fc36eee320bd24ce405ad6043471c42b3ed05f2fbea01988b0ac7566268c30e7afb8ae326ac3992be1d12c41d0b0d910913d826466519a8f214ccf0447aeb9c53b8ac1ec6107d09816f0788b3154025643d08fc62dc42710cac2da7923cc4429d2e1845f2cea8ab0eac7fffe4a5862e7fe7f7ddb99d4f1ecd7b085137f2022b416b9a7db6dd79313bb94fcdac40f6af999f7b9ca4ff4bbfd2cc9c4a80c6125e92261b911a170b7abe302955970", 0xf4}, {&(0x7f0000000500)="00c1fd197dba777bcb5f9b68001e305ced5f2e56681f3621709c3de766ca103d0980c8909eb98dbc59bdf0231bcbd4002f13456464bf8423cbc2bb5eb43d4f528539a37a45cfa2e91d6e0ab9c1efe35e3e622bba4108bab8995a5a55d21a11570a23f9b117cff286f7646c0367d0417f4bf4be04ee1584f72f00a9c7e4cc67bd1ff56ce2a5ec0117828ad4c7e18326a30b10d94d38a0718e9a0f7bc87f0e", 0x9e}], 0x7, 0x49c, 0x5, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x11) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000640)={0x79, 0x0, 0x1}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'nr0\x00', @broadcast}) fremovexattr(r2, &(0x7f0000000080)=@known='system.posix_acl_default\x00') [ 2961.542395][ T7002] binder: 6998:7002 ioctl c0306201 20000340 returned -14 00:15:57 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x11000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:57 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x18000000, 0x0, 0x0}) [ 2961.651336][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2961.688070][ T7019] binder: BINDER_SET_CONTEXT_MGR already set 00:15:57 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x12000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:57 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x25000000, 0x0, 0x0}) [ 2961.697112][ T7019] binder: 7017:7019 ioctl 4018620d 20000040 returned -16 [ 2961.708489][ T7019] binder: 7017:7019 ioctl c0306201 20000340 returned -14 00:15:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'macvtap0\x00', 0x400}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd000000000000000000006034908c009c1100fe880000000000000000000000000001fe8000000000000000000000000000aa4e220000009c90780100000000000000ce6437bad25405a17ffe4a6b9329598de17772e30bf27f295d4db2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62862fd64b3fa67f998cf5ec04df45d6aafebcd5ceee7b57e9c2ec1d541b4fcd91000000000000"], 0xd2) 00:15:57 executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x2, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pwritev2(r0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="1467383d2abea60331709370e8c49da4876bd6841b0b39e63d4da088412ee54cc55c8cce14a1c4f76a5b419a428b621aeaac0886e508f5c59d0f0d5f3a809c70a79af0121cd94926d39526e81339680f23ca9cf6d7b37744a074400bc5997a5f8f2e52f0fa44ec0bd1644bb112892a3a2a3e439e5349b5eed6c69a3f7743fdebbb9c6e07348beda94ecdc56cde51f46937986398cacb68d579762319939cfb60cee0fa20295f1eb7bbf05f334376bbe9a97747e478c21106d51c79ffaa7603f46f947eca42c787bf1e7911e592cd2054f088f226c5eb6962c8e439a8", 0xdc}, {&(0x7f0000000200)="3c4b4b7b4a4a4a19f477b0714600c3eae8dde821917ab936e51a0ff3f565577a447e1cdc7e39cfaf33781333a908cee0ff5f69f3dec4485d675f06068e376c9f0410363238daac14901c67935d", 0x4d}, {&(0x7f0000000280)="0cecd02ff5f1fe43f42e14508e605ae0f22e1a2c22c9250a3a5cefa7f8e75696607efb66a80106c122d41175ec52063f8ebb65e0ec9722444263fc1f037f7e155780d5468cecbd1e54f1027b12652f76f1344c5decee0ece3659e8c55221477e6f0328c3cc5e1558fe6e8d7626c2c2", 0x6f}, {&(0x7f0000000040)="612823112c639bcfba1fb5eea4be57e4dea650fd527ea5da8d3845b33372813e7d56a9039b9fb275cafb7f9ccbd43920f40bee2e", 0x34}, {&(0x7f0000000300)="37c910922c53ed35dcc10b39cc9c4bb51bb6cc93c33f4ba8b58c4b0608d575f650856bbcaed9f0b499ecb37fbeaa04f4173dd8ee635d2afaa3818c3dc0ee9b4c29a42f1e41b2e01024cab29fc7f23a7109278d86df88dcc44e77902f09d8cd78619a839c4101acc7c9368545147347d70a8a17831e9073d0fa314c44d0ecaaa0e2109f0c8cd833aac8b6389166a80af39368825db0efaac7f991e9fcf8d108818f0485603264cbdbb30da35a2db0b589b0339cbe9dc749619e3cd243f5e3d46c456747ffd2beb8", 0xc7}, {&(0x7f0000000400)="3be0a5a73b2c939476895f2ad25778d15800d68870031010c6e54e68034e8536cea195e95d4f0a263e4bcfdd6d9cbf811caaf2b98a7679100972c399b790d58efb3f791ca3c994fc36eee320bd24ce405ad6043471c42b3ed05f2fbea01988b0ac7566268c30e7afb8ae326ac3992be1d12c41d0b0d910913d826466519a8f214ccf0447aeb9c53b8ac1ec6107d09816f0788b3154025643d08fc62dc42710cac2da7923cc4429d2e1845f2cea8ab0eac7fffe4a5862e7fe7f7ddb99d4f1ecd7b085137f2022b416b9a7db6dd79313bb94fcdac40f6af999f7b9ca4ff4bbfd2cc9c4a80c6125e92261b911a170b7abe302955970", 0xf4}, {&(0x7f0000000500)="00c1fd197dba777bcb5f9b68001e305ced5f2e56681f3621709c3de766ca103d0980c8909eb98dbc59bdf0231bcbd4002f13456464bf8423cbc2bb5eb43d4f528539a37a45cfa2e91d6e0ab9c1efe35e3e622bba4108bab8995a5a55d21a11570a23f9b117cff286f7646c0367d0417f4bf4be04ee1584f72f00a9c7e4cc67bd1ff56ce2a5ec0117828ad4c7e18326a30b10d94d38a0718e9a0f7bc87f0e", 0x9e}], 0x7, 0x49c, 0x5, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x11) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000640)={0x79, 0x0, 0x1}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'nr0\x00', @broadcast}) fremovexattr(r2, &(0x7f0000000080)=@known='system.posix_acl_default\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x2, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) pwritev2(r0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="1467383d2abea60331709370e8c49da4876bd6841b0b39e63d4da088412ee54cc55c8cce14a1c4f76a5b419a428b621aeaac0886e508f5c59d0f0d5f3a809c70a79af0121cd94926d39526e81339680f23ca9cf6d7b37744a074400bc5997a5f8f2e52f0fa44ec0bd1644bb112892a3a2a3e439e5349b5eed6c69a3f7743fdebbb9c6e07348beda94ecdc56cde51f46937986398cacb68d579762319939cfb60cee0fa20295f1eb7bbf05f334376bbe9a97747e478c21106d51c79ffaa7603f46f947eca42c787bf1e7911e592cd2054f088f226c5eb6962c8e439a8", 0xdc}, {&(0x7f0000000200)="3c4b4b7b4a4a4a19f477b0714600c3eae8dde821917ab936e51a0ff3f565577a447e1cdc7e39cfaf33781333a908cee0ff5f69f3dec4485d675f06068e376c9f0410363238daac14901c67935d", 0x4d}, {&(0x7f0000000280)="0cecd02ff5f1fe43f42e14508e605ae0f22e1a2c22c9250a3a5cefa7f8e75696607efb66a80106c122d41175ec52063f8ebb65e0ec9722444263fc1f037f7e155780d5468cecbd1e54f1027b12652f76f1344c5decee0ece3659e8c55221477e6f0328c3cc5e1558fe6e8d7626c2c2", 0x6f}, {&(0x7f0000000040)="612823112c639bcfba1fb5eea4be57e4dea650fd527ea5da8d3845b33372813e7d56a9039b9fb275cafb7f9ccbd43920f40bee2e", 0x34}, {&(0x7f0000000300)="37c910922c53ed35dcc10b39cc9c4bb51bb6cc93c33f4ba8b58c4b0608d575f650856bbcaed9f0b499ecb37fbeaa04f4173dd8ee635d2afaa3818c3dc0ee9b4c29a42f1e41b2e01024cab29fc7f23a7109278d86df88dcc44e77902f09d8cd78619a839c4101acc7c9368545147347d70a8a17831e9073d0fa314c44d0ecaaa0e2109f0c8cd833aac8b6389166a80af39368825db0efaac7f991e9fcf8d108818f0485603264cbdbb30da35a2db0b589b0339cbe9dc749619e3cd243f5e3d46c456747ffd2beb8", 0xc7}, {&(0x7f0000000400)="3be0a5a73b2c939476895f2ad25778d15800d68870031010c6e54e68034e8536cea195e95d4f0a263e4bcfdd6d9cbf811caaf2b98a7679100972c399b790d58efb3f791ca3c994fc36eee320bd24ce405ad6043471c42b3ed05f2fbea01988b0ac7566268c30e7afb8ae326ac3992be1d12c41d0b0d910913d826466519a8f214ccf0447aeb9c53b8ac1ec6107d09816f0788b3154025643d08fc62dc42710cac2da7923cc4429d2e1845f2cea8ab0eac7fffe4a5862e7fe7f7ddb99d4f1ecd7b085137f2022b416b9a7db6dd79313bb94fcdac40f6af999f7b9ca4ff4bbfd2cc9c4a80c6125e92261b911a170b7abe302955970", 0xf4}, {&(0x7f0000000500)="00c1fd197dba777bcb5f9b68001e305ced5f2e56681f3621709c3de766ca103d0980c8909eb98dbc59bdf0231bcbd4002f13456464bf8423cbc2bb5eb43d4f528539a37a45cfa2e91d6e0ab9c1efe35e3e622bba4108bab8995a5a55d21a11570a23f9b117cff286f7646c0367d0417f4bf4be04ee1584f72f00a9c7e4cc67bd1ff56ce2a5ec0117828ad4c7e18326a30b10d94d38a0718e9a0f7bc87f0e", 0x9e}], 0x7, 0x49c, 0x5, 0x8) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) fsmount(r2, 0x0, 0x11) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000640)={0x79, 0x0, 0x1}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'nr0\x00', @broadcast}) (async) fremovexattr(r2, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) 00:15:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:15:57 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x18000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:57 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x5c000000, 0x0, 0x0}) [ 2961.826749][ T7026] binder: 7024:7026 ioctl c0306201 20000340 returned -14 00:15:57 executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x2, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pwritev2(r0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="1467383d2abea60331709370e8c49da4876bd6841b0b39e63d4da088412ee54cc55c8cce14a1c4f76a5b419a428b621aeaac0886e508f5c59d0f0d5f3a809c70a79af0121cd94926d39526e81339680f23ca9cf6d7b37744a074400bc5997a5f8f2e52f0fa44ec0bd1644bb112892a3a2a3e439e5349b5eed6c69a3f7743fdebbb9c6e07348beda94ecdc56cde51f46937986398cacb68d579762319939cfb60cee0fa20295f1eb7bbf05f334376bbe9a97747e478c21106d51c79ffaa7603f46f947eca42c787bf1e7911e592cd2054f088f226c5eb6962c8e439a8", 0xdc}, {&(0x7f0000000200)="3c4b4b7b4a4a4a19f477b0714600c3eae8dde821917ab936e51a0ff3f565577a447e1cdc7e39cfaf33781333a908cee0ff5f69f3dec4485d675f06068e376c9f0410363238daac14901c67935d", 0x4d}, {&(0x7f0000000280)="0cecd02ff5f1fe43f42e14508e605ae0f22e1a2c22c9250a3a5cefa7f8e75696607efb66a80106c122d41175ec52063f8ebb65e0ec9722444263fc1f037f7e155780d5468cecbd1e54f1027b12652f76f1344c5decee0ece3659e8c55221477e6f0328c3cc5e1558fe6e8d7626c2c2", 0x6f}, {&(0x7f0000000040)="612823112c639bcfba1fb5eea4be57e4dea650fd527ea5da8d3845b33372813e7d56a9039b9fb275cafb7f9ccbd43920f40bee2e", 0x34}, {&(0x7f0000000300)="37c910922c53ed35dcc10b39cc9c4bb51bb6cc93c33f4ba8b58c4b0608d575f650856bbcaed9f0b499ecb37fbeaa04f4173dd8ee635d2afaa3818c3dc0ee9b4c29a42f1e41b2e01024cab29fc7f23a7109278d86df88dcc44e77902f09d8cd78619a839c4101acc7c9368545147347d70a8a17831e9073d0fa314c44d0ecaaa0e2109f0c8cd833aac8b6389166a80af39368825db0efaac7f991e9fcf8d108818f0485603264cbdbb30da35a2db0b589b0339cbe9dc749619e3cd243f5e3d46c456747ffd2beb8", 0xc7}, {&(0x7f0000000400)="3be0a5a73b2c939476895f2ad25778d15800d68870031010c6e54e68034e8536cea195e95d4f0a263e4bcfdd6d9cbf811caaf2b98a7679100972c399b790d58efb3f791ca3c994fc36eee320bd24ce405ad6043471c42b3ed05f2fbea01988b0ac7566268c30e7afb8ae326ac3992be1d12c41d0b0d910913d826466519a8f214ccf0447aeb9c53b8ac1ec6107d09816f0788b3154025643d08fc62dc42710cac2da7923cc4429d2e1845f2cea8ab0eac7fffe4a5862e7fe7f7ddb99d4f1ecd7b085137f2022b416b9a7db6dd79313bb94fcdac40f6af999f7b9ca4ff4bbfd2cc9c4a80c6125e92261b911a170b7abe302955970", 0xf4}, {&(0x7f0000000500)="00c1fd197dba777bcb5f9b68001e305ced5f2e56681f3621709c3de766ca103d0980c8909eb98dbc59bdf0231bcbd4002f13456464bf8423cbc2bb5eb43d4f528539a37a45cfa2e91d6e0ab9c1efe35e3e622bba4108bab8995a5a55d21a11570a23f9b117cff286f7646c0367d0417f4bf4be04ee1584f72f00a9c7e4cc67bd1ff56ce2a5ec0117828ad4c7e18326a30b10d94d38a0718e9a0f7bc87f0e", 0x9e}], 0x7, 0x49c, 0x5, 0x8) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x11) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000640)={0x79, 0x0, 0x1}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'nr0\x00', @broadcast}) (async) fremovexattr(r2, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:15:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff00", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:15:57 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0xfcffffff, 0x0, 0x0}) [ 2961.917039][ T7039] binder: 7038:7039 ioctl c0306201 20000340 returned -14 00:15:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'macvtap0\x00', 0x400}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 64) r2 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd000000000000000000006034908c009c1100fe880000000000000000000000000001fe8000000000000000000000000000aa4e220000009c90780100000000000000ce6437bad25405a17ffe4a6b9329598de17772e30bf27f295d4db2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62862fd64b3fa67f998cf5ec04df45d6aafebcd5ceee7b57e9c2ec1d541b4fcd91000000000000"], 0xd2) 00:15:57 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x25000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:57 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x103400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth0\x00', 0x800}) 00:15:57 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0xfdfdffff, 0x0, 0x0}) [ 2962.044920][ T7051] binder: 7046:7051 ioctl c0306201 20000340 returned -14 00:15:58 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x5c000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff00", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:15:58 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0xfffffdfd, 0x0, 0x0}) [ 2962.144068][ T7059] binder: 7057:7059 ioctl c0306201 20000340 returned -14 00:15:58 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x103400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth0\x00', 0x800}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x103400, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth0\x00', 0x800}) (async) 00:15:58 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0xfcffffff, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff00", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) [ 2962.242239][ T7065] binder: 7064:7065 ioctl c0306201 20000340 returned -14 00:15:58 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x103400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth0\x00', 0x800}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x103400, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth0\x00', 0x800}) (async) 00:15:58 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0xffffff7f, 0x0, 0x0}) 00:15:58 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0xfdfdffff, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'macvtap0\x00', 0x400}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd000000000000000000006034908c009c1100fe880000000000000000000000000001fe8000000000000000000000000000aa4e220000009c90780100000000000000ce6437bad25405a17ffe4a6b9329598de17772e30bf27f295d4db2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62862fd64b3fa67f998cf5ec04df45d6aafebcd5ceee7b57e9c2ec1d541b4fcd91000000000000"], 0xd2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'macvtap0\x00', 0x400}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) (async) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd000000000000000000006034908c009c1100fe880000000000000000000000000001fe8000000000000000000000000000aa4e220000009c90780100000000000000ce6437bad25405a17ffe4a6b9329598de17772e30bf27f295d4db2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62862fd64b3fa67f998cf5ec04df45d6aafebcd5ceee7b57e9c2ec1d541b4fcd91000000000000"], 0xd2) (async) 00:15:58 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'macsec0\x00', 0x800}) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:15:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff00000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:15:58 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0xfffffdfd, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2962.434593][ T7083] binder: 7078:7083 ioctl c0306201 20000340 returned -14 00:15:58 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0xfffffffc, 0x0, 0x0}) 00:15:58 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'macsec0\x00', 0x800}) (async, rerun: 64) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (rerun: 64) 00:15:58 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0xffffff7f, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.log\x00', 0x0, 0x22) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3) r4 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'wg0\x00', 0x2}) 00:15:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff00000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:15:58 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'macsec0\x00', 0x800}) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:15:58 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0xfffffffc, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2962.616169][ T7101] binder: 7098:7101 ioctl c0306201 20000340 returned -14 00:15:58 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x1000000000000, 0x0, 0x0}) 00:15:58 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x80f3}, @void, @llc={@llc={0xf8, 0xbc, "da", "6b48a2e2b9c4b1d7d2fe6623ec7a55f2859b12af898207526f2a5d2a5fd137f03c1f00cc8243c2f920ea0c65488fac565adc5001dc42504a2ba02399bf4819b72368918550a5225c618b15124d3ee68d42168c5c6115e60407ce230df568d5f669bbaf95a1f01ed0a6481924b42f2761610330aded335f7a627d3b8b594d23b0a9355517faa3d45ade1c27a28155dcc7f45c53f7707931"}}}, 0x9e) 00:15:58 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.log\x00', 0x0, 0x22) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3) open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) (async) r4 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'wg0\x00', 0x2}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'wg0\x00', 0x2}) [ 2962.710115][ T7107] binder: BINDER_SET_CONTEXT_MGR already set [ 2962.721467][ T7107] binder: 7104:7107 ioctl 4018620d 20000040 returned -16 [ 2962.749065][ T7110] binder: 7109:7110 ioctl c0306201 20000340 returned -14 00:15:58 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x1000000000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:58 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x100000000000000, 0x0, 0x0}) 00:15:58 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x80f3}, @void, @llc={@llc={0xf8, 0xbc, "da", "6b48a2e2b9c4b1d7d2fe6623ec7a55f2859b12af898207526f2a5d2a5fd137f03c1f00cc8243c2f920ea0c65488fac565adc5001dc42504a2ba02399bf4819b72368918550a5225c618b15124d3ee68d42168c5c6115e60407ce230df568d5f669bbaf95a1f01ed0a6481924b42f2761610330aded335f7a627d3b8b594d23b0a9355517faa3d45ade1c27a28155dcc7f45c53f7707931"}}}, 0x9e) 00:15:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff00000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:15:58 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x100000000000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:58 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x200000000000000, 0x0, 0x0}) [ 2962.883074][ T7119] binder: 7118:7119 ioctl c0306201 20000340 returned -14 00:15:58 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x200000000000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:58 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x80f3}, @void, @llc={@llc={0xf8, 0xbc, "da", "6b48a2e2b9c4b1d7d2fe6623ec7a55f2859b12af898207526f2a5d2a5fd137f03c1f00cc8243c2f920ea0c65488fac565adc5001dc42504a2ba02399bf4819b72368918550a5225c618b15124d3ee68d42168c5c6115e60407ce230df568d5f669bbaf95a1f01ed0a6481924b42f2761610330aded335f7a627d3b8b594d23b0a9355517faa3d45ade1c27a28155dcc7f45c53f7707931"}}}, 0x9e) 00:15:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff0000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:15:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.log\x00', 0x0, 0x22) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3) r4 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'wg0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) (async) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) (async) openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.log\x00', 0x0, 0x22) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3) (async) open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) (async) sendfile(r4, r5, 0x0, 0x4000000000010046) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'wg0\x00', 0x2}) (async) 00:15:58 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:15:58 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x300000000000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2963.033217][ T7130] binder: 7127:7130 ioctl c0306201 20000340 returned -14 00:15:59 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x300000000000000, 0x0, 0x0}) 00:15:59 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:15:59 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x400000000000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff0000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:15:59 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:15:59 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x500000000000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2963.204971][ T7147] binder: 7146:7147 ioctl c0306201 20000340 returned -14 00:15:59 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x400000000000000, 0x0, 0x0}) 00:15:59 executing program 1: r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000006c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000440)='1', 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r0}, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={'xxhash64-generic\x00'}}) add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000180)="0ace3023edba42", 0x7, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r2, &(0x7f0000000000)=@random={'system.', '\x95$!\xdd\x11+\xa1\x81\xce\x1bV\xc0Hl\x10d\x8a\x94\xa8\xe7\x8c`f}\x81/I\xd0u\x86\\\xc7\xa0\xe5\v\x1a\xf1+\xc9\xf0=\xe5?}5\xb7:\x99\xd88\x14|\xbf\x81\x0eZ\xe40\\\xb2|\x9f\xad\x06\xb2u\xc9\xa6\xc5\x85]\x87X}\xbd\xc2\xc6\x1a]\xa3H\x86\xf5h\xf3\"\x8c*\t\x99\x1c\xbc\xa4\xdd \xc2\xef%g\xe6\"\x01\x8e\xf0\x1cW\x8e\xd9\x81\x80[\x11\xb6\x90\x89\xea\x9d/\xbe\xa9:\t\xebgS\a\xbb\xfc\xf4D\x1d\xb9c\vR\xbct\xb3\xd0\xae4\xf4\xe4\xf7\xd9\x81\x81\x7f\xde\xbf\x17\xc3\x10\x86\x85D$1Nn\xb0*\xbf}\x8e;\xd9'}) 00:15:59 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd000000000000000000006034908c009c1100fe880000000000000000000000000001fe8000000000000000000000000000aa4e220000009c90780100000000000000046437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4db2d58381627c8aecd2836403a8580bb312ac0840ae154b1c12c50ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8f45619875a42b3d6228c7dcd17eac6cb736bbb514eb5061f2759dcd52c62862fd64b3fa67f998cf5ec04df45d6aafebcd5ceee"], 0xd2) 00:15:59 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x600000000000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff0000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:15:59 executing program 1: r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000006c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000440)='1', 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r0}, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={'xxhash64-generic\x00'}}) add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000180)="0ace3023edba42", 0x7, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r2, &(0x7f0000000000)=@random={'system.', '\x95$!\xdd\x11+\xa1\x81\xce\x1bV\xc0Hl\x10d\x8a\x94\xa8\xe7\x8c`f}\x81/I\xd0u\x86\\\xc7\xa0\xe5\v\x1a\xf1+\xc9\xf0=\xe5?}5\xb7:\x99\xd88\x14|\xbf\x81\x0eZ\xe40\\\xb2|\x9f\xad\x06\xb2u\xc9\xa6\xc5\x85]\x87X}\xbd\xc2\xc6\x1a]\xa3H\x86\xf5h\xf3\"\x8c*\t\x99\x1c\xbc\xa4\xdd \xc2\xef%g\xe6\"\x01\x8e\xf0\x1cW\x8e\xd9\x81\x80[\x11\xb6\x90\x89\xea\x9d/\xbe\xa9:\t\xebgS\a\xbb\xfc\xf4D\x1d\xb9c\vR\xbct\xb3\xd0\xae4\xf4\xe4\xf7\xd9\x81\x81\x7f\xde\xbf\x17\xc3\x10\x86\x85D$1Nn\xb0*\xbf}\x8e;\xd9'}) (async) fremovexattr(r2, &(0x7f0000000000)=@random={'system.', '\x95$!\xdd\x11+\xa1\x81\xce\x1bV\xc0Hl\x10d\x8a\x94\xa8\xe7\x8c`f}\x81/I\xd0u\x86\\\xc7\xa0\xe5\v\x1a\xf1+\xc9\xf0=\xe5?}5\xb7:\x99\xd88\x14|\xbf\x81\x0eZ\xe40\\\xb2|\x9f\xad\x06\xb2u\xc9\xa6\xc5\x85]\x87X}\xbd\xc2\xc6\x1a]\xa3H\x86\xf5h\xf3\"\x8c*\t\x99\x1c\xbc\xa4\xdd \xc2\xef%g\xe6\"\x01\x8e\xf0\x1cW\x8e\xd9\x81\x80[\x11\xb6\x90\x89\xea\x9d/\xbe\xa9:\t\xebgS\a\xbb\xfc\xf4D\x1d\xb9c\vR\xbct\xb3\xd0\xae4\xf4\xe4\xf7\xd9\x81\x81\x7f\xde\xbf\x17\xc3\x10\x86\x85D$1Nn\xb0*\xbf}\x8e;\xd9'}) 00:15:59 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x700000000000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:59 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x500000000000000, 0x0, 0x0}) [ 2963.394976][ T7160] binder: 7158:7160 ioctl c0306201 20000340 returned -14 00:15:59 executing program 1: r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000006c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000440)='1', 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r0}, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={'xxhash64-generic\x00'}}) (async) add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000180)="0ace3023edba42", 0x7, 0xffffffffffffffff) (async) keyctl$invalidate(0x15, r0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r2, &(0x7f0000000000)=@random={'system.', '\x95$!\xdd\x11+\xa1\x81\xce\x1bV\xc0Hl\x10d\x8a\x94\xa8\xe7\x8c`f}\x81/I\xd0u\x86\\\xc7\xa0\xe5\v\x1a\xf1+\xc9\xf0=\xe5?}5\xb7:\x99\xd88\x14|\xbf\x81\x0eZ\xe40\\\xb2|\x9f\xad\x06\xb2u\xc9\xa6\xc5\x85]\x87X}\xbd\xc2\xc6\x1a]\xa3H\x86\xf5h\xf3\"\x8c*\t\x99\x1c\xbc\xa4\xdd \xc2\xef%g\xe6\"\x01\x8e\xf0\x1cW\x8e\xd9\x81\x80[\x11\xb6\x90\x89\xea\x9d/\xbe\xa9:\t\xebgS\a\xbb\xfc\xf4D\x1d\xb9c\vR\xbct\xb3\xd0\xae4\xf4\xe4\xf7\xd9\x81\x81\x7f\xde\xbf\x17\xc3\x10\x86\x85D$1Nn\xb0*\xbf}\x8e;\xd9'}) 00:15:59 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:15:59 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x800000000000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:59 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd000000000000000000006034908c009c1100fe880000000000000000000000000001fe8000000000000000000000000000aa4e220000009c90780100000000000000046437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4db2d58381627c8aecd2836403a8580bb312ac0840ae154b1c12c50ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8f45619875a42b3d6228c7dcd17eac6cb736bbb514eb5061f2759dcd52c62862fd64b3fa67f998cf5ec04df45d6aafebcd5ceee"], 0xd2) 00:15:59 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x4100, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') [ 2963.527201][ T7172] binder: 7171:7172 ioctl c0306201 20000340 returned -14 00:15:59 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x600000000000000, 0x0, 0x0}) 00:15:59 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x900000000000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2963.572321][ T7178] binder: BINDER_SET_CONTEXT_MGR already set [ 2963.590589][ T7178] binder: 7177:7178 ioctl 4018620d 20000040 returned -16 00:15:59 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x4100, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:15:59 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:15:59 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x700000000000000, 0x0, 0x0}) 00:15:59 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x4100, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') [ 2963.690410][ T7187] binder: 7185:7187 ioctl c0306201 20000340 returned -14 [ 2963.703684][ T7188] binder: BINDER_SET_CONTEXT_MGR already set [ 2963.713194][ T7188] binder: 7186:7188 ioctl 4018620d 20000040 returned -16 00:15:59 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0xa00000000000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:59 executing program 1: ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f00000000c0)={0xb, {0x4, 0xdbec, 0x92, 0x4}, {0x0, 0x2, 0x38, 0x20}, {0x14e24bda, 0xc49c}}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$tun(r0, &(0x7f0000000000)={@void, @void, @mpls={[{0x2, 0x0, 0x1}, {0x4, 0x0, 0x1}], @generic="9dd7dcb7b930b0e9018218889f5f144babf1ac5e871f9bd4d9af8922639a3ca374391ecb1e0e01a61b45c7d63147967b12c12290cabb02ff965c19015515cf13350648741b3e5eac1e03df8e70ed8b503bce4d1e724ab1f188ef574f7a1243"}}, 0x67) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:15:59 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:15:59 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) (async, rerun: 64) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) (rerun: 64) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd000000000000000000006034908c009c1100fe880000000000000000000000000001fe8000000000000000000000000000aa4e220000009c90780100000000000000046437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4db2d58381627c8aecd2836403a8580bb312ac0840ae154b1c12c50ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8f45619875a42b3d6228c7dcd17eac6cb736bbb514eb5061f2759dcd52c62862fd64b3fa67f998cf5ec04df45d6aafebcd5ceee"], 0xd2) [ 2963.817393][ T7196] binder: 7194:7196 ioctl c0306201 20000340 returned -14 00:15:59 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x800000000000000, 0x0, 0x0}) 00:15:59 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0xb00000000000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:59 executing program 1: ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f00000000c0)={0xb, {0x4, 0xdbec, 0x92, 0x4}, {0x0, 0x2, 0x38, 0x20}, {0x14e24bda, 0xc49c}}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$tun(r0, &(0x7f0000000000)={@void, @void, @mpls={[{0x2, 0x0, 0x1}, {0x4, 0x0, 0x1}], @generic="9dd7dcb7b930b0e9018218889f5f144babf1ac5e871f9bd4d9af8922639a3ca374391ecb1e0e01a61b45c7d63147967b12c12290cabb02ff965c19015515cf13350648741b3e5eac1e03df8e70ed8b503bce4d1e724ab1f188ef574f7a1243"}}, 0x67) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:15:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 00:15:59 executing program 1: ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f00000000c0)={0xb, {0x4, 0xdbec, 0x92, 0x4}, {0x0, 0x2, 0x38, 0x20}, {0x14e24bda, 0xc49c}}) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$tun(r0, &(0x7f0000000000)={@void, @void, @mpls={[{0x2, 0x0, 0x1}, {0x4, 0x0, 0x1}], @generic="9dd7dcb7b930b0e9018218889f5f144babf1ac5e871f9bd4d9af8922639a3ca374391ecb1e0e01a61b45c7d63147967b12c12290cabb02ff965c19015515cf13350648741b3e5eac1e03df8e70ed8b503bce4d1e724ab1f188ef574f7a1243"}}, 0x67) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') [ 2963.958673][ T7210] binder: 7205:7210 ioctl c0306201 20000340 returned -14 00:15:59 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0xc00000000000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:15:59 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x900000000000000, 0x0, 0x0}) 00:16:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x19) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) 00:16:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c006145a6a46437e9b1a442b7f0bea6141189bf", @ANYRES16=r1, @ANYBLOB="020025bd7000fcdbdf2508000000080006002f000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044085) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'wg0\x00', 0x100}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt_cache\x00') sendmmsg(r2, &(0x7f00000059c0)=[{{&(0x7f00000002c0)=@isdn={0x22, 0x6, 0x1b, 0x0, 0xfd}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000680)="a09c5218a0a48753e558da781869f6125ebf2823688d8c4619e60bd0df975d08940162f8d47267c1b393deddaadf2d43d7f52332ce31b518dcec7bcf55b311be1c9fc44e93855acd8be7ccc9ef5fd7763786bcdab136b7ac92a736d26d12723bef04dc902d2249798877a0b1c9c07245b80896d0f17dd3ddfaa40728ab29f0d999a773558ab18a4ef7a35b547b325184fdf586cd39d0bd063fe311", 0x9b}, {&(0x7f0000000340)="0f13132c3a8ba26162e717c8a3dd2187c4bf8daa6503c99848e390432ca398e23d5047e97811c9a056e6221c7ed4d25b2e8f4f6de93e4d85d476c1fda6fbc846e91b5e8fc7632de47eb811074d6b60945652", 0x52}, {&(0x7f0000000740)="1faea7277c33a06568caf7239bad2b81c2ca5541e620da1e91ce238f74bfd4e056df32cb1b1c05d9646902c480fd864d6b4d34b9809677037f8a4f18ec9bfcba3e142a2dace447fbdfda60040f8677b565f6bdf25f599666a448218434086a27bc42ce7aeb534fa40cb1b817f62d923380339000153753fdab0487abe8cc26a19c47ee4fe03c57816f7805db353cc8ce77d4333de053147b229604aa85ce6fd06e84e36c3eb0cbdb62d64905f14286d103e880503987dd4e789ca6df604e746b03ccb43fd72fada970f89f10d1f6f41fa6efae17a8bd175836344ce955c695e552d8a75f9488ed56c0d098f5093a", 0xee}, {&(0x7f0000000840)="4ea2cbb0067c00ac1ccb998ca57067c672f397b8006f65fe5c30a509b980a819749cbc31da63405c1ef595353371cedc29c05afe8c45c87fd713e3df9ddcd10ffd", 0x41}, {&(0x7f0000000100)="05cd", 0x2}, {&(0x7f00000008c0)="59c16a940e100c5852a6aa23560a0872f7abd5c3f8d17f85fc246d9c", 0x1c}], 0x6, &(0x7f0000000980)=[{0x38, 0x84, 0x9d, "673a0ab7e1bc25d05b82c861c92160432ec8bc76a7cb75b655b59c0ebfd719fc4324dd42"}, {0x48, 0x118, 0xf1b2, "2b4fa549b22b60fb9ca98a4b1acdcfe4d1d5a8c2c72492bd63f3dfb0f8257c94cac2aebf3c77ff61833aa02ce3e0bdafbc8b0ee2"}, {0x60, 0x110, 0x0, "d05f73306ae4c9d98cc41124c28b114dc43f045f252583fd39eb6f0362f55638e341d1f2221cf3fec037e8120ba80a94183ab4fe2bdeacb9e0fb0927d4daae80a34d868621f033b41e8371b1bd80"}, {0x98, 0x8c, 0x19, "1b1e94d1fb5800acc8726105751ff95c723df0d60ab8b270c16a9cc94a0ff3b2188027ad78580e016672ad2f85cbe918bc2f081f4dc40b42f9092d46567bf9b1b162fa2ce53d651d9231bf3b27c8fc03c003d1c7406d9100c2af2c5b4d2c3ca46d33a13c5b944a6efa0f8c53b5cf2ae0c6f15a9be9a4b034742df25adccb314c4e00326eca04"}, {0x28, 0x10b, 0x6f6, "3ab66436de68b44337f7aef406c74b8775f56a1f"}, {0x18, 0x104, 0x3, "994462"}, {0x108, 0x6, 0x6, "f2cda86f526fa0a5211346181bf8135f7ad0c41f6962452fe8e391d65bdd8c2d2024e3c7be67ab0a5c2a14452696f2e627d4c5731fc9653d64cd3d3b2529b10c7204fe5a40db152f6a71caea33d10fdd9cfcc76ac1608201d50058e53dfb911a906122e431888e0b28176f1e9b42d2038f9bcb8c1ce4de53bc4e5e85674264b83cb8f4e6f0621ed909d3c2d01d1126f358cbc0aee7922fea0b0f38ae8b80a5bcd60c101955777263c39b0834a6d83011250e24f22fc5a9f792f32406f8aa114cc98f93a358fdcc0e0ceb3e2b0eaf7fad26b414b0ca53ce0e32108600ed4e505c4384478e54eb54b2a85bbcaa15d477e1dd127dd6"}, {0xd0, 0x110, 0xfffffff9, "ca818d44ad24907c70ae0b9abc7ecbd2ce87b0319b4e0367c622b5de09c7da348b5edb53ffbf964526ec989f1ce53dacf15825bd08dcec2ffadabb9d44b00b5fcc73ece5e936abdab202a4d19d604bacaf465e7302bd35314d13ac43bd0c4fc40e9ed3e5d976696b171a0fb557111ba74afb8b6a4ab90c370faf759ef53f8b758722130c7c4a9c31525ac3289ee1ae208365be51716797df39e4236f9dd6c044747973ea5480e2ea2f96d3819ab400a09f18494a00ef602f24d48406a4fe"}, {0x110, 0x115, 0xffffffff, "f965d1357d75fa6586bf9bc3a6c1d75105f46c72642a785ed8170fdcaf91342bc442463c15174c5f038818569458e5b26a0ae8066300b4864a461e1255cbc3d7806288e23391e8ab487e9e490d342ca422388c165b96041ad6b163091907b090acfb61e36cc70336df70673a76fb7c04554ce353dceca0f81f71447ed2564ecb199316504f2cf1747686294bda8a017bea7bdaa80a409f7ceecdc6715edb52615ac55eb51fae3fde63f34f3cbb9953faace610359d49c86fde5329b164169439c3bbc48b31729d5be8862c46afda962097ff4ec792ba93876319914c7cc74aabae0da26fe59ee17041ddabb503e3c030efb9be95461b30003b"}], 0x4a0}}, {{&(0x7f0000000e40)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0xfffc, 0x1, 0x3, 0x2, {0xa, 0x4e24, 0x4f7b, @mcast1, 0x1}}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000ec0)="58701dde90c8f81c81ba9fb1c1367525c2aa3d76e3bc4d5eb6fb875b33f37f5b783eebd79b151c4117e34d463b9608bdb82e867bb7d72839c017ade9b033c80a887e6ec5538e28a3d8c00061b7cbbec9b375f56b7bf63bdca2c7a811d70f1aae7eb824aab9c74a380c15a7f9a57ad8c74fae891cc9d924fe083f638c39eaaa0d1b3263b3e582e286eb9ac8cb4de18fa1ee2ce72f15e15ff04fd7086bcfebfde58a41d1bdd72062dd3af1355f9a734100f1fb65d6c67ec9daf7ee6c19f233f43cb4561b5315201afed0e546cada3d9116bc6b85e688c18e1bcdd938e22d5d581789cb0c144660d1569d2ff65f7b34", 0xee}, {&(0x7f0000000fc0)="04cad447de1a64ee1bb1acd2c20dd1f62e7307e08c3b3070c5ff28cd6681e937a2710c3ebfeccca1885f9da2a85a386350f6dd1e017447571bccbcd9a8eee4e138daaf7d5ded6d460c4fbfab660f6695d03d632b480b53fe025de9fec77f280e1097c55aab73da0de2a906c4b87f4514", 0x70}, {&(0x7f0000002640)="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", 0x1000}, {&(0x7f0000001040)="54bc420325ba64bc859808ac38162ef12cdafa6a31e7e7c95d4d219d89232115ff308f27e38b0a90e5e042cf28", 0x2d}, {&(0x7f0000001080)="475d796b3ff08919a87a4371a2dc894ca703252c2bc86044841997cb0d3ff18e1e4d88d1171d1b26bdc632f9b40cd8e920d8b7bf0a192fa79a4f5a7c6c7fd36e4b90df5b1e8f9126ca8cce97c915ca2f95ba612e914a3e03c823b873425602f78db91137dbc1549690fb5dfde1343d25e65727bcc7871f35daf8ca331d59c0c1192e049a4a411a33c93ceb64e59a55012a", 0x91}], 0x5}}, {{&(0x7f00000011c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4}, 0x80, &(0x7f0000001540)=[{&(0x7f0000003640)="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", 0x1000}, {&(0x7f0000004640)="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", 0x1000}, {&(0x7f0000001240)="57eb7c808734286c0526757808dcc5ef18863263afe1188ddb06c99c945dce38660a9fc89ac180c885098a9cb7e7e38c02e7a2695c5bb73c9c405624efb1fb10bd757f56809e2a79315596d52cf89610fd7336e2e2e26476953bc1286be26aea9abfa0cb2e9761eca9811dd519e0cee99424ea2971cde3c049de21f4c2b150dfeb7e324e73d695b640566bb7b6", 0x8d}, {&(0x7f0000001300)="cfc41dbfa4e6e61ca04fc265ba19b32bc7fc30fbe92d3ab06ddf65592c13715a72b8918b3dca9f991ec6c0209aa3de8932f5f5911b", 0x35}, {&(0x7f0000001340)="ca73ac3da0e4e19a7506209642c56c28b51b90e35d50781c8b15efcbede6c8318d7e0eb580a3095150a04c989bde890dbf4d873bedfd485bbf952e4fd599540bb6183b9fe6dc86f89b4764d380c7261e3b753f7c0ffe564a452c423889df64a13c33360785b608a5a719dbb35ca5d0a287", 0x71}, {&(0x7f00000013c0)="9db1a1a29d79ba46f43216d4628b53c99bd67ab34a4d37cc0fdf29cbbef13ba42ec3ea441553c82afcd963b2a5499aabfee3557c8453a6fbc7eedc497d2b38d9cf08bcb71c502df2a15193a13427ceacb17ba95d1caa21cee937b1a2e6c8b561460daf45059195a2ec2aa07ba6b1115a86fd1acdcde8c47f7b0895777884bfc6edca9b3426bafe1bbfc609af28bea2cde31b49341625c09f4ab70d87810595b834a61957b9e9ca4b7f3ed57dece23e73b8f55a80d31d5841fcf2cff8a56113775ad04a6953999eeeaa56e1e049796afd0aa4e143e6d96fb4739f6b4a160673ebe2718a61231b832317e0a7a189cebea5", 0xf0}], 0x6, &(0x7f0000005640)=[{0x68, 0x103, 0x4, "6f1b5b5c0dcbb32beaa9882ebee74dab2d9d752c649a6dbeb3bbf92e3b4b006c37da7506ed63d19ec7cebf01384b2ef234694480f3b303cb47b6780c14663eb86ee62e09cd1bbb87231c41bd48b7615207c7ef"}, {0x70, 0x111, 0x0, "8e30e18a4bbe5eac8c66d39b01a16c14b0e2f77c9de15adc1dadb83c73778551a136b668d97d3df1e8b48c6db3f217dcf43ef99659d8a6bcb32f5811e36fe8a387528d49b3657f34fa34b348743475df6d4dddedbc4b8445dc"}, {0xe0, 0x0, 0x9, "af47f88c6b20217d0418426f36a33dd70bba3f8bcc2abd22e425dcb94aef00a7099905a0e92d1439dc6a8a44911036bdc34413d0c40cff6844b2c6e883095cbd1ab11bf6ac07aa2077d9648bee02992362249bff665e1b5378834567b8cca79a33698a7374bf5902ec03909383460119a8d6c1518de5ff19039a4e86275686a431b17942d73ef82f0e80405770b6a371ef756be51173c3d563d679e68deb3eea46f864a1625633375a05aebc632df0bc3554e794d85fd6b40a68118195df6fd33220cca54421330081677051"}, {0x80, 0xff, 0x6, "6c0833687be1f326726a316f29e16273cf7f860385c07c44bb7a5cf664e0289217dfd4165d6b26815315934f0359348be279b1799699d2e00127de09cef6a639ee094183934b04ae1cc297d1a8092600507820ffe4a2c2f917be4ad77c20e91d443afa7bb4425118923c527b79ba"}, {0x110, 0x101, 0x626, "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"}], 0x348}}], 0x3, 0x0) preadv(r2, &(0x7f0000001500)=[{&(0x7f0000001600)=""/4099, 0x1003}], 0x1, 0x8f, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5e1d73b96f818e9268b8dc1c56ba4522946700fdb624e242a0bf41c4efc0a940ba7a2878cbd123494e88f8f43af59186c4bd40e8c9b81fb75aadc459dfc95d8bc15675311a997690369dc0b6c02d96c3ce09cec63b1bc3f70fc5e10341c00d751ad61b6e598194f5d528fa2e58bbb461d4370782cdd29fbe89dc7d1b477f7c819d6a66def28c513a613ec84012de744796e1cc1a7e880d36667441ebe47f5fda87150a91b40718754dfbd9c7ddbe3da2ca3941fbc59adbab1a4257105546dc90bb0205210253a28911d7fe0ec5b339475d5db0f1d011b3661c8a2b55ed15095e30a0f7b62b9e1298c3a3", @ANYRES16=r3, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) [ 2964.086255][ T7221] binder: BINDER_SET_CONTEXT_MGR already set [ 2964.104464][ T7221] binder: 7219:7221 ioctl 4018620d 20000040 returned -16 00:16:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 00:16:00 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0xd00000000000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2964.141923][ T7225] binder: 7219:7225 ioctl c0306201 20000340 returned -14 00:16:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c006145a6a46437e9b1a442b7f0bea6141189bf", @ANYRES16=r1, @ANYBLOB="020025bd7000fcdbdf2508000000080006002f000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044085) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'wg0\x00', 0x100}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt_cache\x00') sendmmsg(r2, &(0x7f00000059c0)=[{{&(0x7f00000002c0)=@isdn={0x22, 0x6, 0x1b, 0x0, 0xfd}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000680)="a09c5218a0a48753e558da781869f6125ebf2823688d8c4619e60bd0df975d08940162f8d47267c1b393deddaadf2d43d7f52332ce31b518dcec7bcf55b311be1c9fc44e93855acd8be7ccc9ef5fd7763786bcdab136b7ac92a736d26d12723bef04dc902d2249798877a0b1c9c07245b80896d0f17dd3ddfaa40728ab29f0d999a773558ab18a4ef7a35b547b325184fdf586cd39d0bd063fe311", 0x9b}, {&(0x7f0000000340)="0f13132c3a8ba26162e717c8a3dd2187c4bf8daa6503c99848e390432ca398e23d5047e97811c9a056e6221c7ed4d25b2e8f4f6de93e4d85d476c1fda6fbc846e91b5e8fc7632de47eb811074d6b60945652", 0x52}, {&(0x7f0000000740)="1faea7277c33a06568caf7239bad2b81c2ca5541e620da1e91ce238f74bfd4e056df32cb1b1c05d9646902c480fd864d6b4d34b9809677037f8a4f18ec9bfcba3e142a2dace447fbdfda60040f8677b565f6bdf25f599666a448218434086a27bc42ce7aeb534fa40cb1b817f62d923380339000153753fdab0487abe8cc26a19c47ee4fe03c57816f7805db353cc8ce77d4333de053147b229604aa85ce6fd06e84e36c3eb0cbdb62d64905f14286d103e880503987dd4e789ca6df604e746b03ccb43fd72fada970f89f10d1f6f41fa6efae17a8bd175836344ce955c695e552d8a75f9488ed56c0d098f5093a", 0xee}, {&(0x7f0000000840)="4ea2cbb0067c00ac1ccb998ca57067c672f397b8006f65fe5c30a509b980a819749cbc31da63405c1ef595353371cedc29c05afe8c45c87fd713e3df9ddcd10ffd", 0x41}, {&(0x7f0000000100)="05cd", 0x2}, {&(0x7f00000008c0)="59c16a940e100c5852a6aa23560a0872f7abd5c3f8d17f85fc246d9c", 0x1c}], 0x6, &(0x7f0000000980)=[{0x38, 0x84, 0x9d, "673a0ab7e1bc25d05b82c861c92160432ec8bc76a7cb75b655b59c0ebfd719fc4324dd42"}, {0x48, 0x118, 0xf1b2, "2b4fa549b22b60fb9ca98a4b1acdcfe4d1d5a8c2c72492bd63f3dfb0f8257c94cac2aebf3c77ff61833aa02ce3e0bdafbc8b0ee2"}, {0x60, 0x110, 0x0, "d05f73306ae4c9d98cc41124c28b114dc43f045f252583fd39eb6f0362f55638e341d1f2221cf3fec037e8120ba80a94183ab4fe2bdeacb9e0fb0927d4daae80a34d868621f033b41e8371b1bd80"}, {0x98, 0x8c, 0x19, "1b1e94d1fb5800acc8726105751ff95c723df0d60ab8b270c16a9cc94a0ff3b2188027ad78580e016672ad2f85cbe918bc2f081f4dc40b42f9092d46567bf9b1b162fa2ce53d651d9231bf3b27c8fc03c003d1c7406d9100c2af2c5b4d2c3ca46d33a13c5b944a6efa0f8c53b5cf2ae0c6f15a9be9a4b034742df25adccb314c4e00326eca04"}, {0x28, 0x10b, 0x6f6, "3ab66436de68b44337f7aef406c74b8775f56a1f"}, {0x18, 0x104, 0x3, "994462"}, {0x108, 0x6, 0x6, "f2cda86f526fa0a5211346181bf8135f7ad0c41f6962452fe8e391d65bdd8c2d2024e3c7be67ab0a5c2a14452696f2e627d4c5731fc9653d64cd3d3b2529b10c7204fe5a40db152f6a71caea33d10fdd9cfcc76ac1608201d50058e53dfb911a906122e431888e0b28176f1e9b42d2038f9bcb8c1ce4de53bc4e5e85674264b83cb8f4e6f0621ed909d3c2d01d1126f358cbc0aee7922fea0b0f38ae8b80a5bcd60c101955777263c39b0834a6d83011250e24f22fc5a9f792f32406f8aa114cc98f93a358fdcc0e0ceb3e2b0eaf7fad26b414b0ca53ce0e32108600ed4e505c4384478e54eb54b2a85bbcaa15d477e1dd127dd6"}, {0xd0, 0x110, 0xfffffff9, "ca818d44ad24907c70ae0b9abc7ecbd2ce87b0319b4e0367c622b5de09c7da348b5edb53ffbf964526ec989f1ce53dacf15825bd08dcec2ffadabb9d44b00b5fcc73ece5e936abdab202a4d19d604bacaf465e7302bd35314d13ac43bd0c4fc40e9ed3e5d976696b171a0fb557111ba74afb8b6a4ab90c370faf759ef53f8b758722130c7c4a9c31525ac3289ee1ae208365be51716797df39e4236f9dd6c044747973ea5480e2ea2f96d3819ab400a09f18494a00ef602f24d48406a4fe"}, {0x110, 0x115, 0xffffffff, "f965d1357d75fa6586bf9bc3a6c1d75105f46c72642a785ed8170fdcaf91342bc442463c15174c5f038818569458e5b26a0ae8066300b4864a461e1255cbc3d7806288e23391e8ab487e9e490d342ca422388c165b96041ad6b163091907b090acfb61e36cc70336df70673a76fb7c04554ce353dceca0f81f71447ed2564ecb199316504f2cf1747686294bda8a017bea7bdaa80a409f7ceecdc6715edb52615ac55eb51fae3fde63f34f3cbb9953faace610359d49c86fde5329b164169439c3bbc48b31729d5be8862c46afda962097ff4ec792ba93876319914c7cc74aabae0da26fe59ee17041ddabb503e3c030efb9be95461b30003b"}], 0x4a0}}, {{&(0x7f0000000e40)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0xfffc, 0x1, 0x3, 0x2, {0xa, 0x4e24, 0x4f7b, @mcast1, 0x1}}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000ec0)="58701dde90c8f81c81ba9fb1c1367525c2aa3d76e3bc4d5eb6fb875b33f37f5b783eebd79b151c4117e34d463b9608bdb82e867bb7d72839c017ade9b033c80a887e6ec5538e28a3d8c00061b7cbbec9b375f56b7bf63bdca2c7a811d70f1aae7eb824aab9c74a380c15a7f9a57ad8c74fae891cc9d924fe083f638c39eaaa0d1b3263b3e582e286eb9ac8cb4de18fa1ee2ce72f15e15ff04fd7086bcfebfde58a41d1bdd72062dd3af1355f9a734100f1fb65d6c67ec9daf7ee6c19f233f43cb4561b5315201afed0e546cada3d9116bc6b85e688c18e1bcdd938e22d5d581789cb0c144660d1569d2ff65f7b34", 0xee}, {&(0x7f0000000fc0)="04cad447de1a64ee1bb1acd2c20dd1f62e7307e08c3b3070c5ff28cd6681e937a2710c3ebfeccca1885f9da2a85a386350f6dd1e017447571bccbcd9a8eee4e138daaf7d5ded6d460c4fbfab660f6695d03d632b480b53fe025de9fec77f280e1097c55aab73da0de2a906c4b87f4514", 0x70}, {&(0x7f0000002640)="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", 0x1000}, {&(0x7f0000001040)="54bc420325ba64bc859808ac38162ef12cdafa6a31e7e7c95d4d219d89232115ff308f27e38b0a90e5e042cf28", 0x2d}, {&(0x7f0000001080)="475d796b3ff08919a87a4371a2dc894ca703252c2bc86044841997cb0d3ff18e1e4d88d1171d1b26bdc632f9b40cd8e920d8b7bf0a192fa79a4f5a7c6c7fd36e4b90df5b1e8f9126ca8cce97c915ca2f95ba612e914a3e03c823b873425602f78db91137dbc1549690fb5dfde1343d25e65727bcc7871f35daf8ca331d59c0c1192e049a4a411a33c93ceb64e59a55012a", 0x91}], 0x5}}, {{&(0x7f00000011c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4}, 0x80, &(0x7f0000001540)=[{&(0x7f0000003640)="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", 0x1000}, {&(0x7f0000004640)="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", 0x1000}, {&(0x7f0000001240)="57eb7c808734286c0526757808dcc5ef18863263afe1188ddb06c99c945dce38660a9fc89ac180c885098a9cb7e7e38c02e7a2695c5bb73c9c405624efb1fb10bd757f56809e2a79315596d52cf89610fd7336e2e2e26476953bc1286be26aea9abfa0cb2e9761eca9811dd519e0cee99424ea2971cde3c049de21f4c2b150dfeb7e324e73d695b640566bb7b6", 0x8d}, {&(0x7f0000001300)="cfc41dbfa4e6e61ca04fc265ba19b32bc7fc30fbe92d3ab06ddf65592c13715a72b8918b3dca9f991ec6c0209aa3de8932f5f5911b", 0x35}, {&(0x7f0000001340)="ca73ac3da0e4e19a7506209642c56c28b51b90e35d50781c8b15efcbede6c8318d7e0eb580a3095150a04c989bde890dbf4d873bedfd485bbf952e4fd599540bb6183b9fe6dc86f89b4764d380c7261e3b753f7c0ffe564a452c423889df64a13c33360785b608a5a719dbb35ca5d0a287", 0x71}, {&(0x7f00000013c0)="9db1a1a29d79ba46f43216d4628b53c99bd67ab34a4d37cc0fdf29cbbef13ba42ec3ea441553c82afcd963b2a5499aabfee3557c8453a6fbc7eedc497d2b38d9cf08bcb71c502df2a15193a13427ceacb17ba95d1caa21cee937b1a2e6c8b561460daf45059195a2ec2aa07ba6b1115a86fd1acdcde8c47f7b0895777884bfc6edca9b3426bafe1bbfc609af28bea2cde31b49341625c09f4ab70d87810595b834a61957b9e9ca4b7f3ed57dece23e73b8f55a80d31d5841fcf2cff8a56113775ad04a6953999eeeaa56e1e049796afd0aa4e143e6d96fb4739f6b4a160673ebe2718a61231b832317e0a7a189cebea5", 0xf0}], 0x6, &(0x7f0000005640)=[{0x68, 0x103, 0x4, "6f1b5b5c0dcbb32beaa9882ebee74dab2d9d752c649a6dbeb3bbf92e3b4b006c37da7506ed63d19ec7cebf01384b2ef234694480f3b303cb47b6780c14663eb86ee62e09cd1bbb87231c41bd48b7615207c7ef"}, {0x70, 0x111, 0x0, "8e30e18a4bbe5eac8c66d39b01a16c14b0e2f77c9de15adc1dadb83c73778551a136b668d97d3df1e8b48c6db3f217dcf43ef99659d8a6bcb32f5811e36fe8a387528d49b3657f34fa34b348743475df6d4dddedbc4b8445dc"}, {0xe0, 0x0, 0x9, "af47f88c6b20217d0418426f36a33dd70bba3f8bcc2abd22e425dcb94aef00a7099905a0e92d1439dc6a8a44911036bdc34413d0c40cff6844b2c6e883095cbd1ab11bf6ac07aa2077d9648bee02992362249bff665e1b5378834567b8cca79a33698a7374bf5902ec03909383460119a8d6c1518de5ff19039a4e86275686a431b17942d73ef82f0e80405770b6a371ef756be51173c3d563d679e68deb3eea46f864a1625633375a05aebc632df0bc3554e794d85fd6b40a68118195df6fd33220cca54421330081677051"}, {0x80, 0xff, 0x6, "6c0833687be1f326726a316f29e16273cf7f860385c07c44bb7a5cf664e0289217dfd4165d6b26815315934f0359348be279b1799699d2e00127de09cef6a639ee094183934b04ae1cc297d1a8092600507820ffe4a2c2f917be4ad77c20e91d443afa7bb4425118923c527b79ba"}, {0x110, 0x101, 0x626, "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"}], 0x348}}], 0x3, 0x0) preadv(r2, &(0x7f0000001500)=[{&(0x7f0000001600)=""/4099, 0x1003}], 0x1, 0x8f, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5e1d73b96f818e9268b8dc1c56ba4522946700fdb624e242a0bf41c4efc0a940ba7a2878cbd123494e88f8f43af59186c4bd40e8c9b81fb75aadc459dfc95d8bc15675311a997690369dc0b6c02d96c3ce09cec63b1bc3f70fc5e10341c00d751ad61b6e598194f5d528fa2e58bbb461d4370782cdd29fbe89dc7d1b477f7c819d6a66def28c513a613ec84012de744796e1cc1a7e880d36667441ebe47f5fda87150a91b40718754dfbd9c7ddbe3da2ca3941fbc59adbab1a4257105546dc90bb0205210253a28911d7fe0ec5b339475d5db0f1d011b3661c8a2b55ed15095e30a0f7b62b9e1298c3a3", @ANYRES16=r3, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c006145a6a46437e9b1a442b7f0bea6141189bf", @ANYRES16=r1, @ANYBLOB="020025bd7000fcdbdf2508000000080006002f000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044085) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'wg0\x00', 0x100}) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt_cache\x00') (async) sendmmsg(r2, &(0x7f00000059c0)=[{{&(0x7f00000002c0)=@isdn={0x22, 0x6, 0x1b, 0x0, 0xfd}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000680)="a09c5218a0a48753e558da781869f6125ebf2823688d8c4619e60bd0df975d08940162f8d47267c1b393deddaadf2d43d7f52332ce31b518dcec7bcf55b311be1c9fc44e93855acd8be7ccc9ef5fd7763786bcdab136b7ac92a736d26d12723bef04dc902d2249798877a0b1c9c07245b80896d0f17dd3ddfaa40728ab29f0d999a773558ab18a4ef7a35b547b325184fdf586cd39d0bd063fe311", 0x9b}, {&(0x7f0000000340)="0f13132c3a8ba26162e717c8a3dd2187c4bf8daa6503c99848e390432ca398e23d5047e97811c9a056e6221c7ed4d25b2e8f4f6de93e4d85d476c1fda6fbc846e91b5e8fc7632de47eb811074d6b60945652", 0x52}, {&(0x7f0000000740)="1faea7277c33a06568caf7239bad2b81c2ca5541e620da1e91ce238f74bfd4e056df32cb1b1c05d9646902c480fd864d6b4d34b9809677037f8a4f18ec9bfcba3e142a2dace447fbdfda60040f8677b565f6bdf25f599666a448218434086a27bc42ce7aeb534fa40cb1b817f62d923380339000153753fdab0487abe8cc26a19c47ee4fe03c57816f7805db353cc8ce77d4333de053147b229604aa85ce6fd06e84e36c3eb0cbdb62d64905f14286d103e880503987dd4e789ca6df604e746b03ccb43fd72fada970f89f10d1f6f41fa6efae17a8bd175836344ce955c695e552d8a75f9488ed56c0d098f5093a", 0xee}, {&(0x7f0000000840)="4ea2cbb0067c00ac1ccb998ca57067c672f397b8006f65fe5c30a509b980a819749cbc31da63405c1ef595353371cedc29c05afe8c45c87fd713e3df9ddcd10ffd", 0x41}, {&(0x7f0000000100)="05cd", 0x2}, {&(0x7f00000008c0)="59c16a940e100c5852a6aa23560a0872f7abd5c3f8d17f85fc246d9c", 0x1c}], 0x6, &(0x7f0000000980)=[{0x38, 0x84, 0x9d, "673a0ab7e1bc25d05b82c861c92160432ec8bc76a7cb75b655b59c0ebfd719fc4324dd42"}, {0x48, 0x118, 0xf1b2, "2b4fa549b22b60fb9ca98a4b1acdcfe4d1d5a8c2c72492bd63f3dfb0f8257c94cac2aebf3c77ff61833aa02ce3e0bdafbc8b0ee2"}, {0x60, 0x110, 0x0, "d05f73306ae4c9d98cc41124c28b114dc43f045f252583fd39eb6f0362f55638e341d1f2221cf3fec037e8120ba80a94183ab4fe2bdeacb9e0fb0927d4daae80a34d868621f033b41e8371b1bd80"}, {0x98, 0x8c, 0x19, "1b1e94d1fb5800acc8726105751ff95c723df0d60ab8b270c16a9cc94a0ff3b2188027ad78580e016672ad2f85cbe918bc2f081f4dc40b42f9092d46567bf9b1b162fa2ce53d651d9231bf3b27c8fc03c003d1c7406d9100c2af2c5b4d2c3ca46d33a13c5b944a6efa0f8c53b5cf2ae0c6f15a9be9a4b034742df25adccb314c4e00326eca04"}, {0x28, 0x10b, 0x6f6, "3ab66436de68b44337f7aef406c74b8775f56a1f"}, {0x18, 0x104, 0x3, "994462"}, {0x108, 0x6, 0x6, "f2cda86f526fa0a5211346181bf8135f7ad0c41f6962452fe8e391d65bdd8c2d2024e3c7be67ab0a5c2a14452696f2e627d4c5731fc9653d64cd3d3b2529b10c7204fe5a40db152f6a71caea33d10fdd9cfcc76ac1608201d50058e53dfb911a906122e431888e0b28176f1e9b42d2038f9bcb8c1ce4de53bc4e5e85674264b83cb8f4e6f0621ed909d3c2d01d1126f358cbc0aee7922fea0b0f38ae8b80a5bcd60c101955777263c39b0834a6d83011250e24f22fc5a9f792f32406f8aa114cc98f93a358fdcc0e0ceb3e2b0eaf7fad26b414b0ca53ce0e32108600ed4e505c4384478e54eb54b2a85bbcaa15d477e1dd127dd6"}, {0xd0, 0x110, 0xfffffff9, "ca818d44ad24907c70ae0b9abc7ecbd2ce87b0319b4e0367c622b5de09c7da348b5edb53ffbf964526ec989f1ce53dacf15825bd08dcec2ffadabb9d44b00b5fcc73ece5e936abdab202a4d19d604bacaf465e7302bd35314d13ac43bd0c4fc40e9ed3e5d976696b171a0fb557111ba74afb8b6a4ab90c370faf759ef53f8b758722130c7c4a9c31525ac3289ee1ae208365be51716797df39e4236f9dd6c044747973ea5480e2ea2f96d3819ab400a09f18494a00ef602f24d48406a4fe"}, {0x110, 0x115, 0xffffffff, "f965d1357d75fa6586bf9bc3a6c1d75105f46c72642a785ed8170fdcaf91342bc442463c15174c5f038818569458e5b26a0ae8066300b4864a461e1255cbc3d7806288e23391e8ab487e9e490d342ca422388c165b96041ad6b163091907b090acfb61e36cc70336df70673a76fb7c04554ce353dceca0f81f71447ed2564ecb199316504f2cf1747686294bda8a017bea7bdaa80a409f7ceecdc6715edb52615ac55eb51fae3fde63f34f3cbb9953faace610359d49c86fde5329b164169439c3bbc48b31729d5be8862c46afda962097ff4ec792ba93876319914c7cc74aabae0da26fe59ee17041ddabb503e3c030efb9be95461b30003b"}], 0x4a0}}, {{&(0x7f0000000e40)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0xfffc, 0x1, 0x3, 0x2, {0xa, 0x4e24, 0x4f7b, @mcast1, 0x1}}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000ec0)="58701dde90c8f81c81ba9fb1c1367525c2aa3d76e3bc4d5eb6fb875b33f37f5b783eebd79b151c4117e34d463b9608bdb82e867bb7d72839c017ade9b033c80a887e6ec5538e28a3d8c00061b7cbbec9b375f56b7bf63bdca2c7a811d70f1aae7eb824aab9c74a380c15a7f9a57ad8c74fae891cc9d924fe083f638c39eaaa0d1b3263b3e582e286eb9ac8cb4de18fa1ee2ce72f15e15ff04fd7086bcfebfde58a41d1bdd72062dd3af1355f9a734100f1fb65d6c67ec9daf7ee6c19f233f43cb4561b5315201afed0e546cada3d9116bc6b85e688c18e1bcdd938e22d5d581789cb0c144660d1569d2ff65f7b34", 0xee}, {&(0x7f0000000fc0)="04cad447de1a64ee1bb1acd2c20dd1f62e7307e08c3b3070c5ff28cd6681e937a2710c3ebfeccca1885f9da2a85a386350f6dd1e017447571bccbcd9a8eee4e138daaf7d5ded6d460c4fbfab660f6695d03d632b480b53fe025de9fec77f280e1097c55aab73da0de2a906c4b87f4514", 0x70}, {&(0x7f0000002640)="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", 0x1000}, {&(0x7f0000001040)="54bc420325ba64bc859808ac38162ef12cdafa6a31e7e7c95d4d219d89232115ff308f27e38b0a90e5e042cf28", 0x2d}, {&(0x7f0000001080)="475d796b3ff08919a87a4371a2dc894ca703252c2bc86044841997cb0d3ff18e1e4d88d1171d1b26bdc632f9b40cd8e920d8b7bf0a192fa79a4f5a7c6c7fd36e4b90df5b1e8f9126ca8cce97c915ca2f95ba612e914a3e03c823b873425602f78db91137dbc1549690fb5dfde1343d25e65727bcc7871f35daf8ca331d59c0c1192e049a4a411a33c93ceb64e59a55012a", 0x91}], 0x5}}, {{&(0x7f00000011c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4}, 0x80, &(0x7f0000001540)=[{&(0x7f0000003640)="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", 0x1000}, {&(0x7f0000004640)="7ec7665645f29615503f5515b34ec98ed96e9bd22d9899bb2ad0f96b40320528f5c135904a26d356720e9f5b4eb4a7aa177c9cead5a6b025ac719fd56a2c10cb06371a7c69d3aaeb55406c4381b97fc2e68a6ce8a2fc092a9ebc01a39599ad7e1691de188eec2cfb6309b141863a265a34d1502813ef55c445e2a8276156f0644bf52e6d2581693d440b256c46018bcfe9e61dcdf0c13340f7146c10adf35e1e3ce2b8781bd090f8a9f65e52be12706ff59d849cd924f5079bda10255d72121aaabeb3e00b981eb7bae7bfb1d583aace4a63ed8327c38f899b90c687d6aa85c35af80becf5f7c9dc457b96579f602e3aac197d9143176a5be2eb9f903fe83cc435b1a33ec1be86653f01213cd34f6b935260762097f4dccf4039bc2b17bf8299c90bd4f086f72f1531577938752d552176b8689e9683a50c30497711a1ae7d0a4acd4a4b45f536c3d4a68b4f65fd033b0edbab5c449fd5e49204aa0d21924a89394924cc12445b32d83524b851cbeebb8379830ca3fca1db26198808cb300a343e1cf8c4e7e71be3b680a4640a254a6abcc21364bcbc943d6df64d16351176838118de14a0795cc873ea6860cab6470164e045e255a010850a9afe610c68428da7c0b50f9a61d640267dc8e574f6b1a6de95937ccfadc8464db11a3bc4240cb0519a9c9e8181b8103b06e4e6320830d5e04955776471da8b7cd1ff422f381b64096e091e324016ebb2753f6fcf9451aa546db6e0b3b7a9f9c979e7bd26e8a2259e9e5fee417df02bcfdd0d958e52907ba354fa12755088fcd94aa64d57620b1dc66074130b55a8c7e9f515316b62a26130947bf883e59eebeeb71682fb73cc81037431f04edab42623e71a5d5beb2023f8d41b5264ab008603d2a065eb56f3e37cb80acd33765214eac575d7bd72db22b0db07ce6a970dc85455550e911af050a2d73e7d3867a8ea7ed93aced0b5d35d0ded018111a9a4fa85748efefa78345d9243f8d3ce819c748ebbdb849b33c3775ff7e9c8ffef251b22cfa52a3c655bfc9c0d02b8fe39ea0c52721d613d50f4f5966e678d5fb4c1af25a71691da91276cb798c17048f46a8382da23bd55a0a711028e0ae2432848b1c6c39a9de2e2aefb69084dc178d16e64e0892bbc41d1b7ec888b2186b1d1068cbb9564e43f1416ea74ae41ef093e2ccd7870a146ad859cb83644f2b82b76b18bb388865419a727d813d3d33db70a4adeec10f3ead167061fe27a95c8e52baaf55fdf12311ddd85e92eccc4a24993c131dd7c0a169340786a9be556a051d982835d61d717863a7c25effa264cc4a05be16edfa4bb0c9456ff2b4d33831d0e4b3aee29e65c601a3e0ca632ba13c66ddb7d30aa2ddfc9e833b7d7164f9cd0705dc28d17c4a6b5a667019357bbd0b01bd2db9bc633b04f86cf17bfb072bf75937758039f895372b4d3750e75830807bc7d359a8e08e14821938c4dfd7b17115979741d803b3026972e4ed2b79ea44419686f2f8ea90f9393888d91fc841c6e4018bb15fbc5efe14d8108862529a30769e241939f7c97ed6fe9f634c926a561e3caa89f77b3d17ec9eaa626406325f941626300f3f756e96a527b45c9b386f560031458d3cd1ad2738ca4bd4268d645d65679d26d75a083ae59283e29de3af2d2909b7b84c962789f5e3fca10f962f6f9a06c787392427a289cacba6bf3aa31628b4a998461a02ed8165a745d3e815dd2346f2109874247803e36e0c1841fbec6f3df4fd00f1836bdcbb070e2e483122384478803ee821990c817dc9b262568bde32731f1d5c4cb40d772eefe2daa261d7df5323d6e5a084511e1630ff694b2abb703aa288c02597c7f26cf45d14999adcd082ff905d763e90e8d45bb809d9469358a3fd4b8e574ee90259b94b58356594c6a2e325c0240d5431877eeb38958c91907e9a931562814dca18ef63a6f99cb674c82c335087125dbed343022a74d42f328269b90d9389866bb84938a2c5863c4e39d83900fec89601530dec819a84c63110e3652b4b59a99cdd67f18e8781fa0090b1dcb77e815579584bdc924d9a78454f4ffc8aceaa101af808ea9aab47c41785a8d6f330835f7f9d4092623ad07c7944f333aa420cc6a6c03a564ceb380f7d15b59e7a259ae286795c783355c95a7e2a95f1a74bc96b6b81202e7eac6c49f5106d6ade259213f03bf21814bb971576c1f1999ce744652b7131d22bc018e28e7aed70855ea8c34573c1fe2a1baf7705a1ff4a0ba7ecaeaa2e4018c31b86745d1517284086c44064fd50d532b16cdb24f0ab886ceb6134a528dfaf7ba46d5ffb395f18b7978bca1299e090d4cc8134085cdbef35c9f9f74aea5d3d566c1b5b122b6cfaa236dc126f8b808b0f96c701fdade6273715d6e92e73b5a81d0838a8df6b18bcd3f249f90cd97fd2579cb42c83f80beee4941d2bb7dd6e7e2c2663b0b8547ec55b2173c1d477934159e0bb790994c28a741a794dab43b3de06cf903809a02c4d4be5379f4a895e2df56a1441b735625bb6041b8edf2788e29792efd011f553ba1959d5943712405ad184c520f38d66776dcba6f7cb461fda3de1deee07975a65be04fb27d3379983ce183f56d78b8bdf03f13b63da43920a2f4c53e3ff95e0e76ba4b47e2c73d0b27f5ef9c8e76c327374f4843b6f44d03b8794894c3e48d78128e14c7f4ae61848fa965fed9a9dc22f3e4f5f7e2706f6f53a7fa951b6f7ed2965645ae2cb96a267069d0f640f0f66fb41f12fde6c28c6e8c0653b9da4e0d3b64b346a18609d6eee4da999c9277a0e2e1f65400401fc3d16cbf45338f4b03b6c65f6f1dc0f0aef88f2f0459633120d7c58d4b7df8a1da03606d01d09b2d1cdc3794cb07aa0a93045788b85d158fd154788958ec46cb28aeca5876414d2690219da375994d71b041b30321b351f51e1ee88c369f09c3ffcdb062948dcb69c5459a7e11b26951bd872150e6e4832facaf4a7bacba1f81d8dd67ef617bc6c9d1a0604aed3b1ed26bbc56ff8a6c20e8597983335002fff4ca24f5edb98eed944d7009907188477616ce4e71eba000e2fd264787d5667f08cc844190378ee68781e578de712a4e1e9051110d9e6af03b641f8d1521305011baf75729d016c892637b772164184cbbcfe099a2d30509e506930a1bc791f31303cda82aaf985028682b5b5ab2f52adf29d11d34d285b85c09f61266ffe3cb65c3835f50e5b67b1900cbfb334e7175b1aa8bfdccdd21aa7a90904d94025eefe56415d4da134553c61b9f949c29e8badec94d28969a3e81cee47e6bde76311723599204193e2c3899e174d0ffc854e782f8156bbb19252717926d874113eb66a58e9df31b54677f85f4806d9ef5a163b563b83408347cef1dee8d00a202db2e9661953685fd8b8b7624fa0e208c937423fa773d4240c8c6c4fcc44cc400ed3ca873baad6b5fcc1975885907973a5299f8a10865c486a5069e4571248b95aece873f3346d64cdd644e49dad9d95c03f78d1ce1ec46c55e8c8bb99acbc0651a0d9abf875ae23697e9965d18211ee2bb3f559793760e2889422d4a5c0f51519466994e7c7817caeef5372fa04d58142b9d368b34ed304725a77289b5eb0d303433022036915086b86fb7b5f44394368867c5d349ef6e77a6bcf3a8fc95e99d69077daf350c6dc92a898484abdedafc3622c51ce8c10972a15e5970a7011b7cc1f5c28658826d8bb45343f4c9015349bef5faa9e526ab7869f750da6c0ac68a3c6d8b642e11aa4a81a37f3e8b31753b504dded8159857384f81aa940c8745c0955774f1aad9d2cf0b328b0996435d766a3efa30950b9450e2fcc625d3d5b45159d472d508f8c7404c6ed83ea5bb12c7b3813a449532d0426dc6bdc7cc0d2adc5bf7c2b211cfa6d4b3f3dafcc32b3c49ac9024690df945833779e7bca4a0f68562c40bd9d823ae9d0e10c312c23a807b9fb3f6eb5f8a1682ba295956bdb56e88643d582de35ebd460fb70aed00d74f267df003e2b9d965568f9d754ac00f0a25299c6b927c739f07c8ce251e035748dfc749314fcd6adff38186937b9711ddbdc89ce5497c39a7c0edbb5f246cdb508df273a04d8325608e352fe3d3425e03b138a35a107dc039f1cb2f12ef6f0933ae441a36d98cc5ace9cb4f88fea96aa7a75274a770dd2ed68471e8631e650b5099a7184f895c65f3f7f623c4f891d85649dd0fcd9723b05ffbcf68f0469371ca55b40f372b0a112c442f6a5c653f47beeef54ae2cf7a1b305ccee4eab8d6ed9abe507ff139ef530f6e9b77ef9e48872c2a855504de167959119dad0241c33bda491f5a66143f9da953a3ad5535374ed02f4a27f32a3135d7f4e60972343096117180f2593a1929241cd39b71a5b8c13c693417af8b3c9c10fc4025fb8e6bdff2c6657e34fe088a9c2849f518812e55a8dd456197aec7e535cde9b9b533c8ef26095bfe281a36ad80cc675f441510790b85c1f593d6dfd4ab19fdece5d717d6958c18fd77a300eb37dfaebed80f8558a79db6c2c96ce6fa8ed67250d433dd8467dec918919032e6a178e2cb590b208088118f6a9ea80bc9f0a84a3a178efae422153fd8b8b2becf28c8f21f435d5159fc06c34073663cb45baee7aea8e896b4830e3bd422f768d2537fde7879f63f1bae3016c4719b13c2231ba1278185e1a6fe9669808599e9abc93c0d63d2d616788c341d92306e0d06ddf6c17becfbf1491583b0846b895c027845baa3d13f415b736d6842a46b09c0fed70fad9734d1f50ae8fa5881bd84821f477627e29f2e6264558b71570c22b728ab390d08dbbcafd148913c4cf738de67f0f7421073e936778a46b32c0b79f3f39084714d45ec5fa08875c4d84db0442a3bb77337a5e722fcbe28848ff4179ff200aed3dddc66cd376fe6e71196d6c6ee105c05cb6b45bb422f7baf610dc9d9a68f3442efc5e6700d7a8530b721cd6c5826d72d0e59edfd965ab89ae83673f7c0f4f8050fb26684084020f91aff2be89d26fe6fad52533e5cd682e345ff263f57c5684297de028fb55648654dcd0106b91a3e6520125e38efdba63718a84a49a699a4feaa6648e1cd414355be3a803a4b0c601ee12b43af370acd9254e6a48d5e4629a55ba82cdc19c3ed5a7c94bf192f9a4ffe4be0bcfd20903dfe379836de94bdf47869a6db09ab84aff18697aacc0acb598e423f298cde1b6f84667e2d10d24ef96a77400afba7f87da0ed46359d0fc62cf517060628c9d4a0255015e9c0416a60b202a384dae9613d5c82987fb4c83cf5c6550b310eab7dd07e95d87c0b94d7ca1239935a6bc49d2ea3ca97ba4aa60eef7957003ff2f5ce70190796f679855513bc05252f8289ae58303de821aad76fb2d014940a0e22be03ea6500fababf1076d3a38bd6bb1d25ee137377e6c8b73a90c24db85e8aa145c0e60e5997f2ae045555f41af7804d2eb35eead677721299b9e75bfbc044e89181b7bbfaefdbe932bb090778e0c6bd73def08abcb9f70d3dbfa29c9bc3da0c30875ef68f56e334d0c1d0842c86ba948a10c2982143001aa220c74f7f1e683dc816df60939d87c3cc47458a33893e108ea0db0dc380a5558df2cba9b99c7d68103a210cf70634751f74c32ae8fb1011c32d22e2d5970908b79243523005e92f74d39569a54fa75f0249fea112ba02573cb91c76ceb6e4fb8b19da8523c9d2f60b505aaf438aaeda2b7f3cbe435fe07b6b934866b7db20b43cc94a61ed482c41b233e824558814aa854290ad7a62427d08a614813cc7e8cb1b16423ee84618ea98d44f21", 0x1000}, {&(0x7f0000001240)="57eb7c808734286c0526757808dcc5ef18863263afe1188ddb06c99c945dce38660a9fc89ac180c885098a9cb7e7e38c02e7a2695c5bb73c9c405624efb1fb10bd757f56809e2a79315596d52cf89610fd7336e2e2e26476953bc1286be26aea9abfa0cb2e9761eca9811dd519e0cee99424ea2971cde3c049de21f4c2b150dfeb7e324e73d695b640566bb7b6", 0x8d}, {&(0x7f0000001300)="cfc41dbfa4e6e61ca04fc265ba19b32bc7fc30fbe92d3ab06ddf65592c13715a72b8918b3dca9f991ec6c0209aa3de8932f5f5911b", 0x35}, {&(0x7f0000001340)="ca73ac3da0e4e19a7506209642c56c28b51b90e35d50781c8b15efcbede6c8318d7e0eb580a3095150a04c989bde890dbf4d873bedfd485bbf952e4fd599540bb6183b9fe6dc86f89b4764d380c7261e3b753f7c0ffe564a452c423889df64a13c33360785b608a5a719dbb35ca5d0a287", 0x71}, {&(0x7f00000013c0)="9db1a1a29d79ba46f43216d4628b53c99bd67ab34a4d37cc0fdf29cbbef13ba42ec3ea441553c82afcd963b2a5499aabfee3557c8453a6fbc7eedc497d2b38d9cf08bcb71c502df2a15193a13427ceacb17ba95d1caa21cee937b1a2e6c8b561460daf45059195a2ec2aa07ba6b1115a86fd1acdcde8c47f7b0895777884bfc6edca9b3426bafe1bbfc609af28bea2cde31b49341625c09f4ab70d87810595b834a61957b9e9ca4b7f3ed57dece23e73b8f55a80d31d5841fcf2cff8a56113775ad04a6953999eeeaa56e1e049796afd0aa4e143e6d96fb4739f6b4a160673ebe2718a61231b832317e0a7a189cebea5", 0xf0}], 0x6, &(0x7f0000005640)=[{0x68, 0x103, 0x4, "6f1b5b5c0dcbb32beaa9882ebee74dab2d9d752c649a6dbeb3bbf92e3b4b006c37da7506ed63d19ec7cebf01384b2ef234694480f3b303cb47b6780c14663eb86ee62e09cd1bbb87231c41bd48b7615207c7ef"}, {0x70, 0x111, 0x0, "8e30e18a4bbe5eac8c66d39b01a16c14b0e2f77c9de15adc1dadb83c73778551a136b668d97d3df1e8b48c6db3f217dcf43ef99659d8a6bcb32f5811e36fe8a387528d49b3657f34fa34b348743475df6d4dddedbc4b8445dc"}, {0xe0, 0x0, 0x9, "af47f88c6b20217d0418426f36a33dd70bba3f8bcc2abd22e425dcb94aef00a7099905a0e92d1439dc6a8a44911036bdc34413d0c40cff6844b2c6e883095cbd1ab11bf6ac07aa2077d9648bee02992362249bff665e1b5378834567b8cca79a33698a7374bf5902ec03909383460119a8d6c1518de5ff19039a4e86275686a431b17942d73ef82f0e80405770b6a371ef756be51173c3d563d679e68deb3eea46f864a1625633375a05aebc632df0bc3554e794d85fd6b40a68118195df6fd33220cca54421330081677051"}, {0x80, 0xff, 0x6, "6c0833687be1f326726a316f29e16273cf7f860385c07c44bb7a5cf664e0289217dfd4165d6b26815315934f0359348be279b1799699d2e00127de09cef6a639ee094183934b04ae1cc297d1a8092600507820ffe4a2c2f917be4ad77c20e91d443afa7bb4425118923c527b79ba"}, {0x110, 0x101, 0x626, "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"}], 0x348}}], 0x3, 0x0) (async) preadv(r2, &(0x7f0000001500)=[{&(0x7f0000001600)=""/4099, 0x1003}], 0x1, 0x8f, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5e1d73b96f818e9268b8dc1c56ba4522946700fdb624e242a0bf41c4efc0a940ba7a2878cbd123494e88f8f43af59186c4bd40e8c9b81fb75aadc459dfc95d8bc15675311a997690369dc0b6c02d96c3ce09cec63b1bc3f70fc5e10341c00d751ad61b6e598194f5d528fa2e58bbb461d4370782cdd29fbe89dc7d1b477f7c819d6a66def28c513a613ec84012de744796e1cc1a7e880d36667441ebe47f5fda87150a91b40718754dfbd9c7ddbe3da2ca3941fbc59adbab1a4257105546dc90bb0205210253a28911d7fe0ec5b339475d5db0f1d011b3661c8a2b55ed15095e30a0f7b62b9e1298c3a3", @ANYRES16=r3, @ANYBLOB="040028bd7000ffdbdf2502000000180007800c000300ffffffff0000000008000200ffffff7f380004801300010062726f6164636173742d6c696e6b00001300010062726f6164636173742d6c696e6b00000900010073797a300000000014000180100001006574683a70696d7265673000a40004801300010062726f6164636173742d6c696e6b00000900010073797a30000000001300010062726f6164636173742d6c696e6b00002400078008000200000001000800010020000000080003000400000008000400ff0f00000900010073797a30000000000900010073797a30000000001300010062726f6164636173742d6c696e6b00001c000780080004002600000008000200090000000800030000180000"], 0x11c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) (async) 00:16:00 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0xa00000000000000, 0x0, 0x0}) [ 2964.281285][ T7233] binder: 7232:7233 ioctl c0306201 20000340 returned -14 00:16:00 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0xb00000000000000, 0x0, 0x0}) 00:16:00 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0xe00000000000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c006145a6a46437e9b1a442b7f0bea6141189bf", @ANYRES16=r1, @ANYBLOB="020025bd7000fcdbdf2508000000080006002f000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044085) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'wg0\x00', 0x100}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'wg0\x00', 0x100}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt_cache\x00') sendmmsg(r2, &(0x7f00000059c0)=[{{&(0x7f00000002c0)=@isdn={0x22, 0x6, 0x1b, 0x0, 0xfd}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000680)="a09c5218a0a48753e558da781869f6125ebf2823688d8c4619e60bd0df975d08940162f8d47267c1b393deddaadf2d43d7f52332ce31b518dcec7bcf55b311be1c9fc44e93855acd8be7ccc9ef5fd7763786bcdab136b7ac92a736d26d12723bef04dc902d2249798877a0b1c9c07245b80896d0f17dd3ddfaa40728ab29f0d999a773558ab18a4ef7a35b547b325184fdf586cd39d0bd063fe311", 0x9b}, {&(0x7f0000000340)="0f13132c3a8ba26162e717c8a3dd2187c4bf8daa6503c99848e390432ca398e23d5047e97811c9a056e6221c7ed4d25b2e8f4f6de93e4d85d476c1fda6fbc846e91b5e8fc7632de47eb811074d6b60945652", 0x52}, {&(0x7f0000000740)="1faea7277c33a06568caf7239bad2b81c2ca5541e620da1e91ce238f74bfd4e056df32cb1b1c05d9646902c480fd864d6b4d34b9809677037f8a4f18ec9bfcba3e142a2dace447fbdfda60040f8677b565f6bdf25f599666a448218434086a27bc42ce7aeb534fa40cb1b817f62d923380339000153753fdab0487abe8cc26a19c47ee4fe03c57816f7805db353cc8ce77d4333de053147b229604aa85ce6fd06e84e36c3eb0cbdb62d64905f14286d103e880503987dd4e789ca6df604e746b03ccb43fd72fada970f89f10d1f6f41fa6efae17a8bd175836344ce955c695e552d8a75f9488ed56c0d098f5093a", 0xee}, {&(0x7f0000000840)="4ea2cbb0067c00ac1ccb998ca57067c672f397b8006f65fe5c30a509b980a819749cbc31da63405c1ef595353371cedc29c05afe8c45c87fd713e3df9ddcd10ffd", 0x41}, {&(0x7f0000000100)="05cd", 0x2}, {&(0x7f00000008c0)="59c16a940e100c5852a6aa23560a0872f7abd5c3f8d17f85fc246d9c", 0x1c}], 0x6, &(0x7f0000000980)=[{0x38, 0x84, 0x9d, "673a0ab7e1bc25d05b82c861c92160432ec8bc76a7cb75b655b59c0ebfd719fc4324dd42"}, {0x48, 0x118, 0xf1b2, "2b4fa549b22b60fb9ca98a4b1acdcfe4d1d5a8c2c72492bd63f3dfb0f8257c94cac2aebf3c77ff61833aa02ce3e0bdafbc8b0ee2"}, {0x60, 0x110, 0x0, "d05f73306ae4c9d98cc41124c28b114dc43f045f252583fd39eb6f0362f55638e341d1f2221cf3fec037e8120ba80a94183ab4fe2bdeacb9e0fb0927d4daae80a34d868621f033b41e8371b1bd80"}, {0x98, 0x8c, 0x19, "1b1e94d1fb5800acc8726105751ff95c723df0d60ab8b270c16a9cc94a0ff3b2188027ad78580e016672ad2f85cbe918bc2f081f4dc40b42f9092d46567bf9b1b162fa2ce53d651d9231bf3b27c8fc03c003d1c7406d9100c2af2c5b4d2c3ca46d33a13c5b944a6efa0f8c53b5cf2ae0c6f15a9be9a4b034742df25adccb314c4e00326eca04"}, {0x28, 0x10b, 0x6f6, "3ab66436de68b44337f7aef406c74b8775f56a1f"}, {0x18, 0x104, 0x3, "994462"}, {0x108, 0x6, 0x6, "f2cda86f526fa0a5211346181bf8135f7ad0c41f6962452fe8e391d65bdd8c2d2024e3c7be67ab0a5c2a14452696f2e627d4c5731fc9653d64cd3d3b2529b10c7204fe5a40db152f6a71caea33d10fdd9cfcc76ac1608201d50058e53dfb911a906122e431888e0b28176f1e9b42d2038f9bcb8c1ce4de53bc4e5e85674264b83cb8f4e6f0621ed909d3c2d01d1126f358cbc0aee7922fea0b0f38ae8b80a5bcd60c101955777263c39b0834a6d83011250e24f22fc5a9f792f32406f8aa114cc98f93a358fdcc0e0ceb3e2b0eaf7fad26b414b0ca53ce0e32108600ed4e505c4384478e54eb54b2a85bbcaa15d477e1dd127dd6"}, {0xd0, 0x110, 0xfffffff9, "ca818d44ad24907c70ae0b9abc7ecbd2ce87b0319b4e0367c622b5de09c7da348b5edb53ffbf964526ec989f1ce53dacf15825bd08dcec2ffadabb9d44b00b5fcc73ece5e936abdab202a4d19d604bacaf465e7302bd35314d13ac43bd0c4fc40e9ed3e5d976696b171a0fb557111ba74afb8b6a4ab90c370faf759ef53f8b758722130c7c4a9c31525ac3289ee1ae208365be51716797df39e4236f9dd6c044747973ea5480e2ea2f96d3819ab400a09f18494a00ef602f24d48406a4fe"}, {0x110, 0x115, 0xffffffff, "f965d1357d75fa6586bf9bc3a6c1d75105f46c72642a785ed8170fdcaf91342bc442463c15174c5f038818569458e5b26a0ae8066300b4864a461e1255cbc3d7806288e23391e8ab487e9e490d342ca422388c165b96041ad6b163091907b090acfb61e36cc70336df70673a76fb7c04554ce353dceca0f81f71447ed2564ecb199316504f2cf1747686294bda8a017bea7bdaa80a409f7ceecdc6715edb52615ac55eb51fae3fde63f34f3cbb9953faace610359d49c86fde5329b164169439c3bbc48b31729d5be8862c46afda962097ff4ec792ba93876319914c7cc74aabae0da26fe59ee17041ddabb503e3c030efb9be95461b30003b"}], 0x4a0}}, {{&(0x7f0000000e40)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0xfffc, 0x1, 0x3, 0x2, {0xa, 0x4e24, 0x4f7b, @mcast1, 0x1}}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000ec0)="58701dde90c8f81c81ba9fb1c1367525c2aa3d76e3bc4d5eb6fb875b33f37f5b783eebd79b151c4117e34d463b9608bdb82e867bb7d72839c017ade9b033c80a887e6ec5538e28a3d8c00061b7cbbec9b375f56b7bf63bdca2c7a811d70f1aae7eb824aab9c74a380c15a7f9a57ad8c74fae891cc9d924fe083f638c39eaaa0d1b3263b3e582e286eb9ac8cb4de18fa1ee2ce72f15e15ff04fd7086bcfebfde58a41d1bdd72062dd3af1355f9a734100f1fb65d6c67ec9daf7ee6c19f233f43cb4561b5315201afed0e546cada3d9116bc6b85e688c18e1bcdd938e22d5d581789cb0c144660d1569d2ff65f7b34", 0xee}, {&(0x7f0000000fc0)="04cad447de1a64ee1bb1acd2c20dd1f62e7307e08c3b3070c5ff28cd6681e937a2710c3ebfeccca1885f9da2a85a386350f6dd1e017447571bccbcd9a8eee4e138daaf7d5ded6d460c4fbfab660f6695d03d632b480b53fe025de9fec77f280e1097c55aab73da0de2a906c4b87f4514", 0x70}, {&(0x7f0000002640)="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", 0x1000}, {&(0x7f0000001040)="54bc420325ba64bc859808ac38162ef12cdafa6a31e7e7c95d4d219d89232115ff308f27e38b0a90e5e042cf28", 0x2d}, {&(0x7f0000001080)="475d796b3ff08919a87a4371a2dc894ca703252c2bc86044841997cb0d3ff18e1e4d88d1171d1b26bdc632f9b40cd8e920d8b7bf0a192fa79a4f5a7c6c7fd36e4b90df5b1e8f9126ca8cce97c915ca2f95ba612e914a3e03c823b873425602f78db91137dbc1549690fb5dfde1343d25e65727bcc7871f35daf8ca331d59c0c1192e049a4a411a33c93ceb64e59a55012a", 0x91}], 0x5}}, {{&(0x7f00000011c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4}, 0x80, &(0x7f0000001540)=[{&(0x7f0000003640)="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", 0x1000}, {&(0x7f0000004640)="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", 0x1000}, {&(0x7f0000001240)="57eb7c808734286c0526757808dcc5ef18863263afe1188ddb06c99c945dce38660a9fc89ac180c885098a9cb7e7e38c02e7a2695c5bb73c9c405624efb1fb10bd757f56809e2a79315596d52cf89610fd7336e2e2e26476953bc1286be26aea9abfa0cb2e9761eca9811dd519e0cee99424ea2971cde3c049de21f4c2b150dfeb7e324e73d695b640566bb7b6", 0x8d}, {&(0x7f0000001300)="cfc41dbfa4e6e61ca04fc265ba19b32bc7fc30fbe92d3ab06ddf65592c13715a72b8918b3dca9f991ec6c0209aa3de8932f5f5911b", 0x35}, {&(0x7f0000001340)="ca73ac3da0e4e19a7506209642c56c28b51b90e35d50781c8b15efcbede6c8318d7e0eb580a3095150a04c989bde890dbf4d873bedfd485bbf952e4fd599540bb6183b9fe6dc86f89b4764d380c7261e3b753f7c0ffe564a452c423889df64a13c33360785b608a5a719dbb35ca5d0a287", 0x71}, {&(0x7f00000013c0)="9db1a1a29d79ba46f43216d4628b53c99bd67ab34a4d37cc0fdf29cbbef13ba42ec3ea441553c82afcd963b2a5499aabfee3557c8453a6fbc7eedc497d2b38d9cf08bcb71c502df2a15193a13427ceacb17ba95d1caa21cee937b1a2e6c8b561460daf45059195a2ec2aa07ba6b1115a86fd1acdcde8c47f7b0895777884bfc6edca9b3426bafe1bbfc609af28bea2cde31b49341625c09f4ab70d87810595b834a61957b9e9ca4b7f3ed57dece23e73b8f55a80d31d5841fcf2cff8a56113775ad04a6953999eeeaa56e1e049796afd0aa4e143e6d96fb4739f6b4a160673ebe2718a61231b832317e0a7a189cebea5", 0xf0}], 0x6, &(0x7f0000005640)=[{0x68, 0x103, 0x4, "6f1b5b5c0dcbb32beaa9882ebee74dab2d9d752c649a6dbeb3bbf92e3b4b006c37da7506ed63d19ec7cebf01384b2ef234694480f3b303cb47b6780c14663eb86ee62e09cd1bbb87231c41bd48b7615207c7ef"}, {0x70, 0x111, 0x0, "8e30e18a4bbe5eac8c66d39b01a16c14b0e2f77c9de15adc1dadb83c73778551a136b668d97d3df1e8b48c6db3f217dcf43ef99659d8a6bcb32f5811e36fe8a387528d49b3657f34fa34b348743475df6d4dddedbc4b8445dc"}, {0xe0, 0x0, 0x9, "af47f88c6b20217d0418426f36a33dd70bba3f8bcc2abd22e425dcb94aef00a7099905a0e92d1439dc6a8a44911036bdc34413d0c40cff6844b2c6e883095cbd1ab11bf6ac07aa2077d9648bee02992362249bff665e1b5378834567b8cca79a33698a7374bf5902ec03909383460119a8d6c1518de5ff19039a4e86275686a431b17942d73ef82f0e80405770b6a371ef756be51173c3d563d679e68deb3eea46f864a1625633375a05aebc632df0bc3554e794d85fd6b40a68118195df6fd33220cca54421330081677051"}, {0x80, 0xff, 0x6, "6c0833687be1f326726a316f29e16273cf7f860385c07c44bb7a5cf664e0289217dfd4165d6b26815315934f0359348be279b1799699d2e00127de09cef6a639ee094183934b04ae1cc297d1a8092600507820ffe4a2c2f917be4ad77c20e91d443afa7bb4425118923c527b79ba"}, {0x110, 0x101, 0x626, "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"}], 0x348}}], 0x3, 0x0) preadv(r2, &(0x7f0000001500)=[{&(0x7f0000001600)=""/4099, 0x1003}], 0x1, 0x8f, 0x0) (async) preadv(r2, &(0x7f0000001500)=[{&(0x7f0000001600)=""/4099, 0x1003}], 0x1, 0x8f, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5e1d73b96f818e9268b8dc1c56ba4522946700fdb624e242a0bf41c4efc0a940ba7a2878cbd123494e88f8f43af59186c4bd40e8c9b81fb75aadc459dfc95d8bc15675311a997690369dc0b6c02d96c3ce09cec63b1bc3f70fc5e10341c00d751ad61b6e598194f5d528fa2e58bbb461d4370782cdd29fbe89dc7d1b477f7c819d6a66def28c513a613ec84012de744796e1cc1a7e880d36667441ebe47f5fda87150a91b40718754dfbd9c7ddbe3da2ca3941fbc59adbab1a4257105546dc90bb0205210253a28911d7fe0ec5b339475d5db0f1d011b3661c8a2b55ed15095e30a0f7b62b9e1298c3a3", @ANYRES16=r3, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) (async) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5e1d73b96f818e9268b8dc1c56ba4522946700fdb624e242a0bf41c4efc0a940ba7a2878cbd123494e88f8f43af59186c4bd40e8c9b81fb75aadc459dfc95d8bc15675311a997690369dc0b6c02d96c3ce09cec63b1bc3f70fc5e10341c00d751ad61b6e598194f5d528fa2e58bbb461d4370782cdd29fbe89dc7d1b477f7c819d6a66def28c513a613ec84012de744796e1cc1a7e880d36667441ebe47f5fda87150a91b40718754dfbd9c7ddbe3da2ca3941fbc59adbab1a4257105546dc90bb0205210253a28911d7fe0ec5b339475d5db0f1d011b3661c8a2b55ed15095e30a0f7b62b9e1298c3a3", @ANYRES16=r3, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) 00:16:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x19) (rerun: 64) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) (async, rerun: 64) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) (rerun: 64) 00:16:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) [ 2964.442475][ T7240] binder: 7239:7240 ioctl c0306201 20000340 returned -14 00:16:00 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x1000000000000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'wg1\x00'}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'pim6reg\x00', 0x400}) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x27, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ldst={0x1, 0x0, 0x1, 0xa, 0x0, 0xfffffffffffffffc, 0x1}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x77d9, 0x96, &(0x7f0000000340)=""/150, 0x41100, 0x10, '\x00', 0x0, 0x17, r1, 0x8, &(0x7f0000000140)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x6, 0xfffffffe, 0x4e}, 0x10, 0x52ed, r1, 0x2, &(0x7f0000000400)=[r1, r1, r1, r1, r1], &(0x7f0000000440)=[{0x1, 0x5, 0x2, 0xc}, {0x4, 0x5, 0x8, 0x5}], 0x10, 0xffffffff}, 0x90) fcntl$setpipe(r2, 0x407, 0xb9f3) 00:16:00 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0xc00000000000000, 0x0, 0x0}) 00:16:00 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x1100000000000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 00:16:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'wg1\x00'}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'pim6reg\x00', 0x400}) (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x27, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ldst={0x1, 0x0, 0x1, 0xa, 0x0, 0xfffffffffffffffc, 0x1}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x77d9, 0x96, &(0x7f0000000340)=""/150, 0x41100, 0x10, '\x00', 0x0, 0x17, r1, 0x8, &(0x7f0000000140)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x6, 0xfffffffe, 0x4e}, 0x10, 0x52ed, r1, 0x2, &(0x7f0000000400)=[r1, r1, r1, r1, r1], &(0x7f0000000440)=[{0x1, 0x5, 0x2, 0xc}, {0x4, 0x5, 0x8, 0x5}], 0x10, 0xffffffff}, 0x90) fcntl$setpipe(r2, 0x407, 0xb9f3) [ 2964.643095][ T7257] binder: 7256:7257 ioctl c0306201 20000340 returned -14 00:16:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'wg1\x00'}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'pim6reg\x00', 0x400}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'pim6reg\x00', 0x400}) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x27, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ldst={0x1, 0x0, 0x1, 0xa, 0x0, 0xfffffffffffffffc, 0x1}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x77d9, 0x96, &(0x7f0000000340)=""/150, 0x41100, 0x10, '\x00', 0x0, 0x17, r1, 0x8, &(0x7f0000000140)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x6, 0xfffffffe, 0x4e}, 0x10, 0x52ed, r1, 0x2, &(0x7f0000000400)=[r1, r1, r1, r1, r1], &(0x7f0000000440)=[{0x1, 0x5, 0x2, 0xc}, {0x4, 0x5, 0x8, 0x5}], 0x10, 0xffffffff}, 0x90) fcntl$setpipe(r2, 0x407, 0xb9f3) 00:16:00 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0xd00000000000000, 0x0, 0x0}) 00:16:00 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x1200000000000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x19) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 32) r2 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) 00:16:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 00:16:00 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x1a4, 0x33, 0x800, 0x70bd2d, 0x25dfdbfd, {0x20}, [@typed={0x4, 0x129}, @nested={0x18b, 0x5c, 0x0, 0x1, [@generic="a109b4f9456d25f5fe4b15f3b7eea2466bd5298d4643c67b9660fe6249914cc1c7d1d519a6670006f583a7d86fe2c63a853bc4dd23301a22933f7435ee2599bef8e2330ea738f0669a7f392725da876febfcafe30f2cdffb5224c9fbeb1a10eeb6c09f11f22b55feade7fd0fa9e5e01b267eb7208ed467ff77db6e158d9739121710759d0ecb5d07f516c81cd57d3820fee4477062ca77c6fdc13ce3a449dca27d469cf6f9057b3a4ee846d94b", @generic="f0e6efd417516a7d9c85f21fd2a4572a9d95c90202d25274a246c1", @generic="b3391ec25c313b70abe5ad022b9cfa205bda9cd7ebe896395084cba69bed43b365428868f3", @typed={0x14, 0x82, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}}, @generic="265d033827ec361eaf32b2a54e3f3623e10cce20669a29d99f021019d7aa2fe993344b7ccfa77f01df98ea655902dd3e9e9c711a988c16db17462685d2db0b3ec6ace9209010dc1d8ea75263c2cbc997794a7f4025ca9eab8622cf9e76bee558745459aef8bb6acddf7a4ec503addb5741531901d31340d043fd3ac5e71a64dd19f7521d968d"]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x240000d0}, 0x40) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000100)) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') [ 2964.874952][ T7271] binder: BINDER_SET_CONTEXT_MGR already set [ 2964.894386][ T7271] binder: 7268:7271 ioctl 4018620d 20000040 returned -16 00:16:00 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x1800000000000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2964.923042][ T7271] binder: 7268:7271 ioctl c0306201 20000340 returned -14 00:16:00 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x1a4, 0x33, 0x800, 0x70bd2d, 0x25dfdbfd, {0x20}, [@typed={0x4, 0x129}, @nested={0x18b, 0x5c, 0x0, 0x1, [@generic="a109b4f9456d25f5fe4b15f3b7eea2466bd5298d4643c67b9660fe6249914cc1c7d1d519a6670006f583a7d86fe2c63a853bc4dd23301a22933f7435ee2599bef8e2330ea738f0669a7f392725da876febfcafe30f2cdffb5224c9fbeb1a10eeb6c09f11f22b55feade7fd0fa9e5e01b267eb7208ed467ff77db6e158d9739121710759d0ecb5d07f516c81cd57d3820fee4477062ca77c6fdc13ce3a449dca27d469cf6f9057b3a4ee846d94b", @generic="f0e6efd417516a7d9c85f21fd2a4572a9d95c90202d25274a246c1", @generic="b3391ec25c313b70abe5ad022b9cfa205bda9cd7ebe896395084cba69bed43b365428868f3", @typed={0x14, 0x82, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}}, @generic="265d033827ec361eaf32b2a54e3f3623e10cce20669a29d99f021019d7aa2fe993344b7ccfa77f01df98ea655902dd3e9e9c711a988c16db17462685d2db0b3ec6ace9209010dc1d8ea75263c2cbc997794a7f4025ca9eab8622cf9e76bee558745459aef8bb6acddf7a4ec503addb5741531901d31340d043fd3ac5e71a64dd19f7521d968d"]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x240000d0}, 0x40) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000100)) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:16:00 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0xe00000000000000, 0x0, 0x0}) 00:16:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 00:16:00 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x2500000000000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2965.025055][ T7284] binder: 7283:7284 ioctl c0306201 20000340 returned -14 00:16:00 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x1000000000000000, 0x0, 0x0}) 00:16:00 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x1a4, 0x33, 0x800, 0x70bd2d, 0x25dfdbfd, {0x20}, [@typed={0x4, 0x129}, @nested={0x18b, 0x5c, 0x0, 0x1, [@generic="a109b4f9456d25f5fe4b15f3b7eea2466bd5298d4643c67b9660fe6249914cc1c7d1d519a6670006f583a7d86fe2c63a853bc4dd23301a22933f7435ee2599bef8e2330ea738f0669a7f392725da876febfcafe30f2cdffb5224c9fbeb1a10eeb6c09f11f22b55feade7fd0fa9e5e01b267eb7208ed467ff77db6e158d9739121710759d0ecb5d07f516c81cd57d3820fee4477062ca77c6fdc13ce3a449dca27d469cf6f9057b3a4ee846d94b", @generic="f0e6efd417516a7d9c85f21fd2a4572a9d95c90202d25274a246c1", @generic="b3391ec25c313b70abe5ad022b9cfa205bda9cd7ebe896395084cba69bed43b365428868f3", @typed={0x14, 0x82, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}}, @generic="265d033827ec361eaf32b2a54e3f3623e10cce20669a29d99f021019d7aa2fe993344b7ccfa77f01df98ea655902dd3e9e9c711a988c16db17462685d2db0b3ec6ace9209010dc1d8ea75263c2cbc997794a7f4025ca9eab8622cf9e76bee558745459aef8bb6acddf7a4ec503addb5741531901d31340d043fd3ac5e71a64dd19f7521d968d"]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x240000d0}, 0x40) (async, rerun: 32) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (rerun: 32) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000100)) (async, rerun: 64) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (rerun: 64) 00:16:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) 00:16:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}}, 0x0) [ 2965.121826][ T7290] binder: 7287:7290 ioctl c0306201 20000340 returned -14 00:16:01 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x1100000000000000, 0x0, 0x0}) 00:16:01 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x5c00000000000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:01 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'erspan0\x00', 0x20}) 00:16:01 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x1200000000000000, 0x0, 0x0}) [ 2965.226552][ T7299] binder: 7297:7299 ioctl c0306201 20000340 returned -14 00:16:01 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0xfcffffff00000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:01 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'erspan0\x00', 0x20}) 00:16:01 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x1800000000000000, 0x0, 0x0}) 00:16:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}}, 0x0) [ 2965.324843][ T7306] binder: 7305:7306 ioctl c0306201 20000340 returned -14 00:16:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) (async) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) 00:16:01 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'erspan0\x00', 0x20}) 00:16:01 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0xfdfdffff00000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2965.455218][ T7313] binder: BINDER_SET_CONTEXT_MGR already set [ 2965.473587][ T7313] binder: 7311:7313 ioctl 4018620d 20000040 returned -16 00:16:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}}, 0x0) 00:16:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x234524b7d35585c4, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:16:01 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0xffffff7f00000000, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2965.506487][ T7313] binder: 7311:7313 ioctl c0306201 20000340 returned -14 00:16:01 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x2500000000000000, 0x0, 0x0}) 00:16:01 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x630b, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:01 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x234524b7d35585c4, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x234524b7d35585c4, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:16:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4], 0x38}}, 0x0) 00:16:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) [ 2965.684899][ T7331] binder: 7330:7331 ioctl c0306201 20000340 returned -14 [ 2965.712385][ T7335] binder: 7332:7335 unknown command 1 00:16:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x234524b7d35585c4, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:16:01 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x5c00000000000000, 0x0, 0x0}) 00:16:01 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x630c, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2965.730408][ T7335] binder: 7332:7335 ioctl c0306201 20000440 returned -22 00:16:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x206100, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') [ 2965.801644][ T7344] binder: 7343:7344 ioctl c0306201 20000340 returned -14 [ 2965.827279][ T7349] binder: 7345:7349 unknown command 1 [ 2965.834532][ T7342] __nla_validate_parse: 56 callbacks suppressed [ 2965.834551][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 00:16:01 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0xfcffffff00000000, 0x0, 0x0}) 00:16:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000080)=0x9, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$getown(r3, 0x9) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102398, 0x18ffe}], 0x1, 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000200)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {r5}}, './file0\x00'}) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$tun(r3, &(0x7f0000000040)={@void, @void, @arp=@generic={0x8, 0x1, 0x6, 0x10, 0x4, @random="600c88e92a02", "382c153aedd5700889f704a808fb1ee2", @remote, "377d8f9f2985b217"}}, 0x2c) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x1812, 0x8000}, 0x4) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) [ 2965.855286][ T7349] binder: 7345:7349 ioctl c0306201 20000440 returned -22 [ 2965.866561][ T7348] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 00:16:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x206100, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:16:01 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x630d, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2965.924762][ T7352] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2965.961103][ T7356] binder: 7353:7356 unknown command 1 00:16:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x206100, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x206100, 0x0) (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) 00:16:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4], 0x38}}, 0x0) [ 2965.974326][ T7358] binder: 7357:7358 ioctl c0306201 20000340 returned -14 [ 2965.984847][ T7356] binder: 7353:7356 ioctl c0306201 20000440 returned -22 00:16:01 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40046302, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:01 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0xfdfdffff00000000, 0x0, 0x0}) 00:16:02 executing program 1: getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f00000000c0)=""/155, 0x9b) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x8, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)) r4 = open$dir(&(0x7f0000000280)='./file0\x00', 0x40000, 0x190) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0xcef}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) accept4(r3, &(0x7f0000000300)=@phonet, &(0x7f0000000380)=0x80, 0x80800) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fremovexattr(r5, &(0x7f0000000080)=@known='system.posix_acl_default\x00') [ 2966.089772][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2966.112821][ T7368] binder: 7366:7368 ioctl c0306201 20000340 returned -14 [ 2966.120655][ T7369] binder: BC_ACQUIRE_RESULT not supported [ 2966.127115][ T7369] binder: 7367:7369 ioctl c0306201 20000440 returned -22 00:16:02 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0xffffff7f00000000, 0x0, 0x0}) 00:16:02 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40046304, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2966.185032][ T7365] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 00:16:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 32) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000080)=0x9, 0x4) (rerun: 32) r2 = socket$packet(0x11, 0x2, 0x300) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$getown(r3, 0x9) (async) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102398, 0x18ffe}], 0x1, 0x0, 0x0) (async, rerun: 32) r4 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 32) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000200)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {r5}}, './file0\x00'}) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) write$tun(r3, &(0x7f0000000040)={@void, @void, @arp=@generic={0x8, 0x1, 0x6, 0x10, 0x4, @random="600c88e92a02", "382c153aedd5700889f704a808fb1ee2", @remote, "377d8f9f2985b217"}}, 0x2c) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x1812, 0x8000}, 0x4) (async) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) [ 2966.223089][ T7371] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2438500402 (19508003216 ns) > initial count (10099226576 ns). Using initial count to start timer. [ 2966.238458][ T7376] binder: 7375:7376 ioctl c0306201 20000340 returned -14 [ 2966.249719][ T7378] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 00:16:02 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x2, 0x0}) 00:16:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4], 0x38}}, 0x0) [ 2966.285061][ T7379] binder: 7377:7379 unknown command 0 [ 2966.299073][ T7379] binder: 7377:7379 ioctl c0306201 20000440 returned -22 00:16:02 executing program 1: getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f00000000c0)=""/155, 0x9b) (async) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x8, 0x3) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) (async) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)) r4 = open$dir(&(0x7f0000000280)='./file0\x00', 0x40000, 0x190) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0xcef}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) accept4(r3, &(0x7f0000000300)=@phonet, &(0x7f0000000380)=0x80, 0x80800) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) fremovexattr(r5, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:16:02 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40046305, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:02 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40046306, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:02 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x3, 0x0}) [ 2966.414543][ T7390] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2966.429190][ T7394] binder: 7387:7394 unknown command 0 [ 2966.434922][ T7394] binder: 7387:7394 ioctl c0306201 20000440 returned -22 [ 2966.443182][ T7390] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 00:16:02 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x4, 0x0}) 00:16:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000080)=0x9, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$getown(r3, 0x9) (async, rerun: 64) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102398, 0x18ffe}], 0x1, 0x0, 0x0) (async, rerun: 64) r4 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000200)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {r5}}, './file0\x00'}) (async) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) write$tun(r3, &(0x7f0000000040)={@void, @void, @arp=@generic={0x8, 0x1, 0x6, 0x10, 0x4, @random="600c88e92a02", "382c153aedd5700889f704a808fb1ee2", @remote, "377d8f9f2985b217"}}, 0x2c) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x1812, 0x8000}, 0x4) (async) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) 00:16:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB], 0x38}}, 0x0) [ 2966.524032][ T7390] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2966.538129][ T7401] binder: 7399:7401 unknown command 0 [ 2966.544447][ T7401] binder: 7399:7401 ioctl c0306201 20000440 returned -22 00:16:02 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40046307, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:02 executing program 1: getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f00000000c0)=""/155, 0x9b) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x8, 0x3) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async, rerun: 64) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) (rerun: 64) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)) (async) r4 = open$dir(&(0x7f0000000280)='./file0\x00', 0x40000, 0x190) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0xcef}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) accept4(r3, &(0x7f0000000300)=@phonet, &(0x7f0000000380)=0x80, 0x80800) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) fremovexattr(r5, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:16:02 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x5, 0x0}) 00:16:02 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x6, 0x0}) [ 2966.654987][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 00:16:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB], 0x38}}, 0x0) [ 2966.718275][ T7416] binder: 7413:7416 unknown command 0 [ 2966.743922][ T7416] binder: 7413:7416 ioctl c0306201 20000440 returned -22 00:16:02 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x7, 0x0}) 00:16:02 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40086303, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2966.768008][ T7418] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2438500402 (19508003216 ns) > initial count (10099226576 ns). Using initial count to start timer. [ 2966.840404][ T7418] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2438500402 (19508003216 ns) > initial count (10099226576 ns). Using initial count to start timer. [ 2966.866047][ T7426] binder: BINDER_SET_CONTEXT_MGR already set [ 2966.869547][ T7425] binder: BINDER_SET_CONTEXT_MGR already set [ 2966.873762][ T7426] binder: 7421:7426 ioctl 4018620d 20000040 returned -16 [ 2966.884371][ T7425] binder: 7424:7425 ioctl 4018620d 20000040 returned -16 00:16:02 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x8, 0x0}) 00:16:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'veth1\x00', @multicast}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) 00:16:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB], 0x38}}, 0x0) [ 2966.927273][ T7430] binder: 7424:7430 unknown command 0 [ 2966.942113][ T7430] binder: 7424:7430 ioctl c0306201 20000440 returned -22 00:16:02 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x9, 0x0}) 00:16:02 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x4008630a, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:02 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x3) fremovexattr(r0, &(0x7f0000000000)=@random={'osx.', 'syste\b\x00po\xaf>\x00\x00acl\x0e\xe09\xb9t\b\x00D\xde\x13\x16\xea\x9e!}\b(\xe9f;\xa5\xea\x00'/56}) 00:16:03 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0xa, 0x0}) 00:16:03 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x3) fremovexattr(r0, &(0x7f0000000000)=@random={'osx.', 'syste\b\x00po\xaf>\x00\x00acl\x0e\xe09\xb9t\b\x00D\xde\x13\x16\xea\x9e!}\b(\xe9f;\xa5\xea\x00'/56}) 00:16:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b00"], 0x38}}, 0x0) [ 2967.101795][ T7442] binder: BC_ATTEMPT_ACQUIRE not supported [ 2967.115030][ T7442] binder: 7441:7442 ioctl c0306201 20000440 returned -22 00:16:03 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'veth1\x00', @multicast}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) (async) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) 00:16:03 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40086310, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x3) (async, rerun: 64) fremovexattr(r0, &(0x7f0000000000)=@random={'osx.', 'syste\b\x00po\xaf>\x00\x00acl\x0e\xe09\xb9t\b\x00D\xde\x13\x16\xea\x9e!}\b(\xe9f;\xa5\xea\x00'/56}) (rerun: 64) [ 2967.165290][ T7444] binder: BINDER_SET_CONTEXT_MGR already set [ 2967.193400][ T7444] binder: 7443:7444 ioctl 4018620d 20000040 returned -16 00:16:03 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0xb, 0x0}) 00:16:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b00"], 0x38}}, 0x0) [ 2967.267868][ T7455] binder: BINDER_SET_CONTEXT_MGR already set [ 2967.285752][ T7455] binder: 7454:7455 ioctl 4018620d 20000040 returned -16 00:16:03 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0xc, 0x0}) 00:16:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x781000, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='trusted.overlay.opaque\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @multicast1}}, [0x1, 0xffffffffffffffe1, 0x2, 0x1, 0x7fffffff, 0x5, 0xffffffff, 0xffffffff, 0x401, 0x7, 0x4e24, 0x7, 0x0, 0x1000, 0x7fff]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000240)={r3, 0x1}, &(0x7f0000000280)=0x8) r5 = dup2(r2, r2) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r5) sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x100, r6, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd1b}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x400}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x91}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x40}, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f00000002c0)={r4, 0x866}, 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'erspan0\x00', 0x1000}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x2f, 0x23, 0x0, 0x9, 0x40, @remote, @mcast1, 0x1, 0x10, 0x8, 0x2}}) sendmsg$nl_route(r5, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@bridge_newvlan={0x60, 0x70, 0x1, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x1, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x72, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040000) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) [ 2967.320865][ T7455] binder: 7454:7455 unknown command 0 00:16:03 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0xd, 0x0}) 00:16:03 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r2 = socket$packet(0x11, 0x2, 0x300) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'veth1\x00', @multicast}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) (async, rerun: 64) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) (rerun: 64) 00:16:03 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x400c630e, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2967.369999][ T7455] binder: 7454:7455 ioctl c0306201 20000440 returned -22 00:16:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x781000, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='trusted.overlay.opaque\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @multicast1}}, [0x1, 0xffffffffffffffe1, 0x2, 0x1, 0x7fffffff, 0x5, 0xffffffff, 0xffffffff, 0x401, 0x7, 0x4e24, 0x7, 0x0, 0x1000, 0x7fff]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000240)={r3, 0x1}, &(0x7f0000000280)=0x8) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000240)={r3, 0x1}, &(0x7f0000000280)=0x8) r5 = dup2(r2, r2) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r5) sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x100, r6, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd1b}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x400}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x91}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x40}, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f00000002c0)={r4, 0x866}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f00000002c0)={r4, 0x866}, 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'erspan0\x00', 0x1000}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x2f, 0x23, 0x0, 0x9, 0x40, @remote, @mcast1, 0x1, 0x10, 0x8, 0x2}}) sendmsg$nl_route(r5, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@bridge_newvlan={0x60, 0x70, 0x1, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x1, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x72, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040000) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) 00:16:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b00"], 0x38}}, 0x0) 00:16:03 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0xe, 0x0}) [ 2967.498711][ T7478] binder: 7474:7478 unknown command 0 [ 2967.510666][ T7478] binder: 7474:7478 ioctl c0306201 20000440 returned -22 00:16:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x781000, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='trusted.overlay.opaque\x00') (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @multicast1}}, [0x1, 0xffffffffffffffe1, 0x2, 0x1, 0x7fffffff, 0x5, 0xffffffff, 0xffffffff, 0x401, 0x7, 0x4e24, 0x7, 0x0, 0x1000, 0x7fff]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000240)={r3, 0x1}, &(0x7f0000000280)=0x8) r5 = dup2(r2, r2) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r5) sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x100, r6, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd1b}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x400}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x91}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x40}, 0x4) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f00000002c0)={r4, 0x866}, 0x8) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'erspan0\x00', 0x1000}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x2f, 0x23, 0x0, 0x9, 0x40, @remote, @mcast1, 0x1, 0x10, 0x8, 0x2}}) sendmsg$nl_route(r5, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@bridge_newvlan={0x60, 0x70, 0x1, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x1, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x72, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040000) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) 00:16:03 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x400c630f, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75"], 0x38}}, 0x0) 00:16:03 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x10, 0x0}) 00:16:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x181800, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0xab, 0xcfdb}) socket$isdn_base(0x22, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) r2 = dup(r0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x0, 0x28011, r2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'team_slave_1\x00', 0x100}) fremovexattr(r0, &(0x7f0000000040)=@random={'os2.', 'trusted.overlay.re\x05\x00\x00\x00ct\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'caif0\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x200}) socket$inet6(0xa, 0xa, 0x0) 00:16:03 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000080)={@void, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @multicast, @loopback}}, 0x34) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) [ 2967.636382][ T7487] binder: 7486:7487 unknown command 0 [ 2967.647838][ T7487] binder: 7486:7487 ioctl c0306201 20000440 returned -22 00:16:03 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40106308, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75"], 0x38}}, 0x0) 00:16:03 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x11, 0x0}) 00:16:03 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40106309, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2967.790159][ T7499] binder: 7497:7499 unknown command 6144 [ 2967.810500][ T7499] binder: 7497:7499 ioctl c0306201 20000440 returned -22 00:16:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x181800, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0xab, 0xcfdb}) socket$isdn_base(0x22, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) r2 = dup(r0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x0, 0x28011, r2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'team_slave_1\x00', 0x100}) fremovexattr(r0, &(0x7f0000000040)=@random={'os2.', 'trusted.overlay.re\x05\x00\x00\x00ct\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'caif0\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x200}) socket$inet6(0xa, 0xa, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x181800, 0x0) (async) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0xab, 0xcfdb}) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) (async) dup(r0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000200)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x0, 0x28011, r2, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'team_slave_1\x00', 0x100}) (async) fremovexattr(r0, &(0x7f0000000040)=@random={'os2.', 'trusted.overlay.re\x05\x00\x00\x00ct\x00'}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'caif0\x00', 0x100}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x200}) (async) socket$inet6(0xa, 0xa, 0x0) (async) 00:16:03 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) (async, rerun: 32) write$tun(r0, &(0x7f0000000080)={@void, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @multicast, @loopback}}, 0x34) (async, rerun: 32) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) 00:16:03 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x12, 0x0}) 00:16:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75"], 0x38}}, 0x0) [ 2967.949309][ T7508] binder: 7507:7508 unknown command 6144 [ 2967.966570][ T7508] binder: 7507:7508 ioctl c0306201 20000440 returned -22 00:16:03 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x18, 0x0}) 00:16:03 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40406300, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x181800, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0xab, 0xcfdb}) socket$isdn_base(0x22, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) (async) r2 = dup(r0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x0, 0x28011, r2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'team_slave_1\x00', 0x100}) (async) fremovexattr(r0, &(0x7f0000000040)=@random={'os2.', 'trusted.overlay.re\x05\x00\x00\x00ct\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'caif0\x00', 0x100}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x200}) socket$inet6(0xa, 0xa, 0x0) 00:16:04 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x25, 0x0}) 00:16:04 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40406301, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:04 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000080)={@void, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @multicast, @loopback}}, 0x34) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) 00:16:04 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486312, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:04 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x5c, 0x0}) 00:16:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000"], 0x38}}, 0x0) 00:16:04 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486313, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:04 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x300, 0x0}) 00:16:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)=""/125) fremovexattr(r0, &(0x7f00000000c0)=@random={'user.', '.!\x00'}) 00:16:04 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd000000000000000000006034908c009c1100fe880000000000000000000000000001fe800000000000000000ecff000000aa4e220000009c90780100000000000000ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4db2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8f45619875a42b3d622cd17eac6cb736bbb514ec4471f2759dcd52c62862fd64b3fa67f998cf5ec04df45d6aafebcd5ceee7b57e9c2ec1d541b4fcd91ed38f13a0fc5440a292cf3064cc297e98f0b"], 0xd2) 00:16:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000"], 0x38}}, 0x0) [ 2968.421454][ T7550] binder: 7548:7550 unknown command 1078485779 [ 2968.442026][ T7550] binder: 7548:7550 ioctl c0306201 20000440 returned -22 00:16:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)=""/125) fremovexattr(r0, &(0x7f00000000c0)=@random={'user.', '.!\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)=""/125) (async) fremovexattr(r0, &(0x7f00000000c0)=@random={'user.', '.!\x00'}) (async) 00:16:04 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:04 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x500, 0x0}) 00:16:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)=""/125) (async) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)=""/125) fremovexattr(r0, &(0x7f00000000c0)=@random={'user.', '.!\x00'}) 00:16:04 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000"], 0x38}}, 0x0) 00:16:04 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x600, 0x0}) 00:16:04 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r1, &(0x7f0000000080)=@known='system.posix_acl_default\x00') getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 00:16:04 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x700, 0x0}) 00:16:04 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x4, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f757000000800"], 0x38}}, 0x0) 00:16:04 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r1, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 00:16:04 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd000000000000000000006034908c009c1100fe880000000000000000000000000001fe800000000000000000ecff000000aa4e220000009c90780100000000000000ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4db2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8f45619875a42b3d622cd17eac6cb736bbb514ec4471f2759dcd52c62862fd64b3fa67f998cf5ec04df45d6aafebcd5ceee7b57e9c2ec1d541b4fcd91ed38f13a0fc5440a292cf3064cc297e98f0b"], 0xd2) 00:16:04 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x5, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f757000000800"], 0x38}}, 0x0) 00:16:04 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r1, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) fremovexattr(r1, &(0x7f0000000080)=@known='system.posix_acl_default\x00') getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 2968.849546][ T7579] binder: BINDER_SET_CONTEXT_MGR already set [ 2968.882737][ T7579] binder: 7576:7579 ioctl 4018620d 20000040 returned -16 00:16:04 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x900, 0x0}) 00:16:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vcan0\x00', 0x10}) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:16:04 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x18, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f757000000800"], 0x38}}, 0x0) 00:16:04 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0xa00, 0x0}) 00:16:04 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) (async) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd000000000000000000006034908c009c1100fe880000000000000000000000000001fe800000000000000000ecff000000aa4e220000009c90780100000000000000ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4db2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8f45619875a42b3d622cd17eac6cb736bbb514ec4471f2759dcd52c62862fd64b3fa67f998cf5ec04df45d6aafebcd5ceee7b57e9c2ec1d541b4fcd91ed38f13a0fc5440a292cf3064cc297e98f0b"], 0xd2) 00:16:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vcan0\x00', 0x10}) (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:16:05 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:05 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vcan0\x00', 0x10}) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:16:05 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0xb00, 0x0}) 00:16:05 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x2, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:16:05 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvlan1\x00', 0x1000}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'macvlan1\x00', @multicast}) 00:16:05 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) close(r0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @void, @mpls={[], @llc={@llc={0x8e, 0xdc, "a43d", "b117f6d5b58b800c2ff153c96f114520d7559dcd1e7f4794fc736af7e407f091"}}}}, 0x28) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x9f) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2}, 0x2, 0x1, 0x1, 0x1}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000340)="c25ff3086d8bc5dfee24defa5b24cfe5cbdf440e0b9e811c71b7e3927124f3ea72f33cfef572a722eedaa820ee2744309e40718f1fc2cde5fa723f4283d16161d01c0694fe698f99e5e2081c081d169cc3c8cd0e99c4b682b0ca74440e76e303cade36ad5aff147792447a0228b6342950d0ae82eef5713b77c4a7652140209f93862103ff95947ac492acd9fd8c93b38d0579ff3721efaa63fbf4ed55606e589a1f03d50ec2fcf4f9865b8eaf959ed3837196fec87ae08c08f82020927211a4fad21b8fec772cb2309e58aee2b6c4643d983611fb204ec2682c9d5adc54ae9d24ea43971c80930b40c8d9a736f5ad645ddef9b103", 0xf5}], 0x1}, 0xc2c45526bf03fe5b) 00:16:05 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0xc00, 0x0}) 00:16:05 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0xd00, 0x0}) 00:16:05 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x3, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:05 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvlan1\x00', 0x1000}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'macvlan1\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvlan1\x00', 0x1000}) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'macvlan1\x00', @multicast}) (async) 00:16:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:16:05 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0xe00, 0x0}) 00:16:05 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) close(r0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) (async) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @void, @mpls={[], @llc={@llc={0x8e, 0xdc, "a43d", "b117f6d5b58b800c2ff153c96f114520d7559dcd1e7f4794fc736af7e407f091"}}}}, 0x28) (async) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x9f) (async, rerun: 64) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) (rerun: 64) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2}, 0x2, 0x1, 0x1, 0x1}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000340)="c25ff3086d8bc5dfee24defa5b24cfe5cbdf440e0b9e811c71b7e3927124f3ea72f33cfef572a722eedaa820ee2744309e40718f1fc2cde5fa723f4283d16161d01c0694fe698f99e5e2081c081d169cc3c8cd0e99c4b682b0ca74440e76e303cade36ad5aff147792447a0228b6342950d0ae82eef5713b77c4a7652140209f93862103ff95947ac492acd9fd8c93b38d0579ff3721efaa63fbf4ed55606e589a1f03d50ec2fcf4f9865b8eaf959ed3837196fec87ae08c08f82020927211a4fad21b8fec772cb2309e58aee2b6c4643d983611fb204ec2682c9d5adc54ae9d24ea43971c80930b40c8d9a736f5ad645ddef9b103", 0xf5}], 0x1}, 0xc2c45526bf03fe5b) 00:16:05 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvlan1\x00', 0x1000}) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'macvlan1\x00', @multicast}) (rerun: 32) 00:16:05 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x4, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:16:05 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x5, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:05 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x1100, 0x0}) 00:16:05 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:16:05 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) close(r0) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) (async) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @void, @mpls={[], @llc={@llc={0x8e, 0xdc, "a43d", "b117f6d5b58b800c2ff153c96f114520d7559dcd1e7f4794fc736af7e407f091"}}}}, 0x28) (async) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000088e7018462fe100005000600bbbbbbbbbbbbbbbbbbbbbbbb810023000004aa010eaf0b7dde6005a9a5f0bc4e543dce0100d6ec8b60285a802f8b35e5dcbfd20f77acfe22d08543a1ad4bbb08ff1b1f871f47565c59dab3f6e9ca8d9fd734b088a246ac86118d8b7090c5008083e40908eb5e239ca80452f2c775ccc7103ca34218a547df57f0fefa936c84d713020000000000000000000000000000109537b9ab90678c850a91ea3bcf4c5301870e3b13cc77d75e7ecf40e497b6fabf62fcf17d6171207d60d8a926f272e3b48ba4dc4233ae203bffb75d32db2b475a824ce5f9cdc100ee4b0f117a86eedf667cf20de91461e39f44ce12634f088d7bc04f2ac96bfdc2d2a50c26c3b57d5e402d41ff490d791b56a90f0000000000000000"], 0x9f) (async) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2}, 0x2, 0x1, 0x1, 0x1}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000340)="c25ff3086d8bc5dfee24defa5b24cfe5cbdf440e0b9e811c71b7e3927124f3ea72f33cfef572a722eedaa820ee2744309e40718f1fc2cde5fa723f4283d16161d01c0694fe698f99e5e2081c081d169cc3c8cd0e99c4b682b0ca74440e76e303cade36ad5aff147792447a0228b6342950d0ae82eef5713b77c4a7652140209f93862103ff95947ac492acd9fd8c93b38d0579ff3721efaa63fbf4ed55606e589a1f03d50ec2fcf4f9865b8eaf959ed3837196fec87ae08c08f82020927211a4fad21b8fec772cb2309e58aee2b6c4643d983611fb204ec2682c9d5adc54ae9d24ea43971c80930b40c8d9a736f5ad645ddef9b103", 0xf5}], 0x1}, 0xc2c45526bf03fe5b) 00:16:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:16:05 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:16:05 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x6, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:05 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x1200, 0x0}) [ 2969.690965][ T7661] binder: BINDER_SET_CONTEXT_MGR already set [ 2969.711816][ T7661] binder: 7657:7661 ioctl 4018620d 20000040 returned -16 00:16:05 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:16:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:16:05 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x7, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:05 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x1800, 0x0}) 00:16:05 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvlan0\x00', 0x100}) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xb0042, 0x40) 00:16:05 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x2500, 0x0}) 00:16:05 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB="18000000ff01000000000000000000009500000000000000006e745d03585920542385f80176966edaae7cd0e9f0226a9f2c5a845b88ddf51c4069316e44c557e5c85dd2fb2a1a71393925c9bd6563d3fbb4a2db6528abe506a7f9d17104308ff333a7ecbbac734a09b97d07ca0f34e8158e76a008be63c3bb2bfef9e901dce3d14ef154c291bf394a9f219d29696ab021fa69a1b5518553e3d30c9f9702fdc7cc9ba737cd70d95c27fc8c06ba635f0aaf8388b78876e60ec8054a5404041f0d571b3cce551b12fd17e5056dc45092eb696f6a1abdbe32b12f8761c2843a58b882092bc6696ce917dcaa7d7e1e571577bf7719c9706105d03a13c44d2627f9413691785eb918714469069e54978d8e6c18a2103155e5e757d5e06339d438"], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x9d, &(0x7f0000000000)=""/157, 0x41100}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002840)={&(0x7f00000008c0)='percpu_alloc_percpu_fail\x00', r1}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f00000001c0)="120000001600e7fb007b0000000001f0d589", 0x12, 0x0, 0x0, 0x0) recvfrom$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000a80)={'ip6tnl0\x00', &(0x7f0000000b80)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0xfc, 0xffffff02, 0x78, @dev={0xfe, 0x80, '\x00', 0x2b}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7f18, 0x8, 0x200, 0x6}}) bind$packet(r5, &(0x7f0000000c00)={0x11, 0xf6, r6, 0x1, 0x80, 0x6, @random="338979d39529"}, 0x14) accept$inet(r5, &(0x7f0000000180)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000440)="ff915a45d7c5f7c8568ebdc57386a19e302e55f53d1b2a9388fd12ad903c29d3e976d8100612cd0800000000000000d7a274b8c2401413676458fa504e09e887ef6ff0cdd758010df00f564a11c1713dbcabd72ba811021faee1ac8d79bebdc3fe43f43c66e89dd70c176a25738767a6a417a9ef94cf1b85c3d2", 0x7a}, {&(0x7f0000000500)="06bab072b09e636fc7e486e1c1f30ed7b8376c131e7753d31930827e07d44a4c06c3a6a3630fbb1ed4b84bb6e674968e67310078013dc9f2503bf09b4c93ba0f48a556bae048a362dd2f", 0x4a}, {&(0x7f0000000c40)="ec32075af1322e1c7e56eb9fcbba3252033944c118ac35c5373bec014f4bdb6c4de024a1b6565077626daaac314db078b7568221bd5e8259c1e32a3af2c680a86a67ff0df9", 0x45}, {&(0x7f0000000600)="a9ef4d07e893054155829967a251655a0f074e8c92d77db90c391c6fc8e119ad2021b5aa814e26805a1de486be6a34e7d46dfe23ed511e7c803b84272cbef991ce0b0b6600e9c680beae8e6bf430af34c60f7b2083256d2d5e91ca2ceb9d2492c2f507bbf77adbfffda6b088582edb495fb2526892750995e30868b8c897cc972329a6ddef3ba1922141981efdd51c2a495a181d1de8a9d0b3", 0x99}, {&(0x7f00000013c0)="057fd08656a165bd0dccb631c436c81971cae814c374abb2401493d87b7ecdf51e98b91c95c1d78878911c02c326cec93b8bfa168428fce1e9eeed0444eacbe8a3c5992f844221b9651a50fbe693675fcdbabc590979027e059bec27e65108bbb0a9f337a3f110fd12cb4141d126d600cd4b5aeed5019bb1d589523b61ef61cde70d51f84d9d719b300084552c3ba2d9c799de1c75e1049889dc118828b7764e30291077aefb1535d1a1d51dd8beb2435613b5eff84397a4a4c03db093dfc74840835bb91d4dffea1051fdc62f6b81da8336aee50300b2b2922323ed021da7bde19c643781edaec4ba6d84c44ba3c73a3c84dde405d67c73da63cc9662cd5b866a919290c738749c77c2f816c92ff1a8668e11000d1278c09c5f68a39338bcfb83cbb9627fdc439f5864fdee3112ac2a21d8", 0x132}, {&(0x7f00000007c0)="a854f23e82daddef695070a2506f0bfc18f4a4c6b07f160b7037122633343c67302980e5bb01c03eb16e705487c7399acc513292", 0x34}], 0x6, &(0x7f0000001500)=ANY=[@ANYRES8=r3, @ANYRES32, @ANYBLOB="92e58f85c9cb98dbfd140e13c0b2121fed039f13af64a68d0751135db097479c0d4a925be660c2230e5b49126ed89a8bd98bdab7547eb3048646839bace09a6c97a6167d130a650db45897adce5ea0d4d4776e7c76939526133a873b41544e86d824fe094f0990a52cee6ee99239b828813d68120355d478cb419fc8e96fd023c503000039363f2b9a600a5e844de28fe013976ea65fbcff75cb000000000000040000008a9a54c658bacea7186c07ed699be2c49629343c82535d096857fd169d41b1063cfa5bc0ae450642c67750aad01c2b93a6f2036337a0318b56d78abb23484c421690c9c4e09bf7698d1967f7bd8f17ed54c6", @ANYRESOCT=0x0, @ANYRES32=0xee00, @ANYRESHEX=0x0, @ANYRESHEX=r4, @ANYRES32=r5, @ANYRESHEX, @ANYRES8=0xffffffffffffffff, @ANYRES32, @ANYRES32=r1, @ANYRES8=r3, @ANYRESDEC, @ANYRESOCT=r3], 0xa0}, 0x20044910) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r10, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000140)=ANY=[], 0x2c}, {&(0x7f00000006c0)=ANY=[@ANYRES8, @ANYRES64, @ANYRESOCT, @ANYRES32=r2, @ANYBLOB="0400290033007100fcc9000000000000000000000000000000001400560020010000000000000000000000000000d200001e6bc89ff9d222841cb751f657e2ad67991b60acdd6bb81090855902176ea73597dd232572fb849445a231354db4cc592b5011edddbb0c7fe28c6d2f55c277a06035203f2e00f2223328807bca4f5c", @ANYRES16, @ANYRES64=r5], 0x3b0}, {&(0x7f0000002bc0)=ANY=[@ANYRES32, @ANYRESDEC=r7, @ANYRES32=r8, @ANYRESOCT=r10, @ANYBLOB="00000000d75d17e6193fafe207b25360fb1fe2edb8f9c509000e606ba7ea7d9370a86000000000000000adb4e9523a5ebc6fbc658f05908646d5a146c3c0dd5113a2f11b9b31147ad27370100207d17ce4220f6088557280ce35d818943e00e2a9e2e5637901e050ae7deb9a", @ANYRES32, @ANYRES8, @ANYRESOCT, @ANYRES64], 0x200}, {&(0x7f0000000d40)=ANY=[@ANYBLOB="6cad925bcc03618e8446bae956dcd50100acc9122b08edd78735e40b661dd47fc0f8970eff8cd61b868901800000000000009db7bd4dad9ca28eb6424af33a078751df7756e14f14e985f9ba2631fa7103450114002500000000000000c4d1cbe918706519000108006d00000000000200000000000000030000a10927264953a08d20cc514eaf", @ANYRES32, @ANYRESOCT=r3], 0x16c}], 0x4}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000001140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600000f500200600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=r9, @ANYRES32=0x41424344, @ANYBLOB="800209000000000000001e0a0600000014aa00000000"], 0x0) syz_emit_ethernet(0x5a, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a843500240600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=r9, @ANYBLOB="90020000907d6529912276e08a4286000000305300002a448bffe0540000000000"], 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x305, &(0x7f0000000380)={@random="06061af58a54", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@val={0x88a8, 0x1, 0x0, 0x2}, {0x8100, 0x4, 0x0, 0x4}}, {@ipv6={0x86dd, @tcp={0x3, 0x6, '5N\'', 0x2c7, 0x6, 0xff, @loopback, @private2, {[@hopopts={0x3a, 0x8, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x2, 0xe, 0x3f, 0x0, [0x1, 0x6, 0x4, 0x0, 0x74, 0x0, 0xffffffffffffffff]}}]}, @hopopts={0x29, 0x13, '\x00', [@generic={0x6, 0x87, "3f035b0b4ec452c8f223b174aa2ec2fe510e15d2abb6df7f2f452e654c8e716d78b2c8b27bf32f4f76be7a34c99b4ec2ecda96502639abb4deebef4a6e8c7b522a34363f84a7bafe8ebfdbcfb83e71143e0b00c86b174b0a87f80362179fc28573976f52a95d6aad58022df5529a09ddbe7c2465e5624faef937233dd496b1771fa080ff0e5352"}, @jumbo, @ra={0x5, 0x2, 0x1902}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @hopopts={0x4, 0x2, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x0, 0x153a, [0x0]}}]}, @hopopts={0x3a, 0x10, '\x00', [@hao={0xc9, 0x10, @private2}, @calipso={0x7, 0x28, {0x2, 0x8, 0x0, 0x9, [0xffffffffffff8001, 0x9, 0x9, 0x2]}}, @calipso={0x7, 0x48, {0x0, 0x10, 0x9, 0xd03, [0x8, 0x6, 0x2, 0xfffffffffffffff8, 0x8000000000000000, 0xfd69, 0x6, 0xff]}}]}], {{0x4e23, 0x4e21, r9, r12, 0x1, 0x0, 0x12, 0x4, 0x8, 0x0, 0x100, {[@sack={0x5, 0x22, [0x368, 0x6, 0x3, 0x4, 0x1, 0x6, 0x5, 0x80]}, @fastopen={0x22, 0xc, "c367a340e3486621578d"}, @exp_smc={0xfe, 0x6}]}}, {"115f241a158d15423ee32cf96519a74f982ed8b05f91cf40d7586e59c65e3bd5493015d8a39c0c2263749fbace4913dc2fcafc9933edba6a9af430a8b94780cc4214f0ac0554ff6bae0532d8e5c15fce907dfb4df3496bc743764f2999057fb1f3b57248ded51c3d25c7165242dc26761f64c8618f71790237dcea813e11c2c1779947c8a77c67181a27674e1cc10347ce637f01917ae70d76e18d015f462e676f3b84d7a38be71d62d5d441c7f5bcc81676218c7c99fc7c34e947944d8770019d674cd43cc16e8d10d515c6bd630fa2ad7e533d46fc8674883307066de83c"}}}}}}}, &(0x7f0000000040)={0x0, 0x4, [0x658, 0x3cf, 0xab, 0x6b6]}) syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344, 0x41424344}, 0x1, 0x0) write$tun(r0, &(0x7f00000016c0)={@val, @val={0x1, 0x1, 0x3, 0x6, 0x8001, 0xfff9}, @mpls={[{0x9}, {0xffff, 0x0, 0x1}, {0x7f}], @ipv6=@tcp={0xb, 0x6, "16ee85", 0x1f1, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x3c}, {[@dstopts={0x21, 0x4, '\x00', [@pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0xc, 0x10, 0x1, 0x3, 0x0, [@mcast1, @local, @loopback, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @local]}, @dstopts={0x0, 0x2, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0x1, 0xcee7}}, @jumbo={0xc2, 0x4, 0x4}, @pad1]}], {{0x4e24, 0x4e21, r9, r13, 0x1, 0x0, 0x9, 0x2, 0x2, 0x0, 0xffff, {[@sack_perm={0x4, 0x2}, @generic={0x5, 0xd, "f68d48d9a7d0dcdc663f29"}, @eol]}}, {"a3bfbc842dd9708680876ccabc48a0faeefaa52f06e3bf61e53bb125ebd9a3d6d4394ef136a89876f668855866384e4d37c8df4e08b624396e4dcbaa3085c974756f099ee136c7e9cc68a29e09502feeb7f067ee6ba1201e9b2f483cbc16889a19e5aa71469021c253911124602384d622f795fb53b77b0066896e83f5a26c073571197e680f828b0c030daf37c54ab9e7f0c1ad39f7560166b58eef3a51e5f2c369a33c9d395f2087c59886cf58d65be60212bf49aaacbb17d02c5f8cf87efd3a53d684eab980e6c2ba15aacf4a0d41ac6f58830dd1ea28dc6921b48c939e7b08bd8964c77718621ae19c565ef990eaa01f2b6282"}}}}}}, 0x233) r14 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r15 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r15, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) [ 2969.913005][ T7681] binder: BINDER_SET_CONTEXT_MGR already set [ 2969.916060][ T7683] binder: BINDER_SET_CONTEXT_MGR already set [ 2969.919253][ T7681] binder: 7680:7681 ioctl 4018620d 20000040 returned -16 [ 2969.935295][ T7683] binder: 7682:7683 ioctl 4018620d 20000040 returned -16 00:16:05 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x8, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:16:05 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvlan0\x00', 0x100}) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xb0042, 0x40) 00:16:05 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x5c00, 0x0}) 00:16:06 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x9, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvlan0\x00', 0x100}) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xb0042, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvlan0\x00', 0x100}) (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xb0042, 0x40) (async) 00:16:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:16:06 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x9d, &(0x7f0000000000)=""/157, 0x41100}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002840)={&(0x7f00000008c0)='percpu_alloc_percpu_fail\x00', r1}, 0x10) (async, rerun: 32) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (rerun: 32) r4 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 32) r5 = socket(0x10, 0x803, 0x0) (rerun: 32) sendto(r5, &(0x7f00000001c0)="120000001600e7fb007b0000000001f0d589", 0x12, 0x0, 0x0, 0x0) (async) recvfrom$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000a80)={'ip6tnl0\x00', &(0x7f0000000b80)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0xfc, 0xffffff02, 0x78, @dev={0xfe, 0x80, '\x00', 0x2b}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7f18, 0x8, 0x200, 0x6}}) bind$packet(r5, &(0x7f0000000c00)={0x11, 0xf6, r6, 0x1, 0x80, 0x6, @random="338979d39529"}, 0x14) (async) accept$inet(r5, &(0x7f0000000180)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000440)="ff915a45d7c5f7c8568ebdc57386a19e302e55f53d1b2a9388fd12ad903c29d3e976d8100612cd0800000000000000d7a274b8c2401413676458fa504e09e887ef6ff0cdd758010df00f564a11c1713dbcabd72ba811021faee1ac8d79bebdc3fe43f43c66e89dd70c176a25738767a6a417a9ef94cf1b85c3d2", 0x7a}, {&(0x7f0000000500)="06bab072b09e636fc7e486e1c1f30ed7b8376c131e7753d31930827e07d44a4c06c3a6a3630fbb1ed4b84bb6e674968e67310078013dc9f2503bf09b4c93ba0f48a556bae048a362dd2f", 0x4a}, {&(0x7f0000000c40)="ec32075af1322e1c7e56eb9fcbba3252033944c118ac35c5373bec014f4bdb6c4de024a1b6565077626daaac314db078b7568221bd5e8259c1e32a3af2c680a86a67ff0df9", 0x45}, {&(0x7f0000000600)="a9ef4d07e893054155829967a251655a0f074e8c92d77db90c391c6fc8e119ad2021b5aa814e26805a1de486be6a34e7d46dfe23ed511e7c803b84272cbef991ce0b0b6600e9c680beae8e6bf430af34c60f7b2083256d2d5e91ca2ceb9d2492c2f507bbf77adbfffda6b088582edb495fb2526892750995e30868b8c897cc972329a6ddef3ba1922141981efdd51c2a495a181d1de8a9d0b3", 0x99}, {&(0x7f00000013c0)="057fd08656a165bd0dccb631c436c81971cae814c374abb2401493d87b7ecdf51e98b91c95c1d78878911c02c326cec93b8bfa168428fce1e9eeed0444eacbe8a3c5992f844221b9651a50fbe693675fcdbabc590979027e059bec27e65108bbb0a9f337a3f110fd12cb4141d126d600cd4b5aeed5019bb1d589523b61ef61cde70d51f84d9d719b300084552c3ba2d9c799de1c75e1049889dc118828b7764e30291077aefb1535d1a1d51dd8beb2435613b5eff84397a4a4c03db093dfc74840835bb91d4dffea1051fdc62f6b81da8336aee50300b2b2922323ed021da7bde19c643781edaec4ba6d84c44ba3c73a3c84dde405d67c73da63cc9662cd5b866a919290c738749c77c2f816c92ff1a8668e11000d1278c09c5f68a39338bcfb83cbb9627fdc439f5864fdee3112ac2a21d8", 0x132}, {&(0x7f00000007c0)="a854f23e82daddef695070a2506f0bfc18f4a4c6b07f160b7037122633343c67302980e5bb01c03eb16e705487c7399acc513292", 0x34}], 0x6, &(0x7f0000001500)=ANY=[@ANYRES8=r3, @ANYRES32, @ANYBLOB="92e58f85c9cb98dbfd140e13c0b2121fed039f13af64a68d0751135db097479c0d4a925be660c2230e5b49126ed89a8bd98bdab7547eb3048646839bace09a6c97a6167d130a650db45897adce5ea0d4d4776e7c76939526133a873b41544e86d824fe094f0990a52cee6ee99239b828813d68120355d478cb419fc8e96fd023c503000039363f2b9a600a5e844de28fe013976ea65fbcff75cb000000000000040000008a9a54c658bacea7186c07ed699be2c49629343c82535d096857fd169d41b1063cfa5bc0ae450642c67750aad01c2b93a6f2036337a0318b56d78abb23484c421690c9c4e09bf7698d1967f7bd8f17ed54c6", @ANYRESOCT=0x0, @ANYRES32=0xee00, @ANYRESHEX=0x0, @ANYRESHEX=r4, @ANYRES32=r5, @ANYRESHEX, @ANYRES8=0xffffffffffffffff, @ANYRES32, @ANYRES32=r1, @ANYRES8=r3, @ANYRESDEC, @ANYRESOCT=r3], 0xa0}, 0x20044910) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) (async) sendmmsg$inet6(r10, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000140)=ANY=[], 0x2c}, {&(0x7f00000006c0)=ANY=[@ANYRES8, @ANYRES64, @ANYRESOCT, @ANYRES32=r2, @ANYBLOB="0400290033007100fcc9000000000000000000000000000000001400560020010000000000000000000000000000d200001e6bc89ff9d222841cb751f657e2ad67991b60acdd6bb81090855902176ea73597dd232572fb849445a231354db4cc592b5011edddbb0c7fe28c6d2f55c277a06035203f2e00f2223328807bca4f5c", @ANYRES16, @ANYRES64=r5], 0x3b0}, {&(0x7f0000002bc0)=ANY=[@ANYRES32, @ANYRESDEC=r7, @ANYRES32=r8, @ANYRESOCT=r10, @ANYBLOB="00000000d75d17e6193fafe207b25360fb1fe2edb8f9c509000e606ba7ea7d9370a86000000000000000adb4e9523a5ebc6fbc658f05908646d5a146c3c0dd5113a2f11b9b31147ad27370100207d17ce4220f6088557280ce35d818943e00e2a9e2e5637901e050ae7deb9a", @ANYRES32, @ANYRES8, @ANYRESOCT, @ANYRES64], 0x200}, {&(0x7f0000000d40)=ANY=[@ANYBLOB="6cad925bcc03618e8446bae956dcd50100acc9122b08edd78735e40b661dd47fc0f8970eff8cd61b868901800000000000009db7bd4dad9ca28eb6424af33a078751df7756e14f14e985f9ba2631fa7103450114002500000000000000c4d1cbe918706519000108006d00000000000200000000000000030000a10927264953a08d20cc514eaf", @ANYRES32, @ANYRESOCT=r3], 0x16c}], 0x4}, 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000001140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600000f500200600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=r9, @ANYRES32=0x41424344, @ANYBLOB="800209000000000000001e0a0600000014aa00000000"], 0x0) (async, rerun: 32) syz_emit_ethernet(0x5a, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a843500240600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=r9, @ANYBLOB="90020000907d6529912276e08a4286000000305300002a448bffe0540000000000"], 0x0) (async, rerun: 32) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x305, &(0x7f0000000380)={@random="06061af58a54", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@val={0x88a8, 0x1, 0x0, 0x2}, {0x8100, 0x4, 0x0, 0x4}}, {@ipv6={0x86dd, @tcp={0x3, 0x6, '5N\'', 0x2c7, 0x6, 0xff, @loopback, @private2, {[@hopopts={0x3a, 0x8, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x2, 0xe, 0x3f, 0x0, [0x1, 0x6, 0x4, 0x0, 0x74, 0x0, 0xffffffffffffffff]}}]}, @hopopts={0x29, 0x13, '\x00', [@generic={0x6, 0x87, "3f035b0b4ec452c8f223b174aa2ec2fe510e15d2abb6df7f2f452e654c8e716d78b2c8b27bf32f4f76be7a34c99b4ec2ecda96502639abb4deebef4a6e8c7b522a34363f84a7bafe8ebfdbcfb83e71143e0b00c86b174b0a87f80362179fc28573976f52a95d6aad58022df5529a09ddbe7c2465e5624faef937233dd496b1771fa080ff0e5352"}, @jumbo, @ra={0x5, 0x2, 0x1902}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @hopopts={0x4, 0x2, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x0, 0x153a, [0x0]}}]}, @hopopts={0x3a, 0x10, '\x00', [@hao={0xc9, 0x10, @private2}, @calipso={0x7, 0x28, {0x2, 0x8, 0x0, 0x9, [0xffffffffffff8001, 0x9, 0x9, 0x2]}}, @calipso={0x7, 0x48, {0x0, 0x10, 0x9, 0xd03, [0x8, 0x6, 0x2, 0xfffffffffffffff8, 0x8000000000000000, 0xfd69, 0x6, 0xff]}}]}], {{0x4e23, 0x4e21, r9, r12, 0x1, 0x0, 0x12, 0x4, 0x8, 0x0, 0x100, {[@sack={0x5, 0x22, [0x368, 0x6, 0x3, 0x4, 0x1, 0x6, 0x5, 0x80]}, @fastopen={0x22, 0xc, "c367a340e3486621578d"}, @exp_smc={0xfe, 0x6}]}}, {"115f241a158d15423ee32cf96519a74f982ed8b05f91cf40d7586e59c65e3bd5493015d8a39c0c2263749fbace4913dc2fcafc9933edba6a9af430a8b94780cc4214f0ac0554ff6bae0532d8e5c15fce907dfb4df3496bc743764f2999057fb1f3b57248ded51c3d25c7165242dc26761f64c8618f71790237dcea813e11c2c1779947c8a77c67181a27674e1cc10347ce637f01917ae70d76e18d015f462e676f3b84d7a38be71d62d5d441c7f5bcc81676218c7c99fc7c34e947944d8770019d674cd43cc16e8d10d515c6bd630fa2ad7e533d46fc8674883307066de83c"}}}}}}}, &(0x7f0000000040)={0x0, 0x4, [0x658, 0x3cf, 0xab, 0x6b6]}) syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344, 0x41424344}, 0x1, 0x0) write$tun(r0, &(0x7f00000016c0)={@val, @val={0x1, 0x1, 0x3, 0x6, 0x8001, 0xfff9}, @mpls={[{0x9}, {0xffff, 0x0, 0x1}, {0x7f}], @ipv6=@tcp={0xb, 0x6, "16ee85", 0x1f1, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x3c}, {[@dstopts={0x21, 0x4, '\x00', [@pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0xc, 0x10, 0x1, 0x3, 0x0, [@mcast1, @local, @loopback, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @local]}, @dstopts={0x0, 0x2, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0x1, 0xcee7}}, @jumbo={0xc2, 0x4, 0x4}, @pad1]}], {{0x4e24, 0x4e21, r9, r13, 0x1, 0x0, 0x9, 0x2, 0x2, 0x0, 0xffff, {[@sack_perm={0x4, 0x2}, @generic={0x5, 0xd, "f68d48d9a7d0dcdc663f29"}, @eol]}}, {"a3bfbc842dd9708680876ccabc48a0faeefaa52f06e3bf61e53bb125ebd9a3d6d4394ef136a89876f668855866384e4d37c8df4e08b624396e4dcbaa3085c974756f099ee136c7e9cc68a29e09502feeb7f067ee6ba1201e9b2f483cbc16889a19e5aa71469021c253911124602384d622f795fb53b77b0066896e83f5a26c073571197e680f828b0c030daf37c54ab9e7f0c1ad39f7560166b58eef3a51e5f2c369a33c9d395f2087c59886cf58d65be60212bf49aaacbb17d02c5f8cf87efd3a53d684eab980e6c2ba15aacf4a0d41ac6f58830dd1ea28dc6921b48c939e7b08bd8964c77718621ae19c565ef990eaa01f2b6282"}}}}}}, 0x233) r14 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r15 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r15, 0x107, 0x12, &(0x7f0000000040), 0x4) (async) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) 00:16:06 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x1000000, 0x0}) 00:16:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4102, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'ip_vti0\x00', @multicast}) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') [ 2970.214866][ T7699] binder: BINDER_SET_CONTEXT_MGR already set [ 2970.231213][ T7699] binder: 7698:7699 ioctl 4018620d 20000040 returned -16 00:16:06 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x2000000, 0x0}) 00:16:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:16:06 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4102, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4102, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'ip_vti0\x00', @multicast}) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:16:06 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x3000000, 0x0}) 00:16:06 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0xb, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:16:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4102, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'ip_vti0\x00', @multicast}) (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:16:06 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x9d, &(0x7f0000000000)=""/157, 0x41100}, 0x90) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x9d, &(0x7f0000000000)=""/157, 0x41100}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002840)={&(0x7f00000008c0)='percpu_alloc_percpu_fail\x00', r1}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f00000001c0)="120000001600e7fb007b0000000001f0d589", 0x12, 0x0, 0x0, 0x0) recvfrom$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x2, 0x0, @loopback}, 0x10) (async) recvfrom$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000a80)={'ip6tnl0\x00', &(0x7f0000000b80)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0xfc, 0xffffff02, 0x78, @dev={0xfe, 0x80, '\x00', 0x2b}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7f18, 0x8, 0x200, 0x6}}) bind$packet(r5, &(0x7f0000000c00)={0x11, 0xf6, r6, 0x1, 0x80, 0x6, @random="338979d39529"}, 0x14) accept$inet(r5, &(0x7f0000000180)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000440)="ff915a45d7c5f7c8568ebdc57386a19e302e55f53d1b2a9388fd12ad903c29d3e976d8100612cd0800000000000000d7a274b8c2401413676458fa504e09e887ef6ff0cdd758010df00f564a11c1713dbcabd72ba811021faee1ac8d79bebdc3fe43f43c66e89dd70c176a25738767a6a417a9ef94cf1b85c3d2", 0x7a}, {&(0x7f0000000500)="06bab072b09e636fc7e486e1c1f30ed7b8376c131e7753d31930827e07d44a4c06c3a6a3630fbb1ed4b84bb6e674968e67310078013dc9f2503bf09b4c93ba0f48a556bae048a362dd2f", 0x4a}, {&(0x7f0000000c40)="ec32075af1322e1c7e56eb9fcbba3252033944c118ac35c5373bec014f4bdb6c4de024a1b6565077626daaac314db078b7568221bd5e8259c1e32a3af2c680a86a67ff0df9", 0x45}, {&(0x7f0000000600)="a9ef4d07e893054155829967a251655a0f074e8c92d77db90c391c6fc8e119ad2021b5aa814e26805a1de486be6a34e7d46dfe23ed511e7c803b84272cbef991ce0b0b6600e9c680beae8e6bf430af34c60f7b2083256d2d5e91ca2ceb9d2492c2f507bbf77adbfffda6b088582edb495fb2526892750995e30868b8c897cc972329a6ddef3ba1922141981efdd51c2a495a181d1de8a9d0b3", 0x99}, {&(0x7f00000013c0)="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", 0x132}, {&(0x7f00000007c0)="a854f23e82daddef695070a2506f0bfc18f4a4c6b07f160b7037122633343c67302980e5bb01c03eb16e705487c7399acc513292", 0x34}], 0x6, &(0x7f0000001500)=ANY=[@ANYRES8=r3, @ANYRES32, @ANYBLOB="92e58f85c9cb98dbfd140e13c0b2121fed039f13af64a68d0751135db097479c0d4a925be660c2230e5b49126ed89a8bd98bdab7547eb3048646839bace09a6c97a6167d130a650db45897adce5ea0d4d4776e7c76939526133a873b41544e86d824fe094f0990a52cee6ee99239b828813d68120355d478cb419fc8e96fd023c503000039363f2b9a600a5e844de28fe013976ea65fbcff75cb000000000000040000008a9a54c658bacea7186c07ed699be2c49629343c82535d096857fd169d41b1063cfa5bc0ae450642c67750aad01c2b93a6f2036337a0318b56d78abb23484c421690c9c4e09bf7698d1967f7bd8f17ed54c6", @ANYRESOCT=0x0, @ANYRES32=0xee00, @ANYRESHEX=0x0, @ANYRESHEX=r4, @ANYRES32=r5, @ANYRESHEX, @ANYRES8=0xffffffffffffffff, @ANYRES32, @ANYRES32=r1, @ANYRES8=r3, @ANYRESDEC, @ANYRESOCT=r3], 0xa0}, 0x20044910) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) (async) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r10, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000140)=ANY=[], 0x2c}, {&(0x7f00000006c0)=ANY=[@ANYRES8, @ANYRES64, @ANYRESOCT, @ANYRES32=r2, @ANYBLOB="0400290033007100fcc9000000000000000000000000000000001400560020010000000000000000000000000000d200001e6bc89ff9d222841cb751f657e2ad67991b60acdd6bb81090855902176ea73597dd232572fb849445a231354db4cc592b5011edddbb0c7fe28c6d2f55c277a06035203f2e00f2223328807bca4f5c", @ANYRES16, @ANYRES64=r5], 0x3b0}, {&(0x7f0000002bc0)=ANY=[@ANYRES32, @ANYRESDEC=r7, @ANYRES32=r8, @ANYRESOCT=r10, @ANYBLOB="00000000d75d17e6193fafe207b25360fb1fe2edb8f9c509000e606ba7ea7d9370a86000000000000000adb4e9523a5ebc6fbc658f05908646d5a146c3c0dd5113a2f11b9b31147ad27370100207d17ce4220f6088557280ce35d818943e00e2a9e2e5637901e050ae7deb9a", @ANYRES32, @ANYRES8, @ANYRESOCT, @ANYRES64], 0x200}, {&(0x7f0000000d40)=ANY=[@ANYBLOB="6cad925bcc03618e8446bae956dcd50100acc9122b08edd78735e40b661dd47fc0f8970eff8cd61b868901800000000000009db7bd4dad9ca28eb6424af33a078751df7756e14f14e985f9ba2631fa7103450114002500000000000000c4d1cbe918706519000108006d00000000000200000000000000030000a10927264953a08d20cc514eaf", @ANYRES32, @ANYRESOCT=r3], 0x16c}], 0x4}, 0x0) (async) sendmsg$netlink(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000140)=ANY=[], 0x2c}, {&(0x7f00000006c0)=ANY=[@ANYRES8, @ANYRES64, @ANYRESOCT, @ANYRES32=r2, @ANYBLOB="0400290033007100fcc9000000000000000000000000000000001400560020010000000000000000000000000000d200001e6bc89ff9d222841cb751f657e2ad67991b60acdd6bb81090855902176ea73597dd232572fb849445a231354db4cc592b5011edddbb0c7fe28c6d2f55c277a06035203f2e00f2223328807bca4f5c", @ANYRES16, @ANYRES64=r5], 0x3b0}, {&(0x7f0000002bc0)=ANY=[@ANYRES32, @ANYRESDEC=r7, @ANYRES32=r8, @ANYRESOCT=r10, @ANYBLOB="00000000d75d17e6193fafe207b25360fb1fe2edb8f9c509000e606ba7ea7d9370a86000000000000000adb4e9523a5ebc6fbc658f05908646d5a146c3c0dd5113a2f11b9b31147ad27370100207d17ce4220f6088557280ce35d818943e00e2a9e2e5637901e050ae7deb9a", @ANYRES32, @ANYRES8, @ANYRESOCT, @ANYRES64], 0x200}, {&(0x7f0000000d40)=ANY=[@ANYBLOB="6cad925bcc03618e8446bae956dcd50100acc9122b08edd78735e40b661dd47fc0f8970eff8cd61b868901800000000000009db7bd4dad9ca28eb6424af33a078751df7756e14f14e985f9ba2631fa7103450114002500000000000000c4d1cbe918706519000108006d00000000000200000000000000030000a10927264953a08d20cc514eaf", @ANYRES32, @ANYRESOCT=r3], 0x16c}], 0x4}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000001140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600000f500200600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=r9, @ANYRES32=0x41424344, @ANYBLOB="800209000000000000001e0a0600000014aa00000000"], 0x0) syz_emit_ethernet(0x5a, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a843500240600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=r9, @ANYBLOB="90020000907d6529912276e08a4286000000305300002a448bffe0540000000000"], 0x0) (async) syz_emit_ethernet(0x5a, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a843500240600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=r9, @ANYBLOB="90020000907d6529912276e08a4286000000305300002a448bffe0540000000000"], 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) (async) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x305, &(0x7f0000000380)={@random="06061af58a54", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@val={0x88a8, 0x1, 0x0, 0x2}, {0x8100, 0x4, 0x0, 0x4}}, {@ipv6={0x86dd, @tcp={0x3, 0x6, '5N\'', 0x2c7, 0x6, 0xff, @loopback, @private2, {[@hopopts={0x3a, 0x8, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x2, 0xe, 0x3f, 0x0, [0x1, 0x6, 0x4, 0x0, 0x74, 0x0, 0xffffffffffffffff]}}]}, @hopopts={0x29, 0x13, '\x00', [@generic={0x6, 0x87, "3f035b0b4ec452c8f223b174aa2ec2fe510e15d2abb6df7f2f452e654c8e716d78b2c8b27bf32f4f76be7a34c99b4ec2ecda96502639abb4deebef4a6e8c7b522a34363f84a7bafe8ebfdbcfb83e71143e0b00c86b174b0a87f80362179fc28573976f52a95d6aad58022df5529a09ddbe7c2465e5624faef937233dd496b1771fa080ff0e5352"}, @jumbo, @ra={0x5, 0x2, 0x1902}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @hopopts={0x4, 0x2, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x0, 0x153a, [0x0]}}]}, @hopopts={0x3a, 0x10, '\x00', [@hao={0xc9, 0x10, @private2}, @calipso={0x7, 0x28, {0x2, 0x8, 0x0, 0x9, [0xffffffffffff8001, 0x9, 0x9, 0x2]}}, @calipso={0x7, 0x48, {0x0, 0x10, 0x9, 0xd03, [0x8, 0x6, 0x2, 0xfffffffffffffff8, 0x8000000000000000, 0xfd69, 0x6, 0xff]}}]}], {{0x4e23, 0x4e21, r9, r12, 0x1, 0x0, 0x12, 0x4, 0x8, 0x0, 0x100, {[@sack={0x5, 0x22, [0x368, 0x6, 0x3, 0x4, 0x1, 0x6, 0x5, 0x80]}, @fastopen={0x22, 0xc, "c367a340e3486621578d"}, @exp_smc={0xfe, 0x6}]}}, {"115f241a158d15423ee32cf96519a74f982ed8b05f91cf40d7586e59c65e3bd5493015d8a39c0c2263749fbace4913dc2fcafc9933edba6a9af430a8b94780cc4214f0ac0554ff6bae0532d8e5c15fce907dfb4df3496bc743764f2999057fb1f3b57248ded51c3d25c7165242dc26761f64c8618f71790237dcea813e11c2c1779947c8a77c67181a27674e1cc10347ce637f01917ae70d76e18d015f462e676f3b84d7a38be71d62d5d441c7f5bcc81676218c7c99fc7c34e947944d8770019d674cd43cc16e8d10d515c6bd630fa2ad7e533d46fc8674883307066de83c"}}}}}}}, &(0x7f0000000040)={0x0, 0x4, [0x658, 0x3cf, 0xab, 0x6b6]}) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) (async) syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344, 0x41424344}, 0x1, 0x0) write$tun(r0, &(0x7f00000016c0)={@val, @val={0x1, 0x1, 0x3, 0x6, 0x8001, 0xfff9}, @mpls={[{0x9}, {0xffff, 0x0, 0x1}, {0x7f}], @ipv6=@tcp={0xb, 0x6, "16ee85", 0x1f1, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x3c}, {[@dstopts={0x21, 0x4, '\x00', [@pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0xc, 0x10, 0x1, 0x3, 0x0, [@mcast1, @local, @loopback, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @local]}, @dstopts={0x0, 0x2, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0x1, 0xcee7}}, @jumbo={0xc2, 0x4, 0x4}, @pad1]}], {{0x4e24, 0x4e21, r9, r13, 0x1, 0x0, 0x9, 0x2, 0x2, 0x0, 0xffff, {[@sack_perm={0x4, 0x2}, @generic={0x5, 0xd, "f68d48d9a7d0dcdc663f29"}, @eol]}}, {"a3bfbc842dd9708680876ccabc48a0faeefaa52f06e3bf61e53bb125ebd9a3d6d4394ef136a89876f668855866384e4d37c8df4e08b624396e4dcbaa3085c974756f099ee136c7e9cc68a29e09502feeb7f067ee6ba1201e9b2f483cbc16889a19e5aa71469021c253911124602384d622f795fb53b77b0066896e83f5a26c073571197e680f828b0c030daf37c54ab9e7f0c1ad39f7560166b58eef3a51e5f2c369a33c9d395f2087c59886cf58d65be60212bf49aaacbb17d02c5f8cf87efd3a53d684eab980e6c2ba15aacf4a0d41ac6f58830dd1ea28dc6921b48c939e7b08bd8964c77718621ae19c565ef990eaa01f2b6282"}}}}}}, 0x233) (async) write$tun(r0, &(0x7f00000016c0)={@val, @val={0x1, 0x1, 0x3, 0x6, 0x8001, 0xfff9}, @mpls={[{0x9}, {0xffff, 0x0, 0x1}, {0x7f}], @ipv6=@tcp={0xb, 0x6, "16ee85", 0x1f1, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x3c}, {[@dstopts={0x21, 0x4, '\x00', [@pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0xc, 0x10, 0x1, 0x3, 0x0, [@mcast1, @local, @loopback, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @local]}, @dstopts={0x0, 0x2, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0x1, 0xcee7}}, @jumbo={0xc2, 0x4, 0x4}, @pad1]}], {{0x4e24, 0x4e21, r9, r13, 0x1, 0x0, 0x9, 0x2, 0x2, 0x0, 0xffff, {[@sack_perm={0x4, 0x2}, @generic={0x5, 0xd, "f68d48d9a7d0dcdc663f29"}, @eol]}}, {"a3bfbc842dd9708680876ccabc48a0faeefaa52f06e3bf61e53bb125ebd9a3d6d4394ef136a89876f668855866384e4d37c8df4e08b624396e4dcbaa3085c974756f099ee136c7e9cc68a29e09502feeb7f067ee6ba1201e9b2f483cbc16889a19e5aa71469021c253911124602384d622f795fb53b77b0066896e83f5a26c073571197e680f828b0c030daf37c54ab9e7f0c1ad39f7560166b58eef3a51e5f2c369a33c9d395f2087c59886cf58d65be60212bf49aaacbb17d02c5f8cf87efd3a53d684eab980e6c2ba15aacf4a0d41ac6f58830dd1ea28dc6921b48c939e7b08bd8964c77718621ae19c565ef990eaa01f2b6282"}}}}}}, 0x233) socket$kcm(0x2, 0xa, 0x2) (async) r14 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r15 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r15, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) (async) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) 00:16:06 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x4000000, 0x0}) 00:16:06 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0xc, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:16:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) [ 2970.593547][ T7735] binder: BINDER_SET_CONTEXT_MGR already set [ 2970.606876][ T7735] binder: 7734:7735 ioctl 4018620d 20000040 returned -16 00:16:06 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0xd, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:16:06 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x5000000, 0x0}) 00:16:06 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0xe, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) 00:16:06 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) splice(r4, &(0x7f0000000100)=0xb0, r2, &(0x7f0000000140)=0x3, 0x40, 0xf) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) 00:16:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:16:06 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x6000000, 0x0}) 00:16:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'ip6_vti0\x00', @random="a5888a2261ef"}) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, r1, &(0x7f00000000c0)) 00:16:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:16:06 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x10, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:06 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x7000000, 0x0}) 00:16:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'ip6_vti0\x00', @random="a5888a2261ef"}) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, r1, &(0x7f00000000c0)) [ 2970.935245][ T7763] __nla_validate_parse: 66 callbacks suppressed [ 2970.935264][ T7763] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2970.959298][ T7769] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2970.971827][ T7768] binder: BINDER_SET_CONTEXT_MGR already set [ 2970.978191][ T7768] binder: 7767:7768 ioctl 4018620d 20000040 returned -16 00:16:06 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x11, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:06 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) splice(r4, &(0x7f0000000100)=0xb0, r2, &(0x7f0000000140)=0x3, 0x40, 0xf) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) socket$packet(0x11, 0x2, 0x300) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_ro(r3, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) (async) splice(r4, &(0x7f0000000100)=0xb0, r2, &(0x7f0000000140)=0x3, 0x40, 0xf) (async) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) (async) 00:16:06 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x8000000, 0x0}) 00:16:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:16:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'ip6_vti0\x00', @random="a5888a2261ef"}) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async, rerun: 64) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (rerun: 64) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, r1, &(0x7f00000000c0)) 00:16:07 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x9000000, 0x0}) 00:16:07 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x12, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2971.107533][ T7778] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 00:16:07 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='com.apple.FinderInfo\x00') 00:16:07 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0xa000000, 0x0}) 00:16:07 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x18, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2971.190605][ T7787] binder: BINDER_SET_CONTEXT_MGR already set [ 2971.199906][ T7787] binder: 7786:7787 ioctl 4018620d 20000040 returned -16 [ 2971.226780][ T7778] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 00:16:07 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0xb000000, 0x0}) 00:16:07 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='com.apple.FinderInfo\x00') (async) fremovexattr(r0, &(0x7f0000000040)=@known='com.apple.FinderInfo\x00') [ 2971.255224][ T7792] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 00:16:07 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x25, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:16:07 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='com.apple.FinderInfo\x00') 00:16:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) splice(r4, &(0x7f0000000100)=0xb0, r2, &(0x7f0000000140)=0x3, 0x40, 0xf) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) socket$packet(0x11, 0x2, 0x300) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_ro(r3, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) (async) splice(r4, &(0x7f0000000100)=0xb0, r2, &(0x7f0000000140)=0x3, 0x40, 0xf) (async) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) (async) 00:16:07 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0xc000000, 0x0}) 00:16:07 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x5c, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:07 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x300, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2971.441957][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2971.466429][ T7809] binder: BINDER_SET_CONTEXT_MGR already set 00:16:07 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0xd000000, 0x0}) [ 2971.483478][ T7805] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2971.493160][ T7809] binder: 7806:7809 ioctl 4018620d 20000040 returned -16 00:16:07 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x100) fremovexattr(r0, &(0x7f0000000000)=@random={'user.', '!\x00'}) 00:16:07 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x500, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2971.553185][ T7805] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 00:16:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) [ 2971.595086][ T7819] binder: BINDER_SET_CONTEXT_MGR already set [ 2971.610009][ T7819] binder: 7818:7819 ioctl 4018620d 20000040 returned -16 00:16:07 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0xe000000, 0x0}) 00:16:07 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x100) (async) fremovexattr(r0, &(0x7f0000000000)=@random={'user.', '!\x00'}) 00:16:07 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x600, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2971.659668][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2971.692687][ T7824] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 00:16:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x29, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x0, 0x6, 0xfc, 0x1fb}, {0x3ff, 0x40, 0x1, 0x800}, {0x101, 0x40, 0x40}, {0x7f, 0x0, 0xc1, 0x2}, {0x3, 0x6, 0x1f, 0x9}]}, 0x10) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) 00:16:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:16:07 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x100) (async) fremovexattr(r0, &(0x7f0000000000)=@random={'user.', '!\x00'}) 00:16:07 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x10000000, 0x0}) 00:16:07 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000000)={'veth0_to_bridge\x00'}) 00:16:07 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x700, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:07 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x11000000, 0x0}) 00:16:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x29, 0x2, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x0, 0x6, 0xfc, 0x1fb}, {0x3ff, 0x40, 0x1, 0x800}, {0x101, 0x40, 0x40}, {0x7f, 0x0, 0xc1, 0x2}, {0x3, 0x6, 0x1f, 0x9}]}, 0x10) (async) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x0, 0x6, 0xfc, 0x1fb}, {0x3ff, 0x40, 0x1, 0x800}, {0x101, 0x40, 0x40}, {0x7f, 0x0, 0xc1, 0x2}, {0x3, 0x6, 0x1f, 0x9}]}, 0x10) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) 00:16:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:16:07 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000000)={'veth0_to_bridge\x00'}) 00:16:07 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x900, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:07 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x12000000, 0x0}) 00:16:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:16:07 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000000)={'veth0_to_bridge\x00'}) 00:16:08 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x18000000, 0x0}) 00:16:08 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0xa00, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x29, 0x2, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x0, 0x6, 0xfc, 0x1fb}, {0x3ff, 0x40, 0x1, 0x800}, {0x101, 0x40, 0x40}, {0x7f, 0x0, 0xc1, 0x2}, {0x3, 0x6, 0x1f, 0x9}]}, 0x10) (async) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) 00:16:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'ip_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x46}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x8000}) fremovexattr(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="f88babc1f6836a131ee8fac8e2c15dd8b07fcc9d957d26ed98b48d5383227db59a137da37ac1860479585c07beea4863a38c9540b5ff8572499aedcadaa847ca0f27b9638e20080ce73603c21d0a622f655f0568375bd38755bace290f84836d06227c4e8ff56bbf5a382abc690e1561a8324936996758bc74b1ba1ccaa86ef7a43d471006b5cfd14a53562722fbfd6f22fb1c5462ba8ec91739528087e3b32e4d", @ANYRES64=r0, @ANYRES8=r0]) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x22200, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000100)={'ip_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}) 00:16:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:16:08 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x25000000, 0x0}) 00:16:08 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0xb00, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'ip_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x46}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x8000}) (async) fremovexattr(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="f88babc1f6836a131ee8fac8e2c15dd8b07fcc9d957d26ed98b48d5383227db59a137da37ac1860479585c07beea4863a38c9540b5ff8572499aedcadaa847ca0f27b9638e20080ce73603c21d0a622f655f0568375bd38755bace290f84836d06227c4e8ff56bbf5a382abc690e1561a8324936996758bc74b1ba1ccaa86ef7a43d471006b5cfd14a53562722fbfd6f22fb1c5462ba8ec91739528087e3b32e4d", @ANYRES64=r0, @ANYRES8=r0]) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x22200, 0x0) (rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000100)={'ip_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}) 00:16:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:16:08 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0xc00, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:08 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x5c000000, 0x0}) 00:16:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val={0x1}, @mpls={[], @ipv6=@udp={0x0, 0x6, "000100", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, {[], {0x4e21, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) 00:16:08 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0xfcffffff, 0x0}) 00:16:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'ip_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x46}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x8000}) fremovexattr(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="f88babc1f6836a131ee8fac8e2c15dd8b07fcc9d957d26ed98b48d5383227db59a137da37ac1860479585c07beea4863a38c9540b5ff8572499aedcadaa847ca0f27b9638e20080ce73603c21d0a622f655f0568375bd38755bace290f84836d06227c4e8ff56bbf5a382abc690e1561a8324936996758bc74b1ba1ccaa86ef7a43d471006b5cfd14a53562722fbfd6f22fb1c5462ba8ec91739528087e3b32e4d", @ANYRES64=r0, @ANYRES8=r0]) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x22200, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000100)={'ip_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'ip_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x46}}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x8000}) (async) fremovexattr(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="f88babc1f6836a131ee8fac8e2c15dd8b07fcc9d957d26ed98b48d5383227db59a137da37ac1860479585c07beea4863a38c9540b5ff8572499aedcadaa847ca0f27b9638e20080ce73603c21d0a622f655f0568375bd38755bace290f84836d06227c4e8ff56bbf5a382abc690e1561a8324936996758bc74b1ba1ccaa86ef7a43d471006b5cfd14a53562722fbfd6f22fb1c5462ba8ec91739528087e3b32e4d", @ANYRES64=r0, @ANYRES8=r0]) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x22200, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000100)={'ip_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}) (async) 00:16:08 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0xd00, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:08 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0xfdfdffff, 0x0}) 00:16:08 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0xe00, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:16:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x100}) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0xd93a4ac3e1493d2f, 0x0) fchdir(r1) 00:16:08 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val={0x1}, @mpls={[], @ipv6=@udp={0x0, 0x6, "000100", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, {[], {0x4e21, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) 00:16:08 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0xfffffdfd, 0x0}) 00:16:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x100}) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0xd93a4ac3e1493d2f, 0x0) fchdir(r1) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x100}) (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0xd93a4ac3e1493d2f, 0x0) (async) fchdir(r1) (async) 00:16:08 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x1100, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:16:08 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0xffffff7f, 0x0}) 00:16:08 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x1200, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x100}) (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0xd93a4ac3e1493d2f, 0x0) fchdir(r1) 00:16:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:16:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val={0x1}, @mpls={[], @ipv6=@udp={0x0, 0x6, "000100", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, {[], {0x4e21, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) 00:16:08 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x1800, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:08 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0xfffffffc, 0x0}) 00:16:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0xfffffffb, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x7}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r2, 0x6, 0x6, 0x5, 0x2, 0x2}, &(0x7f0000000140)=0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@private1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f00000003c0)=0xe8) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={r3, r4, 0xffffffffffffffff}, 0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180), &(0x7f0000000200)=0x4) fremovexattr(r1, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:16:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="010000002eee00001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="48000000240051860000000000ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB='8\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00', @ANYRES32=r4, @ANYBLOB="0000f3ff00000000090000000b0001006367726f75700000080002"], 0x38}}, 0x0) 00:16:08 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x2500, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2973.009924][ T7939] binder: BINDER_SET_CONTEXT_MGR already set [ 2973.037475][ T7939] binder: 7935:7939 ioctl 4018620d 20000040 returned -16 00:16:09 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x5c00, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:09 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x1000000000000, 0x0}) 00:16:09 executing program 1: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0xfffffffb, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x7}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r2, 0x6, 0x6, 0x5, 0x2, 0x2}, &(0x7f0000000140)=0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@private1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f00000003c0)=0xe8) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={r3, r4, 0xffffffffffffffff}, 0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180), &(0x7f0000000200)=0x4) fremovexattr(r1, &(0x7f0000000080)=@known='system.posix_acl_default\x00') socket$inet6_sctp(0xa, 0x0, 0x84) (async) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0xfffffffb, 0x4) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x7}, &(0x7f00000000c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r2, 0x6, 0x6, 0x5, 0x2, 0x2}, &(0x7f0000000140)=0x14) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@private1, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f00000003c0)=0xe8) (async) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={r3, r4, 0xffffffffffffffff}, 0xc) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180), &(0x7f0000000200)=0x4) (async) fremovexattr(r1, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) 00:16:09 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000014c0)={'dummy0\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_clone3(&(0x7f0000000440)={0x200000, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100), {0x34}, &(0x7f0000000140)=""/50, 0x32, &(0x7f0000000340)=""/200, &(0x7f00000001c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x4}, 0x58) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000004c0)={0x0, "13216211cc0542e12379eb4588c51146"}) r2 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000001540)={@void, @void, @mpls={[{0x8d5}, {0x1f}], @ipv6=@generic={0x0, 0x6, "c0adeb", 0x2d6, 0xdc5627f022799849, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[@dstopts={0x32, 0x1d, '\x00', [@ra={0x5, 0x2, 0x800}, @generic={0x1, 0xe3, "c7d5f584c775d60dbfdf66a2531fb22e847826e464975bfb4fd404b144626a66fd5d2ef67195483c6ffd26bf3b04b83067c2cc1b6493e1ea5480a8b60dc24cdb58360e4fc98d36ef860aae981327b81736516827538323929f29728986cc55d3402ffb357e52c76032ecfbb37a6960e4be0250f8c12530f8616f7707d133f7ad595d161b0391745e5586270f56d30c81ad1e07fdff9a9df7383e66b6a74683ba70ab8e41d86e05b1b498a822e80c5bc459443a44e4172a6cdc3e54e8405cb21fc96e2c54ccb61e3f0f0078d79f2b07fd62980e6a583dfb2171f49d659bdfa3b3be72b0"}, @jumbo]}, @srh={0xa5, 0xa, 0x4, 0x5, 0x80, 0x48, 0x9, [@private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private0={0xfc, 0x0, '\x00', 0x1}]}, @routing={0x2b, 0x6, 0x0, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3a}, @loopback, @loopback]}, @routing={0x1, 0x4, 0x0, 0x80, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @hopopts={0xc, 0x6, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x1, 0xff, [0x2, 0xcc]}}, @jumbo={0xc2, 0x4, 0x79a3a41b}, @calipso={0x7, 0x10, {0x3, 0x2, 0x9, 0x386, [0x7fff]}}]}, @srh={0x34, 0xa, 0x4, 0x5, 0x60, 0x38, 0x8001, [@empty, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2d}, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}]}], "1952b2de986b46b2725d0e9bc0d42cce1737cad903f5e1c43f7cb5f793ca259e7e77e9ab872f92900f8fb5851dfb26ac698a9f6aa1c1f6319e5ad8bcb29c04b4f1759dca1872ddb39f9df06a9fae352306306c7cccd28a9511c3aeb1bcd77ff2efa7014e345e5fc2ed1c3fcfaac5fe21bf7120095c93f5a96bef42ce6ab3ec0203cd5b537d8eb7a2902280b53632"}}}}, 0x306) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$unix(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000840)="b7abfdb733cd0395dc30dfedfa382955dbd3f3815a6919165bb36e4aceb855ffd1bec67281354d9b054f1b2e756244d278cd6f0241ab95f69e36745f46787beb1dbb52ebe29bb3724a920170056939ca2818d9a9062249a7614ecb7748d2ee30c98338e8beb2176431f8c73a948bf8300e25f5498e03a9f2622fb5bb43eed95a9ee3ad820e979915e3a7d5f34427e0bb401022ee0d9fc2172cfe10e81a19add30884cd484ecde9b3dafd2f31345b54a38ffd29e9be1c28eb3d888e0100a2d792e236805d1921c10e", 0xc8}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000ac0)=""/199, 0xc7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000002c80)=""/194, 0xc2}], 0x1}}], 0x2, 0x0, 0x0) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1001}, 0xc, &(0x7f0000000300)={&(0x7f0000001880)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010027bd7000ffdbdf250000000008000800020000000c00030002000000000000000c0003000100000000000000080009000400000008000700", @ANYRES32=r5, @ANYBLOB="37d5eb0f146f2ab0ff6db9586ccefe49105ec1f035355c85be5fff839f59c265c9bcc2750f7fcba7a528b8f36309789b35"], 0x44}, 0x1, 0x0, 0x0, 0x20000844}, 0x4000000) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040), 0x4) 00:16:09 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x100000000000000, 0x0}) 00:16:09 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002380)=[{0x0}, {&(0x7f0000001080)='%', 0x1}, {0x0}, {&(0x7f0000001240)="e7", 0x1}], 0x4}, 0x0) 00:16:09 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x1000000, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:09 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x200000000000000, 0x0}) 00:16:09 executing program 1: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0xfffffffb, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x7}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r2, 0x6, 0x6, 0x5, 0x2, 0x2}, &(0x7f0000000140)=0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@private1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f00000003c0)=0xe8) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={r3, r4, 0xffffffffffffffff}, 0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180), &(0x7f0000000200)=0x4) fremovexattr(r1, &(0x7f0000000080)=@known='system.posix_acl_default\x00') socket$inet6_sctp(0xa, 0x0, 0x84) (async) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0xfffffffb, 0x4) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x7}, &(0x7f00000000c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r2, 0x6, 0x6, 0x5, 0x2, 0x2}, &(0x7f0000000140)=0x14) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@private1, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f00000003c0)=0xe8) (async) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={r3, r4, 0xffffffffffffffff}, 0xc) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180), &(0x7f0000000200)=0x4) (async) fremovexattr(r1, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) 00:16:09 executing program 2: r0 = fsopen(&(0x7f0000000100)='debugfs\x00', 0x0) r1 = fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000080)=']\x00', 0x0, r0) 00:16:09 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x2000000, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:09 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x300000000000000, 0x0}) 00:16:09 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x3000000, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:09 executing program 2: r0 = fsopen(&(0x7f0000000000)='smb3\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x8, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000001580)={0x2020}, 0x2020) 00:16:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg0\x00', 0x1}) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') [ 2973.596177][ T7986] binder: BINDER_SET_CONTEXT_MGR already set [ 2973.610370][ T7986] binder: 7984:7986 ioctl 4018620d 20000040 returned -16 00:16:09 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x4000000, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:09 executing program 2: r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 00:16:09 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x400000000000000, 0x0}) 00:16:09 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000014c0)={'dummy0\x00', 0x100}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_clone3(&(0x7f0000000440)={0x200000, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100), {0x34}, &(0x7f0000000140)=""/50, 0x32, &(0x7f0000000340)=""/200, &(0x7f00000001c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x4}, 0x58) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000004c0)={0x0, "13216211cc0542e12379eb4588c51146"}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000001540)={@void, @void, @mpls={[{0x8d5}, {0x1f}], @ipv6=@generic={0x0, 0x6, "c0adeb", 0x2d6, 0xdc5627f022799849, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[@dstopts={0x32, 0x1d, '\x00', [@ra={0x5, 0x2, 0x800}, @generic={0x1, 0xe3, "c7d5f584c775d60dbfdf66a2531fb22e847826e464975bfb4fd404b144626a66fd5d2ef67195483c6ffd26bf3b04b83067c2cc1b6493e1ea5480a8b60dc24cdb58360e4fc98d36ef860aae981327b81736516827538323929f29728986cc55d3402ffb357e52c76032ecfbb37a6960e4be0250f8c12530f8616f7707d133f7ad595d161b0391745e5586270f56d30c81ad1e07fdff9a9df7383e66b6a74683ba70ab8e41d86e05b1b498a822e80c5bc459443a44e4172a6cdc3e54e8405cb21fc96e2c54ccb61e3f0f0078d79f2b07fd62980e6a583dfb2171f49d659bdfa3b3be72b0"}, @jumbo]}, @srh={0xa5, 0xa, 0x4, 0x5, 0x80, 0x48, 0x9, [@private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private0={0xfc, 0x0, '\x00', 0x1}]}, @routing={0x2b, 0x6, 0x0, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3a}, @loopback, @loopback]}, @routing={0x1, 0x4, 0x0, 0x80, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @hopopts={0xc, 0x6, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x1, 0xff, [0x2, 0xcc]}}, @jumbo={0xc2, 0x4, 0x79a3a41b}, @calipso={0x7, 0x10, {0x3, 0x2, 0x9, 0x386, [0x7fff]}}]}, @srh={0x34, 0xa, 0x4, 0x5, 0x60, 0x38, 0x8001, [@empty, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2d}, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}]}], "1952b2de986b46b2725d0e9bc0d42cce1737cad903f5e1c43f7cb5f793ca259e7e77e9ab872f92900f8fb5851dfb26ac698a9f6aa1c1f6319e5ad8bcb29c04b4f1759dca1872ddb39f9df06a9fae352306306c7cccd28a9511c3aeb1bcd77ff2efa7014e345e5fc2ed1c3fcfaac5fe21bf7120095c93f5a96bef42ce6ab3ec0203cd5b537d8eb7a2902280b53632"}}}}, 0x306) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async, rerun: 32) r4 = accept4(r3, 0x0, 0x0, 0x0) (rerun: 32) sendmsg$unix(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000840)="b7abfdb733cd0395dc30dfedfa382955dbd3f3815a6919165bb36e4aceb855ffd1bec67281354d9b054f1b2e756244d278cd6f0241ab95f69e36745f46787beb1dbb52ebe29bb3724a920170056939ca2818d9a9062249a7614ecb7748d2ee30c98338e8beb2176431f8c73a948bf8300e25f5498e03a9f2622fb5bb43eed95a9ee3ad820e979915e3a7d5f34427e0bb401022ee0d9fc2172cfe10e81a19add30884cd484ecde9b3dafd2f31345b54a38ffd29e9be1c28eb3d888e0100a2d792e236805d1921c10e", 0xc8}], 0x1}, 0x0) (async) recvmmsg(r4, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000ac0)=""/199, 0xc7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000002c80)=""/194, 0xc2}], 0x1}}], 0x2, 0x0, 0x0) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1001}, 0xc, &(0x7f0000000300)={&(0x7f0000001880)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010027bd7000ffdbdf250000000008000800020000000c00030002000000000000000c0003000100000000000000080009000400000008000700", @ANYRES32=r5, @ANYBLOB="37d5eb0f146f2ab0ff6db9586ccefe49105ec1f035355c85be5fff839f59c265c9bcc2750f7fcba7a528b8f36309789b35"], 0x44}, 0x1, 0x0, 0x0, 0x20000844}, 0x4000000) (async) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040), 0x4) 00:16:09 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x500000000000000, 0x0}) 00:16:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg0\x00', 0x1}) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg0\x00', 0x1}) (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) 00:16:09 executing program 2: r0 = fsopen(&(0x7f0000000100)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 00:16:09 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x5000000, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:09 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x600000000000000, 0x0}) 00:16:09 executing program 2: r0 = fsopen(&(0x7f0000000040)='mqueue\x00', 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)=')!\x00', 0x0) 00:16:09 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg0\x00', 0x1}) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:16:09 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x6000000, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:09 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x700000000000000, 0x0}) 00:16:09 executing program 2: r0 = fsopen(&(0x7f0000000080)='nfsd\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000380)='\x00', &(0x7f00000003c0)='@x\x00', 0x0) 00:16:09 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x7000000, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:09 executing program 2: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) 00:16:09 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x800000000000000, 0x0}) 00:16:10 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0204810080000000000000000700000000000000080000000000481900640066000003069078e0000001ac1e0001440cd021e0000002000000000000000000000000000000000000000100004e2100004e2300000003000000010000000000000000000000010000000700008001000000014ab55efc0000fffff0f0ffdf907472fa30aed0c50eed643f1fdb545152c20c9c5404f0e79ef810694596d42d0ec403f13f0b26b6f254e341bdb200095be3914e032c9c77a74c4aabf659c0ae4ecf8002117c66160f7df6f5232567947c7c86c5ec61867fae9b594563d10acdfe9f3de4197b7b338cd7241d987ad70a3745c1d13c57d44388bf403e5821dce7c830fce193771df53cf3f2740613ed456089e12b80168eeff5f01a2cfa9c3623e34c42eea4e3bd87f64f053b90202871d7a012c6fe627665ec088aa65628de9eb682084534b0f7532515a4b1ddd89f13572fa462e4fd0b30f3"], 0x7e) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)=""/109) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:16:10 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000014c0)={'dummy0\x00', 0x100}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) syz_clone3(&(0x7f0000000440)={0x200000, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100), {0x34}, &(0x7f0000000140)=""/50, 0x32, &(0x7f0000000340)=""/200, &(0x7f00000001c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x4}, 0x58) (rerun: 32) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000004c0)={0x0, "13216211cc0542e12379eb4588c51146"}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000001540)={@void, @void, @mpls={[{0x8d5}, {0x1f}], @ipv6=@generic={0x0, 0x6, "c0adeb", 0x2d6, 0xdc5627f022799849, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[@dstopts={0x32, 0x1d, '\x00', [@ra={0x5, 0x2, 0x800}, @generic={0x1, 0xe3, "c7d5f584c775d60dbfdf66a2531fb22e847826e464975bfb4fd404b144626a66fd5d2ef67195483c6ffd26bf3b04b83067c2cc1b6493e1ea5480a8b60dc24cdb58360e4fc98d36ef860aae981327b81736516827538323929f29728986cc55d3402ffb357e52c76032ecfbb37a6960e4be0250f8c12530f8616f7707d133f7ad595d161b0391745e5586270f56d30c81ad1e07fdff9a9df7383e66b6a74683ba70ab8e41d86e05b1b498a822e80c5bc459443a44e4172a6cdc3e54e8405cb21fc96e2c54ccb61e3f0f0078d79f2b07fd62980e6a583dfb2171f49d659bdfa3b3be72b0"}, @jumbo]}, @srh={0xa5, 0xa, 0x4, 0x5, 0x80, 0x48, 0x9, [@private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private0={0xfc, 0x0, '\x00', 0x1}]}, @routing={0x2b, 0x6, 0x0, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3a}, @loopback, @loopback]}, @routing={0x1, 0x4, 0x0, 0x80, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @hopopts={0xc, 0x6, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x1, 0xff, [0x2, 0xcc]}}, @jumbo={0xc2, 0x4, 0x79a3a41b}, @calipso={0x7, 0x10, {0x3, 0x2, 0x9, 0x386, [0x7fff]}}]}, @srh={0x34, 0xa, 0x4, 0x5, 0x60, 0x38, 0x8001, [@empty, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2d}, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}]}], "1952b2de986b46b2725d0e9bc0d42cce1737cad903f5e1c43f7cb5f793ca259e7e77e9ab872f92900f8fb5851dfb26ac698a9f6aa1c1f6319e5ad8bcb29c04b4f1759dca1872ddb39f9df06a9fae352306306c7cccd28a9511c3aeb1bcd77ff2efa7014e345e5fc2ed1c3fcfaac5fe21bf7120095c93f5a96bef42ce6ab3ec0203cd5b537d8eb7a2902280b53632"}}}}, 0x306) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 64) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async, rerun: 32) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$unix(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000840)="b7abfdb733cd0395dc30dfedfa382955dbd3f3815a6919165bb36e4aceb855ffd1bec67281354d9b054f1b2e756244d278cd6f0241ab95f69e36745f46787beb1dbb52ebe29bb3724a920170056939ca2818d9a9062249a7614ecb7748d2ee30c98338e8beb2176431f8c73a948bf8300e25f5498e03a9f2622fb5bb43eed95a9ee3ad820e979915e3a7d5f34427e0bb401022ee0d9fc2172cfe10e81a19add30884cd484ecde9b3dafd2f31345b54a38ffd29e9be1c28eb3d888e0100a2d792e236805d1921c10e", 0xc8}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000ac0)=""/199, 0xc7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000002c80)=""/194, 0xc2}], 0x1}}], 0x2, 0x0, 0x0) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1001}, 0xc, &(0x7f0000000300)={&(0x7f0000001880)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010027bd7000ffdbdf250000000008000800020000000c00030002000000000000000c0003000100000000000000080009000400000008000700", @ANYRES32=r5, @ANYBLOB="37d5eb0f146f2ab0ff6db9586ccefe49105ec1f035355c85be5fff839f59c265c9bcc2750f7fcba7a528b8f36309789b35"], 0x44}, 0x1, 0x0, 0x0, 0x20000844}, 0x4000000) (async, rerun: 32) r6 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040), 0x4) 00:16:10 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x8000000, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:10 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x900000000000000, 0x0}) 00:16:10 executing program 2: r0 = epoll_create(0x7) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000004c40), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 00:16:10 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x9000000, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:10 executing program 2: r0 = syz_io_uring_setup(0x209b, &(0x7f0000000100), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x15, 0x0, 0x0) 00:16:10 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0xa00000000000000, 0x0}) 00:16:10 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x7e) (async) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)=""/109) (async, rerun: 32) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (rerun: 32) 00:16:10 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0xa000000, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:10 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x7e) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)=""/109) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:16:10 executing program 2: r0 = fsopen(&(0x7f0000000240)='pvfs2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) 00:16:10 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0xb000000, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:10 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0xb00000000000000, 0x0}) 00:16:10 executing program 2: r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000100)='/dev/sequencer2\x00', &(0x7f0000000140)='4', 0x1) 00:16:10 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') fsetxattr(r0, &(0x7f0000000000)=@known='com.apple.system.Security\x00', &(0x7f0000000040)='\x00', 0x1, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x88000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000140)={'pim6reg\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}) preadv(r0, &(0x7f0000002840)=[{&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/241, 0xf1}, {&(0x7f0000000380)=""/67, 0x43}, {&(0x7f0000000400)=""/250, 0xfa}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000600)=""/102, 0x66}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/134, 0x86}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/195, 0xc3}], 0xa, 0xff, 0x1ff) 00:16:10 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$kcm(r1, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000140)="cfd5b19676ef79306fdf94bcb7606c675ac1f23ecb39c37e93e9b0d0d4bba220c53e07dd255d8b1ebf10af2d1e5a8233d146b2b095f2c5ed5761ce66d423ae5c0d9e4fd8ea05723dd95234ebe63c7214cd2e3a6a93eb7dac97ab92993415ddb3a623fae7d896f78b7c5afa3007be28bf8f8b4cdf5653", 0x76}, {&(0x7f00000002c0)="aa7aca8396bb57c31e301b2771eddfd02cd5217d230f3ffdf597c9e46b26c309618c203a198278c269425899aa6e053ca877ccf1a62e0cbb876c132c5f77037dfaf6b33de84f33c0d796babe5c7cd2f1e1eb2ecddf77454f4233b067ba9fe2ee97d0a5a6b7bcdbcb30578e1d2bf2901e26249e9b2e024ba4244e1446fee5eabde467b9bf5051abea445376248923775d7e425d166a956030750a22aa72a865e44f1ab402fdfde2f4ce0cd1a3eb02d34855866443b864dedc73fcb6221f1085e4e66d59858e4ff9a3377eef61859a295d39", 0xd1}, {&(0x7f00000003c0)="4287119af03a00fe4f1da2794d1cca3932c57fd758fcdac48f0465c15d7082c7fecc55f457dec906cd2a73d4c178e3f6d3a1e4aee0262f0df4f0eb4063bc47c7285959641ea978ebc3ae423f2f4e6492922a", 0x52}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000440)="46d1057dba418cb05136aa5c53a898ff1a58533cf85bd6ffa85175a3cf9ca5715e2802846d03c36eaa9e168e099818ac50390c939884c990f8232a3e5809886857f8306b11c244bceed29a4eb8c8d0c55ee3ebc8618e86d82920372d3c3f08e3b8e9d6114c22d8517a22ec3964f16cef14e4af0e3b4bc877af80e560dea47cc6a8fa1b31de5df3e115da8f84c01be17fdb778f822a44081fe9b48a813ab2f11c223f59f719052a3e6b61f9da8a66", 0xae}, {&(0x7f00000017c0)="32dafbacc5f30c55a7c51ec33d18beec8a9a350fde241fc53b1f1399e49685a16a7e9eaf67675c7fd2f3dae3282a62e19ff5509ad5916a144bb8c3e940b7cad2c353139a4443aa2ffd35eb3d8ea15a35e9f5b18c5bd5a096ad5e5de578acac9d25780e4fb3d423b082cbaf64075e8273d327c3411a30ab53a5ab23080e1654b631ada0346104022c65b563ddb63a8201215245e1be1e67fdd1fd320723d9ae4b4ed2916d5d1eecfcb6fcc458222e47afbe37f2b69f75f1f010b7", 0xba}], 0x6, &(0x7f0000001900)=[{0xa0, 0x12d, 0xdf74, "57b93eb7b056d807b70c223a7ad7dfd49c93096daec3c643e209625f5baa4428dd412d193ef183066332b7de66930190c33f9d68f86088bde4012cf78e6b87ffd36c15831aa8369eb8f41a9c56023c1cedd90739f510debfb160178129ae24a7b030a74c83a1cb380ed331505485abadf9acaba48ffae0a27f8ac1f37e238277142175223f05d4195ffaddc6c8a9"}, {0x48, 0x3a, 0x800, "cc0544c5c45c970db39a85dfc77f620086d015b319bbd76988fa763bbd8a84ffb8ffffa39ea1087f73843d6b95159290e1d2da4a90860dba"}, {0x30, 0x88, 0xa1, "7f51cb8cd2f90d6f22a7134f6cf12248a002fb304d8d9e1d4266b487f1d63e8c"}, {0x20, 0x1a3, 0x0, "3fad564d2a9d9661929ad13325ba8d"}, {0x48, 0x101, 0x3, "9f72bfc21f7dd7a10f6176ba728374f749f398e6a350370d0eb7defac9291bfe97999663fefd584ecb36fb1b0aeb6d44717cf9"}, {0x80, 0x10b, 0x6, "5555b94985226d77c404a513b1d6e2fb5bda7c0af0275f39565d72c1e6692e94ac99372238f684b434f9b33936ce22c1d2ce29361c638ae52f43fb47751af705b1ba594528b133f7520f0c713f1a648a86754d6e406fcad166f2b5a2c3b62e6c68ca01d01f822d0f34863899"}, {0x1010, 0x117, 0x80010000, "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"}, {0xe0, 0x10e, 0x3, "3d2165e89fc55615694895472116e5818d757c8c85bec37e4244ee723ae245f92d1272a3bca84694215bc026ad7fdc1c9ebc80974f047cfc63d02365f7809ee9cf45cc0614892f215c6621c5d6854a68aa040543a714276e27d8b18b962f88cbadeb6a7e41b9a4ddc99ac8c656d34bca00a77333a1de1c9877a64bd200b5a12accf4f936820620bbcff9ddc7028c6948de40572fce2f3707d4d9d16ac1c2bffead7fa7ce3dcec7ec4d22bd49ed06f4f342af4e7dfc99ea2b6fe72aba05d786353ce161f807f8f1838a762ddb3fa726"}], 0x12f0}, 0x4000080) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@can={0x1d, r3}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000500)=[{0xf8, 0x10f, 0x4, "8148b979043be852b73d5bb0a42c35c03c420d4e1a3a5a2b0fcc17be10cfd7954b086b7373b3da3e53cb57af5948edca1e1bd1b42fb3fd986a837a019b090ecc75560ec6c62c6b8d6c282b9466e80071bd66ef8bc35ffb10974fba6779d4c357b1b84a00427d5fbea2a19dfdd48cc4ad01ffc611d6592b8ae97c8a127535025f540aa6cff7e900018e40113515a45dcb68c0aba1b24773e72e4975a6e11aea954d898f9b6913fbe967d9954e16a472c6c9edb7c0750375e75063f1a567b36a002934cdcaf7e482f424974dadbcf67fdb4dfad4508efb049838c2e15801ccb6567c8583"}], 0xfffffffffffffd27}, 0x80) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x88fb}, @void, @eth={@multicast, @remote, @val={@void, {0x8100, 0x2, 0x1, 0x83}}, {@arp={0x806, @generic={0x312, 0x6004, 0x6, 0x6, 0x4, @broadcast, "6166fe9b71b8", @remote, "0580d49800040000c0e8a601fb370e0f"}}}}}, 0x40) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xd2) 00:16:10 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0xc00000000000000, 0x0}) 00:16:10 executing program 2: r0 = syz_io_uring_setup(0x232e, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)) io_uring_enter(r0, 0x0, 0xf67f, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x1e77, 0x0, 0x0, 0x0, 0x0) 00:16:10 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0xc000000, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:10 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') fsetxattr(r0, &(0x7f0000000000)=@known='com.apple.system.Security\x00', &(0x7f0000000040)='\x00', 0x1, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x88000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000140)={'pim6reg\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}) preadv(r0, &(0x7f0000002840)=[{&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/241, 0xf1}, {&(0x7f0000000380)=""/67, 0x43}, {&(0x7f0000000400)=""/250, 0xfa}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000600)=""/102, 0x66}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/134, 0x86}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/195, 0xc3}], 0xa, 0xff, 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) fsetxattr(r0, &(0x7f0000000000)=@known='com.apple.system.Security\x00', &(0x7f0000000040)='\x00', 0x1, 0x3) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x88000, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000140)={'pim6reg\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}) (async) preadv(r0, &(0x7f0000002840)=[{&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/241, 0xf1}, {&(0x7f0000000380)=""/67, 0x43}, {&(0x7f0000000400)=""/250, 0xfa}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000600)=""/102, 0x66}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/134, 0x86}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/195, 0xc3}], 0xa, 0xff, 0x1ff) (async) 00:16:10 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0xd000000, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:10 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0xd00000000000000, 0x0}) 00:16:10 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) fsetxattr(r0, &(0x7f0000000000)=@known='com.apple.system.Security\x00', &(0x7f0000000040)='\x00', 0x1, 0x3) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x88000, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000140)={'pim6reg\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}) (async) preadv(r0, &(0x7f0000002840)=[{&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/241, 0xf1}, {&(0x7f0000000380)=""/67, 0x43}, {&(0x7f0000000400)=""/250, 0xfa}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000600)=""/102, 0x66}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/134, 0x86}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/195, 0xc3}], 0xa, 0xff, 0x1ff) 00:16:10 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$kcm(r1, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000140)="cfd5b19676ef79306fdf94bcb7606c675ac1f23ecb39c37e93e9b0d0d4bba220c53e07dd255d8b1ebf10af2d1e5a8233d146b2b095f2c5ed5761ce66d423ae5c0d9e4fd8ea05723dd95234ebe63c7214cd2e3a6a93eb7dac97ab92993415ddb3a623fae7d896f78b7c5afa3007be28bf8f8b4cdf5653", 0x76}, {&(0x7f00000002c0)="aa7aca8396bb57c31e301b2771eddfd02cd5217d230f3ffdf597c9e46b26c309618c203a198278c269425899aa6e053ca877ccf1a62e0cbb876c132c5f77037dfaf6b33de84f33c0d796babe5c7cd2f1e1eb2ecddf77454f4233b067ba9fe2ee97d0a5a6b7bcdbcb30578e1d2bf2901e26249e9b2e024ba4244e1446fee5eabde467b9bf5051abea445376248923775d7e425d166a956030750a22aa72a865e44f1ab402fdfde2f4ce0cd1a3eb02d34855866443b864dedc73fcb6221f1085e4e66d59858e4ff9a3377eef61859a295d39", 0xd1}, {&(0x7f00000003c0)="4287119af03a00fe4f1da2794d1cca3932c57fd758fcdac48f0465c15d7082c7fecc55f457dec906cd2a73d4c178e3f6d3a1e4aee0262f0df4f0eb4063bc47c7285959641ea978ebc3ae423f2f4e6492922a", 0x52}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000440)="46d1057dba418cb05136aa5c53a898ff1a58533cf85bd6ffa85175a3cf9ca5715e2802846d03c36eaa9e168e099818ac50390c939884c990f8232a3e5809886857f8306b11c244bceed29a4eb8c8d0c55ee3ebc8618e86d82920372d3c3f08e3b8e9d6114c22d8517a22ec3964f16cef14e4af0e3b4bc877af80e560dea47cc6a8fa1b31de5df3e115da8f84c01be17fdb778f822a44081fe9b48a813ab2f11c223f59f719052a3e6b61f9da8a66", 0xae}, {&(0x7f00000017c0)="32dafbacc5f30c55a7c51ec33d18beec8a9a350fde241fc53b1f1399e49685a16a7e9eaf67675c7fd2f3dae3282a62e19ff5509ad5916a144bb8c3e940b7cad2c353139a4443aa2ffd35eb3d8ea15a35e9f5b18c5bd5a096ad5e5de578acac9d25780e4fb3d423b082cbaf64075e8273d327c3411a30ab53a5ab23080e1654b631ada0346104022c65b563ddb63a8201215245e1be1e67fdd1fd320723d9ae4b4ed2916d5d1eecfcb6fcc458222e47afbe37f2b69f75f1f010b7", 0xba}], 0x6, &(0x7f0000001900)=[{0xa0, 0x12d, 0xdf74, "57b93eb7b056d807b70c223a7ad7dfd49c93096daec3c643e209625f5baa4428dd412d193ef183066332b7de66930190c33f9d68f86088bde4012cf78e6b87ffd36c15831aa8369eb8f41a9c56023c1cedd90739f510debfb160178129ae24a7b030a74c83a1cb380ed331505485abadf9acaba48ffae0a27f8ac1f37e238277142175223f05d4195ffaddc6c8a9"}, {0x48, 0x3a, 0x800, "cc0544c5c45c970db39a85dfc77f620086d015b319bbd76988fa763bbd8a84ffb8ffffa39ea1087f73843d6b95159290e1d2da4a90860dba"}, {0x30, 0x88, 0xa1, "7f51cb8cd2f90d6f22a7134f6cf12248a002fb304d8d9e1d4266b487f1d63e8c"}, {0x20, 0x1a3, 0x0, "3fad564d2a9d9661929ad13325ba8d"}, {0x48, 0x101, 0x3, "9f72bfc21f7dd7a10f6176ba728374f749f398e6a350370d0eb7defac9291bfe97999663fefd584ecb36fb1b0aeb6d44717cf9"}, {0x80, 0x10b, 0x6, "5555b94985226d77c404a513b1d6e2fb5bda7c0af0275f39565d72c1e6692e94ac99372238f684b434f9b33936ce22c1d2ce29361c638ae52f43fb47751af705b1ba594528b133f7520f0c713f1a648a86754d6e406fcad166f2b5a2c3b62e6c68ca01d01f822d0f34863899"}, {0x1010, 0x117, 0x80010000, "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"}, {0xe0, 0x10e, 0x3, "3d2165e89fc55615694895472116e5818d757c8c85bec37e4244ee723ae245f92d1272a3bca84694215bc026ad7fdc1c9ebc80974f047cfc63d02365f7809ee9cf45cc0614892f215c6621c5d6854a68aa040543a714276e27d8b18b962f88cbadeb6a7e41b9a4ddc99ac8c656d34bca00a77333a1de1c9877a64bd200b5a12accf4f936820620bbcff9ddc7028c6948de40572fce2f3707d4d9d16ac1c2bffead7fa7ce3dcec7ec4d22bd49ed06f4f342af4e7dfc99ea2b6fe72aba05d786353ce161f807f8f1838a762ddb3fa726"}], 0x12f0}, 0x4000080) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@can={0x1d, r3}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000500)=[{0xf8, 0x10f, 0x4, "8148b979043be852b73d5bb0a42c35c03c420d4e1a3a5a2b0fcc17be10cfd7954b086b7373b3da3e53cb57af5948edca1e1bd1b42fb3fd986a837a019b090ecc75560ec6c62c6b8d6c282b9466e80071bd66ef8bc35ffb10974fba6779d4c357b1b84a00427d5fbea2a19dfdd48cc4ad01ffc611d6592b8ae97c8a127535025f540aa6cff7e900018e40113515a45dcb68c0aba1b24773e72e4975a6e11aea954d898f9b6913fbe967d9954e16a472c6c9edb7c0750375e75063f1a567b36a002934cdcaf7e482f424974dadbcf67fdb4dfad4508efb049838c2e15801ccb6567c8583"}], 0xfffffffffffffd27}, 0x80) (async) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x88fb}, @void, @eth={@multicast, @remote, @val={@void, {0x8100, 0x2, 0x1, 0x83}}, {@arp={0x806, @generic={0x312, 0x6004, 0x6, 0x6, 0x4, @broadcast, "6166fe9b71b8", @remote, "0580d49800040000c0e8a601fb370e0f"}}}}}, 0x40) (async) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xd2) 00:16:10 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0xe000000, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:10 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0xe00000000000000, 0x0}) 00:16:10 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x10000000, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:10 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$kcm(r1, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000140)="cfd5b19676ef79306fdf94bcb7606c675ac1f23ecb39c37e93e9b0d0d4bba220c53e07dd255d8b1ebf10af2d1e5a8233d146b2b095f2c5ed5761ce66d423ae5c0d9e4fd8ea05723dd95234ebe63c7214cd2e3a6a93eb7dac97ab92993415ddb3a623fae7d896f78b7c5afa3007be28bf8f8b4cdf5653", 0x76}, {&(0x7f00000002c0)="aa7aca8396bb57c31e301b2771eddfd02cd5217d230f3ffdf597c9e46b26c309618c203a198278c269425899aa6e053ca877ccf1a62e0cbb876c132c5f77037dfaf6b33de84f33c0d796babe5c7cd2f1e1eb2ecddf77454f4233b067ba9fe2ee97d0a5a6b7bcdbcb30578e1d2bf2901e26249e9b2e024ba4244e1446fee5eabde467b9bf5051abea445376248923775d7e425d166a956030750a22aa72a865e44f1ab402fdfde2f4ce0cd1a3eb02d34855866443b864dedc73fcb6221f1085e4e66d59858e4ff9a3377eef61859a295d39", 0xd1}, {&(0x7f00000003c0)="4287119af03a00fe4f1da2794d1cca3932c57fd758fcdac48f0465c15d7082c7fecc55f457dec906cd2a73d4c178e3f6d3a1e4aee0262f0df4f0eb4063bc47c7285959641ea978ebc3ae423f2f4e6492922a", 0x52}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000440)="46d1057dba418cb05136aa5c53a898ff1a58533cf85bd6ffa85175a3cf9ca5715e2802846d03c36eaa9e168e099818ac50390c939884c990f8232a3e5809886857f8306b11c244bceed29a4eb8c8d0c55ee3ebc8618e86d82920372d3c3f08e3b8e9d6114c22d8517a22ec3964f16cef14e4af0e3b4bc877af80e560dea47cc6a8fa1b31de5df3e115da8f84c01be17fdb778f822a44081fe9b48a813ab2f11c223f59f719052a3e6b61f9da8a66", 0xae}, {&(0x7f00000017c0)="32dafbacc5f30c55a7c51ec33d18beec8a9a350fde241fc53b1f1399e49685a16a7e9eaf67675c7fd2f3dae3282a62e19ff5509ad5916a144bb8c3e940b7cad2c353139a4443aa2ffd35eb3d8ea15a35e9f5b18c5bd5a096ad5e5de578acac9d25780e4fb3d423b082cbaf64075e8273d327c3411a30ab53a5ab23080e1654b631ada0346104022c65b563ddb63a8201215245e1be1e67fdd1fd320723d9ae4b4ed2916d5d1eecfcb6fcc458222e47afbe37f2b69f75f1f010b7", 0xba}], 0x6, &(0x7f0000001900)=[{0xa0, 0x12d, 0xdf74, "57b93eb7b056d807b70c223a7ad7dfd49c93096daec3c643e209625f5baa4428dd412d193ef183066332b7de66930190c33f9d68f86088bde4012cf78e6b87ffd36c15831aa8369eb8f41a9c56023c1cedd90739f510debfb160178129ae24a7b030a74c83a1cb380ed331505485abadf9acaba48ffae0a27f8ac1f37e238277142175223f05d4195ffaddc6c8a9"}, {0x48, 0x3a, 0x800, "cc0544c5c45c970db39a85dfc77f620086d015b319bbd76988fa763bbd8a84ffb8ffffa39ea1087f73843d6b95159290e1d2da4a90860dba"}, {0x30, 0x88, 0xa1, "7f51cb8cd2f90d6f22a7134f6cf12248a002fb304d8d9e1d4266b487f1d63e8c"}, {0x20, 0x1a3, 0x0, "3fad564d2a9d9661929ad13325ba8d"}, {0x48, 0x101, 0x3, "9f72bfc21f7dd7a10f6176ba728374f749f398e6a350370d0eb7defac9291bfe97999663fefd584ecb36fb1b0aeb6d44717cf9"}, {0x80, 0x10b, 0x6, "5555b94985226d77c404a513b1d6e2fb5bda7c0af0275f39565d72c1e6692e94ac99372238f684b434f9b33936ce22c1d2ce29361c638ae52f43fb47751af705b1ba594528b133f7520f0c713f1a648a86754d6e406fcad166f2b5a2c3b62e6c68ca01d01f822d0f34863899"}, {0x1010, 0x117, 0x80010000, "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"}, {0xe0, 0x10e, 0x3, "3d2165e89fc55615694895472116e5818d757c8c85bec37e4244ee723ae245f92d1272a3bca84694215bc026ad7fdc1c9ebc80974f047cfc63d02365f7809ee9cf45cc0614892f215c6621c5d6854a68aa040543a714276e27d8b18b962f88cbadeb6a7e41b9a4ddc99ac8c656d34bca00a77333a1de1c9877a64bd200b5a12accf4f936820620bbcff9ddc7028c6948de40572fce2f3707d4d9d16ac1c2bffead7fa7ce3dcec7ec4d22bd49ed06f4f342af4e7dfc99ea2b6fe72aba05d786353ce161f807f8f1838a762ddb3fa726"}], 0x12f0}, 0x4000080) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@can={0x1d, r3}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000500)=[{0xf8, 0x10f, 0x4, "8148b979043be852b73d5bb0a42c35c03c420d4e1a3a5a2b0fcc17be10cfd7954b086b7373b3da3e53cb57af5948edca1e1bd1b42fb3fd986a837a019b090ecc75560ec6c62c6b8d6c282b9466e80071bd66ef8bc35ffb10974fba6779d4c357b1b84a00427d5fbea2a19dfdd48cc4ad01ffc611d6592b8ae97c8a127535025f540aa6cff7e900018e40113515a45dcb68c0aba1b24773e72e4975a6e11aea954d898f9b6913fbe967d9954e16a472c6c9edb7c0750375e75063f1a567b36a002934cdcaf7e482f424974dadbcf67fdb4dfad4508efb049838c2e15801ccb6567c8583"}], 0xfffffffffffffd27}, 0x80) (async) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x88fb}, @void, @eth={@multicast, @remote, @val={@void, {0x8100, 0x2, 0x1, 0x83}}, {@arp={0x806, @generic={0x312, 0x6004, 0x6, 0x6, 0x4, @broadcast, "6166fe9b71b8", @remote, "0580d49800040000c0e8a601fb370e0f"}}}}}, 0x40) (async, rerun: 32) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xd2) (rerun: 32) 00:16:10 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x1000000000000000, 0x0}) 00:16:10 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) copy_file_range(r3, &(0x7f0000000140)=0x7fffffff, 0xffffffffffffffff, &(0x7f0000000180)=0x40, 0x7fffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010000100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32=r1, @ANYBLOB="0a001b000000000000000000"], 0x2c}, {&(0x7f0000002bc0)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRESHEX, @ANYRESOCT=r2, @ANYBLOB="00000000d75d17e6193fafe207b25360fb1fe2edb8f9c597110e606ba7ea7d9370a898e71cb4221e5812adb4e9523a5ebc6fbc658f059046c3c0dd5113a2f11b9b31df04832500b95fba147ad27370100207d17ce4220f6088557280ce35d818943e3ce2a9e2e563798fe050ae7deb9a", @ANYRES32, @ANYRESOCT=r1, @ANYRESOCT, @ANYRES64], 0x200}, {&(0x7f00000030c0)=ANY=[@ANYRES8, @ANYRES32, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="0400290014007100fcc9000000000000000000000000000000001400560020010000000000000000000000000000d2008a8008004200", @ANYRES32=r2, @ANYRESOCT], 0x3b0}, {&(0x7f0000000d40)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="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"], 0x16c}], 0x4}, 0x0) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x4, 0x2) write$tun(r0, &(0x7f0000000200)={@val={0x0, 0x16}, @void, @ipv6=@tcp={0x2, 0x6, '\n$$', 0x147, 0x6, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, {[@dstopts={0x62, 0x0, '\x00', [@pad1, @ra={0x5, 0x2, 0x3d2b}]}], {{0x4e20, 0x4e24, r1, r5, 0x1, 0x0, 0x1a, 0x10, 0x4, 0x0, 0x7fff, {[@mss={0x2, 0x4, 0x7f}, @fastopen={0x22, 0xc, "51d7fc7c8041a26ed40e"}, @eol, @timestamp={0x8, 0xa, 0x2, 0x6}, @mptcp=@capable={0x1e, 0xc, 0x4, 0x8, 0x3, 0x9}, @window={0x3, 0x3, 0x6}, @sack={0x5, 0x26, [0x10001, 0x1, 0x0, 0x6, 0x6, 0x80000000, 0x4, 0x3ff, 0x1f]}, @sack_perm={0x4, 0x2}]}}, {"0f6dd6a53a20584b12321dd1300d8926cdcbfe15ffa1bb605af3f6d37b0849ad8b4702986acbfc2419941ebe8900ac16f6d393dda0ae20f31a40191603edc76e61baabc67efdbf17b15588b4d0dcafe80b2fb4649521494583f1d4de3a8d1f18a0743845fcaa6118d64d62327d92ccddb5ec7cc966344941465ddfd94222b288c7b71d2852d7c05a8d6ea91cda78165b535df244518daa57154e60f2eff32c030357cc5a450fe52430a41ed02aeb2dd1092332ac1ab573fc141e10dd4e9cb2d59c1e2fae8627fb78a9ee0bc394ed06"}}}}}, 0x173) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000040)) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:16:10 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x1100000000000000, 0x0}) 00:16:10 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x11000000, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:10 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) sendto$packet(r2, &(0x7f0000000080)="f1795d2d7e0d663bfc81ed64ae953e09c74165ecc54a1a4cca2ac27f5633dfd17eaae9d2617b8eb82ca76149bb88e4de63ff44a07f", 0x35, 0x4001, 0x0, 0x0) [ 2974.986081][ T8107] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 00:16:10 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x12000000, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:10 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x1200000000000000, 0x0}) 00:16:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async, rerun: 64) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) (async, rerun: 64) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) (async, rerun: 32) sendmmsg$inet6(r2, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0) (async, rerun: 32) r3 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) copy_file_range(r3, &(0x7f0000000140)=0x7fffffff, 0xffffffffffffffff, &(0x7f0000000180)=0x40, 0x7fffffffffffffff, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010000100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32=r1, @ANYBLOB="0a001b000000000000000000"], 0x2c}, {&(0x7f0000002bc0)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRESHEX, @ANYRESOCT=r2, @ANYBLOB="00000000d75d17e6193fafe207b25360fb1fe2edb8f9c597110e606ba7ea7d9370a898e71cb4221e5812adb4e9523a5ebc6fbc658f059046c3c0dd5113a2f11b9b31df04832500b95fba147ad27370100207d17ce4220f6088557280ce35d818943e3ce2a9e2e563798fe050ae7deb9a", @ANYRES32, @ANYRESOCT=r1, @ANYRESOCT, @ANYRES64], 0x200}, {&(0x7f00000030c0)=ANY=[@ANYRES8, @ANYRES32, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="0400290014007100fcc9000000000000000000000000000000001400560020010000000000000000000000000000d2008a8008004200", @ANYRES32=r2, @ANYRESOCT], 0x3b0}, {&(0x7f0000000d40)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="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"], 0x16c}], 0x4}, 0x0) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x4, 0x2) write$tun(r0, &(0x7f0000000200)={@val={0x0, 0x16}, @void, @ipv6=@tcp={0x2, 0x6, '\n$$', 0x147, 0x6, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, {[@dstopts={0x62, 0x0, '\x00', [@pad1, @ra={0x5, 0x2, 0x3d2b}]}], {{0x4e20, 0x4e24, r1, r5, 0x1, 0x0, 0x1a, 0x10, 0x4, 0x0, 0x7fff, {[@mss={0x2, 0x4, 0x7f}, @fastopen={0x22, 0xc, "51d7fc7c8041a26ed40e"}, @eol, @timestamp={0x8, 0xa, 0x2, 0x6}, @mptcp=@capable={0x1e, 0xc, 0x4, 0x8, 0x3, 0x9}, @window={0x3, 0x3, 0x6}, @sack={0x5, 0x26, [0x10001, 0x1, 0x0, 0x6, 0x6, 0x80000000, 0x4, 0x3ff, 0x1f]}, @sack_perm={0x4, 0x2}]}}, {"0f6dd6a53a20584b12321dd1300d8926cdcbfe15ffa1bb605af3f6d37b0849ad8b4702986acbfc2419941ebe8900ac16f6d393dda0ae20f31a40191603edc76e61baabc67efdbf17b15588b4d0dcafe80b2fb4649521494583f1d4de3a8d1f18a0743845fcaa6118d64d62327d92ccddb5ec7cc966344941465ddfd94222b288c7b71d2852d7c05a8d6ea91cda78165b535df244518daa57154e60f2eff32c030357cc5a450fe52430a41ed02aeb2dd1092332ac1ab573fc141e10dd4e9cb2d59c1e2fae8627fb78a9ee0bc394ed06"}}}}}, 0x173) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000040)) (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:16:11 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x18000000, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2975.095011][ T8119] binder: BINDER_SET_CONTEXT_MGR already set [ 2975.101263][ T8119] binder: 8118:8119 ioctl 4018620d 20000040 returned -16 00:16:11 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x25000000, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:11 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x1800000000000000, 0x0}) [ 2975.175089][ T8121] binder: BINDER_SET_CONTEXT_MGR already set [ 2975.184916][ T8121] binder: 8120:8121 ioctl 4018620d 20000040 returned -16 00:16:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) (async) sendmmsg$inet6(r2, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) copy_file_range(r3, &(0x7f0000000140)=0x7fffffff, 0xffffffffffffffff, &(0x7f0000000180)=0x40, 0x7fffffffffffffff, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010000100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32=r1, @ANYBLOB="0a001b000000000000000000"], 0x2c}, {&(0x7f0000002bc0)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRESHEX, @ANYRESOCT=r2, @ANYBLOB="00000000d75d17e6193fafe207b25360fb1fe2edb8f9c597110e606ba7ea7d9370a898e71cb4221e5812adb4e9523a5ebc6fbc658f059046c3c0dd5113a2f11b9b31df04832500b95fba147ad27370100207d17ce4220f6088557280ce35d818943e3ce2a9e2e563798fe050ae7deb9a", @ANYRES32, @ANYRESOCT=r1, @ANYRESOCT, @ANYRES64], 0x200}, {&(0x7f00000030c0)=ANY=[@ANYRES8, @ANYRES32, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="0400290014007100fcc9000000000000000000000000000000001400560020010000000000000000000000000000d2008a8008004200", @ANYRES32=r2, @ANYRESOCT], 0x3b0}, {&(0x7f0000000d40)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="0d0007002f5d3a402dd34bcfd20000003c1334834595d3f4e4e63f5d3b7ad1c6d138330cf1e89df2bac44aede49d376ac1cad9609482e40335c2a265473f22b5e25004591bd045208ffebf1a54355ed0712aea727f932e35d97023a78656b8db0b82484b79a61ff29dd0fe1170231abbe632a75af5f43a85e41c401df58a7a2497e3b5231f5a37eee344adfcdd5181569d0a4a195af10d6dd8dcc234469e00b19feeb94b2f72d824e0a2b99e34aaf3d39af4105c4bd413e03a647da81523dfe9333f936010da3278a64a505cd104c8d4f7c41b904804c87e2de405f8f688acfd39991d58caf457dc03e97b2edb2492b32469a2a8228baeb7006114e6379fd0476cbceb1bec9b01babafbfd7d4bee5b76e8e1f42b39f9f84f555ae3a4cbc0f982dee80af161adf46506beeed0bbe67e9a067879a79767698917d6b39bf59332d43ec6b6ec1385182f776ca3d0956b05cbed"], 0x16c}], 0x4}, 0x0) (async) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x4, 0x2) write$tun(r0, &(0x7f0000000200)={@val={0x0, 0x16}, @void, @ipv6=@tcp={0x2, 0x6, '\n$$', 0x147, 0x6, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, {[@dstopts={0x62, 0x0, '\x00', [@pad1, @ra={0x5, 0x2, 0x3d2b}]}], {{0x4e20, 0x4e24, r1, r5, 0x1, 0x0, 0x1a, 0x10, 0x4, 0x0, 0x7fff, {[@mss={0x2, 0x4, 0x7f}, @fastopen={0x22, 0xc, "51d7fc7c8041a26ed40e"}, @eol, @timestamp={0x8, 0xa, 0x2, 0x6}, @mptcp=@capable={0x1e, 0xc, 0x4, 0x8, 0x3, 0x9}, @window={0x3, 0x3, 0x6}, @sack={0x5, 0x26, [0x10001, 0x1, 0x0, 0x6, 0x6, 0x80000000, 0x4, 0x3ff, 0x1f]}, @sack_perm={0x4, 0x2}]}}, {"0f6dd6a53a20584b12321dd1300d8926cdcbfe15ffa1bb605af3f6d37b0849ad8b4702986acbfc2419941ebe8900ac16f6d393dda0ae20f31a40191603edc76e61baabc67efdbf17b15588b4d0dcafe80b2fb4649521494583f1d4de3a8d1f18a0743845fcaa6118d64d62327d92ccddb5ec7cc966344941465ddfd94222b288c7b71d2852d7c05a8d6ea91cda78165b535df244518daa57154e60f2eff32c030357cc5a450fe52430a41ed02aeb2dd1092332ac1ab573fc141e10dd4e9cb2d59c1e2fae8627fb78a9ee0bc394ed06"}}}}}, 0x173) (async) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000040)) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:16:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) sendto$packet(r2, &(0x7f0000000080)="f1795d2d7e0d663bfc81ed64ae953e09c74165ecc54a1a4cca2ac27f5633dfd17eaae9d2617b8eb82ca76149bb88e4de63ff44a07f", 0x35, 0x4001, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) (async) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) (async) sendto$packet(r2, &(0x7f0000000080)="f1795d2d7e0d663bfc81ed64ae953e09c74165ecc54a1a4cca2ac27f5633dfd17eaae9d2617b8eb82ca76149bb88e4de63ff44a07f", 0x35, 0x4001, 0x0, 0x0) (async) 00:16:11 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x5c000000, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:11 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x2500000000000000, 0x0}) 00:16:11 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x5c00000000000000, 0x0}) [ 2975.347570][ T8134] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 00:16:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) 00:16:11 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0xfcffffff, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:11 executing program 2: r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) 00:16:11 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0xfdfdffff, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:11 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0xfcffffff00000000, 0x0}) 00:16:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) 00:16:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) sendto$packet(r2, &(0x7f0000000080)="f1795d2d7e0d663bfc81ed64ae953e09c74165ecc54a1a4cca2ac27f5633dfd17eaae9d2617b8eb82ca76149bb88e4de63ff44a07f", 0x35, 0x4001, 0x0, 0x0) 00:16:11 executing program 2: r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x8, 0x0, 0x0, 0x0) 00:16:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) 00:16:11 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0xfdfdffff00000000, 0x0}) 00:16:11 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0xfffffdfd, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:11 executing program 2: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, 0xfffffffffffffffc, 0xfffffffffffffcfb) 00:16:11 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0xffffff7f, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:11 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) 00:16:11 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0xffffff7f00000000, 0x0}) 00:16:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x4) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x2}, @val={0x0, 0x80, 0x5, 0x20, 0xc3b6, 0x8}, @mpls={[{0xec876, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x1ff}, {0x7, 0x0, 0x1}], @ipv4=@generic={{0x1a, 0x4, 0x3, 0x1d, 0x7e, 0x68, 0x0, 0x0, 0xc, 0x0, @private=0xa010101, @local, {[@ra={0x94, 0x4, 0x1}, @noop, @noop, @end, @noop, @timestamp={0x44, 0x28, 0xe, 0x0, 0xe, [0x791, 0x5, 0x2, 0x0, 0x2f0, 0x5, 0x1, 0xff, 0x3]}, @timestamp_addr={0x44, 0x24, 0xb4, 0x1, 0x8, [{@multicast1, 0x20}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x2bd0c5b2}, {@multicast1, 0x8}, {@rand_addr=0x64010100, 0x7ff}]}]}}, "29cc50e90eecf7d430af8be0c4cb7270a40eafcffae4"}}}, 0x9c) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0) write$tun(r1, &(0x7f0000000180)={@val={0x0, 0x10}, @val={0x2, 0x0, 0x4, 0x40, 0x81, 0x8}, @arp=@generic={0x302, 0x4305, 0x6, 0x0, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, "", @remote, "5ea49d4ed8ad"}}, 0x28) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:16:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) 00:16:11 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ee749ad4"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x7) r3 = memfd_secret(0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x58, 0x0, &(0x7f00000004c0)=[@increfs={0x40046304, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x9, 0x2, 0x35}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/188, 0xbc, 0x40, 0x9}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/114, 0x72, 0x0, 0x24}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}, @exit_looper], 0x5f, 0x0, &(0x7f0000000540)="6db7c750dfd57177a88f4a3dd999a9efc5aed8f9edfaa2f9fab86683298a43590ffa14b2835dd25adeaa8f07bb43f5f1bf3932903b58c7c63a3114b8892e08829422696c72d70d7371c0db17631298e8541c2db1f28480535ce40ceb908491"}) 00:16:11 executing program 2: r0 = syz_io_uring_setup(0x4974, &(0x7f0000000780), &(0x7f0000000800), &(0x7f0000000840)) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xfcecd868ddf509dd}) 00:16:11 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0xfffffffc, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x4) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x2}, @val={0x0, 0x80, 0x5, 0x20, 0xc3b6, 0x8}, @mpls={[{0xec876, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x1ff}, {0x7, 0x0, 0x1}], @ipv4=@generic={{0x1a, 0x4, 0x3, 0x1d, 0x7e, 0x68, 0x0, 0x0, 0xc, 0x0, @private=0xa010101, @local, {[@ra={0x94, 0x4, 0x1}, @noop, @noop, @end, @noop, @timestamp={0x44, 0x28, 0xe, 0x0, 0xe, [0x791, 0x5, 0x2, 0x0, 0x2f0, 0x5, 0x1, 0xff, 0x3]}, @timestamp_addr={0x44, 0x24, 0xb4, 0x1, 0x8, [{@multicast1, 0x20}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x2bd0c5b2}, {@multicast1, 0x8}, {@rand_addr=0x64010100, 0x7ff}]}]}}, "29cc50e90eecf7d430af8be0c4cb7270a40eafcffae4"}}}, 0x9c) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0) write$tun(r1, &(0x7f0000000180)={@val={0x0, 0x10}, @val={0x2, 0x0, 0x4, 0x40, 0x81, 0x8}, @arp=@generic={0x302, 0x4305, 0x6, 0x0, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, "", @remote, "5ea49d4ed8ad"}}, 0x28) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x4) (async) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x2}, @val={0x0, 0x80, 0x5, 0x20, 0xc3b6, 0x8}, @mpls={[{0xec876, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x1ff}, {0x7, 0x0, 0x1}], @ipv4=@generic={{0x1a, 0x4, 0x3, 0x1d, 0x7e, 0x68, 0x0, 0x0, 0xc, 0x0, @private=0xa010101, @local, {[@ra={0x94, 0x4, 0x1}, @noop, @noop, @end, @noop, @timestamp={0x44, 0x28, 0xe, 0x0, 0xe, [0x791, 0x5, 0x2, 0x0, 0x2f0, 0x5, 0x1, 0xff, 0x3]}, @timestamp_addr={0x44, 0x24, 0xb4, 0x1, 0x8, [{@multicast1, 0x20}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x2bd0c5b2}, {@multicast1, 0x8}, {@rand_addr=0x64010100, 0x7ff}]}]}}, "29cc50e90eecf7d430af8be0c4cb7270a40eafcffae4"}}}, 0x9c) (async) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) (async) openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0) (async) write$tun(r1, &(0x7f0000000180)={@val={0x0, 0x10}, @val={0x2, 0x0, 0x4, 0x40, 0x81, 0x8}, @arp=@generic={0x302, 0x4305, 0x6, 0x0, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, "", @remote, "5ea49d4ed8ad"}}, 0x28) (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) [ 2975.916493][ T8188] binder: 8185:8188 unknown command 3566892270 [ 2975.935159][ T8188] binder: 8185:8188 ioctl c0306201 20000080 returned -22 00:16:11 executing program 2: r0 = epoll_create1(0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x20000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)) 00:16:11 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x2, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x4) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x2}, @val={0x0, 0x80, 0x5, 0x20, 0xc3b6, 0x8}, @mpls={[{0xec876, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x1ff}, {0x7, 0x0, 0x1}], @ipv4=@generic={{0x1a, 0x4, 0x3, 0x1d, 0x7e, 0x68, 0x0, 0x0, 0xc, 0x0, @private=0xa010101, @local, {[@ra={0x94, 0x4, 0x1}, @noop, @noop, @end, @noop, @timestamp={0x44, 0x28, 0xe, 0x0, 0xe, [0x791, 0x5, 0x2, 0x0, 0x2f0, 0x5, 0x1, 0xff, 0x3]}, @timestamp_addr={0x44, 0x24, 0xb4, 0x1, 0x8, [{@multicast1, 0x20}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x2bd0c5b2}, {@multicast1, 0x8}, {@rand_addr=0x64010100, 0x7ff}]}]}}, "29cc50e90eecf7d430af8be0c4cb7270a40eafcffae4"}}}, 0x9c) (async) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0) (async) write$tun(r1, &(0x7f0000000180)={@val={0x0, 0x10}, @val={0x2, 0x0, 0x4, 0x40, 0x81, 0x8}, @arp=@generic={0x302, 0x4305, 0x6, 0x0, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, "", @remote, "5ea49d4ed8ad"}}, 0x28) (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') [ 2975.974332][ T8188] binder: BINDER_SET_CONTEXT_MGR already set [ 2975.996902][ T8188] binder: 8185:8188 ioctl 4018620d 20000040 returned -16 00:16:11 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ee749ad4"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x7) r3 = memfd_secret(0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x58, 0x0, &(0x7f00000004c0)=[@increfs={0x40046304, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x9, 0x2, 0x35}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/188, 0xbc, 0x40, 0x9}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/114, 0x72, 0x0, 0x24}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}, @exit_looper], 0x5f, 0x0, &(0x7f0000000540)="6db7c750dfd57177a88f4a3dd999a9efc5aed8f9edfaa2f9fab86683298a43590ffa14b2835dd25adeaa8f07bb43f5f1bf3932903b58c7c63a3114b8892e08829422696c72d70d7371c0db17631298e8541c2db1f28480535ce40ceb908491"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ee749ad4"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x7) (async) memfd_secret(0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x58, 0x0, &(0x7f00000004c0)=[@increfs={0x40046304, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x9, 0x2, 0x35}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/188, 0xbc, 0x40, 0x9}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/114, 0x72, 0x0, 0x24}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}, @exit_looper], 0x5f, 0x0, &(0x7f0000000540)="6db7c750dfd57177a88f4a3dd999a9efc5aed8f9edfaa2f9fab86683298a43590ffa14b2835dd25adeaa8f07bb43f5f1bf3932903b58c7c63a3114b8892e08829422696c72d70d7371c0db17631298e8541c2db1f28480535ce40ceb908491"}) (async) 00:16:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) (async) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) (async) 00:16:12 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000140)={0x3, 0x63}, 0x2) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r3, 0x0, 0x6}, 0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x9, 0x1, 0x3, 0x3, 0x67, 0x5, 0x3, 0xade, r3}, &(0x7f0000000040)=0x20) 00:16:12 executing program 2: openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x4401, 0x0) 00:16:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x3, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:12 executing program 2: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, 0x0) [ 2976.160113][ T8208] binder: 8205:8208 unknown command 3566892270 [ 2976.174717][ T8208] binder: 8205:8208 ioctl c0306201 20000080 returned -22 [ 2976.188048][ T8208] binder: BINDER_SET_CONTEXT_MGR already set 00:16:12 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000140)={0x3, 0x63}, 0x2) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r3, 0x0, 0x6}, 0xc) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x9, 0x1, 0x3, 0x3, 0x67, 0x5, 0x3, 0xade, r3}, &(0x7f0000000040)=0x20) [ 2976.205867][ T8208] binder: 8205:8208 ioctl 4018620d 20000040 returned -16 00:16:12 executing program 2: r0 = fsopen(&(0x7f0000000040)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) statx(r1, &(0x7f0000001ac0)='./file0\x00', 0x0, 0x0, &(0x7f0000002240)) 00:16:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x4, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2976.247663][ T8208] binder: 8205:8208 unknown command 3566892270 [ 2976.268364][ T8218] binder: BINDER_SET_CONTEXT_MGR already set 00:16:12 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000140)={0x3, 0x63}, 0x2) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r3, 0x0, 0x6}, 0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x9, 0x1, 0x3, 0x3, 0x67, 0x5, 0x3, 0xade, r3}, &(0x7f0000000040)=0x20) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) socket(0x2, 0x80805, 0x0) (async) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) (async) socket$inet(0x2, 0x80001, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000140)={0x3, 0x63}, 0x2) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r3, 0x0, 0x6}, 0xc) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x9, 0x1, 0x3, 0x3, 0x67, 0x5, 0x3, 0xade, r3}, &(0x7f0000000040)=0x20) (async) 00:16:12 executing program 2: r0 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) [ 2976.308229][ T8208] binder: 8205:8208 ioctl c0306201 20000080 returned -22 [ 2976.314667][ T8218] binder: 8205:8218 ioctl 4018620d 20000100 returned -16 00:16:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x5, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) r1 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) (async) write$tun(r0, &(0x7f0000000240)={@val={0x4803, 0x86dd}, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "34908c", 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4d", "b2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8", "f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62", {"862fd64b3fa67f998cf5ec04df45d6aa", "febcd5ceee7b57e9c2ec1d541b4fcd91"}}}}}}}, 0xd2) 00:16:12 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ee749ad4"], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x7) r3 = memfd_secret(0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x58, 0x0, &(0x7f00000004c0)=[@increfs={0x40046304, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x9, 0x2, 0x35}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/188, 0xbc, 0x40, 0x9}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/114, 0x72, 0x0, 0x24}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}, @exit_looper], 0x5f, 0x0, &(0x7f0000000540)="6db7c750dfd57177a88f4a3dd999a9efc5aed8f9edfaa2f9fab86683298a43590ffa14b2835dd25adeaa8f07bb43f5f1bf3932903b58c7c63a3114b8892e08829422696c72d70d7371c0db17631298e8541c2db1f28480535ce40ceb908491"}) 00:16:12 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000700, r1, &(0x7f0000000140)) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:16:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x6, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:12 executing program 2: r0 = syz_io_uring_setup(0x232e, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)) io_uring_enter(r0, 0x2792, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x1e77, 0x0, 0x0, 0x0, 0x0) 00:16:12 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x4000) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000700, r1, &(0x7f0000000140)) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') [ 2976.494708][ T8243] binder: 8242:8243 unknown command 3566892270 [ 2976.497142][ T8245] binder: BINDER_SET_CONTEXT_MGR already set [ 2976.528427][ T8243] binder: 8242:8243 ioctl c0306201 20000080 returned -22 [ 2976.538783][ T8245] binder: 8242:8245 ioctl 4018620d 20000040 returned -16 00:16:12 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1101}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0x18, 0x0, &(0x7f00000001c0)=[@increfs={0x40046304, 0x3}, @request_death={0x400c630e, 0x3}], 0x26, 0x0, &(0x7f0000000540)="282c4611884b962c5fb41c6873962ff6fe5b1951bc14afad3ba97d3b4f81471ffa342e4191e6"}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0), 0x101200, 0x0) tee(r0, r4, 0xf564, 0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/127, 0x7f, 0x1, 0x2e}, @flat=@handle={0x73682a85, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x40}}}, @dead_binder_done, @acquire={0x40046305, 0x3}], 0xdb, 0x0, &(0x7f0000000440)="9293dfa9c8508262d8c10cc8ed6bdf7d541f203f245e188f3d993c15321fc8a13d96dbc4740235c8ce9b9ab11a9f5499330801d2274c842fe489c4f2c30ced3946ff19bdd37e6d4b419cb4fae8008dd45b3cb5a5823d44ab33253b910e864db80f761b2ca21687a143f4ade7d8dc7972bc373817831105f06b98581131fb28c4f07ed4205b57394bc34cb5bbba66fc34d79fb8d57cc41743953aacb439e83b1349f64f148c0216186607302be216ca1f31f47c116951c76142de59a0de04044574cb2974c30ac391284de9b88cfc8dc82a3a5a62c5067008d3d2aa"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) 00:16:12 executing program 2: fsopen(&(0x7f0000000280)='virtiofs\x00', 0x0) 00:16:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x7, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:12 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000700, r1, &(0x7f0000000140)) (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:16:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x8, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:12 executing program 2: fsopen(&(0x7f0000000280)='virtiofs\x00', 0x0) 00:16:12 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bond_slave_0\x00', 0x4000}) 00:16:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'macvlan1\x00', 0x800}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_newrule={0x30, 0x20, 0x100, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x3, 0x1, 0x0, 0x0, 0x8, 0x10011}, [@FRA_DST={0x14, 0x1, @private1}]}, 0x30}, 0x1, 0x0, 0x0, 0x30000891}, 0x20000010) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xd2) 00:16:12 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bond_slave_0\x00', 0x4000}) 00:16:12 executing program 2: r0 = epoll_create1(0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_pwait2(r0, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0) 00:16:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x9, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:12 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bond_slave_0\x00', 0x4000}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bond_slave_0\x00', 0x4000}) (async) 00:16:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'macvlan1\x00', 0x800}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_newrule={0x30, 0x20, 0x100, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x3, 0x1, 0x0, 0x0, 0x8, 0x10011}, [@FRA_DST={0x14, 0x1, @private1}]}, 0x30}, 0x1, 0x0, 0x0, 0x30000891}, 0x20000010) (async) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xd2) 00:16:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0xa, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:12 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') write$tun(r0, &(0x7f0000000000)={@val={0x0, 0x1b}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @multicast2, @broadcast, @local}}, 0x20) 00:16:12 executing program 2: r0 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x8, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 00:16:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0xb, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'macvlan1\x00', 0x800}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_newrule={0x30, 0x20, 0x100, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x3, 0x1, 0x0, 0x0, 0x8, 0x10011}, [@FRA_DST={0x14, 0x1, @private1}]}, 0x30}, 0x1, 0x0, 0x0, 0x30000891}, 0x20000010) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xd2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'macvlan1\x00', 0x800}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_newrule={0x30, 0x20, 0x100, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x3, 0x1, 0x0, 0x0, 0x8, 0x10011}, [@FRA_DST={0x14, 0x1, @private1}]}, 0x30}, 0x1, 0x0, 0x0, 0x30000891}, 0x20000010) (async) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="034886000000007fffffff0000006034908c009c1100fe880000000000000000000000000001fe8000000000000000000000780100000000000000ce6437bad25405a17ffe4a6b9329598d9187334509fde17772e30bf27f295d4db2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fe33afdc5d3d68a748d6c3c8f45619875a42b3d622cd17eac6cb736bbb514eb5061f2759dcd52c62862fd64b3fa67f998cf5ec04df45d6aafebcd5ceee7b57e9c2ec1d541b4fcd91532264a81a06266309a5d6e1844953bd1d0ae2072c7faed5a6c4d1fe21f6fb77627432ec2979d93fd9b3b2c5060448b33a6bd3d96b1954e87e772b1838e378540104558002af92f84343aefdbd1de86a47b0805a960a9acc8939eb0720ee7a286833fdc612468468f02300000000003e0000000000005865e4af748ae24cd7644ecedc3ed741aa58af931c3394ae0ea00fd17126d1a422753ca86bd26e666bd8fbd0263ebab485f6d151377be64bebb9fae0a008161c9db8f7b5e3dd4af15754f51171e65977ff5f5ea01188c189c5714f0000000000be926acd92e4ff3fbc5f6c256e"], 0xd2) (async) 00:16:12 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') write$tun(r0, &(0x7f0000000000)={@val={0x0, 0x1b}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @multicast2, @broadcast, @local}}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0x1b}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @multicast2, @broadcast, @local}}, 0x20) (async) 00:16:12 executing program 2: r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x5452, 0x0) 00:16:12 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') write$tun(r0, &(0x7f0000000000)={@val={0x0, 0x1b}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @multicast2, @broadcast, @local}}, 0x20) 00:16:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0xc, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:13 executing program 2: syz_io_uring_setup(0x209b, &(0x7f0000000100)={0x0, 0x0, 0x4481}, 0x0, 0x0) 00:16:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000340)={@val={0x4803, 0x86dd}, @val={0x0, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@dccp_packet={0x3, 0x6, "bc40bb", 0x265, 0x21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@dstopts={0x3b, 0x7, '\x00', [@generic={0x2, 0x14, "8568c1891171937b536e4e8cd1328a1f9ee804f7"}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @hao={0xc9, 0x10, @private0}]}, @dstopts={0x3b, 0x1, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1]}, @hopopts={0x62, 0x11, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @generic={0x1f, 0x81, "46be1c271b2438a202da46cd70a094086fec85fb0b099a6cfd16e8491b098dbd2c089dc54d4d7831a7211e27d6f761f50db220848278a9a79bd85543a0fcfc26393f9796c9f04f1e78b3bd660e568ee9eab873e8d066ef9cabe3dec4143ea9bbf8f0ee3a9d49f3195a5692173980583e112ed1e620fe1f3c033a959dc8332d2556"}, @ra={0x5, 0x2, 0x8}]}, @routing={0x2f, 0xa, 0x2, 0x3f, 0x0, [@mcast1, @loopback, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, @empty]}, @routing={0x614183789c41995e, 0xa, 0x0, 0x4c, 0x0, [@mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}]}, @dstopts={0x29, 0x2, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x3}, @enc_lim, @ra={0x5, 0x2, 0x4}]}, @srh={0x3c, 0x2, 0x4, 0x1, 0x2b, 0x48, 0x101, [@ipv4={'\x00', '\xff\xff', @loopback}]}], {{0x4e21, 0x4e22, 0x4, 0x1, 0x8, 0x0, 0x0, 0x1, 0x2, "968d84", 0x20, "4a26da"}, "8d7b17a8c1c65e0f473954f84efe461a2a6136f90e9d9fc388ebfce5974eb73645c75978ea4c1a0d0a77db0b1bc00e9e20a5abe1922603cf569b28e92cac87c99d95c71ae7b48d72df30b0e1c680fa8f53a0e38f91171f5a45e3a126ac2eb322f093577fd363e1654ec28485ad94f9ba4b814c24c9"}}}}}, 0x29b) 00:16:13 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='com.apple.system.Security\x00') r1 = socket(0x2b, 0x1, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20048815) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24040870) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8935, &(0x7f0000000040)={'vxcan1\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x2}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x44, 0x4) 00:16:13 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0xd, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:13 executing program 2: r0 = io_uring_setup(0x3ffb, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000005b40)={0x2, 0x0, 0x0, &(0x7f0000005a80)=[{0x0}, {&(0x7f0000005800)=""/73, 0x49}], 0x0}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:16:13 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='com.apple.system.Security\x00') r1 = socket(0x2b, 0x1, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20048815) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24040870) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8935, &(0x7f0000000040)={'vxcan1\x00'}) (async, rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x2}) (async, rerun: 32) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x44, 0x4) 00:16:13 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0xe, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:13 executing program 2: r0 = syz_io_uring_setup(0x4974, &(0x7f0000000780), &(0x7f0000000800), &(0x7f0000000840)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x8, &(0x7f0000000000)=[0x0, 0xffffffff], 0x2) 00:16:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) (async) write$tun(r0, &(0x7f0000000340)={@val={0x4803, 0x86dd}, @val={0x0, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@dccp_packet={0x3, 0x6, "bc40bb", 0x265, 0x21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@dstopts={0x3b, 0x7, '\x00', [@generic={0x2, 0x14, "8568c1891171937b536e4e8cd1328a1f9ee804f7"}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @hao={0xc9, 0x10, @private0}]}, @dstopts={0x3b, 0x1, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1]}, @hopopts={0x62, 0x11, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @generic={0x1f, 0x81, "46be1c271b2438a202da46cd70a094086fec85fb0b099a6cfd16e8491b098dbd2c089dc54d4d7831a7211e27d6f761f50db220848278a9a79bd85543a0fcfc26393f9796c9f04f1e78b3bd660e568ee9eab873e8d066ef9cabe3dec4143ea9bbf8f0ee3a9d49f3195a5692173980583e112ed1e620fe1f3c033a959dc8332d2556"}, @ra={0x5, 0x2, 0x8}]}, @routing={0x2f, 0xa, 0x2, 0x3f, 0x0, [@mcast1, @loopback, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, @empty]}, @routing={0x614183789c41995e, 0xa, 0x0, 0x4c, 0x0, [@mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}]}, @dstopts={0x29, 0x2, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x3}, @enc_lim, @ra={0x5, 0x2, 0x4}]}, @srh={0x3c, 0x2, 0x4, 0x1, 0x2b, 0x48, 0x101, [@ipv4={'\x00', '\xff\xff', @loopback}]}], {{0x4e21, 0x4e22, 0x4, 0x1, 0x8, 0x0, 0x0, 0x1, 0x2, "968d84", 0x20, "4a26da"}, "8d7b17a8c1c65e0f473954f84efe461a2a6136f90e9d9fc388ebfce5974eb73645c75978ea4c1a0d0a77db0b1bc00e9e20a5abe1922603cf569b28e92cac87c99d95c71ae7b48d72df30b0e1c680fa8f53a0e38f91171f5a45e3a126ac2eb322f093577fd363e1654ec28485ad94f9ba4b814c24c9"}}}}}, 0x29b) 00:16:13 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x10, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:13 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1101}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0x18, 0x0, &(0x7f00000001c0)=[@increfs={0x40046304, 0x3}, @request_death={0x400c630e, 0x3}], 0x26, 0x0, &(0x7f0000000540)="282c4611884b962c5fb41c6873962ff6fe5b1951bc14afad3ba97d3b4f81471ffa342e4191e6"}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0), 0x101200, 0x0) tee(r0, r4, 0xf564, 0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/127, 0x7f, 0x1, 0x2e}, @flat=@handle={0x73682a85, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x40}}}, @dead_binder_done, @acquire={0x40046305, 0x3}], 0xdb, 0x0, &(0x7f0000000440)="9293dfa9c8508262d8c10cc8ed6bdf7d541f203f245e188f3d993c15321fc8a13d96dbc4740235c8ce9b9ab11a9f5499330801d2274c842fe489c4f2c30ced3946ff19bdd37e6d4b419cb4fae8008dd45b3cb5a5823d44ab33253b910e864db80f761b2ca21687a143f4ade7d8dc7972bc373817831105f06b98581131fb28c4f07ed4205b57394bc34cb5bbba66fc34d79fb8d57cc41743953aacb439e83b1349f64f148c0216186607302be216ca1f31f47c116951c76142de59a0de04044574cb2974c30ac391284de9b88cfc8dc82a3a5a62c5067008d3d2aa"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) 00:16:13 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x11, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000340)={@val={0x4803, 0x86dd}, @val={0x0, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@dccp_packet={0x3, 0x6, "bc40bb", 0x265, 0x21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@dstopts={0x3b, 0x7, '\x00', [@generic={0x2, 0x14, "8568c1891171937b536e4e8cd1328a1f9ee804f7"}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @hao={0xc9, 0x10, @private0}]}, @dstopts={0x3b, 0x1, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1]}, @hopopts={0x62, 0x11, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @generic={0x1f, 0x81, "46be1c271b2438a202da46cd70a094086fec85fb0b099a6cfd16e8491b098dbd2c089dc54d4d7831a7211e27d6f761f50db220848278a9a79bd85543a0fcfc26393f9796c9f04f1e78b3bd660e568ee9eab873e8d066ef9cabe3dec4143ea9bbf8f0ee3a9d49f3195a5692173980583e112ed1e620fe1f3c033a959dc8332d2556"}, @ra={0x5, 0x2, 0x8}]}, @routing={0x2f, 0xa, 0x2, 0x3f, 0x0, [@mcast1, @loopback, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, @empty]}, @routing={0x614183789c41995e, 0xa, 0x0, 0x4c, 0x0, [@mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}]}, @dstopts={0x29, 0x2, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x3}, @enc_lim, @ra={0x5, 0x2, 0x4}]}, @srh={0x3c, 0x2, 0x4, 0x1, 0x2b, 0x48, 0x101, [@ipv4={'\x00', '\xff\xff', @loopback}]}], {{0x4e21, 0x4e22, 0x4, 0x1, 0x8, 0x0, 0x0, 0x1, 0x2, "968d84", 0x20, "4a26da"}, "8d7b17a8c1c65e0f473954f84efe461a2a6136f90e9d9fc388ebfce5974eb73645c75978ea4c1a0d0a77db0b1bc00e9e20a5abe1922603cf569b28e92cac87c99d95c71ae7b48d72df30b0e1c680fa8f53a0e38f91171f5a45e3a126ac2eb322f093577fd363e1654ec28485ad94f9ba4b814c24c9"}}}}}, 0x29b) 00:16:13 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='com.apple.system.Security\x00') (async) r1 = socket(0x2b, 0x1, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20048815) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24040870) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8935, &(0x7f0000000040)={'vxcan1\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x2}) (async) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x44, 0x4) 00:16:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000003c0)="cd", 0x1}], 0x1}, 0x1) recvmsg$unix(r0, &(0x7f0000001d40)={0x0, 0x0, 0x0}, 0x0) 00:16:13 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x12, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:13 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x18, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:13 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@random={'security.', '\x00$\x8c\x93P=\rY\xa7\"\xc6\xba\x86\xe5\xe2[\xa5\xd6w\xc5\\F=\x15#+\xcfp\xc8\xa2o\xf0\x1en\xc7\x92\x80\x90&+\xe5\x16\x8e<|\xedN\xf6Nj\x05M.($#\xcc\xd2\'\xdcl\x12\xa2\xcb.\xa5h\x1b\x8d\x90E,\xbc\xc8\x92\xb4\x14\x8c\x91\xfa\xa8<\x9b$\xba\xc1\x10\x1e\xd7\xa52\xe7Z\xd4\xd1a6B! \xa0\x04\xe8\xff\xa1\x02x\xe8\xe9m\x86\xcf\x15Bh\xd5c\xd9\xdfg\xa2\xe1\x8d6\xd7\x9c\x9b\''}) 00:16:13 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x25, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd000000000000fffe00006034908c009c11fffe880000000000000000000000000001fe8000000000000000000000000000aa4e220000009c90780100000000000000ce6437bad25405a17ffe4a6b050000000000000009fde17772e30bf27f295d4db2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8f45619875a42b3d6e1cc17eac6cb736bbb514eb5061f2759dcd52c62862fd64b3fa67f998cf5ec04df45d6aafebcd5ceee7b57e9c2ec1d541b4fcd91"], 0xd2) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000340)={{r0}, "cce70ab214a9dc113f4ace0ef09cab2d3962109803cd0097fa1e0e6a36f5ad75e3e7e8ac337da93fc9e272c8f45eca4ddd6a1f30ca0060e9fa0e515d50dde3f750e3fee2e44bc6dd794ee92240f2bb47619f2c285afac58954f0c01ef4a2c17002a520d059a827aba8f41535b9c4fb2aedd62c65bf58ca4d3646fde55824a87675f1f364db172cded2b47e587350488843490753837e2a93a27a3b6b36061c86cc89370a20f68b79da232727e10fa9635c54e3123c09b1d97e0ff2bb334754eb6e686371a93863067a3d130446e2016c5425400c76b2b2125b8057a12be9d24beba04b984c9c4e253761657f1d13820a53e8e81f71ecbb876253a142564ebbf7f3dff020e023d530defd63c6ab5e39e0a73aa581349fc7d6440d274b5f46979495d8cbf1dc851fd7b1968323c3be75054c0bddd19898203b68cdf439ccd0b6e41c2d4deb85c1efe22386a6dc677f88e4efd03b670499ffdc87e57ca6199a3bc217c6f31a79a9fca0f8a147a14502c41f473d4422262a237d4d3e5e54611d9c6e38c38ade4c84e1decc811d13a5a2e68b602b32fcfb689b4c6a5b3b3a94acd759d36a2369c911fa413b6441997b7e3f717f1a887e254b58c172e8c1c7ea69fba649f4a39b4882d00a51685c0dc93ebf30f78a287210c9de0fe80c6316d39d7e295580d2c8d61348792d4234e4130b19832db22045279f3d32b5c87984da62f7243100169b42617f120636b682a8a411407da073e9da2ba52255a8a5fdd4fd57098f9d77d7da08e9195cff1812fd6f2ffd4a905d3412dc66ddd43b840ccaeaa3d65ddaaf0ea78ea6f03f4ef7b0bb9b5089afc242789e53a7e3a971b1ca8417f954cbfa825011e1aa3e2655f46c42c4c77425275ef7e87a40f6be070c7e97f377a7062fe978a0cf6aed5fbf0753b32b6b79d857f454dead6edcec1dde6df0899a366e5f0d1747c146159a537d7c2d4ff439f8ff927d638f9a4e32fc82353c3dee41169feae1274cf700b6881e7a8be694e97d755a63f313d007514f4eb53172b53422eaef03893ca7b0c36764d7661b25c2725cd4554700a6eaf468ad6bea3091e50d64bc413cb2191856dcf05a9483c65479151353a5f33afd22f9f2eacafd9080a8e0121c223e321f5f68acecdfd669ab2fcfaaed8a8c1a4499b4a044fbd0bb1a9d9528a9d161019e3e3abba21f4df5f7be45f920fa62150943e0914dff769243689fe3229c748485e10c375c28bef7a18f717bb6efd9b7ef4c4ea054b3d9595d4df1193a7c0752f18c422bcf3c0df8c4b2e3018210c10bd3ba54f9d424691087a625437a16ce8f926393f945ed786d8a06aac611b1469dcdfb16fa971668120bffec1a0b265f2f93f0799ec837015c367e5bc2100c4ac9443f15dc7f982754cdac0754a7e8d5f19c886e62f45717fd155f55e7ea6c2588110cffa1f9833e75f82c96c59d664142e24f350229e92aa1100095e2e18c94748c0017a4dac48f2910491cb05bd576fe8c667f06bc28892d870bd15322e6004d1a2bc27e80895e00bf2c01988001d3064886ce99b44f1453e8cdbedb4f490e93b667b8be9505177126f7d4e03c817a741c3ffa6339f211b710e4dc89be4e4197d92e87090c5a80c7863e074956bfd9f214ee65609dc3e2d7a3edaa252b16e3e4262d114ef6badfe3559e61f2a810b7b14a22b105b47074f3bf4ae99ee1cebdb13803145d7e5ce7cd388589fad8f35c85c422ef833c5bdedd38335de402856656ee9afdf736bbafa8636567d362e077382903476990ab04a02d25a05c335456b1ddb966dc537df24e6c746d6c2eabb23a22658a7bcf4978776ef7be13292d019074ded16a3f66d86bb7afea77092e83942b141e922fc15978a686a480a36fa57d50dcb434372eddbe5072fad4dc5e8db111829099e59cae21731b0057df81a7befab0343a83e4e0fa604d890017026227e99357125318cc6beb3b0a278630bc78971532e42d3682915ff0f6f9abfc8060f642db73e9e2c42bf656e8f5d3e3da1d8cc88fa95c6d7efd74391554f78d18812360e8b46e43afd7a19b9882ed0a26c0f52bb3ff052b03b85b5f2d0c3a56524393453b70863d54885daa0040e9b1aa4bd213c2443616b53b2b294d98610ad758e331c5cd3443b4735b4767e9e424ec4af37efd1b8dfabb8b4752681b7201e4e91471b3acc9cbea7d55163b7f1e75498035385f2191375c83775b11ca3a895d9481ee7c9aa240c20ee91272fb8454f7c8d440f19e2b56162625adda4b6879614105be3ea88b4f2cf21ea559e44102e69fbd10238a1d2311a74d09e19ebe21c4890d30b35d23ad86f1faf6306b8dab77ef27013831d7e341dcb407eb66fdfc2e49de161bee0db6640a9c304419dfac4a9b8cb9c05bfc48e28358f8ee69f6a7e922a45b6144f871c167ca3314659d0620cfe9db1f7db985b5d6ce767cd403677f4200f08eecf116e3139c38e9ec5b7ced2c711a4f47ca0704dbc764f357ffc3a4bf3a3774600819ed5828d54f78af44eefe85f580bc8713260912bd390ffa9cd5376da584b28c02ed7bd631f149e92fb21dec28ce3209b1992302de1013727afb0da325bb9c7d6f1594b7d53f1450a1df4b2f7fe5b25652e8257451e6d4dcfb8d21cb1ba982492ff7434bc60a0da0bf2a3ffb6c9b92267e9d99678b11888ff43d0904478bf2d3959b7f9e0c1d0bcbc0b23868df9bf2c3fb193da1e56d3a991140a204469367f3305ce86259888fd6a3797e25924a531cea74b47d970520776d5d5b1d1d53a6f8ab69559e5850cdea9d65e4d3d995e529d96b21b454332c68002d0a6340ee729685f1a011d99e0204bfdf165732d4bb2374a84204923195e9dbdde46e4c8d392a8e33fb31b05ac73ad9e13187cae1d0ce861662923d294606c7c6125f6ea9eeff37ebc7a4aa3f271a205dcb6220a489de8fba49db033d2ca03b7346632899556f5e3af6ce031ffac51dc6ce216569f2b332aa41be046da11f28fac27df54c19f50ac5436ddb3bcbf9c946809fc937377c05bb3f96b4e17c0e84a83fb0ae19655e10fbf3afa20b30fed874734264681c2a301912dab0d7589428543327e4793d338609035013e1f28e91d915e3f5e5bebe095781963ca4f10837e47e3d643bd5a249dd9259d67b47235e0c1b6b41a771ca0952b75f80f70eefae2772158637b993afcb6618e5c0c1d8dfef550b9b72c556d861a6a8fd409bfe3309be2c7320e172887e457348ac10413377699e2fa88a820c118bf4201a506e23fb868ce90fda4290eee195a7a3c74c2697afed7eec6274b50eb93e207f428f99625dbbf10d96a0c1a35681c4f098a88d68e560b26f645c7439015bc15a1ebe6adc010595c6710ba18bd3160d7d1ce60d2680b7feb1d42d1c14d800a7ea3567ce00b326237bc33a6a80917087fecaacc1a195677ee02216f734fed2c0b67eaafae61799fd01e58c40c5d0e71ac527f9747483b20c97d0901bac7d5436e8beed1cb2a5318d782eeeb54da247a04944b03376e0ebd8f6615440e2441e6b5f0b3b61681162f6347b076589f1c37c8bc3cea1e78f51b079fab4adec6c4c851f5ad21982f39b9f0265f5b2c0c4ff308d163e77b22e5076c73dcce63dfbdc7969237d9f8f9586f1d6a036eb62b0e444ee04eed308ce5f22cf38b3aeb1a336c9d30bc77931faf0dbf182e865561f93dc2384026eafba9090ac300a4803a7e9b25ad9748572d631eeec99f38f6f6ab2b58894f79f9b64cbe76695f822031d11405383e4ac2085ee61edb10c18e4b98240ce0456c49962d4cbad5953f4b35c95aeb39e061f0704bd01d4508050ee0301f1bb7c9b70c8077d02f0b417378183d455bbe44ff436f278ff268ddb565f19599001e187349d526e68c4f434a9f5e357291d58c95972278f043d5572503492e72a9b5ee3b0d4aa75cb135fab207864a29bd420eb23d50e74cbeeac81beb03c7f2d77aeebab2e65e9815ec06f4c335700a322954e23f6ef938b4c6a87a97997d257c08d828abbfad62d63a0aa88a3c131db52ddb315451d5596db62e77f14c988f68aacebb7ce3d9562a1475a4a0bff1dd37821b70b2ddb2db0711eb9898d77f095c39b0cecee1006da786ea6051a648bcc06f6b8f325284edbc1a825e70399c4b407a0aa7b5c0e04dbc361661ad222da01825d9db8225554e1614d1af74b352185475b2c6e0567b72d6530c4ba524ac45b0f79e67872ce9d4474fb55a30a98905272a1f27675eef02ad354a9ef2e60c043c569b087e8c376ea2cfe5eb53a656a55f3c9196befdaa67027544da74e06539ea84658cac86da876b1a0a070f1607f67c2ce9460a7881b0b9b7ec72d3c047368eb65ca9e5160f261af4c76bcef7bf74ae8d2c9c504e1c88aeda0aa69ee98033263fbeeea9b1ef10ba86a06337a673ebc9e217e9aa596cdce918f0fd4eb604fa8505cc66eaa6add98c796fa1b0e0a30aaeab799693a7d51f4ee3e05f6846af059b9413b9c817502dc7aaf5a09b5ffa879d1f4cac0c2854a1d137556d78a396298c0cf19db764ceaf65dacc7bd3a65fffd8584cc4d73b2e500126b951e9f35e87b5ebce19e443756a3c758c0342504004def071981dd3eb503da6d1e58c01bd9e3d5564e12fc634fdddbdf6d8da9b0a08f481c2d49eabc8e234380f31211cf141ef3f9e92170acdb7ac0a8a43baa4ff70e1a44b720d14670982bc9d721f3c6b53a4c12c3ca522087429876d4274795947449729a68f1bfc8b756e4f56b9f46a514a2b22c3bec93e606df5ff0dffcd5c29e9046abc29511e9056a548b7e981c0213dc8a4454a91962bc7b134ec0116b8ec7563c08f5d494ec3b5837e32e720eae524039da8f59cd099d5e75e77f8d57c2b0e63cccf69657a3657c2537fdcbe7dafa56840a0fde181c2580fbf46ba11330ed44ab86e8190baf8b3eb8f6d2bc5739771e3d90f928a062571fcbf423968fcbab176ba8cfae4b11ce126e5ddb98b0d10644a8fb3ea92c1976abff5421f284d0e1837fd2ab20003f133e42fa3faf83b223ece6d44f9e3e9def705e773e4732545c7a1f67ee8927da41ab8462f6866eab078800bd29ef6e8ae594806ce2ba831827dc3e8938b9434a5b964266028708d95adef9fa822b67a9f5b5b5992fd10a9c99debc1d1b1692030d5a2c063fe54f736ae5e81174303d889ba60ac47dde1783c5e171ebebdcc525fd3a42408bc484d37a2d21db5955c6f69c87cff3d2aa6a59972509fede712157f63e09dfd517908925acd527671588624cd08359b2640aa4791cd51fafa6ace6adb590cfe0ccf1bb81490b193153f6a3772138d304ddec02242eb7a6ca777a95519525c1798d86e985ed52072945b0278c7d6c7713da4029a3fb0e68bec3f4492cec02d7df5b541d90b09d5a48f80bf79cbf06ff34a5ae8038a8b8344701833faf5b067d16742fadb2185bbdac25dfcba19a6cb987fb86bb9b0ea1829a67a4726453b2d92cfe9367ed7e2b51859c0820253a03cf0fb3289722760b43e43eba8bed76a9c7abfee5288f92c8de8dc8f20dc3b5ff67b08fdc5d8eaf9d09e3baa1d5b3647e2cb8449452cfd8a43b3e0c6307be740e6a882059f91dedc789cc191e7e4c807c3a93194f7efb495145eb72572736552fe8dbabda2f196c5898bc79fe8ecda05c01f1ce671d81046129c9c9086861c10450e14b5ab811bd5200edc53f31fcae056646138c3f425d094700978018f4c77ca44fd04f37d0c2b9499e81e816a4b1b56943fab53b8028051e47d6e01aca28e06d78f28c41623b37867454a796"}) 00:16:13 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@random={'security.', '\x00$\x8c\x93P=\rY\xa7\"\xc6\xba\x86\xe5\xe2[\xa5\xd6w\xc5\\F=\x15#+\xcfp\xc8\xa2o\xf0\x1en\xc7\x92\x80\x90&+\xe5\x16\x8e<|\xedN\xf6Nj\x05M.($#\xcc\xd2\'\xdcl\x12\xa2\xcb.\xa5h\x1b\x8d\x90E,\xbc\xc8\x92\xb4\x14\x8c\x91\xfa\xa8<\x9b$\xba\xc1\x10\x1e\xd7\xa52\xe7Z\xd4\xd1a6B! \xa0\x04\xe8\xff\xa1\x02x\xe8\xe9m\x86\xcf\x15Bh\xd5c\xd9\xdfg\xa2\xe1\x8d6\xd7\x9c\x9b\''}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) fremovexattr(r0, &(0x7f00000000c0)=@random={'security.', '\x00$\x8c\x93P=\rY\xa7\"\xc6\xba\x86\xe5\xe2[\xa5\xd6w\xc5\\F=\x15#+\xcfp\xc8\xa2o\xf0\x1en\xc7\x92\x80\x90&+\xe5\x16\x8e<|\xedN\xf6Nj\x05M.($#\xcc\xd2\'\xdcl\x12\xa2\xcb.\xa5h\x1b\x8d\x90E,\xbc\xc8\x92\xb4\x14\x8c\x91\xfa\xa8<\x9b$\xba\xc1\x10\x1e\xd7\xa52\xe7Z\xd4\xd1a6B! \xa0\x04\xe8\xff\xa1\x02x\xe8\xe9m\x86\xcf\x15Bh\xd5c\xd9\xdfg\xa2\xe1\x8d6\xd7\x9c\x9b\''}) (async) 00:16:13 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x5c, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:13 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@random={'security.', '\x00$\x8c\x93P=\rY\xa7\"\xc6\xba\x86\xe5\xe2[\xa5\xd6w\xc5\\F=\x15#+\xcfp\xc8\xa2o\xf0\x1en\xc7\x92\x80\x90&+\xe5\x16\x8e<|\xedN\xf6Nj\x05M.($#\xcc\xd2\'\xdcl\x12\xa2\xcb.\xa5h\x1b\x8d\x90E,\xbc\xc8\x92\xb4\x14\x8c\x91\xfa\xa8<\x9b$\xba\xc1\x10\x1e\xd7\xa52\xe7Z\xd4\xd1a6B! \xa0\x04\xe8\xff\xa1\x02x\xe8\xe9m\x86\xcf\x15Bh\xd5c\xd9\xdfg\xa2\xe1\x8d6\xd7\x9c\x9b\''}) 00:16:13 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x1e0d3}, @void, @mpls={[{0xbdef, 0x0, 0x1}, {0x7f, 0x0, 0x1}], @llc={@snap={0x0, 0xaa, '\x00\x00', "8e40d8", 0x9, "348acf241f37c4f4cfe5ab067a38ad451837ae2738ec7fe56c00504a7f48b0d5ee77cb26df9d4b5e6cdbe7c4b2004b72a2a7cc3880b2848741ed6a889bad195bd235d2f1b9922f0590e23ee9fad4b70e1633965206e0925dd898f234621ce7719f2193a0b82b489b853dc78da83ea63cd644b40a6e2189c7f13d4d4ba1c113150364d180bc11a051a30fd28dc70738fd3562c8792b40eef61c030a3836678410329c4b8436061ac6a8cd49558256a6b965aff9611dbcab832872e4e8e25f2c240a3184"}}}}, 0xd8) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:16:13 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x1e0d3}, @void, @mpls={[{0xbdef, 0x0, 0x1}, {0x7f, 0x0, 0x1}], @llc={@snap={0x0, 0xaa, '\x00\x00', "8e40d8", 0x9, "348acf241f37c4f4cfe5ab067a38ad451837ae2738ec7fe56c00504a7f48b0d5ee77cb26df9d4b5e6cdbe7c4b2004b72a2a7cc3880b2848741ed6a889bad195bd235d2f1b9922f0590e23ee9fad4b70e1633965206e0925dd898f234621ce7719f2193a0b82b489b853dc78da83ea63cd644b40a6e2189c7f13d4d4ba1c113150364d180bc11a051a30fd28dc70738fd3562c8792b40eef61c030a3836678410329c4b8436061ac6a8cd49558256a6b965aff9611dbcab832872e4e8e25f2c240a3184"}}}}, 0xd8) (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:16:13 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x300, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) (async) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd000000000000fffe00006034908c009c11fffe880000000000000000000000000001fe8000000000000000000000000000aa4e220000009c90780100000000000000ce6437bad25405a17ffe4a6b050000000000000009fde17772e30bf27f295d4db2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8f45619875a42b3d6e1cc17eac6cb736bbb514eb5061f2759dcd52c62862fd64b3fa67f998cf5ec04df45d6aafebcd5ceee7b57e9c2ec1d541b4fcd91"], 0xd2) (async) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000340)={{r0}, "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"}) 00:16:13 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x1e0d3}, @void, @mpls={[{0xbdef, 0x0, 0x1}, {0x7f, 0x0, 0x1}], @llc={@snap={0x0, 0xaa, '\x00\x00', "8e40d8", 0x9, "348acf241f37c4f4cfe5ab067a38ad451837ae2738ec7fe56c00504a7f48b0d5ee77cb26df9d4b5e6cdbe7c4b2004b72a2a7cc3880b2848741ed6a889bad195bd235d2f1b9922f0590e23ee9fad4b70e1633965206e0925dd898f234621ce7719f2193a0b82b489b853dc78da83ea63cd644b40a6e2189c7f13d4d4ba1c113150364d180bc11a051a30fd28dc70738fd3562c8792b40eef61c030a3836678410329c4b8436061ac6a8cd49558256a6b965aff9611dbcab832872e4e8e25f2c240a3184"}}}}, 0xd8) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:16:13 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x500, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:13 executing program 1: r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10) getpeername(r0, &(0x7f0000000300)=@l2tp={0x2, 0x0, @empty}, &(0x7f0000000140)=0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$tun(r1, &(0x7f0000000200)={@val={0x0, 0x88a2}, @val={0x1, 0x3, 0x8f, 0x1, 0x8, 0x101}, @ipv6=@udp={0xc, 0x6, "499d51", 0xa4, 0x11, 0xff, @ipv4={'\x00', '\xff\xff', @multicast1}, @dev={0xfe, 0x80, '\x00', 0x3f}, {[@fragment={0x2f, 0x0, 0x7, 0x0, 0x0, 0x15, 0x67}], {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "b4f2ed4e8b72dfb5c8218f59fc6a31335c593456370f095e260234c02ec35ada", "6e4c19c486f21865e71f4c2ca6f80137d156f18c596e1d1495085fb8df94f102d547ae9f3d3b12d2b300b11865a476fb", "c9e79f94f5803ce563ad08d5eba0f9e549ebbb2272277b932c5d91dd", {"b54cc4aacd97928702d3b9cde552175a", "45af9514bb5a8a3de2229a4fefc78acd"}}}}}}, 0xda) fremovexattr(r1, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:16:13 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x600, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) (async) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd000000000000fffe00006034908c009c11fffe880000000000000000000000000001fe8000000000000000000000000000aa4e220000009c90780100000000000000ce6437bad25405a17ffe4a6b050000000000000009fde17772e30bf27f295d4db2d58381627c8aecd2836403a8580bb3120ddedf173b50f4507308d811d4a84a8effa463fc33afdc5d3d68a748d6c3c8f45619875a42b3d6e1cc17eac6cb736bbb514eb5061f2759dcd52c62862fd64b3fa67f998cf5ec04df45d6aafebcd5ceee7b57e9c2ec1d541b4fcd91"], 0xd2) (async) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000340)={{r0}, "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"}) 00:16:14 executing program 1: r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10) getpeername(r0, &(0x7f0000000300)=@l2tp={0x2, 0x0, @empty}, &(0x7f0000000140)=0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$tun(r1, &(0x7f0000000200)={@val={0x0, 0x88a2}, @val={0x1, 0x3, 0x8f, 0x1, 0x8, 0x101}, @ipv6=@udp={0xc, 0x6, "499d51", 0xa4, 0x11, 0xff, @ipv4={'\x00', '\xff\xff', @multicast1}, @dev={0xfe, 0x80, '\x00', 0x3f}, {[@fragment={0x2f, 0x0, 0x7, 0x0, 0x0, 0x15, 0x67}], {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "b4f2ed4e8b72dfb5c8218f59fc6a31335c593456370f095e260234c02ec35ada", "6e4c19c486f21865e71f4c2ca6f80137d156f18c596e1d1495085fb8df94f102d547ae9f3d3b12d2b300b11865a476fb", "c9e79f94f5803ce563ad08d5eba0f9e549ebbb2272277b932c5d91dd", {"b54cc4aacd97928702d3b9cde552175a", "45af9514bb5a8a3de2229a4fefc78acd"}}}}}}, 0xda) (async) write$tun(r1, &(0x7f0000000200)={@val={0x0, 0x88a2}, @val={0x1, 0x3, 0x8f, 0x1, 0x8, 0x101}, @ipv6=@udp={0xc, 0x6, "499d51", 0xa4, 0x11, 0xff, @ipv4={'\x00', '\xff\xff', @multicast1}, @dev={0xfe, 0x80, '\x00', 0x3f}, {[@fragment={0x2f, 0x0, 0x7, 0x0, 0x0, 0x15, 0x67}], {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "b4f2ed4e8b72dfb5c8218f59fc6a31335c593456370f095e260234c02ec35ada", "6e4c19c486f21865e71f4c2ca6f80137d156f18c596e1d1495085fb8df94f102d547ae9f3d3b12d2b300b11865a476fb", "c9e79f94f5803ce563ad08d5eba0f9e549ebbb2272277b932c5d91dd", {"b54cc4aacd97928702d3b9cde552175a", "45af9514bb5a8a3de2229a4fefc78acd"}}}}}}, 0xda) fremovexattr(r1, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:16:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x700, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:14 executing program 1: r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10) getpeername(r0, &(0x7f0000000300)=@l2tp={0x2, 0x0, @empty}, &(0x7f0000000140)=0x80) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$tun(r1, &(0x7f0000000200)={@val={0x0, 0x88a2}, @val={0x1, 0x3, 0x8f, 0x1, 0x8, 0x101}, @ipv6=@udp={0xc, 0x6, "499d51", 0xa4, 0x11, 0xff, @ipv4={'\x00', '\xff\xff', @multicast1}, @dev={0xfe, 0x80, '\x00', 0x3f}, {[@fragment={0x2f, 0x0, 0x7, 0x0, 0x0, 0x15, 0x67}], {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "b4f2ed4e8b72dfb5c8218f59fc6a31335c593456370f095e260234c02ec35ada", "6e4c19c486f21865e71f4c2ca6f80137d156f18c596e1d1495085fb8df94f102d547ae9f3d3b12d2b300b11865a476fb", "c9e79f94f5803ce563ad08d5eba0f9e549ebbb2272277b932c5d91dd", {"b54cc4aacd97928702d3b9cde552175a", "45af9514bb5a8a3de2229a4fefc78acd"}}}}}}, 0xda) (async) fremovexattr(r1, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:16:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x900, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:14 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_int(r0, 0x0, 0x12, 0x0, &(0x7f0000000100)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fchmod(r0, 0x136) r2 = open$dir(&(0x7f0000000280)='./file0\x00', 0x800000, 0x4) openat(r2, &(0x7f00000002c0)='./file0/file0\x00', 0x80, 0xc) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000040)={'dummy0\x00', 0x400}) r4 = openat(r3, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x20) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) fremovexattr(r1, &(0x7f0000000080)=@known='system.posix_acl_default\x00') getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) openat(r3, &(0x7f0000000340)='./file0/file0\x00', 0x5a4c1, 0x4) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000000c0)={r5, 0x6}, 0x8) 00:16:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0xa00, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$unix(0x1, 0x4, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000080), 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xd2) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) 00:16:14 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_int(r0, 0x0, 0x12, 0x0, &(0x7f0000000100)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) fchmod(r0, 0x136) (async) r2 = open$dir(&(0x7f0000000280)='./file0\x00', 0x800000, 0x4) openat(r2, &(0x7f00000002c0)='./file0/file0\x00', 0x80, 0xc) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000040)={'dummy0\x00', 0x400}) (async, rerun: 64) r4 = openat(r3, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x20) (rerun: 64) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) fremovexattr(r1, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) openat(r3, &(0x7f0000000340)='./file0/file0\x00', 0x5a4c1, 0x4) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000000c0)={r5, 0x6}, 0x8) 00:16:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0xb00, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:14 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_int(r0, 0x0, 0x12, 0x0, &(0x7f0000000100)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fchmod(r0, 0x136) r2 = open$dir(&(0x7f0000000280)='./file0\x00', 0x800000, 0x4) openat(r2, &(0x7f00000002c0)='./file0/file0\x00', 0x80, 0xc) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000040)={'dummy0\x00', 0x400}) r4 = openat(r3, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x20) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) fremovexattr(r1, &(0x7f0000000080)=@known='system.posix_acl_default\x00') getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) openat(r3, &(0x7f0000000340)='./file0/file0\x00', 0x5a4c1, 0x4) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000000c0)={r5, 0x6}, 0x8) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_int(r0, 0x0, 0x12, 0x0, &(0x7f0000000100)) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) fchmod(r0, 0x136) (async) open$dir(&(0x7f0000000280)='./file0\x00', 0x800000, 0x4) (async) openat(r2, &(0x7f00000002c0)='./file0/file0\x00', 0x80, 0xc) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (async) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000040)={'dummy0\x00', 0x400}) (async) openat(r3, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x20) (async) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) fremovexattr(r1, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000200)=@assoc_value, &(0x7f0000000240)=0x8) (async) openat(r3, &(0x7f0000000340)='./file0/file0\x00', 0x5a4c1, 0x4) (async) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000000c0)={r5, 0x6}, 0x8) (async) 00:16:14 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1101}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0x18, 0x0, &(0x7f00000001c0)=[@increfs={0x40046304, 0x3}, @request_death={0x400c630e, 0x3}], 0x26, 0x0, &(0x7f0000000540)="282c4611884b962c5fb41c6873962ff6fe5b1951bc14afad3ba97d3b4f81471ffa342e4191e6"}) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0), 0x101200, 0x0) tee(r0, r4, 0xf564, 0x6) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/127, 0x7f, 0x1, 0x2e}, @flat=@handle={0x73682a85, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x40}}}, @dead_binder_done, @acquire={0x40046305, 0x3}], 0xdb, 0x0, &(0x7f0000000440)="9293dfa9c8508262d8c10cc8ed6bdf7d541f203f245e188f3d993c15321fc8a13d96dbc4740235c8ce9b9ab11a9f5499330801d2274c842fe489c4f2c30ced3946ff19bdd37e6d4b419cb4fae8008dd45b3cb5a5823d44ab33253b910e864db80f761b2ca21687a143f4ade7d8dc7972bc373817831105f06b98581131fb28c4f07ed4205b57394bc34cb5bbba66fc34d79fb8d57cc41743953aacb439e83b1349f64f148c0216186607302be216ca1f31f47c116951c76142de59a0de04044574cb2974c30ac391284de9b88cfc8dc82a3a5a62c5067008d3d2aa"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) 00:16:14 executing program 2: syz_clone(0x14100040, 0x0, 0x0, 0x0, 0x0, 0x0) 00:16:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0xc00, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:14 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000200)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000400)={{0x0, 0x5, 0x4, 0x0, 0x4, 0x19f5ceed, 0x7fff, 0x6, 0x6, 0x9, 0x1, 0x0, 0x800, 0x3f, 0x200}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001400)={r1, r2, "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", "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"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r3, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:16:14 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/user\x00') sendmsg$unix(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x10}}], 0x28}, 0x0) 00:16:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0xd00, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:14 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000200)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000400)={{0x0, 0x5, 0x4, 0x0, 0x4, 0x19f5ceed, 0x7fff, 0x6, 0x6, 0x9, 0x1, 0x0, 0x800, 0x3f, 0x200}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001400)={r1, r2, "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", "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"}) (async, rerun: 64) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (rerun: 64) fremovexattr(r3, &(0x7f0000000080)=@known='system.posix_acl_default\x00') [ 2978.527090][ T8412] binder: BINDER_SET_CONTEXT_MGR already set [ 2978.540322][ T8412] binder: 8409:8412 ioctl 4018620d 20000040 returned -16 00:16:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$unix(0x1, 0x4, 0x0) (async) r2 = socket$unix(0x1, 0x4, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000080), 0x10) socket$packet(0x11, 0x2, 0x300) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040), 0x4) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xd2) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) 00:16:14 executing program 2: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x1e, &(0x7f0000000ac0)={{}, 0x0, 0x0}, 0x20) 00:16:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0xe00, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:14 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x0, 0x0, 0xa6, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) 00:16:14 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000200)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000400)={{0x0, 0x5, 0x4, 0x0, 0x4, 0x19f5ceed, 0x7fff, 0x6, 0x6, 0x9, 0x1, 0x0, 0x800, 0x3f, 0x200}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001400)={r1, r2, "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", "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"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r3, &(0x7f0000000080)=@known='system.posix_acl_default\x00') openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000200)) (async) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000400)={{0x0, 0x5, 0x4, 0x0, 0x4, 0x19f5ceed, 0x7fff, 0x6, 0x6, 0x9, 0x1, 0x0, 0x800, 0x3f, 0x200}}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001400)={r1, r2, "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", "c84df343c49803c0b41248a281a85c0fde0cbf750e72d79e9d6efd5b4a697675f3f77b8d8b72d4f78aed6162ad9fdb7780b3aa78168100d1dd8e4721b55f64743180936d80292ec4801d2bced1956f379824e12711a554af0aee36e7d6bafd20530d3079eb96bf8a6aa30a0f24e7888ece95dae0e76773d58a46da043b47401911523227320acc48ecb56e58b6953d58be50f60d1b76221ef3e58d16f62a16569b41bb0c55a0ce8463ef8bba7bd590cf41643266f636a492873d7d8f3beeba4b80a7e570a4e414903e7cb7011ad327284386687825d22a52faac469af9fd48090785719b01bc340b0514399cd4fa042ffc22ff61df70eac72e23acb05587f1c36da64b1a6a977b07802cffed53da2aad23034ee4aba293d730b51480f78532957b7407ce852e11ebd0086b14f5848af8ac46598f59b630560b35e088618964ae037c2eb07721707b50789e4490927e723233a119bacc25dc271c7f226aef1d5c6cd6c552fa2d20fec7cfde21f55abf56079054d87a6a54fd2943e10c319e70e9362e6a6ff70543dde9037f59128a0c28df18c7441bc163782b4f76950f485274bafe94ad2a9270e88a5b913e25607239394704cb9e4991598f855a18a4bd1debc31e9c0a897bcda306e3112035bca0906dea1bee8296c777f6f4359768c930c95936002b83779b9f40d3eb283f86516b2b7ddf4e7245e558a0cbcf03b6120d39602a3398eb48870fc58b066327aafab67e7a7ed380e1e4e9abb22afd761ee50339e3eeb2546c4446ebbb3779ff6955404cdb818ca8873bfc36eba81f42fe9f9edea9462ff99240acac9c5d627342ae395dd07e1e2bfe9e2ebe1a601f9407bd47c0267766b1be8dd9ee6fbf00cbc6fffb682c4bd3c5d2ccbd6dc52b298b6ccfb34d821ddf4b4e61deea8aa58fac0d15f19ce0a781f1f8d7206b302435b977ff3ea97285486d4a86e396571d482b7e80eb989b25a5537e417bd6c04368f92380c54669c1ef615ed3fcfd99957eff2c4beb809efe8472fd5057e9e0e74d6875d5b2e3a0114df94fdfb32c654ceb2ca621ee1a4f431ca1a5958e84cde9e15255ddecade68935ef40ca48472c854bd946e14f9e939129ce8fdb0f4c431b4251e1f57a5d64eb22b89472226662b445d19e462989a25c13857fbe3ff23256317647735dc5be778249dc93401170887c1a472d9bc0dd0a25a0e45a6fd0594cb3e964061cdfa9eae8b5a7061e5bbe08b3fabeb4e04a0e0a22084595bd8f03f0b686fd5c7a7070fad102d6be9dc5d8d920ae16647cf9a61277967ca46d14cb12061910bb196dcb911ea3617327990975b5c837e932724a8c40149326ad00157a873748dbecc25eee20d3737d084ab5e238c2b87988569b423b59b65bfd3fdea6c61d7016811aeb0ef689b5da3a5b6939fad8759eb5caaae42d0f5cc70b03a3fa5b347f1adcedaffc6eae128d1fe9160c0f41c58e1634b1b2277e809a59cda1442a08f732a56d3b9e1aa49c33e1f25d6350fef172636578526db97f0b68169bfa1d0e02689f608acddf8b201efe13de5b95b7c8b39edaa50de9c82e35330be1733f8e27808ec6f376f66e28f31ffad6bd735de41a84965d7c6bca9991b1d186bc7fd2e0c1edc438c05f8e4d8b8179c67cef20dc3ea856f1fca3593dd3f4896ef81c1e4db442263fd60c09d6285109722d8649c84919e9ece9bd1d41903242f92909bc857fa958e9b13dfea16d151cbf16454e374444180d32b3f3a031eacd76de6ea4926bc70a747b8e8abb954688e46e52d33361b362c16dffef60d6466a809ef371d7b347284ff2527795405d6321eb25dab46bb377135450ecef8d64e02c7e0533c28bd580f5a01385527d97f36220445754e3b3436cbf1018f5f41dc1daaacbc6d4a4550477c64bbd983338cd628726c330f082efa3a66e8520aea3ccfdc0aeea95b4608563dafc2a92767c5f912d4c8670771f21581d448549373f6215180f55535f77e8828035003cbbf71486cb8d1d18094b8f214c46de4d8d7eb3d0f7f337933a0367cd744580ec7de56511eb12644ce9751f306576f06445f9ab562517ea4fe428c2d4d59f642360ebf14aad24c87065cab8630bba82935ffc180d769c43aab2b4b413df358ab13df7c3a7968d84090e656e1deb110a2e28a9119beb88638f4ccf7ef3e0106063876f50e035662b5b092692b49007e59d434073dda9236eb5a02d12663428c46af7d819c26540beac4ae170c231facae050bc769a293eb46dd6fd9e526348c6f22f5086fbd5834164896e00e8a4d6a784a436dcc8bdbba6de0cde31ec125580124098b9d80d017379abe912378b597dc4eb441ea4bb3644b815e55abf73c1e1b92a2a9cc6661701c7b7c4f03aef39b40ca4d2920ea3da9085b869d55d01d766fd4ba05c0e65afbbea3214a874b63c74b52089c6d8517a39e4dab0699527d39fe38340cf68ca83fb05d47b863e409f38f5d53171adc97f048a5e290279c29a070e15d9c294fc9679815308a6b1b638725da6c765bbc4b5db394b34a44429f5e73380321c3e213550aca836bb68b0fd52f096ca697ae9f2ebaa04620f44f18ea952b25f008922f75bb2f9b93a451927c8f555c54ef8300ad229735555eb51bbb55f26d8a1e4ecfd71162038be0c5152a99d399ad025ee465af4acb1bdf23a1b6be8e20757c7ee9870119284f1863cfe440e7621c538de40c3fe4e2bdeb34b10abfa5cdfa73ee8128a276b595119cf8bb6d5d6ec0547922ceba51cbb3bb786add2e84572341a35670a8108a70d7ccb86f814a1179e1dbc5044704bb8788271e1ceeb31801af325d7eab103fb0886daac1dd623e656e87720d65a7cbcfd067341dbf4ece9b73c3be7980ed5ee4a4fbfa1e7958dc9a9ba88342ab384bad51bf73625f0420bd951ce2801c5ae6b650abb19592d2c2c8942560b8535d56a0a91071521b2dc8714179eb1635174bdc51bfe7422084fcb6c762665a20d67aecc1a7aa3d806ed186ce586b514e18ee17241fc5beade0938738c6d4f8cbde59f2c9f1cb2b6310c897a068b19a1641b3f654efa20b9ae2855e400eb5c4d113ea5ea26af00693ce690e32b789cec0de0bfee10ad16f1fbb6d279d17c9c8060240aabb562967de6255de8dacbd39175131ca3df8d2e31761e213af2d6db46175f3a931fd14c9839ad5af0ab1f30c9f05a5def03dbeea5ba2f4f24d52a6990ff965ebb7b48bc664701c0adbcff78e78d1f6df7ed3f284d80c67ff75b17cb6d5077ab4b4b27259f3336ead70f6a431e5dc82d2e8c576beb457908e42acb080ddc7518018cde5afddd6efc9454c5511059b05ba94a303f0af6e34d34de97a33cc17b773688b5068337e2125f690d9fe6f5160d5f8352ed017ece53d4309a61ee5f1533269b37e48e6a10267794c1bdfc34f4a107dd9d6fa34cfb760364f877c4a6c62a8357dca3736c0e29df06f8460e47ca79ea044d78f6be01348814354bc6606335aa3fcb637518d457b766ceeeb3a099e317fc070c33b780f682d62026c83d26d10fdefbf916147e76e8288a46edd99b51c0d01e165b0f5a7292cfebe22f181b39103b1487e8029ad68e0ce8b591fc59e7778a07ff913d3406073fe8eb1e04485a257e9a121092f3fa992cc2224c75f8852717d2203a404ad407945fafb46a1540af9f6d26561dc594fc0a02b5b910d87e9edc39fb3120c4c4e40c749cac8d16ae611d8c0c33f6df9b8a70c630b111afc6c7f5299d9b10008bcde89d38536ab0ec2957ba77dd438aa7a4a2589c269dca7a3ee2b59112bb979968cd9f47f2d19efe320ef2be217fd3108ea1165cc939638b4582ccfeacc2377b9f056b9a5476f5979364a7257ee4d76d1a0fc9492c5542d577a79ab5417f5047e424b65aac9940c58233afbe3d4040fafd0ef0c28ae37d8c1f0afeb5a83f6a6276d384d8572b7e86776fd1875341a03e9d0b6cd8f00fd70949be5106839fd513a70ba96816b507049cda2084e5b79a1ce1d31379603121ec3ab3accc892fb32ded6f080939acaf8ba5f9646a59e79b3b7f26c4299f0ec705448b8e13e1866dea6a277493b54f6f93fae6989f4233e07181e4855b2acbfb0e9ba145d98dfa76d6f6a13b338129bcfa11ee1bc9d0d1fad89b372cbc951b97de7881c3a6bd574c6ed270aa65789cb5cc061c3cb36f80b72bee2e1eb0a0a32d4749634efcb405cd08ef2645521d44b09913fb8950368ed497e5ada552906a84551ae551a8a44d37ab9eb470b7a942886871af8b292051a5c8dba6e2b28fa03a47a31fa2520a39b7435ef686b469510e01e4fbae7121b76849696f1a931f21a5688ac5e8c84655762952d3573239534582491421c71f57f78c7a76f95c09af991e01a4e6543c65ae1df302f9dcb7870231ca36acc2e107a59c5677b5f5e2d5fe705cc310bf7ab45a2e0b6b09f442ba47d840591376167b5dfbf752dc058f0e36e71e01e529dc773ae8b169cfa35f7226208c36b3566c80f50f03b9c388a879aee412e30e550a1ba6026dfae7e026aa5c477ee6a719c383eb4978d4256376511a54a840176ed433449b3862cbcb3eb7518e64d57082f394a05779b556f663cd0a788f3d982460361aa17f82e5f8bd4056adacd55d2eec2ef4dc4ef650975574bcc74a27409de4b7eb0e957bedd5842e9e6d5695dec4d2de4a45e574524fedcddd5483b1fa5a335933084ed4096e0a14b838cc32ea66ac1dc390381b1d83877b29bc29e4c96247709fdbb130d1a5f549751c52b06224947c60ab2ce3c483bf3414213bc9eb55024b691c70db4f0d21605b75e02d4b64011af2f83a7743fa031ac4909792609716eb8f0506a0bbf2ba9613d3c13f86cbe177931bbbc4e330d4805f60d338023d8520ade27f0bc2fd35580553de764e683da5562528322486efeeafa1d30dfa89a0306d5570ed67dbb3e5e4143a40df5aa2b4a4c680bebdf59639c5ed2faaaffd7c6a6b97f9b4e8d71f20c81c66aa0769f65b0fb5d9ab3f7b13551fcf2e6f7b1b86389dc64cf95cc9330a40c3e387daaf1e9be2d93db42c8e79b175e8d1a49292c99fe7396c2ac76f949e67f04f0c0130e908f118b5f4269ad88e6ad31e1dda8fb4e4c86145a8d3c6c610e49a6bb50de9b4ec387a8294e360453091183bf5036d5e4bc0bfa1b2972ed4cd36f81de93b0d0d6a94d28b8a6e6e2ec6c8e63ac8f591b9774345cb91a97c4e489c0ea4b85a7fef0d780a7b00fdc4a254b51478a893c2308f94861db5a19bb7d7b12a9680fbe3442bbc03593501a5d333c96117ee35c91c98d461913126664136c7f0fae7831005fd2c64a84cf2f7eae9cc0215206abcd1dc9d562f50611d68bd5a5123e3011b7d71796e51bd3d9151ce04da0075ff11849c5d7cb0c08c66256f9c9eb5d6893e9e7281169b725cd31b4d5ee8"}) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) fremovexattr(r3, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) 00:16:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1100, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:14 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'veth1_to_hsr\x00', @random="d72fc2ac53f2"}) 00:16:14 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001a"], &(0x7f0000000380)=""/181, 0x90, 0xb5, 0x1}, 0x20) 00:16:14 executing program 2: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080), 0x1e) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x10) 00:16:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1200, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:14 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) (rerun: 32) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'veth1_to_hsr\x00', @random="d72fc2ac53f2"}) 00:16:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r1 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$unix(0x1, 0x4, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000080), 0x10) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040), 0x4) (async) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xd2) (async) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) (async, rerun: 32) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) (rerun: 32) 00:16:14 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'veth1_to_hsr\x00', @random="d72fc2ac53f2"}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80800}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'veth1_to_hsr\x00', @random="d72fc2ac53f2"}) (async) 00:16:14 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x20) 00:16:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1800, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:14 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000000)=0x910) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 00:16:14 executing program 2: sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_clone(0x14100040, 0x0, 0x0, 0x0, &(0x7f00000028c0), 0x0) 00:16:15 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000000)=0x910) (async, rerun: 64) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (rerun: 64) 00:16:15 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x2500, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:15 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x48) 00:16:15 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000000)=0x910) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000000)=0x910) (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) [ 2979.153443][ T29] INFO: task kworker/0:8:10843 blocked for more than 143 seconds. [ 2979.191981][ T29] Not tainted 6.8.0-rc7-syzkaller #0 00:16:15 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000003c0)="cd", 0x1}], 0x1}, 0x1) [ 2979.213144][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2979.231487][ T29] task:kworker/0:8 state:D stack:23288 pid:10843 tgid:10843 ppid:2 flags:0x00004000 00:16:15 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x5c00, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2979.266278][ T29] Workqueue: usb_hub_wq hub_event 00:16:15 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0xffffffffffffffc0, r0, 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth1\x00', 0x20}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'veth1_to_team\x00', @multicast}) fremovexattr(r0, &(0x7f0000001200)=@known='system.posix_acl_default\x00') r2 = socket$isdn_base(0x22, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000200)={{r3}, r4, 0x12, @unused=[0x0, 0x7, 0x8, 0xffffffffffffff51], @name="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"}) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000100)={0x10000000}) 00:16:15 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001340)='9', 0x1}], 0x1}, 0x20046840) [ 2979.300292][ T29] Call Trace: [ 2979.305365][ T29] [ 2979.312859][ T29] __schedule+0x17d1/0x49f0 [ 2979.317513][ T29] ? __pfx___schedule+0x10/0x10 [ 2979.322409][ T29] ? __pfx_lock_release+0x10/0x10 00:16:15 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x3}], 0x0, 0x0, &(0x7f0000000140)}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) close_range(r0, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="04630440000000000f630c40010000000000002600000000066304400300000077671428a34f0a94d1b4b62cac194951db44be051c3fe3f1408de69acc87ff21e99e74e53cbcf52c3104092fa03944e36b45d2a1c617e57ddc29d4d5b39f35b841169c2ec9e85725b58f44e5843204a31c801ec552cac7686386aa8494b72c6c8c7866ac6046e18d902373c6448b1501fe4712668fa9b5604dbd222c715fd7f8e8e11fb7294496d354f91ff41b3edd8952fb70d05e041178cf3741de004169008f27cf2b2b5a9f15d7d0f9b68bbf1c827f17fc05e3c5c718b84a46d24fed74d79d370300"/243], 0x0, 0x0, 0x0}) 00:16:15 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0xffffffffffffffc0, r0, 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth1\x00', 0x20}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'veth1_to_team\x00', @multicast}) fremovexattr(r0, &(0x7f0000001200)=@known='system.posix_acl_default\x00') (async) r2 = socket$isdn_base(0x22, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000200)={{r3}, r4, 0x12, @unused=[0x0, 0x7, 0x8, 0xffffffffffffff51], @name="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"}) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000100)={0x10000000}) [ 2979.367315][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2979.379687][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 2979.398476][ T29] ? lockdep_hardirqs_on+0x98/0x140 00:16:15 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1000000, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:15 executing program 2: socketpair(0x22, 0x0, 0x2, &(0x7f0000000040)) [ 2979.418684][ T29] ? schedule+0x8e/0x260 [ 2979.430574][ T29] schedule+0x149/0x260 [ 2979.444107][ T29] usb_kill_urb+0x1c9/0x300 00:16:15 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x3}], 0x0, 0x0, &(0x7f0000000140)}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x3}], 0x0, 0x0, &(0x7f0000000140)}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) close_range(r0, r2, 0x0) (async) close_range(r0, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="04630440000000000f630c40010000000000002600000000066304400300000077671428a34f0a94d1b4b62cac194951db44be051c3fe3f1408de69acc87ff21e99e74e53cbcf52c3104092fa03944e36b45d2a1c617e57ddc29d4d5b39f35b841169c2ec9e85725b58f44e5843204a31c801ec552cac7686386aa8494b72c6c8c7866ac6046e18d902373c6448b1501fe4712668fa9b5604dbd222c715fd7f8e8e11fb7294496d354f91ff41b3edd8952fb70d05e041178cf3741de004169008f27cf2b2b5a9f15d7d0f9b68bbf1c827f17fc05e3c5c718b84a46d24fed74d79d370300"/243], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="04630440000000000f630c40010000000000002600000000066304400300000077671428a34f0a94d1b4b62cac194951db44be051c3fe3f1408de69acc87ff21e99e74e53cbcf52c3104092fa03944e36b45d2a1c617e57ddc29d4d5b39f35b841169c2ec9e85725b58f44e5843204a31c801ec552cac7686386aa8494b72c6c8c7866ac6046e18d902373c6448b1501fe4712668fa9b5604dbd222c715fd7f8e8e11fb7294496d354f91ff41b3edd8952fb70d05e041178cf3741de004169008f27cf2b2b5a9f15d7d0f9b68bbf1c827f17fc05e3c5c718b84a46d24fed74d79d370300"/243], 0x0, 0x0, 0x0}) 00:16:15 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0xffffffffffffffc0, r0, 0x2}) (async, rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth1\x00', 0x20}) (rerun: 32) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'veth1_to_team\x00', @multicast}) fremovexattr(r0, &(0x7f0000001200)=@known='system.posix_acl_default\x00') r2 = socket$isdn_base(0x22, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000200)={{r3}, r4, 0x12, @unused=[0x0, 0x7, 0x8, 0xffffffffffffff51], @name="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"}) (async, rerun: 32) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000100)={0x10000000}) (rerun: 32) [ 2979.475364][ T29] ? __pfx_usb_kill_urb+0x10/0x10 [ 2979.480458][ T29] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2979.506687][ T29] usb_start_wait_urb+0x1b0/0x520 [ 2979.511781][ T29] ? __pfx_usb_start_wait_urb+0x10/0x10 00:16:15 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/user\x00') sendmsg$unix(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) 00:16:15 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x2000000, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2979.563802][ T29] ? usb_control_msg+0xbb/0x4c0 [ 2979.582634][ T29] usb_control_msg+0x2b1/0x4c0 [ 2979.587476][ T29] ? __pfx_usb_control_msg+0x10/0x10 00:16:15 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x3}], 0x0, 0x0, &(0x7f0000000140)}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x3}], 0x0, 0x0, &(0x7f0000000140)}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) close_range(r0, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="04630440000000000f630c40010000000000002600000000066304400300000077671428a34f0a94d1b4b62cac194951db44be051c3fe3f1408de69acc87ff21e99e74e53cbcf52c3104092fa03944e36b45d2a1c617e57ddc29d4d5b39f35b841169c2ec9e85725b58f44e5843204a31c801ec552cac7686386aa8494b72c6c8c7866ac6046e18d902373c6448b1501fe4712668fa9b5604dbd222c715fd7f8e8e11fb7294496d354f91ff41b3edd8952fb70d05e041178cf3741de004169008f27cf2b2b5a9f15d7d0f9b68bbf1c827f17fc05e3c5c718b84a46d24fed74d79d370300"/243], 0x0, 0x0, 0x0}) [ 2979.624070][ T29] ? hub_port_init+0x178/0x2620 [ 2979.643887][ T29] ? kmalloc_trace+0x1d6/0x360 00:16:15 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)='6', 0x1}], 0x1}, 0x8000) sendmsg(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001440)='9', 0x1}], 0x1}, 0x0) 00:16:15 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth1_to_team\x00', 0x1000}) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') [ 2979.672593][ T29] ? hub_port_init+0x178/0x2620 [ 2979.677512][ T29] hub_port_init+0xc21/0x2620 [ 2979.682251][ T29] hub_event+0x2908/0x50f0 [ 2979.712235][ T8507] binder: BINDER_SET_CONTEXT_MGR already set [ 2979.714484][ T29] ? __pfx_hub_event+0x10/0x10 [ 2979.732600][ T29] ? __pfx_lock_acquire+0x10/0x10 [ 2979.738202][ T8507] binder: 8504:8507 ioctl 4018620d 20000040 returned -16 [ 2979.747929][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 00:16:15 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x3000000, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 00:16:15 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth1_to_team\x00', 0x1000}) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth1_to_team\x00', 0x1000}) (async) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') (async) 00:16:15 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_access\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) 00:16:15 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, 0x0}, 0x0) [ 2979.783498][ T29] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2979.789908][ T29] ? process_scheduled_works+0x825/0x1420 [ 2979.842054][ T29] process_scheduled_works+0x913/0x1420 [ 2979.848774][ T29] ? __pfx_process_scheduled_works+0x10/0x10 [ 2979.861589][ T29] ? assign_work+0x364/0x3d0 [ 2979.872085][ T29] worker_thread+0xa5f/0x1000 [ 2979.881252][ T29] ? __pfx_worker_thread+0x10/0x10 00:16:15 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_access\x00') (async, rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) (async, rerun: 64) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@increfs, @clear_death={0x400c630f, 0x1}, @release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) 00:16:15 executing program 2: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x22, &(0x7f0000000ac0)={{}, 0x0, 0x0}, 0x20) [ 2979.892355][ T29] kthread+0x2ef/0x390 [ 2979.900239][ T29] ? __pfx_worker_thread+0x10/0x10 [ 2979.919752][ T29] ? __pfx_kthread+0x10/0x10 [ 2979.933159][ T29] ret_from_fork+0x4b/0x80 [ 2979.939519][ T29] ? __pfx_kthread+0x10/0x10 [ 2979.955674][ T29] ret_from_fork_asm+0x1b/0x30 [ 2979.961917][ T29] [ 2979.970095][ T29] [ 2979.970095][ T29] Showing all locks held in the system: [ 2979.996527][ T29] 1 lock held by ksoftirqd/1/22: [ 2980.008442][ T29] 1 lock held by khungtaskd/29: [ 2980.013414][ T8527] binder: BINDER_SET_CONTEXT_MGR already set [ 2980.013429][ T8527] binder: 8523:8527 ioctl 4018620d 20000040 returned -16 [ 2980.013519][ T8527] binder: BINDER_SET_CONTEXT_MGR already set [ 2980.013529][ T8527] binder: 8523:8527 ioctl 4018620d 20000040 returned -16 [ 2980.013613][ T8527] binder: BINDER_SET_CONTEXT_MGR already set 00:16:15 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x4000000, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 2980.039648][ T29] #0: [ 2980.046593][ T8527] binder: 8523:8527 ioctl 4018620d 20000040 returned -16 [ 2980.065028][ T29] ffffffff8e130be0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 2980.081478][ T8527] binder: BINDER_SET_CONTEXT_MGR already set [ 2980.093727][ T29] 2 locks held by getty/4826: [ 2980.098216][ T8527] binder: 8523:8527 ioctl 4018620d 20000040 returned -16 [ 2980.098579][ T29] #0: ffff88802a48f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2980.110019][ T8527] binder: BINDER_SET_CONTEXT_MGR already set [ 2980.130118][ T8527] binder: 8523:8527 ioctl 4018620d 20000040 returned -16 [ 2980.141695][ T29] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b4/0x1e10 [ 2980.160465][ T8527] binder: BINDER_SET_CONTEXT_MGR already set [ 2980.165481][ T29] 5 locks held by kworker/0:8/10843: [ 2980.178951][ T8527] binder: 8523:8527 ioctl 4018620d 20000040 returned -16 [ 2980.179468][ T29] #0: [ 2980.195108][ T8527] binder: BINDER_SET_CONTEXT_MGR already set [ 2980.196137][ T29] ffff88801c6f9938 [ 2980.200276][ T8527] binder: 8523:8527 ioctl 4018620d 20000040 returned -16 [ 2980.213834][ T29] ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 2980.223169][ T8527] binder: BINDER_SET_CONTEXT_MGR already set [ 2980.230673][ T8527] binder: 8523:8527 ioctl 4018620d 20000040 returned -16 [ 2980.240853][ T29] #1: ffffc90013737d20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 2980.247186][ T8527] binder: BINDER_SET_CONTEXT_MGR already set [ 2980.269061][ T29] #2: ffff88802414b190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x50f0 [ 2980.270491][ T8527] binder: 8523:8527 ioctl 4018620d 20000040 returned -16 [ 2980.292283][ T29] #3: ffff88802414e510 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x255f/0x50f0 [ 2980.301498][ T8527] binder: BINDER_SET_CONTEXT_MGR already set [ 2980.308562][ T8527] binder: 8523:8527 ioctl 4018620d 20000040 returned -16 [ 2980.315743][ T29] #4: ffff888023cfc068 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x259d/0x50f0 [ 2980.315830][ T29] 3 locks held by kworker/1:13/27262: [ 2980.315843][ T29] #0: ffff888014c78938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 2980.315904][ T29] #1: ffffc9000dfe7d20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 2980.315958][ T29] #2: ffffffff8f375d88 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 2980.335776][ T8527] binder: BINDER_SET_CONTEXT_MGR already set [ 2980.372592][ T29] 2 locks held by kworker/0:2/17306: [ 2980.377900][ T29] #0: ffff888014c7a538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 2980.387370][ T8527] binder: 8523:8527 ioctl 4018620d 20000040 returned -16 [ 2980.400679][ T8527] binder: BINDER_SET_CONTEXT_MGR already set [ 2980.402837][ T29] #1: ffffc9000a5b7d20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 2980.411388][ T8527] binder: 8523:8527 ioctl 4018620d 20000040 returned -16 [ 2980.432968][ T29] 2 locks held by syz-executor.0/8454: [ 2980.438451][ T29] #0: ffffffff8f375d88 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 2980.441243][ T8527] binder: BINDER_SET_CONTEXT_MGR already set [ 2980.462265][ T8527] binder: 8523:8527 ioctl 4018620d 20000040 returned -16 [ 2980.462625][ T29] #1: ffffffff8e136578 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3a3/0x890 [ 2980.469677][ T8527] binder: BINDER_SET_CONTEXT_MGR already set [ 2980.469688][ T8527] binder: 8523:8527 ioctl 4018620d 20000040 returned -16 [ 2980.492595][ T29] 1 lock held by syz-executor.0/8458: [ 2980.499822][ T29] 1 lock held by syz-executor.1/8518: [ 2980.512579][ T29] #0: ffffffff8f375d88 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x48f/0x2400 [ 2980.521947][ T29] 1 lock held by syz-executor.1/8521: [ 2980.528592][ T8527] binder: BINDER_SET_CONTEXT_MGR already set [ 2980.538428][ T8527] binder: 8523:8527 ioctl 4018620d 20000040 returned -16 [ 2980.542845][ T29] #0: ffffffff8f375d88 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x48f/0x2400 [ 2980.551253][ T8527] binder: BINDER_SET_CONTEXT_MGR already set [ 2980.562827][ T29] 1 lock held by syz-executor.3/8527: [ 2980.567864][ T8527] binder: 8523:8527 ioctl 4018620d 20000040 returned -16 [ 2980.568196][ T29] 2 locks held by dhcpcd/8531: [ 2980.579982][ T8527] binder: BINDER_SET_CONTEXT_MGR already set [ 2980.583322][ T29] #0: ffff88802e1ae130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 2980.590807][ T8527] binder: 8523:8527 ioctl 4018620d 20000040 returned -16 [ 2980.612839][ T29] #1: ffffffff8e136578 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x46c/0x890 [ 2980.616851][ T8527] binder: BINDER_SET_CONTEXT_MGR already set [ 2980.633400][ T29] [ 2980.635756][ T29] ============================================= [ 2980.635756][ T29] [ 2980.653280][ T8527] binder: 8523:8527 ioctl 4018620d 20000040 returned -16 [ 2980.670345][ T29] NMI backtrace for cpu 0 [ 2980.674711][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.8.0-rc7-syzkaller #0 [ 2980.682690][ T8527] binder: BINDER_SET_CONTEXT_MGR already set [ 2980.682855][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2980.688808][ T8527] binder: 8523:8527 ioctl 4018620d 20000040 returned -16 [ 2980.698837][ T29] Call Trace: [ 2980.698846][ T29] [ 2980.698854][ T29] dump_stack_lvl+0x1e7/0x2e0 [ 2980.698881][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 2980.698904][ T29] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2980.727322][ T29] ? __pfx__printk+0x10/0x10 [ 2980.731935][ T29] ? vprintk_emit+0x607/0x720 [ 2980.736621][ T29] ? __pfx_vprintk_emit+0x10/0x10 [ 2980.741655][ T29] nmi_cpu_backtrace+0x49c/0x4d0 [ 2980.746607][ T29] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2980.752089][ T29] ? _printk+0xd5/0x120 [ 2980.752680][ T8527] binder: BINDER_SET_CONTEXT_MGR already set [ 2980.756242][ T29] ? __pfx__printk+0x10/0x10 [ 2980.762196][ T8527] binder: 8523:8527 ioctl 4018620d 20000040 returned -16 [ 2980.766756][ T29] ? __wake_up_klogd+0xcc/0x110 [ 2980.766778][ T29] ? __pfx__printk+0x10/0x10 [ 2980.766798][ T29] ? __rcu_read_unlock+0xa0/0x110 [ 2980.766820][ T29] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2980.766841][ T29] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 2980.766863][ T29] watchdog+0xfaf/0xff0 [ 2980.766889][ T29] ? watchdog+0x1e9/0xff0 [ 2980.766918][ T29] ? __pfx_watchdog+0x10/0x10 [ 2980.766947][ T29] kthread+0x2ef/0x390 [ 2980.766966][ T29] ? __pfx_watchdog+0x10/0x10 [ 2980.766988][ T29] ? __pfx_kthread+0x10/0x10 [ 2980.767007][ T29] ret_from_fork+0x4b/0x80 [ 2980.767029][ T29] ? __pfx_kthread+0x10/0x10 [ 2980.767048][ T29] ret_from_fork_asm+0x1b/0x30 [ 2980.767086][ T29] [ 2980.768265][ T29] Sending NMI from CPU 0 to CPUs 1: [ 2980.802996][ T8527] binder: BINDER_SET_CONTEXT_MGR already set [ 2980.805392][ C1] NMI backtrace for cpu 1 [ 2980.805401][ C1] CPU: 1 PID: 8527 Comm: syz-executor.3 Not tainted 6.8.0-rc7-syzkaller #0 [ 2980.805417][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2980.805431][ C1] RIP: 0010:io_serial_out+0x7e/0xc0 [ 2980.805543][ C1] Code: fc 89 e9 41 d3 e7 48 83 c3 40 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 cc cc c9 fc 44 03 3b 44 89 f0 44 89 fa ee <5b> 41 5c 41 5e 41 5f 5d c3 cc cc cc cc 89 e9 80 e1 07 38 c1 7c a7 [ 2980.805555][ C1] RSP: 0018:ffffc90004edf430 EFLAGS: 00000002 [ 2980.805569][ C1] RAX: 000000000000002e RBX: ffffffff947b2940 RCX: 0000000000000000 [ 2980.805580][ C1] RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000020 [ 2980.805590][ C1] RBP: 0000000000000000 R08: ffffffff852bbe0b R09: 1ffff11003ed4046 [ 2980.805600][ C1] R10: dffffc0000000000 R11: ffffffff852bbdc0 R12: dffffc0000000000 [ 2980.805611][ C1] R13: 000000000000002e R14: 000000000000002e R15: 00000000000003f8 [ 2980.805620][ C1] FS: 00007fc6ee3546c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 2980.805634][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2980.805645][ C1] CR2: 000055eae0b01600 CR3: 0000000078174000 CR4: 00000000003526f0 [ 2980.805658][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2980.805666][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2980.805676][ C1] Call Trace: [ 2980.805682][ C1] [ 2980.805687][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 2980.805705][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 2980.805727][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2980.805743][ C1] ? nmi_handle+0x2a/0x580 [ 2980.805764][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2980.805781][ C1] ? nmi_handle+0x14f/0x580 [ 2980.805794][ C1] ? nmi_handle+0x2a/0x580 [ 2980.805808][ C1] ? io_serial_out+0x7e/0xc0 [ 2980.805824][ C1] ? default_do_nmi+0x63/0x160 [ 2980.805841][ C1] ? exc_nmi+0x123/0x1f0 [ 2980.805856][ C1] ? end_repeat_nmi+0xf/0x60 [ 2980.805873][ C1] ? __pfx_io_serial_out+0x10/0x10 [ 2980.805890][ C1] ? io_serial_out+0x4b/0xc0 [ 2980.805908][ C1] ? io_serial_out+0x7e/0xc0 [ 2980.805925][ C1] ? io_serial_out+0x7e/0xc0 [ 2980.805944][ C1] ? io_serial_out+0x7e/0xc0 [ 2980.805961][ C1] [ 2980.805965][ C1] [ 2980.805972][ C1] serial8250_console_write+0x1289/0x1840 [ 2980.805999][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 2980.806017][ C1] ? __pfx_lock_release+0x10/0x10 [ 2980.806034][ C1] ? do_raw_spin_lock+0x14e/0x370 [ 2980.806055][ C1] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2980.806073][ C1] ? console_flush_all+0x14a/0xec0 [ 2980.806089][ C1] ? __pfx_univ8250_console_write+0x10/0x10 [ 2980.806111][ C1] console_flush_all+0x808/0xec0 [ 2980.806128][ C1] ? console_flush_all+0x14a/0xec0 [ 2980.806145][ C1] ? mark_lock+0x9a/0x350 [ 2980.806162][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 2980.806188][ C1] console_unlock+0x13b/0x4d0 [ 2980.806205][ C1] ? __pfx_console_unlock+0x10/0x10 [ 2980.806221][ C1] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2980.806242][ C1] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2980.806262][ C1] ? vprintk_emit+0x33d/0x720 [ 2980.806276][ C1] vprintk_emit+0x508/0x720 [ 2980.806293][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 2980.806308][ C1] ? rcu_is_watching+0x15/0xb0 [ 2980.806328][ C1] ? trace_contention_end+0x3c/0x100 [ 2980.806343][ C1] ? __mutex_lock+0x2ee/0xd70 [ 2980.806361][ C1] _printk+0xd5/0x120 [ 2980.806382][ C1] ? __pfx__printk+0x10/0x10 [ 2980.806402][ C1] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2980.806427][ C1] binder_ioctl_set_ctx_mgr+0x2c8/0x410 [ 2980.806453][ C1] binder_ioctl+0x768/0x1c30 [ 2980.806474][ C1] ? tomoyo_path_number_perm+0x71a/0x880 [ 2980.806496][ C1] ? tomoyo_path_number_perm+0x208/0x880 [ 2980.806514][ C1] ? __pfx_binder_ioctl+0x10/0x10 [ 2980.806551][ C1] ? __fget_files+0x28/0x470 [ 2980.806573][ C1] ? __fget_files+0x28/0x470 [ 2980.806594][ C1] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2980.806614][ C1] ? security_file_ioctl+0x87/0xb0 [ 2980.806632][ C1] ? __pfx_binder_ioctl+0x10/0x10 [ 2980.806651][ C1] __se_sys_ioctl+0xfc/0x170 [ 2980.806671][ C1] do_syscall_64+0xf9/0x240 [ 2980.806693][ C1] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2980.806714][ C1] RIP: 0033:0x7fc6ed67dda9 [ 2980.806727][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2980.806738][ C1] RSP: 002b:00007fc6ee3540c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2980.806753][ C1] RAX: ffffffffffffffda RBX: 00007fc6ed7ac050 RCX: 00007fc6ed67dda9 [ 2980.806763][ C1] RDX: 0000000020000040 RSI: 000000004018620d RDI: 0000000000000005 [ 2980.806773][ C1] RBP: 00007fc6ed6ca47a R08: 0000000000000000 R09: 0000000000000000 [ 2980.806782][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2980.806791][ C1] R13: 000000000000000b R14: 00007fc6ed7ac050 R15: 00007fc6ed8cfa48 [ 2980.806810][ C1] [ 2980.840007][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 2980.840022][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.8.0-rc7-syzkaller #0 [ 2980.840041][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2980.840052][ T29] Call Trace: [ 2980.840062][ T29] [ 2980.840070][ T29] dump_stack_lvl+0x1e7/0x2e0 [ 2980.840103][ T29] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2980.840127][ T29] ? __pfx__printk+0x10/0x10 [ 2980.840155][ T29] ? vscnprintf+0x5d/0x90 [ 2980.840176][ T29] panic+0x349/0x860 [ 2980.840200][ T29] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2980.840221][ T29] ? __pfx_panic+0x10/0x10 [ 2980.840243][ T29] ? nmi_backtrace_stall_check+0x469/0x480 [ 2980.840270][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 2980.840288][ T29] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2980.840306][ T29] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 2980.840327][ T29] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 2980.840349][ T29] watchdog+0xfee/0xff0 [ 2980.840373][ T29] ? watchdog+0x1e9/0xff0 [ 2980.840402][ T29] ? __pfx_watchdog+0x10/0x10 [ 2980.840423][ T29] kthread+0x2ef/0x390 [ 2980.840441][ T29] ? __pfx_watchdog+0x10/0x10 [ 2980.840463][ T29] ? __pfx_kthread+0x10/0x10 [ 2980.840481][ T29] ret_from_fork+0x4b/0x80 [ 2980.840502][ T29] ? __pfx_kthread+0x10/0x10 [ 2980.840520][ T29] ret_from_fork_asm+0x1b/0x30 [ 2980.840555][ T29] [ 2980.843070][ T29] Kernel Offset: disabled