299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) 10:19:52 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000140)) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f0000000180)={'ip6tnl0\x00', {0x2, 0x4e24, @broadcast}}) [ 928.332081][T27458] binder: 27452:27458 unknown command 0 10:19:53 executing program 3: clone(0x282000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0xc0306201, 0x400078) [ 928.372916][T27453] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 928.392728][T27458] binder: 27452:27458 ioctl c0306201 400078 returned -14 [ 928.405566][T27468] binder: 27460:27468 unknown command 0 [ 928.447330][T27468] binder: 27460:27468 ioctl c0306201 400078 returned -14 10:19:53 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0xec01}) 10:19:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:19:53 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x18200, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x13, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 928.671802][T27483] binder: 27482:27483 unknown command 0 [ 928.719017][T27483] binder: 27482:27483 ioctl c0306201 400078 returned -14 10:19:53 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x400000}) [ 928.862210][T27498] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 928.975032][T27502] binder: 27500:27502 unknown command 0 [ 929.017125][T27502] binder: 27500:27502 ioctl c0306201 400078 returned -14 [ 929.038844][T27510] binder: 27503:27510 unknown command 0 [ 929.079947][T27510] binder: 27503:27510 ioctl c0306201 400078 returned -14 10:19:54 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:19:54 executing program 4: r0 = socket(0x11, 0x800, 0xfffffffc) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000100)=0x4) 10:19:54 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x40) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2000}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @dev, @dev={0xac, 0x14, 0x14, 0x40}}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:19:54 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0xc0306201, 0x400078) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000040)='bdevproctrustedvboxnet0-.loeth0vboxnet1\x00', 0x0, r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt(r7, 0x3f, 0x1, &(0x7f0000000140)="9a370aa239011151fe4654d13f96d3b9dc6feba07923a1d24e148b6d66e569387b4cf61a4249e135af0d4184be7d49e54c8447a10bbb6eee8c809aba9a114b5aa154a0f8233813f2adbc98106d2416a97074f606f622571e631ac75496ab3596730af034687369a8264ed90870dc0973eb6f9f447a132e2de5b87f8d798b3529ea0a60859ce64df5fc60ec3a2f248f85d0c7c26eb3bb45b945c50ff6223dfc3c83271005c5", 0xa5) 10:19:54 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x80ffff}) 10:19:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:19:54 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000040)) clone(0x3a3dd400c0318e81, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0xc0306201, 0x400078) 10:19:54 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x20c0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)=0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0xfffffffffffffff5, 0x8, {{0xbd05, 0x7ff, 0x1, r2}}}, 0x28) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x5) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x3f2, 0x10, 0x70bd25, 0x25dfdbfb, "", ["", "", ""]}, 0xffffffffffffffac}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0xff, 0x101000) write$P9_RSYMLINK(r3, &(0x7f0000000340)={0x14, 0x11, 0x2, {0x1, 0x4, 0x3}}, 0x14) [ 929.678954][T27534] binder: 27527:27534 unknown command 0 [ 929.711742][T27534] binder: 27527:27534 ioctl c0306201 400078 returned -14 [ 929.775142][T27545] binder: 27535:27545 unknown command 0 [ 929.830335][T27545] binder: 27535:27545 ioctl c0306201 400078 returned -14 10:19:54 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x1000000}) 10:19:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:19:54 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) [ 930.067723][T27567] binder: 27565:27567 unknown command 0 10:19:54 executing program 4: ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, &(0x7f0000000040)={0x55}) r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000100)=@known='security.apparmor\x00', &(0x7f0000000140)=""/182, 0xb6) [ 930.112567][T27574] binder: 27568:27574 unknown command 0 [ 930.121677][T27567] binder: 27565:27567 ioctl c0306201 400078 returned -14 [ 930.144639][T27574] binder: 27568:27574 ioctl c0306201 400078 returned -14 [ 930.164067][T27575] binder: 27571:27575 unknown command 0 [ 930.193922][T27575] binder: 27571:27575 ioctl c0306201 400078 returned -14 [ 930.199495][T27581] binder: 27576:27581 unknown command 0 [ 930.241683][T27581] binder: 27576:27581 ioctl c0306201 400078 returned -14 [ 930.297217][T27583] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 10:19:55 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:19:55 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x2000000}) [ 930.578220][T27596] binder: 27595:27596 unknown command 0 [ 930.611114][T27596] binder: 27595:27596 ioctl c0306201 400078 returned -14 [ 930.633325][T27603] binder: 27597:27603 unknown command 0 10:19:55 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) 10:19:55 executing program 4: r0 = socket(0x8, 0x800000003, 0xc2) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000100)="d1614015975ab5b2d6a40322e842945ebbfd96906b65b1caa203e4411f4d0c5effffb335e3b41af951660aedc34f080e603b8bba460f49b35b4b7a7367360963042a53600818b2dec7c0f53a382cf9b828ea6461d082d1b9d1e18490d3faba49844e9f383335d72fc99a175cba81d51966f39d504e8e70e8c22033d8a6e8582b241f22b3cf36ace10387d0792e34edf7e6c1369b6804", 0x96) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) 10:19:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 930.673789][T27603] binder: 27597:27603 ioctl c0306201 400078 returned -14 10:19:55 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x3000000}) 10:19:55 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) keyctl$chown(0x4, 0x0, r4, 0xee01) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) setgid(r5) fchown(r1, r4, r5) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 930.780895][T27614] binder: 27607:27614 unknown command 0 [ 930.811524][T27620] binder: 27615:27620 unknown command 0 [ 930.829989][T27614] binder: 27607:27614 ioctl c0306201 400078 returned -14 [ 930.853726][T27620] binder: 27615:27620 ioctl c0306201 400078 returned -14 [ 930.892952][T27612] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 10:19:55 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x10100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000080)={0x0, r2, 0x20, 0x96, 0x1, 0x10001}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r6, 0x800455d1, &(0x7f00000000c0)) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f0000000200)) 10:19:55 executing program 4: r0 = socket(0x8, 0x6, 0x81) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dff001028b47ca8a88a020000000000000047f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cf132880f7", 0x4a, 0x0, 0x0, 0x0) [ 930.941281][T27627] binder: 27623:27627 unknown command 0 [ 930.982249][T27627] binder: 27623:27627 ioctl c0306201 400078 returned -14 [ 931.015268][T27636] binder: 27628:27636 unknown command 0 [ 931.068880][T27636] binder: 27628:27636 ioctl c0306201 400078 returned -14 10:19:55 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x4000000}) 10:19:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 931.112873][T27641] binder: 27637:27641 unknown command 0 [ 931.176915][T27641] binder: 27637:27641 ioctl c0306201 400078 returned -14 10:19:55 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, &(0x7f0000000140)) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000040), &(0x7f0000000100)=0x4) [ 931.280711][T27650] binder: 27648:27650 unknown command 0 [ 931.322721][T27650] binder: 27648:27650 ioctl c0306201 400078 returned -14 [ 931.351187][T27658] binder: 27651:27658 unknown command 0 [ 931.382986][T27658] binder: 27651:27658 ioctl c0306201 400078 returned -14 [ 931.451323][T27665] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 10:19:56 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:19:56 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$CAPI_MANUFACTURER_CMD(r2, 0xc0104320, &(0x7f00000010c0)={0x0, &(0x7f00000000c0)="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"}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x1}, 0x10) 10:19:56 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x5000000}) 10:19:56 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x2940, 0x0) 10:19:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 931.631039][T27671] binder: 27669:27671 unknown command 0 [ 931.669349][T27671] binder: 27669:27671 ioctl c0306201 400078 returned -14 10:19:56 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x6000000}) [ 931.685278][T27674] binder: 27670:27674 unknown command 0 [ 931.723411][T27674] binder: 27670:27674 ioctl c0306201 400078 returned -14 [ 931.805094][T27682] binder: 27670:27682 ioctl c0104320 200010c0 returned -22 [ 931.815538][T27674] binder: 27670:27674 ioctl 8912 400200 returned -22 [ 931.925429][T27697] binder: 27692:27697 unknown command 0 [ 931.953439][T27694] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 931.964383][T27697] binder: 27692:27697 ioctl c0306201 400078 returned -14 [ 931.971309][T27705] binder: 27699:27705 unknown command 0 [ 932.014888][T27705] binder: 27699:27705 ioctl c0306201 400078 returned -14 10:19:56 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000000080)={0x2, 0x1, [0x3, 0x9, 0x1f, 0x6, 0x10000, 0x5]}) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r4, 0x40045730, &(0x7f0000000040)=0x2ba0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0xc0306201, 0x400078) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SCSI_IOCTL_SYNC(r6, 0x4) 10:19:56 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x7000000}) 10:19:56 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x80, 0x103182) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000100)={0x3, "c1cb6b"}, 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) flock(r3, 0xc) 10:19:56 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = gettid() ptrace$setopts(0x4206, r8, 0x0, 0x0) tkill(r8, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(r7, 0xc0286405, &(0x7f0000000040)={0x8, 0x2, {r8}, {0xee00}, 0x5, 0x100000001}) prctl$PR_SET_PTRACER(0x59616d61, r9) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:19:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd245c8404725dfdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) 10:19:56 executing program 3: openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1, 0x0, 0x8003}, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0xc0306201, 0x400078) fstatfs(r3, &(0x7f0000000140)=""/105) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x46b9, 0x2, 0x2, 0xf, 0x1, 0x9}, &(0x7f0000000080)=0x20) [ 932.246238][T27716] binder: 27714:27716 unknown command 0 [ 932.312609][T27716] binder: 27714:27716 ioctl c0306201 400078 returned -14 [ 932.328211][T27725] binder: 27718:27725 unknown command 0 [ 932.389083][T27725] binder: 27718:27725 ioctl c0306201 400078 returned -14 [ 932.510774][T27737] binder: 27728:27737 unknown command 0 [ 932.582341][T27737] binder: 27728:27737 ioctl c0306201 400078 returned -14 10:19:57 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:19:57 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x3f000000}) 10:19:57 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x20000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x400000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0xc0306201, 0x400078) 10:19:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 932.845473][T27756] binder: 27753:27756 unknown command 0 10:19:57 executing program 4: r0 = socket(0x1a, 0x5, 0x40000) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$IPC_RMID(r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r3, &(0x7f0000000180)="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", 0x108, 0x240008d1, 0x0, 0x0) 10:19:57 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x82, &(0x7f00000001c0)={r9}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000040)={r9, 0x3}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) [ 932.901094][T27756] binder: 27753:27756 ioctl c0306201 400078 returned -14 [ 932.934902][T27766] binder: 27758:27766 unknown command 0 [ 933.009994][T27766] binder: 27758:27766 ioctl c0306201 400078 returned -14 10:19:57 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x40000000}) [ 933.069168][ T26] audit: type=1800 audit(1587637197.724:95): pid=27777 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 [ 933.181761][T27779] binder: 27774:27779 unknown command 0 [ 933.249040][T27779] binder: 27774:27779 ioctl c0306201 400078 returned -14 [ 933.290354][T27787] binder: 27786:27787 unknown command 0 [ 933.343084][T27794] binder: 27788:27794 unknown command 0 [ 933.352420][T27787] binder: 27786:27787 ioctl c0306201 400078 returned -14 10:19:58 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x42000000}) [ 933.407783][T27794] binder: 27788:27794 ioctl c0306201 400078 returned -14 10:19:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 933.602687][T27801] binder: 27800:27801 unknown command 0 [ 933.698065][T27801] binder: 27800:27801 ioctl c0306201 400078 returned -14 [ 933.711803][T27810] binder: 27802:27810 unknown command 0 10:19:58 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x8000}) r4 = socket$netlink(0x10, 0x3, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4000) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000180)={0xd000, &(0x7f0000000040), 0x0, r5, 0x1}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:19:58 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0xc0306201, 0x400078) r0 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$IPC_RMID(r0, 0x0) [ 933.788200][T27810] binder: 27802:27810 ioctl c0306201 400078 returned -14 10:19:58 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0xec010000}) [ 933.917084][ T26] audit: type=1800 audit(1587637198.574:96): pid=27820 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 [ 934.054096][ T26] audit: type=1800 audit(1587637198.614:97): pid=27820 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 [ 934.086416][T27827] binder: 27825:27827 unknown command 0 [ 934.136033][T27827] binder: 27825:27827 ioctl c0306201 400078 returned -14 [ 934.202174][T27838] binder: 27828:27838 unknown command 0 [ 934.247926][T27838] binder: 27828:27838 ioctl c0306201 400078 returned -14 10:19:59 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:19:59 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000280)={r3}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000280)={r4}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000040)={r4, 0x1}) bind(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e00, @rand_addr=0x64010100}, 0x5, 0x4, 0x3}}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) 10:19:59 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x82, &(0x7f00000001c0)={r6}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000040)={0xac92, 0x8005, 0xffff113c, 0x8df, r6}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r7, 0xf8000000, 0x80000000}, 0xc) r8 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0xc0306201, 0x400078) 10:19:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:19:59 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0xfeffffff}) [ 934.475060][T27850] binder: 27846:27850 unknown command 0 [ 934.517224][T27850] binder: 27846:27850 ioctl c0306201 400078 returned -14 [ 934.566020][T27863] binder: 27853:27863 unknown command 0 [ 934.606574][T27867] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 934.620370][T27863] binder: 27853:27863 ioctl c0306201 400078 returned -14 10:19:59 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0xffff8000}) 10:19:59 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x802, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000280)={0xa, &(0x7f0000000100)=[{@fixed}, {@fixed}, {@fixed}, {}, {@none}, {@fixed}, {@none}, {}, {@fixed}, {}]}) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)={0xe5f, 0x8, 0x4, 0x2000, 0x898, {0x0, 0xea60}, {0x1, 0xc, 0x7, 0x3, 0x20, 0x7f, "c8e40955"}, 0x101, 0x4, @fd=r1, 0xffffffff, 0x0, r2}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f0000000340)={0x77359400}, 0x10) openat$vnet(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-net\x00', 0x2, 0x0) 10:19:59 executing program 3: lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x8, 0x20100) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000080), 0x2) [ 934.852217][T27877] binder: 27874:27877 unknown command 0 [ 934.902697][T27877] binder: 27874:27877 ioctl c0306201 400078 returned -14 10:19:59 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0xfffffffe}) 10:19:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:19:59 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'veth1_to_batadv\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r8, 0xc0145401, &(0x7f0000000040)={0x1, 0x0, 0xffffff56, 0x3, 0xbd22}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 935.061820][T27887] binder: 27884:27887 unknown command 0 [ 935.091812][T27893] binder: 27884:27893 unknown command 0 [ 935.117876][T27895] binder: 27888:27895 unknown command 0 [ 935.123823][T27887] binder: 27884:27887 ioctl c0306201 400078 returned -14 [ 935.150725][T27893] binder: 27884:27893 ioctl c0306201 400078 returned -14 10:19:59 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf0, 0x0, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_NAT_SRC={0xdc, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00'}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010100}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x2000c051}, 0x40001) [ 935.171856][T27895] binder: 27888:27895 ioctl c0306201 400078 returned -14 [ 935.185683][T27905] binder: 27896:27905 unknown command 0 [ 935.217958][T27905] binder: 27896:27905 ioctl c0306201 400078 returned -14 [ 935.288908][T27914] binder: 27912:27914 unknown command 0 [ 935.294894][T27915] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 935.304472][T27914] binder: 27912:27914 ioctl c0306201 400078 returned -14 10:20:00 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:00 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)) 10:20:00 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x1) 10:20:00 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x18, r4, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6228}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) 10:20:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 935.841507][T27935] binder: 27931:27935 unknown command 0 [ 935.854834][T27934] binder: 27930:27934 unknown command 0 [ 935.875694][T27935] binder: 27931:27935 ioctl c0306201 400078 returned -14 [ 935.887083][T27934] binder: 27930:27934 ioctl c0306201 400078 returned -14 10:20:00 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x2}) [ 935.935754][T27946] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 10:20:00 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000040)=0x2802, 0x4) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:00 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000040)={0x6, 0x1, 0x8000}) 10:20:00 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) keyctl$chown(0x4, 0x0, r1, 0xee01) mount$9p_xen(&(0x7f0000000040)='syz\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xa0000, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=xen,nodevmap,privport,access=client,cache=loose,fscache,nodevmap,afid=0x0000000000000007,euid>', @ANYRESDEC=r1, @ANYBLOB=',oob,\x00']) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) [ 936.154219][T27959] binder: 27956:27959 unknown command 0 [ 936.192541][T27959] binder: 27956:27959 ioctl c0306201 400078 returned -14 10:20:00 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x3}) [ 936.229582][T27960] binder: 27960:27960 unknown command 0 [ 936.235183][T27960] binder: 27960:27960 ioctl c0306201 400078 returned -14 [ 936.332446][T27980] binder: 27971:27980 unknown command 0 [ 936.369009][T27984] binder: 27982:27984 unknown command 0 [ 936.371184][T27986] binder: 27981:27986 unknown command 0 10:20:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd245c8404721efdc9c8dc1963125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) [ 936.394705][T27980] binder: 27971:27980 ioctl c0306201 400078 returned -14 [ 936.430970][T27984] binder: 27982:27984 ioctl c0306201 400078 returned -14 [ 936.444687][T27986] binder: 27981:27986 ioctl c0306201 400078 returned -14 [ 936.473010][T27987] binder: 27987:27987 unknown command 0 [ 936.483285][T27987] binder: 27987:27987 ioctl c0306201 400078 returned -14 10:20:01 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x4}) [ 936.647493][T28001] binder: 27999:28001 unknown command 0 [ 936.680400][T28005] binder: 28003:28005 unknown command 0 [ 936.684463][T28001] binder: 27999:28001 ioctl c0306201 400078 returned -14 [ 936.738192][T28006] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 936.752251][T28005] binder: 28003:28005 ioctl c0306201 400078 returned -14 10:20:02 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:02 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000280)={0x0, 0x9, 0x4, 0x1000, 0x0, {}, {0x3, 0x1, 0x9f, 0x0, 0x0, 0xf1, "00000400"}, 0x5, 0x4, @userptr=0xfffffffffffffffc, 0x103f}) dup3(r0, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000040)={0x5, 0x13, 0x4, 0x8, "469d17348e3de902d4b83854fc66d1f2f01deb6435455e33db50e052bb02ac05"}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r7) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000240)={0xa00000, 0x8, 0x3, r7, 0x0, &(0x7f0000000200)={0x9d0901, 0x7ff, [], @value64=0x3ff}}) unlinkat(r0, &(0x7f0000000140)='./file1\x00', 0x0) sendto$inet6(r0, &(0x7f0000000180)="ce0407008b3350ec0091274a1efc0bb35c02630dffffa328b47ca8e88a37877b0644e9ff170099dbe547f481705924fac3000000009919737309d4c94c9e970800d82b330aa6d0edc542cff0c2d1e327fb1328", 0x54, 0x4000, 0x0, 0x5f) 10:20:02 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x5}) 10:20:02 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x6) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) keyctl$chown(0x4, 0x0, r1, 0xee01) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) keyctl$chown(0x4, 0x0, r3, 0xee01) r4 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) keyctl$chown(0x4, 0x0, r5, 0xee01) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) setgid(r6) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbff, 0x10000}, 0xc, &(0x7f0000000d00)=[{&(0x7f0000000e40)={0x75c, 0x3f, 0x4, 0x70bd29, 0x25dfdbfd, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x14, 0x52, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, [], 0x3c}}, @typed={0x8, 0x4e, 0x0, 0x0, @pid}, @typed={0x4, 0x88}, @nested={0x402, 0x2d, 0x0, 0x1, [@generic="22cbf6995c64f3743baa7d1c025c212d552e751a4d600074f324c46482f9cd3f68253b74d5c403338c83ae59c5ce9c043c43c94be3d9bc9814c56b33108ebd3935015550c17ea9b07ac7be03eebbbba6c63cd25d6a54d67be9c0ff929e42d16434f45cd2ff85bf1af5a7afd026c1a8b55123ff810f359065b01b27bd6c505c8c95045e4ab78278236774ee0a46be1d36f5", @typed={0x14, 0x37, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="67c3fdc7bb325622938c0638daae4d680fe17648ab3af2a30237f26d154c11a3bbc33a713863d0412e635668ed7bee228201ffec6ea5957e40cc9406659d286d80edd0b7a2e5af7827d9a7980d58e152", @typed={0x11, 0x8d, 0x0, 0x0, @str='/dev/binder#\x00'}, @generic="3924fcfcd20909ab0e5226d3a0026b1ee4142564f3a477d29c890c8fb013bea07872136b07585a106e16e54b9357e69f7e4e8a58c9d63f9cc3205938934f7f30c906514d0b201c9df82eedee8533c2011f3bc92770ff5d63cd7812de5fdd31695e2fdb7c076f7eea479d24c81ef59cbb79fe6fbe6c1994b0e9032e3c170d68e9c97c3a79d5df18b13f46be952ce4a9e1ba391cb6c74b706107fd920353f15122487b10ca0400c30510444c428d83b9de5b928f15ae592fde21e71d92a09a9693992c94cbab60a3", @generic="783f118b6bfd4812ed24570bd5c8d57caba82e68c77982b1a9b6a93f6dee23cd269a23f82d52ddc2950db3c2787e803d0846ba00ea2d1d09513caac6e79245af0b644ffcbd0c267a25b68c4fb29a84e40bc9d0d80f269824a7917ebaa50d3fe309eca1aa07cb2f96529aa0324b743b9826cd1708d362c6b51d85c713cb9961fec51c9ecb7890fdc0a05b198b14", @typed={0x14, 0x11, 0x0, 0x0, @ipv6=@empty}, @generic="9940348e534bb6bf3050702b34e36d416b6430433110913d02a34bf0c7ed76b7a032785ad6b4cca338", @generic="4a4cc1cd03f7ca2e39faa338e3cc308f0a744fc3b839c98fc3af8c9d518bb3c5ff56a45215b17782e08cdde051aa0a5508ff05e290d2e3c39917a3cfbcf97cc787609f29ea05d515eab6b4cb8b108cccf9e00e939ae29e5576a5dd0ac15b2dfeb527c90ca404ea8bbb2a1a98f5eb30474f7fb65aeb56afc9e26075c84444dfacfeda005afb1c080bc0f77d5fdef6f8bbb30903725ffaec52da0e", @generic="3d0fbf873914a48132592198d783d27b0113c70cf20c48f1081f10c54446446abd4568844e2bdd0cf0d89b93b1b4fabc7365223622410652db827c6f0f7182e821e3daed190472b94a53f22eccbdca2b37a8cb3ba3fa538cfebc17e3af5f1b96cb7a8a8d8b0dcfef3381f78ba0ba1df043f3ab37427baebc882b8d2f59356d5f53cc8ef2d8ed62a11817faf922df681958fb32af46f3c91a34a6133d598b4d9fbec49e06f203331ea7df4cad6394dd4891d99478c7a75dbf17e97ff7a4f0d081535cfc2d01dea197edd3"]}, @nested={0x252, 0x5d, 0x0, 0x1, [@typed={0x14, 0x4a, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x11, 0x15, 0x0, 0x0, @str='/dev/binder#\x00'}, @generic="f5752851b052a9863542d329765238c7c5a8c0729223d0eb9da1ca0f368adf48971cb545572a8bda3fd2e99c15c1053d3d8eb856452c4128e5442f4d35e737779e245bd274ec9d4f09b0498138853d9c495ff0711fde78a6324ed2927d23521a8eede19927a0eb626c2485a70d82dc344245f6849920117dff0ae0099fa33a3c54c00510f1a3ce5af11f813467d9cdaa02fe96ff", @typed={0x8, 0x2, 0x0, 0x0, @fd}, @typed={0xc, 0x68, 0x0, 0x0, @u64=0x7}, @generic="b42cb57f69c0c6c90f5e240a4811943a58d5f471c242148e38db9c326e6555c8ef98bae3411b6d9ee832369a3a246de57dfe73cfc42d350b217474281ab401024f71927c3a4dd758e133833df16d2125c35cc44dd3835bbee5d87075021d22e53d4570dd3d39dfd45dea25aec977d4a699c5564533586ac0041438944af9ae39fbf73a19eb4d99e05b792f4c16e6285707484fed78e969cfbabb3208dda794dd7f007ee681ae", @generic="add87c3b220fb8c79a89c75b740a15733e94f877b4fea007ac0451f2eafa8ce8c993f8133e95a1caa4e5b11767e46e", @generic="5a68d45c6fbbeafbff5bd14e0fb641cf22d549df8108b03f767136d911d33114692fee895bcbdc3abec551aa8339cd65bac1c845468f1973054cb11d38d0b276c896ada0f797f9d13068ac8d80db5d70e8b6287dce0b2d8d88b7c813252d6f2a5ec79a58846c600ca312dd9a0799b1f1e5c7ae4ef79d29877e951007bc6e4ead6f8a63a56dcaefdf3aa6dff1b59ecb65abe88d7f6e9c450c3e9f6f8c2d4e288ed5", @typed={0x8, 0x28, 0x0, 0x0, @pid}]}, @typed={0x8, 0x5e, 0x0, 0x0, @u32=0x4c757272}, @generic="f0455d7c8c0a94f0a582dfd767789a0ca87308080a6b843501ce838886af1b8e62b4cc5cbfbbbd747c7caeab073a3fa52b8774769a18e02fc48b458c30158fab090a3ee34d988015832dfacafd37425ced96a8b92cdab049c218bdbb074dd022b491a20834181367dc88e82cfc0e5f5af55abe5e621065cb6af33f763b2120a4068f79a9647ca05ddf4624ee", @generic="e7d543798b1782544681bc6f9ac687be8cfbeb6c7ebaa4515e24d4dc3ec1a65d685eb5aaba7c3b093d2132e413eafc", @typed={0x8, 0x1c, 0x0, 0x0, @ipv4=@broadcast}]}, 0x75c}, {&(0x7f0000000580)={0x37c, 0x17, 0x300, 0x70bd28, 0x25dfdbff, "", [@generic="1fdfc221e37676eaeb02b6c5a7a36c1cf3d98416fc099c42f0da654b03562e66403db7d8046b5e336d541d033d7447ac56f4e1bbc5db2a1d036a164fb2a0a9113d06e43e318f0a6174b3cbc4bf22c8c54d2fe7c380fee80354c2d3b994c7400f6f1d546e5f75bb431b78e5cbfe1ade0a6eba614351b565fd4b40633542c59858a8f3099348", @typed={0x8, 0x66, 0x0, 0x0, @u32=0xf52}, @nested={0x114, 0x71, 0x0, 0x1, [@generic="fc2f5173aacb6964703a142474627bdb3e6f03a998f10f1c67710598b17fdd54b6460165bd8fe8e6136dc510393fa291dba31abf1300cb83c676707636071249a271b8036a4bf19346fe8ebba779b44e2046ba3032d8a0e643aad6d4", @generic="55013fd06f28c9273a98dd1625ce5a9eb726de6a844b541437c28aaff985d514fa13eeffe0910a3557f8cf22db749b36f2fb26801f9f64b2cc9ef3877276f0c9430d4d4ce56c9c2e9fd6fdf281d2857a65ea524613473287c62833bc9d7d2cc6e3bc342e84e0fb836f1c7e725e8e20cf6c93d39441f1e7e53671a204b683c3f1ef59b260eecbc5f5da08e767863ea345bb", @generic="a03eb918107ce2357f4598f08e55aed4d38d7e", @typed={0x8, 0x55, 0x0, 0x0, @u32=0x7}, @typed={0x8, 0x83, 0x0, 0x0, @uid}]}, @generic="68f1c962dc6ec0a20e1b34cdf66b61d3b7012e71e33a0435542e3860c65b472fee56889672d38d637274699dfaef4d1e623aaeeced8b7034420b5a50782dcd05d5f09d751529cead50b5531fa7ee9c152335edbd2e9689094a739a64ac2870cdd0a77218344e401acce324ba6384f093f82aab7e8ad0f49386141cdf31a62de1475f06ece31f9c0c63584d9715a6986b79cca4a6a84974d9144812125a67c0bf49639d916e588e72", @nested={0x120, 0x95, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @uid}, @typed={0xf0, 0x56, 0x0, 0x0, @binary="4e396f92a88fdb09065d939bc263b3e726cf8691ea77fbed962ed5c728d1bc4c81a44dfa1ad1a46396776f9d9a6955dde94457897a1d1a7fabae901a212b8cb0638ffde0e06946de4af507de66256695ac2da4a06c6f19f25f0e27ece89f6b7c67c98bcc7b3841a4d910f9057ac8a93694d07d63fb22949412bb35e48581343a92cc74566a36fe4761592d11adb1cc241b342c54655dbc398264e8ec6ce7d5366c5d7e50cfa461002ef4ab1575a53eb7b936015bab689ffe827e17ddd15bb00856eb7b363b1377ed9cf6a05dfe6b4eb84f562c4d43e868eeb07cfc224405ed46c81d36d944ae5512dfafa655"}, @typed={0x14, 0x85, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x4, 0x22}, @typed={0xc, 0x4e, 0x0, 0x0, @u64=0xf53}]}]}, 0x37c}, {&(0x7f0000000900)={0x3ac, 0x11, 0x200, 0x70bd29, 0x25dfdbfb, "", [@typed={0x14, 0x82, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, [], 0x1}}, @generic="25d6e2fa196e4482b624e24add63f6cb67de957b158ab3937e2936e42fed577ea837d0021d1ea5b06264a20d187cf302a9721ba257dedec8d37cb755e29592317e51712e744e717ad2cec7ac1b8b14bee4fbe94e17dc08450b43d740e5217e5d8533c44a5e3ebd605fdcd638e563", @nested={0x4, 0x27}, @generic="65c2fb2371752b39e7f8630e9f909f8f7861bf8beef5ccb5e466", @nested={0x135, 0x4d, 0x0, 0x1, [@generic="8f61d1edbcad3a25ba2153adc10d98cc4d13e3e384fdca4903421a7b388ca43333dbb33f597b2e2db4b820b415", @typed={0x11, 0x8, 0x0, 0x0, @str='/dev/binder#\x00'}, @typed={0xc, 0x32, 0x0, 0x0, @u64=0x3}, @typed={0xe4, 0x92, 0x0, 0x0, @binary="2053e6fc871f3f9630c1f137839a450342acc5a209e73995e2403dca13a09bdd387492cb9290b052c8972e008d99fadb47c564c71c42a026df0663fc3adc81bd8dc42a841cca9ea752bb6ddca8b3e5fe332c8a9910e577d7c4207b151b3e3de09f7b993caacc9b54ca7ea59412877c19e5bf317862fffc6d80f20e3bc45bfe6accf71f084f8a01b5468ce54cc407dcf5c15b7492d4a9d43d9a476e144cc96c5cca22f4604e2c72c42b391262b7efd6262b472d1e57b08c6c471a07ee1858a2c5b9a4d2c49edff37c566ace5fba38dec1f0de111c958b1081eb2b0a6ca7be1795"}]}, @generic="548011a1c8a3b1dab9e0b8bec1092ea35173df11fe9498bf96fe5b59f5dbba5aa1b86373d499729ce39726154eacaed85062460c2d43acf6f58b72472925637a6795e6ec27a9bfcff5ee817038c95f018dd15c17b32765d095b52beebac0ab414114f1e884eb427900182766910e115f1aac5f92d1ec8b66429baf70f2e0914508a33139fd891b449546011b3f47b0df7d1124bd486cac073c3ed9b03301198c25a270a0676817e6c0f9c87a6a2d58932454b8c87b5cbe8a538cf3e445d8498b0bc240e2147587e7dfe0d85c377a89a0347e1ea68f30bb47aaa4b2511cfaeaaa057b66caee9188298c0fd7441febed942dd76b", @generic="d8dc56a10d3f06003bbbd3236d7a464fb6241bca5c3c2513d5b6d7bba14365f4bcea4dfb1a9fec516aff900d211a37b9b6ec6c570cf32543ee9e3e25b52dbdd7dc8d171b23cb4882886218aade7439e1fbccab0a64765bd6b1c6552e1adb48f082f0e15ff80bee8cf86a08025de2cf2ed916f3e4d509654745c464152e1f38650b965ffc9f47a5283fd350522ff9d8d52e372ce5a497aa88c2d183d3b7d1d5dbc18fd660d992cb9210470e7e9fbdb823b4716b", @generic="515ae020ef22dd4d2124f6dc1144169318117f140100fd6bae7990ea"]}, 0x3ac}, {&(0x7f0000000dc0)=ANY=[@ANYBLOB="240000003e0000022abd7000fedbdf2508006000", @ANYRES32=r1, @ANYBLOB="0c156400c0170000000000006f39621e98345f986dbef42626f1d42c7ae841d1010e5e4100ba907da891d9d5b8a3fc380cba7940926b19c700956c467fe011faf40c8f1de086342bf2192a2a10e7cb757b7b2636cefa6e4af4"], 0x3}], 0x4, &(0x7f0000000d40)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}], 0x40, 0x20000000}, 0x4000010) 10:20:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 937.495774][T28023] binder: 28018:28023 unknown command 0 [ 937.522535][T28025] binder: 28021:28025 unknown command 0 [ 937.533884][T28029] binder: 28026:28029 unknown command 0 10:20:02 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r8, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="04d71b008d2e8c0cee5bee447dca8f238054d324947a", @ANYRES16=r8, @ANYBLOB="000427bd7000fedbdf250700000008003c0000000080"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) [ 937.573395][T28023] binder: 28018:28023 ioctl c0306201 400078 returned -14 [ 937.588292][T28025] binder: 28021:28025 ioctl c0306201 400078 returned -14 [ 937.615170][T28029] binder: 28026:28029 ioctl c0306201 400078 returned -14 10:20:02 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x6}) 10:20:02 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x7, @raw_data="0187a2d5a66a46b0e10fb98a8330161d875f2d4b77d724ce978df1eaaf8c8b7ca9a3669702b6017a06ccb0d62b23e13a95ab548a4522799addd39db2e267717dc496db617c979f055b727a888a5b47a81882c6c6b3673147f70f55b8f84e5f2c53f7a6cf508a5d004b480410b72ce37e00527e7022932abcd3957b1002fbaf921c2091b9e4d959a9678017ea7231a477b8ab3e2a31e6b28e0f8f031177130bfce71b6b3e75eb6ab4ac92dd5fc18107fa25f9544a67ae8d25180ad0a9047621c02d6647bd758ea0b5"}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0xc0306201, 0x400078) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000a00)={r3, 0xd23, 0x401}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_G_ENC_INDEX(r3, 0x8818564c, &(0x7f00000001c0)) [ 937.666106][T28037] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 937.870152][T28054] binder: 28049:28054 unknown command 0 [ 937.911818][T28054] binder: 28049:28054 ioctl c0306201 400078 returned -14 10:20:02 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) 10:20:02 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x7}) [ 937.952815][T28060] binder: 28051:28060 unknown command 0 [ 937.964720][T28056] binder: 28056:28056 unknown command 0 [ 937.980575][T28056] binder: 28056:28056 ioctl c0306201 400078 returned -14 10:20:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 938.023189][T28060] binder: 28051:28060 ioctl c0306201 400078 returned -14 10:20:02 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCX25SENDCALLACCPT(r2, 0x89e9) [ 938.167672][T28069] binder: 28065:28069 unknown command 0 [ 938.211824][T28069] binder: 28065:28069 ioctl c0306201 400078 returned -14 [ 938.255787][T28071] binder: 28071:28071 unknown command 0 [ 938.272256][T28071] binder: 28071:28071 ioctl c0306201 400078 returned -14 [ 938.348906][T28082] binder: 28078:28082 unknown command 0 [ 938.401925][T28079] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 938.422727][T28082] binder: 28078:28082 ioctl c0306201 400078 returned -14 10:20:03 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:03 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x42}) 10:20:03 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = dup(0xffffffffffffffff) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xe0951) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0xc0306201, 0x400078) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$VT_DISALLOCATE(r2, 0x5608) 10:20:03 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000180)) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000280)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e1ad701555969970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0xfffffe47) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x82, &(0x7f00000001c0)={r5}, 0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)={r5, 0x4, 0x4, [0x4, 0x2, 0x8, 0x1]}, 0x10) r6 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) recvfrom$rose(r6, &(0x7f0000000100)=""/70, 0x46, 0x40012001, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, @default}, 0x1c) [ 938.641301][T28098] binder: 28093:28098 unknown command 0 [ 938.661228][T28103] binder: 28099:28103 unknown command 0 [ 938.702460][T28098] binder: 28093:28098 ioctl c0306201 400078 returned -14 [ 938.728643][T28103] binder: 28099:28103 ioctl c0306201 400078 returned -14 10:20:03 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x1ec}) [ 938.762269][T28107] binder: 28104:28107 unknown command 0 [ 938.814207][T28107] binder: 28104:28107 ioctl c0306201 400078 returned -14 [ 938.960563][T28121] binder: 28117:28121 unknown command 0 [ 938.997319][T28124] binder: 28122:28124 unknown command 0 [ 939.000598][T28121] binder: 28117:28121 ioctl c0306201 400078 returned -14 [ 939.036777][T28124] binder: 28122:28124 ioctl c0306201 400078 returned -14 10:20:03 executing program 2: syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'ip6erspan0\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000200)={@val, @val={0x0, 0x3, 0x4, 0x200, 0xc7e, 0x3f}, @eth={@random="9f96f500", @local, @void, {@canfd={0xd, {{0x1, 0x1}, 0x40, 0x2, 0x0, 0x0, "90ec4c466d743c4d7a04730ecc9e81c4c07af99f4daa10f96f60e534e9307dcc0ab247f6ac39a432e6c07921221b10453c9ef6a3774318f4f7cfe5835f4f66aa"}}}}}, 0x64) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000040)={0x20, 0x5, 0x6, 0x0, 0xffffffffffff0000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:03 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000040)={0x3}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) 10:20:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:20:03 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x300}) 10:20:03 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept4$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000100)=0xe, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) [ 939.238213][T28127] binder: 28126:28127 unknown command 0 [ 939.300494][T28127] binder: 28126:28127 ioctl c0306201 400078 returned -14 [ 939.335733][T28135] binder: 28130:28135 unknown command 0 10:20:04 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000040)) mmap$usbfs(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x80010, r1, 0xa14) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000600)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000e0030000f801000000000000f8010000f8020000f8020000f802000004000000", @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYBLOB='\x00'/64, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYBLOB="d5bb138c325128e5f0b4ab167a076c57d7a69a29e7d2ad320183ebf55189c131edc0ff5f93f7f601980cdd88d851635394264afca3753219f3bf58bde2552f35e0f69de2be8dcf368abad6241732526fe122bcb0e89fb74c81be83124c53459d42", @ANYBLOB="47c9bed1d1d0385905b389b93efae2ae0f3c8a224e24bf1ceb14df33a9aeed72c1252b18234dae3f9fdfba6ccfd90bdfc6b7eb020dd4784305c19ee1899b7987b2068949105d93e4159d7b8788ab4e2aff96bc2ebaf25e8d75e86e5f65183748fe1ff91ec98787753661cebd6316b4bf6bf0c65a12c02ab03d0414f143cffdf9911875dd3d3e117a", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES16=r4, @ANYRES16, @ANYRES64, @ANYRESOCT=r3, @ANYRES32, @ANYRESDEC=0x0]]], @ANYBLOB="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"/1100], 0x3) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0xc0306201, 0x400078) ioctl$sock_x25_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={@null=' \x00', 0x5, 'dummy0\x00'}) [ 939.381565][T28146] binder: 28138:28146 unknown command 0 [ 939.423148][T28146] binder: 28138:28146 ioctl c0306201 400078 returned -14 [ 939.433114][T28135] binder: 28130:28135 ioctl c0306201 400078 returned -14 [ 939.451459][T28149] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 10:20:04 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x500}) 10:20:04 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:04 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 10:20:04 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x484080, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x82, &(0x7f00000001c0)={r3}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r3, 0x8c, 0x20}, &(0x7f00000000c0)=0xc) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x88040, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x82, &(0x7f00000001c0)={r7}, 0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000200)={r7, @in6={{0xa, 0x4e21, 0x3, @mcast2, 0xb47}}}, 0x84) r8 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0xc0306201, 0x400078) [ 939.705657][T28159] binder: 28157:28159 unknown command 0 [ 939.725698][T28162] binder: 28160:28162 unknown command 0 10:20:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:20:04 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x600}) [ 939.751461][T28159] binder: 28157:28159 ioctl c0306201 400078 returned -14 [ 939.768251][T28162] binder: 28160:28162 ioctl c0306201 400078 returned -14 [ 939.866662][T28167] binder: 28164:28167 unknown command 0 [ 939.904733][T28167] binder: 28164:28167 ioctl c0306201 400078 returned -14 [ 939.986658][T28179] binder: 28174:28179 unknown command 0 [ 940.022508][T28179] binder: 28174:28179 ioctl c0306201 400078 returned -14 [ 940.025948][T28184] binder: 28182:28184 unknown command 0 [ 940.052874][T28185] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 940.054892][T28184] binder: 28182:28184 ioctl c0306201 400078 returned -14 [ 940.072945][T28181] binder: 28164:28181 unknown command 0 [ 940.101773][T28181] binder: 28164:28181 ioctl c0306201 400078 returned -14 10:20:04 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="000000009f96f5000000aaaaaaaaaaaa0800f46560c0fe28691ee85c1eff754a0000140000004767b7c8129cd465dbe1daac3a399fdb10720848d1ae436795c7b3e9b41d34f9d392dd5f32f5ae8643b7dbbcbbb9d29de82552ee2103765c39e15bb423f521af929741f9e4ebe184108fcb1747585aa5f662387ad3f4f6913fe83663a67868455f294e79652cc43ff40be0650b12e59f6dabb354f351a3479f849951e31ed51b0b8f97c1f3a382efbcc24eecd50fc5c242c8da72"], 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:04 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x9, 0x4, 0xbd, 0x81, 0x20, 0x4}, &(0x7f00000001c0)=0x9c) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) 10:20:04 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x700}) 10:20:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:20:04 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap$snddsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x80010, r1, 0xd000) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0xc0306201, 0x400078) [ 940.345541][T28192] binder: 28189:28192 unknown command 0 [ 940.369139][T28197] binder: 28194:28197 unknown command 0 [ 940.386786][T28192] binder: 28189:28192 ioctl c0306201 400078 returned -14 [ 940.387997][T28197] binder: 28194:28197 ioctl c0306201 400078 returned -14 10:20:05 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x3f00}) 10:20:05 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000040)={'hsr0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1f}}}) [ 940.565736][T28201] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 940.649802][T28212] binder: 28210:28212 unknown command 0 [ 940.681479][T28220] binder: 28215:28220 unknown command 0 10:20:05 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:05 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'wg1\x00'}}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x1) [ 940.694180][T28212] binder: 28210:28212 ioctl c0306201 400078 returned -14 [ 940.716301][T28221] binder: 28211:28221 unknown command 0 [ 940.725040][T28220] binder: 28215:28220 ioctl c0306201 400078 returned -14 10:20:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) [ 940.769398][T28226] binder: 28222:28226 unknown command 0 [ 940.785582][T28221] binder: 28211:28221 ioctl c0306201 400078 returned -14 10:20:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:20:05 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x4000}) [ 940.810855][T28226] binder: 28222:28226 ioctl c0306201 400078 returned -14 [ 940.839856][T28228] tipc: Enabling of bearer rejected, failed to enable media [ 940.935545][T28228] tipc: Enabling of bearer rejected, failed to enable media [ 940.942689][T28235] binder: 28230:28235 unknown command 0 [ 940.993592][T28235] binder: 28230:28235 ioctl c0306201 400078 returned -14 [ 941.051690][T28241] binder: 28237:28241 unknown command 0 [ 941.073262][T28239] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 941.079616][T28246] binder: 28244:28246 unknown command 0 [ 941.102234][T28241] binder: 28237:28241 ioctl c0306201 400078 returned -14 [ 941.131163][T28246] binder: 28244:28246 ioctl c0306201 400078 returned -14 10:20:06 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x4200}) 10:20:06 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x20000) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) 10:20:06 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r5 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r4, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_TXQ_LIMIT={0x8}]}, 0x24}}, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000180)=0x81) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r4, 0x419, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY_SEQ={0xb, 0xa, "b7413bf6b1659f"}]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x41) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) 10:20:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:20:06 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="000000009f96f5000000aaaaaaaaaaaa0810450000140000000000299078ac141400ac1414002af63d97566894bd80a2ca0dc6361aeffeb12c39837b8c452e2932c670fbb098c45e4f23f0c0e04313ebc5937eacd4e9a040e22e6ec71f2e1f96b709cb5df6633c9336f2ff9ff1b6638179894d6ad9c70e9d99529f47a79b3af492708c249bb757dfa47db924f3b1c44b7219515e71fef25d60c06a6c21509dcac1000000000000"], 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:06 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000400)={0xffffffff, 0x2, 0x2, {0x9, @pix_mp={0x6, 0xfffffff7, 0x34325241, 0x1, 0x4, [{0x4, 0x40}, {0x6, 0x20}, {0x3, 0x3}, {0x5, 0x8}, {0x18c, 0x1}, {0x1, 0xffffffff}, {0x3, 0xffffacff}, {0x8, 0x995b}], 0x3f, 0x4f, 0x2, 0x1, 0x2}}, 0x7}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x82, &(0x7f00000001c0)={r5}, 0x8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)=@in={0x2, 0x4e21, @private=0xa010105}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="e1601391dff2982c448e499d47fc189e54d392f01945ea48b30b05fcf7805f21759755f028", 0x1b}, {&(0x7f0000000340)="1ef10e9e809587c9c1dae49f4a43a6649ec3e1f600006840e7bafc3818da4d63fb42e2c207a814c9e3ff58a9e423191a2a7d915c5696490dba7f9bef467ca2c00459ae3a3ad4c405cb126b7d82fe9e149ceba16ec9c1a1d2b21583865842dfe7cb70bca00afb6831af1618609b5f97a4d7daeb0b47bab3de751c4891e4f445ad542205", 0x83}, {&(0x7f0000000140)="dbac739a6ee7462ab8c2f915c517f0a590357dbb0235d2de3d438b78826d33d05d768942bdbb7cd16a6ded4bf2effb96f7dad00c44de194f92414bd68e211345e0400b85908431c599afd0ebc0c060aa3ee5f9c226c639e13c00811bd15ead829aaf9fc4306362fb", 0x68}], 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1e0101000000001800000000000000840000000500000010000000f8ffffff1800000000000000840000000000000006000300070006000000000000000000840000000500000000000000b8060000181a66a91e0000008400000007000000ac1e000100000000020000000000000084000000050000000000000007000000"], 0x90, 0x20044801}, 0x1) [ 941.618924][T28264] binder: 28256:28264 unknown command 0 [ 941.643862][T28270] binder: 28267:28270 unknown command 0 [ 941.653717][T28264] binder: 28256:28264 ioctl c0306201 400078 returned -14 10:20:06 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0xec01}) [ 941.675460][T28270] binder: 28267:28270 ioctl c0306201 400078 returned -14 10:20:06 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 941.735590][T28275] binder: 28272:28275 unknown command 0 [ 941.743865][T28276] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 941.759650][T28275] binder: 28272:28275 ioctl c0306201 400078 returned -14 10:20:06 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x82, &(0x7f00000001c0)={r6}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000040)={r6, 0x2}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RNDGETENTCNT(r8, 0x80045200, &(0x7f00000000c0)) r9 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0xc0306201, 0x400078) 10:20:06 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000100)="a2e6fa9a5ad779af73f57b51e05719aa677e14835eaf2e701bd38c74956ac4f6dfc16739ea022a9586c316f44f10c771b8fc19f8e8c2e4637bd1ca0b5d623c3ba894cf2ed8d5a00cb7861f", 0x4b) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) mq_unlink(&(0x7f0000000000)='selinux\xa2\xd9\x00') sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) [ 941.937344][T28290] binder: 28282:28290 unknown command 0 [ 941.984882][T28290] binder: 28282:28290 ioctl c0306201 400078 returned -14 10:20:06 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x400000}) 10:20:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:20:06 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000040)) [ 942.202861][T28306] binder: 28302:28306 unknown command 0 [ 942.236141][T28306] binder: 28302:28306 ioctl c0306201 400078 returned -14 [ 942.243036][T28311] binder: 28307:28311 unknown command 0 10:20:07 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x80ffff}) [ 942.299747][T28311] binder: 28307:28311 ioctl c0306201 400078 returned -14 [ 942.317080][T28305] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 10:20:07 executing program 4: r0 = socket(0x28, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="8ae6fa9a", 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x82, &(0x7f00000001c0)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000140)={r5, 0x75, "eb96732b34e22b077514ff03000000000000597578d863d824f4ecb332b307aeb2036c0c52a94b42d875b28b2c43fda2d4d30a1dfe0d42a38bafb84636b9bc99aad4aad4dae08ebb42daab5e336f1e2b8045d942bf92362f3655a93dd829849b7dacbddec94d7c1f0038a7650ca19d9a125e402d1a"}, &(0x7f0000000040)=0x7d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40042409, 0x0) setsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, &(0x7f0000000280), 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) [ 942.425793][T28317] binder: 28314:28317 unknown command 0 10:20:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 942.466743][T28317] binder: 28314:28317 ioctl c0306201 400078 returned -14 [ 942.500172][T28323] binder: 28319:28323 unknown command 0 [ 942.530581][T28327] binder: 28324:28327 unknown command 0 [ 942.553183][T28323] binder: 28319:28323 ioctl c0306201 400078 returned -14 [ 942.561458][T28327] binder: 28324:28327 ioctl c0306201 400078 returned -14 [ 942.788116][T28332] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 10:20:07 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x9e0000, 0x9a5, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x990903, 0x1, [], @ptr=0x80000000}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000180)=r7) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000009f96f5000000aaaaaaaaaaaa0800140000000000299014ac14145c1e0900ac141400000000"], 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000015c0)=@nat={'nat\x00', 0x19, 0x6, 0x132c, [0x20000280, 0x0, 0x0, 0x20000784, 0x20000ac8], 0x0, &(0x7f0000000140), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x11, 0x3d, 0x0, 'bond_slave_1\x00', 'wg0\x00', 'netpci0\x00', 'bond0\x00', @local, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0x0, 0x0, 0xff], 0x2d6, 0x33e, 0x386, [@pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x4, 0x1}}}, @bpf0={{'bpf\x00', 0x0, 0x210}, {{0x31, [{0x4, 0x5, 0x5, 0x6}, {0x6a, 0x2, 0x4, 0x3}, {0x3, 0xc0, 0x1, 0x50000}, {0x4, 0x2, 0x4, 0x81}, {0x5, 0x1, 0x3, 0x3}, {0x9, 0x6, 0x6, 0x4ca}, {0x29, 0xd6, 0x8, 0x2}, {0x5a8, 0x1, 0x1c, 0x8001}, {0x8000, 0x81, 0x8, 0x8}, {0x6, 0xfb, 0xff, 0x8}, {0x21, 0x0, 0x2, 0x2}, {0xf0, 0xfd, 0x20, 0x6}, {0x101, 0x20, 0x1, 0x9}, {0x1000, 0x89, 0x7, 0x971}, {0x8001, 0x0, 0x1f, 0xdee}, {0x7, 0x6, 0x3, 0xe8c}, {0x9, 0x3f, 0x1, 0x7f}, {0x7fff, 0x80, 0xff, 0x8f}, {0x7, 0x6, 0xf9}, {0x4, 0x1f, 0x50, 0x3f}, {0xcd, 0x5, 0x8, 0x6}, {0x6, 0xfa, 0xc0, 0xbd}, {0x8000, 0x9c, 0x20, 0x5}, {0x1f, 0x40, 0xd5, 0x7fffffff}, {0x20, 0x1, 0x80, 0x1f}, {0x4, 0x4, 0x1, 0x1}, {0x8, 0x80, 0xfa, 0x2}, {0xfffa, 0x3, 0xc0, 0x6}, {0x800, 0x9, 0x9, 0x5}, {0x6, 0x3, 0xfe, 0x80000000}, {0x5, 0x7, 0x66, 0x739b}, {0x3ff, 0x80, 0xa5, 0x7fff}, {0x0, 0x3, 0xfc, 0xff}, {0x5, 0x9, 0x1, 0x2}, {0x5, 0x7f, 0x3, 0x1}, {0x7, 0x1, 0xff, 0x9}, {0xff14, 0xff, 0x7f, 0x1000}, {0x4, 0xf8, 0x28, 0x80}, {0x8, 0x2a, 0x28, 0x5}, {0x9, 0x0, 0x80, 0xffff8001}, {0x7, 0x8, 0x5, 0xb2}, {0x3, 0x9, 0xfc, 0x800}, {0x9, 0xff, 0x3f, 0x3ff}, {0xff, 0x4, 0x9, 0xe416}, {0x6, 0x2, 0xff, 0xff60}, {0x6, 0x7, 0x4, 0x7}, {0x20, 0x3f, 0x5, 0xffff}, {0x7fff, 0x2, 0x9, 0x5}, {0x8, 0x3, 0x1c, 0xfffffffd}, {0x2, 0x8, 0x6, 0x1000}, {0x3ff, 0x3f, 0x9, 0x4}, {0x3, 0x1f, 0xff, 0x3}, {0x5, 0x3f, 0x0, 0x3cc}, {0x1ff, 0x20, 0x8, 0x1000}, {0x16d9, 0x1, 0x6, 0x455}, {0x5b1f, 0x9, 0x1, 0x7fffffff}, {0x4, 0x8, 0x8, 0x58}, {0x1, 0x81, 0x7f, 0x400}, {0x4c, 0xff, 0xe1, 0xfffffff8}, {0x2, 0x40, 0x0, 0x4}, {0xfff9, 0x5, 0x81, 0x1}, {0x146, 0xfb, 0x41, 0x9}, {0x3ff, 0x7f, 0x0, 0x2}, {0x3, 0x6, 0x9, 0x8}], {0x81}}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}], @common=@ERROR={'ERROR\x00', 0x20, {"30a19382cf2e1b5edff00fb4ce07b76ac3f04bf23189ffe91120d4b6ffc0"}}}, {0x9, 0x10, 0x834, 'ip6erspan0\x00', 'lo\x00', 'veth0\x00', 'batadv0\x00', @remote, [0x0, 0x0, 0x0, 0xff, 0xff], @empty, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], 0xde, 0x116, 0x14e, [@time={{'time\x00', 0x0, 0x18}, {{0xffff8000, 0x2, 0x8add, 0xa196, 0x7b, 0x3f, 0x3}}}, @m802_3={{'802_3\x00', 0x0, 0x8}, {{0x80, 0x0, 0x0, 0x5}}}], [@arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xffffffffffffffff}}}], @arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x9, 0x61, 0x8917, 'wg0\x00', 'veth0_vlan\x00', 'veth1_to_batadv\x00', 'veth0_macvtap\x00', @empty, [0x0, 0xff, 0x0, 0xff], @empty, [0x0, 0x0, 0x0, 0xff], 0xa6, 0xd6, 0x10e, [@mac={{'mac\x00', 0x0, 0x10}, {{@local, 0x1}}}], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}], @snat={'snat\x00', 0x10, {{@random="5ed07aca5f13", 0xfffffffffffffffc}}}}, {0x11, 0x2c, 0x10, '\x00', 'veth0_to_hsr\x00', 'veth0_to_bond\x00', 'macvtap0\x00', @dev={[], 0x23}, [0x0, 0x0, 0xff, 0xff], @broadcast, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x11e, 0x18e, 0x206, [@arp={{'arp\x00', 0x0, 0x38}, {{0x1, 0x884c, 0x1, @dev={0xac, 0x14, 0x14, 0x34}, 0xff, @dev={0xac, 0x14, 0x14, 0x2e}, 0x0, @local, [0xff, 0x0, 0x0, 0xff, 0xff], @broadcast, [0x0, 0x0, 0x0, 0x0, 0xff, 0x101], 0x5a, 0x22}}}, @helper={{'helper\x00', 0x0, 0x28}, {{0x1, 'RAS\x00'}}}], [@snat={'snat\x00', 0x10, {{@remote, 0xfffffffffffffffe}}}, @snat={'snat\x00', 0x10, {{@local, 0x8000000000000002}}}], @common=@nflog={'nflog\x00', 0x50, {{0x23, 0x4, 0x8, 0x0, 0x0, "89619e950f9071d3d336add47263ced272ab18761185a146077ad35080a472d6af151d29d26c3bd25d7e6b1212ddbb3fb81e6db6266064eacf27a36be647a8b5"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x0, 0x0, 0x1b, 'virt_wifi0\x00', '\x00', 'macsec0\x00', 'team_slave_0\x00', @empty, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @random="acad50bc6ee6", [0xff, 0x0, 0xff, 0xff, 0xff], 0xde, 0x10e, 0x146, [@pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x5}}}, @mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x8, 0x3, 0x3, 0x3}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xfffc}}}], @snat={'snat\x00', 0x10, {{@local, 0xfffffffffffffffd}}}}, {0x3, 0x1c, 0x884c, '\x00', 'syzkaller0\x00', 'bond_slave_1\x00', 'netpci0\x00', @remote, [0x0, 0x0, 0xff, 0xff, 0xff], @dev={[], 0x25}, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], 0x936, 0x936, 0x96e, [@among={{'among\x00', 0x0, 0x870}, {{@offset, @zero, 0x3, {[0x0, 0xfffffffa, 0x0, 0x2, 0x7fff, 0xffffffd4, 0xfffffc01, 0x5, 0x3, 0x7, 0x6, 0x1, 0x4, 0xa8, 0x8000, 0x8, 0x2, 0x1, 0x800, 0x20, 0x401, 0x0, 0x2, 0xfff, 0x80, 0x10001, 0x9, 0x5, 0xcc0, 0x3, 0x0, 0x76f3, 0x9, 0x0, 0xffff, 0x7, 0xf0000000, 0x200, 0xffff, 0xfffffeff, 0xfffff000, 0x4, 0x7be, 0x94, 0x4, 0x7ff, 0x2100000, 0x0, 0x5, 0xc276, 0x7, 0x400, 0x7ff, 0x3, 0x7, 0x80000000, 0x7f, 0x80, 0x1000, 0x2fc, 0xae6d, 0x80000000, 0xfffff001, 0x5, 0x3, 0xa8, 0x5, 0x200, 0x8f, 0x1, 0xac, 0xce5d, 0x0, 0x8, 0x2, 0x2, 0x1, 0x1d8, 0x0, 0x0, 0x7, 0x35, 0x2, 0x5, 0xe07, 0x4, 0x5, 0x3a, 0x98e8, 0xfffff2ff, 0xfffffffa, 0x145, 0x3, 0x4b81, 0x800, 0x5, 0x81, 0x7, 0xff, 0x5, 0x3, 0x0, 0x5, 0x0, 0x9, 0x8000, 0xb5d, 0x200, 0x4, 0x9, 0x0, 0x8, 0x9, 0x5, 0x80000001, 0x0, 0x3ff, 0x2, 0x8001, 0xfffffb9d, 0x80, 0x0, 0x80000000, 0x9, 0x18, 0xff, 0x7, 0xffff, 0x2, 0x101, 0xff, 0xfffffff9, 0x3ff, 0x4000000, 0x101, 0xfffffffe, 0x200, 0x80, 0x7, 0x2000000, 0x400, 0x9, 0x5, 0x1, 0x10001, 0x7, 0x6, 0x5, 0x4, 0x7, 0xf1, 0xfff, 0xfffffffb, 0x6, 0x8, 0x1423, 0x6, 0xebc, 0x8001, 0x7, 0x6, 0x6, 0x400, 0x6, 0x0, 0x2, 0xf1b, 0x9, 0x3, 0x100, 0x0, 0x8, 0xee0, 0x0, 0x0, 0x6, 0x6, 0x3, 0x7f, 0x4, 0x1f, 0xffffffff, 0x0, 0x80, 0x5, 0x8, 0x40, 0xffffffff, 0x8, 0xacc, 0x2, 0x1, 0x3, 0xfffffff9, 0xc531, 0x0, 0x7, 0x6, 0x3, 0xce3, 0xa752, 0x7fffffff, 0xffff7fff, 0xaeaf, 0x8, 0x80000001, 0x0, 0x7ff, 0x800, 0x40, 0x2, 0x8, 0x7, 0x1, 0x7, 0x8001, 0x80000001, 0x80000001, 0x100, 0xfff, 0x81, 0x7, 0x3f, 0x4, 0x0, 0x1, 0x14, 0x1000, 0xfffffff9, 0xee, 0x8, 0x0, 0x1a, 0xb8affd3e, 0x7ff, 0x10001, 0x5, 0x3f, 0xfff, 0x40, 0xa88, 0x5, 0xe8, 0x6, 0x3, 0x9, 0x2, 0xffffffff, 0x0, 0x3, 0x3732, 0x1000, 0x1ff, 0xffff0000, 0x3, 0x1000, 0xc09], 0x3, [{[0xfffffffc, 0x1525], @broadcast}, {[0xf10b, 0xfff], @empty}, {[0x5, 0x2], @dev={0xac, 0x14, 0x14, 0x44}}]}, {[0x5, 0x81, 0x8000, 0x5, 0x200, 0x100, 0xc955, 0x6, 0x3, 0xd7ea, 0x1, 0x907, 0x2, 0x5, 0x3, 0x80, 0x7fffffff, 0x8, 0xc3, 0x9, 0x2, 0x400, 0x3cd, 0x7, 0x1, 0x3f, 0x6, 0x3, 0x7fff, 0x2d5, 0x8, 0x3, 0x4, 0x7fff, 0x7f, 0x2566, 0xe6, 0x2, 0x8, 0x9, 0x9, 0x7fff, 0x4, 0x38a471c0, 0x1, 0x80000000, 0x3ff, 0x3ff, 0x37, 0x7f, 0x80, 0x6, 0x4, 0x8, 0x2, 0xf9, 0xebeb, 0x3d, 0x99a2, 0x8, 0x4, 0x5, 0x0, 0x8, 0x1, 0x0, 0x7, 0xfffff800, 0x400, 0x1, 0x1, 0x5, 0x101, 0x0, 0xdf, 0x5f9, 0x1, 0xffffffff, 0x3, 0x8, 0x8, 0x52db, 0x3f, 0x9, 0x0, 0xffffff80, 0x0, 0x3, 0x5, 0x67700000, 0xeb, 0x9, 0xb5, 0x8, 0x80000001, 0x8000, 0x2, 0x9c, 0x2, 0x0, 0x2000, 0x2, 0x7f, 0x626b, 0x5, 0x40, 0x4, 0x1ff, 0x1, 0x10001, 0x24000, 0x9, 0x8, 0x6, 0x1ff, 0x9, 0x8, 0x9, 0x8, 0x6, 0x2, 0x4, 0x2, 0x7005, 0x8001, 0x9, 0x5, 0x3, 0x200, 0x5, 0x0, 0x1f, 0xcc, 0xaa9, 0x4, 0x3, 0xb3, 0x0, 0x100, 0x7fffffff, 0x7, 0x7fffffff, 0x8c5e, 0x0, 0x3, 0x3, 0x3, 0xbd5, 0x9, 0xffff, 0x3, 0x20, 0x200, 0x8, 0x20, 0x80, 0x9, 0x9, 0x10001, 0x8, 0x1, 0x10001, 0x2, 0x401, 0xc86, 0x8, 0x6, 0x8, 0x9, 0x0, 0xff, 0x1, 0x8, 0x1, 0x6, 0x3, 0xd45, 0x4, 0x3, 0x9, 0xffffffff, 0x9, 0x4, 0x3, 0x6, 0x1, 0x7, 0x5, 0x856a, 0x8, 0x5, 0x10001, 0x0, 0x61, 0x4, 0x1, 0x5, 0x80000001, 0x5, 0x4f, 0xe3e, 0x32dfedc7, 0x4, 0x8, 0x0, 0x1ff, 0x3ff, 0x3, 0x1c, 0x8, 0x7, 0x0, 0x101, 0x3, 0x6, 0x3, 0x1, 0x6, 0x7f, 0x1, 0x100, 0x3f, 0x0, 0xfff, 0x8, 0x9236, 0x80, 0xfffffffb, 0x3c, 0x80000000, 0x1, 0x9, 0xffffffff, 0x2, 0x1f, 0x5, 0x42, 0x200, 0x6, 0x2c40, 0x200, 0x40, 0x7, 0x4e, 0x100, 0x9, 0x3, 0x9, 0x1, 0x80000000, 0x0, 0x605b, 0x5b03, 0x3f, 0xffff, 0xffff49cb, 0x10000], 0x4, [{[0x5, 0x20], @local}, {[0x200, 0x4], @rand_addr=0x64010102}, {[0x0, 0x2], @remote}, {[0x2, 0x3], @multicast1}]}}}}, @cpu={{'cpu\x00', 0x0, 0x8}, {{0x0, 0x1}}}], [], @snat={'snat\x00', 0x10, {{@empty, 0x10}}}}]}]}, 0x13a4) r9 = dup(r8) ioctl$SOUND_MIXER_INFO(r7, 0x805c4d65, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:07 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x1000000}) 10:20:07 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x18, r4, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, r4, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5a}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8001}, 0x40) 10:20:07 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 943.059294][T28346] binder: 28343:28346 unknown command 0 [ 943.069922][T28347] binder: 28344:28347 unknown command 0 [ 943.105027][T28352] binder: 28348:28352 unknown command 0 [ 943.114438][T28346] binder: 28343:28346 ioctl c0306201 400078 returned -14 [ 943.137843][T28347] binder: 28344:28347 ioctl c0306201 400078 returned -14 10:20:07 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x2000000}) [ 943.165971][T28352] binder: 28348:28352 ioctl c0306201 400078 returned -14 10:20:07 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0x9d0000, 0x800, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9c0906, 0xffffff7f, [], @value64=0x10001}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)={0x34, r3, 0x703, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xe1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004000}, 0x8004) ioctl$PPPIOCDISCONN(r1, 0x7439) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) 10:20:07 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x600000, 0x145) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) [ 943.341942][T28370] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 943.387232][T28372] binder: 28369:28372 unknown command 0 [ 943.424754][T28375] binder: 28373:28375 unknown command 0 [ 943.449810][T28372] binder: 28369:28372 ioctl c0306201 400078 returned -14 10:20:08 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x3000000}) [ 943.491429][T28375] binder: 28373:28375 ioctl c0306201 400078 returned -14 [ 943.513197][T28382] binder: 28376:28382 unknown command 0 [ 943.592623][T28382] binder: 28376:28382 ioctl c0306201 400078 returned -14 10:20:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:20:08 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x9, "0000010000000000080044944eeba71a999323289243146c6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) 10:20:08 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x18, r3, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x240, r3, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x59}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xab1}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x20}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc77}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xc000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x49b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffff01}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7e3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x69}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xec}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd0ec}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @local, 0xffff}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_virt_wifi\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x24000100}, 0x4000000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) [ 943.719321][T28389] binder: 28388:28389 unknown command 0 [ 943.748473][T28392] binder: 28390:28392 unknown command 0 [ 943.770950][T28389] binder: 28388:28389 ioctl c0306201 400078 returned -14 [ 943.826328][T28392] binder: 28390:28392 ioctl c0306201 400078 returned -14 [ 943.864814][T28395] binder: 28393:28395 unknown command 0 [ 943.935677][T28395] binder: 28393:28395 ioctl c0306201 400078 returned -14 [ 944.024788][T28405] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 10:20:09 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:20:09 executing program 3: clone(0x42010800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x5, 0x40000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) 10:20:09 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000040)="a2e6fa9a", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) 10:20:09 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:09 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x4000000}) [ 944.633866][T28420] binder: 28413:28420 unknown command 0 [ 944.694520][T28425] binder: 28419:28425 unknown command 0 [ 944.716028][T28420] binder: 28413:28420 ioctl c0306201 400078 returned -14 [ 944.770970][T28435] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 944.771870][T28425] binder: 28419:28425 ioctl c0306201 400078 returned -14 10:20:09 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x5000000}) 10:20:09 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0xc000, 0x0) r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="2e18acdf1c3c7905d7c5826f3dd45ae85284b45050b99adbd0c0a58d116c2e80e15f37", 0x23) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0x4, 0x4, 0x7ff, r2, 0x0, &(0x7f0000000100)={0x9b0903, 0x5, [], @value64=0x4}}) bind(r3, &(0x7f0000000080)=@generic={0x11, "00000100000000000800449431f2b5cd0a98a4b2922cb18f6e2e2aba00000001ea205f60005404b0e0301a4ce875f2e3ff5b163ee340b7679500800000000000000101013c4d11039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000f0ac8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x1f, 0x4) 10:20:09 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x400902, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r2, 0x40184150, &(0x7f00000003c0)={0x0, &(0x7f0000000340)="65d74f93368f20d0d1ea7ad974275b4bd37233d063175a4e3fb8fcf76ee70951a7375be66129a44a9b758636e2d556e0c329b0d1271e2bf97185968c35811bc8d2b2177d2de1d8c4aa7d2ef832bf19d9c3a17c096ebe2a", 0x57}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/input/mice\x00', 0x410002) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x800, @mcast1, 0xfc6}}, 0x0, 0x0, 0x3, 0x0, "0701f4ace0f1ab89a0cf6d4e08aa9dba8f06a07788e1f4d26f528700856ad16a9dd652d46ad0b86628d334db78e7b9fbadca92dddd7c5035e1aa382cea504f4eab0cc2cc2e0d922e29a44d6d2c8e8c52"}, 0xd8) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @private=0xa010100}}, 0x7fff, 0x1f}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={r7}, &(0x7f0000000180)=0x8) [ 945.047929][T28446] binder: 28445:28446 unknown command 0 10:20:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 945.088738][T28446] binder: 28445:28446 ioctl c0306201 400078 returned -14 [ 945.092220][T28450] binder: 28448:28450 unknown command 0 10:20:09 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x6000000}) [ 945.136543][T28450] binder: 28448:28450 ioctl c0306201 400078 returned -14 [ 945.172812][T28453] binder: 28452:28453 unknown command 0 [ 945.212652][T28453] binder: 28452:28453 ioctl c0306201 400078 returned -14 10:20:09 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x1, 0x0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) write$UHID_DESTROY(r1, &(0x7f00000000c0), 0x4) [ 945.373103][T28458] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 945.415177][T28464] binder: 28462:28464 unknown command 0 [ 945.451349][T28464] binder: 28462:28464 ioctl c0306201 400078 returned -14 [ 945.452546][T28468] binder: 28465:28468 unknown command 0 [ 945.490430][T28470] binder: 28463:28470 unknown command 0 [ 945.517939][T28474] binder: 28463:28474 unknown command 0 10:20:10 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 945.553498][T28468] binder: 28465:28468 ioctl c0306201 400078 returned -14 [ 945.574581][T28470] binder: 28463:28470 ioctl c0306201 400078 returned -14 [ 945.590168][T28474] binder: 28463:28474 ioctl c0306201 400078 returned -14 10:20:10 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x7000000}) 10:20:10 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r7) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000500)="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", 0x216) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) bind(r10, &(0x7f0000000080)=@ethernet={0x1}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) 10:20:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 945.873064][T28485] binder: 28483:28485 unknown command 0 [ 945.905347][T28490] binder: 28487:28490 unknown command 0 [ 945.920674][T28485] binder: 28483:28485 ioctl c0306201 400078 returned -14 [ 945.951184][T28490] binder: 28487:28490 ioctl c0306201 400078 returned -14 [ 946.065975][T28498] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 10:20:10 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x266440, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:10 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x3f000000}) 10:20:10 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nfc_llcp(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x27, 0x1, 0x2, 0x7, 0x7, 0x9, "ed7a70a4f16829373c56636ddca8f25504dd12dce577eec1cc3fb777038385ba48a2d7ea9be15e1c65d8419a1aba512b91dbf7b1e4515cbe538e59a098cf9a", 0x18}, 0x60, &(0x7f0000000540)=[{&(0x7f00000000c0)="5f33ee52452720fe33d395594b927e6b17b35006c1d79cd2d3617a27b9532b0c617d46cd630f1217056398467b7e8163788011ec92c85d0681970787d256973358b869b8f5d23975572054ed6ac2c0f325d3087d9db5644ef2dc84b1a98d6df3", 0x60}, {&(0x7f0000000140)="f685aee42de586b4f7b0fb6a222f32356aff6a92ed39b96243204fedc8f01a60b233fff72bbedaa4c5225046de40159235debdbc4f5fb183b7c26fff1c8aa39584de42113e16a68b17547420371342d95a767a095d221e178a1d97947bb3753a23635d704ee21eaa725307fc6471c1a3c6748d40b20e781eabc0e314420c651fb27d5d763bfa8c9a256a53601d47296d5504ce200cee665412e24f126535de1f45061f6e30951e75f8496bb818d5023e69577404e91ba5278c96e703f37b6eb05a86bb578a3a32deaeb172ec6a82949fc9d09e66e68c0f36ce2c0f6a6c7786e817", 0xe1}, {&(0x7f0000000240)="7aebae437ac08c", 0x7}, {&(0x7f0000000280)="dba54b533ec3dc16b957af60eb0de1f78e12c80025c5183400308974f9f93a6b207c26af4d4611125fee6064d6e4feb981664a620811578ee1a0308b1a47f0a177d55fb614586cb78d827ffa9a042efdf04f0360c2549c5d14effee2e5558da9321699ee776993920651e0783be3118fe3ed9c257de4bc93cf8a8c554139fe851dad8de09b2c3fbb1acb398abc3b766a3b2d3b5cd182c384786d6998eeeb7fd941e05a607f4b904144b3501704c8d8e468d04b121365ce0ed24aa112ddf540", 0xbf}, {&(0x7f0000000340)="fdb5f499dfd486879e3086c21b85b1aa30bf5b5216c6001d164d6227bb6b7ef23615cf5d2e75d5133dca164a2e049d4ff1f561795d977061928c7f9dc30c1056832d", 0x42}, {&(0x7f00000003c0)="7c8af6d7dc45ed8836ae2eeb73743cf7b0ab13a242df5725944795d39f9cf79879af28e9dc9f055bb8b2ede035c1654c75aaa66adfe5395c7ecb6df813bf0f93ef95687287234da0a90a2fca31f089af8c0b7aed42ba8d2901056eecb8c5114679e1c5988b4fd8f3d88b299b48d2a54e1a47fe01dce35e", 0x77}, {&(0x7f0000000440)="4ded07b86b1e76f513abdc420a2a18e6cfe18dd7c6eb1a5fe0ed89d09b7c8cfc710cf81820e27507302fd8980b75236ec6bf9d71be6137cc5b07c5373bdb1bbdc346c51b7188ed255d6739a658a9b643b1a55b26437bfd7ff9daa62cea34dd28771fbdff0d608fe4acddf962a533218a3070938c0a57bb0ffb7e902b34925772f253c0166e68c3ec8243e29fe5d3a22b555da29c015a96f1833f43945dc28a7518855f775d589cd737aa8a46d2d29345a21c8ef72732cb575dd95cc90a88f0577bbe7e9ca8", 0xc5}], 0x7, &(0x7f00000005c0)={0x40, 0x103, 0x2, "ffaf260d7c4e568309f5cca069e4bbdbd94f9b85b813ce6e117edd4547a96a3992858a441354b1d8e9"}, 0x40, 0x4000005}, 0x4000040) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x30, r2, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'wg1\x00'}}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r2, 0x4, 0x70bd27, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0xc0306201, 0x400078) [ 946.263426][T28509] binder: 28506:28509 unknown command 0 [ 946.283505][T28509] binder: 28506:28509 ioctl c0306201 400078 returned -14 [ 946.287779][T28513] binder: 28510:28513 unknown command 0 [ 946.327771][T28513] binder: 28510:28513 ioctl c0306201 400078 returned -14 10:20:11 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x40000000}) [ 946.496334][T28519] binder: 28518:28519 unknown command 0 [ 946.526704][T28519] binder: 28518:28519 ioctl c0306201 400078 returned -14 [ 946.539014][T28522] binder: 28520:28522 unknown command 0 [ 946.588953][T28522] binder: 28520:28522 ioctl c0306201 400078 returned -14 10:20:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b0a1c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) 10:20:11 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$CAPI_GET_SERIAL(r2, 0xc0044308, &(0x7f0000000040)) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) 10:20:11 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:11 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x42000000}) [ 946.796630][T28528] tipc: Enabling of bearer rejected, failed to enable media [ 946.875075][T28534] binder: 28527:28534 unknown command 0 [ 946.901926][T28541] binder: 28537:28541 unknown command 0 [ 946.925019][T28542] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 946.925886][T28534] binder: 28527:28534 ioctl c0306201 400078 returned -14 [ 946.954116][T28541] binder: 28537:28541 ioctl c0306201 400078 returned -14 10:20:11 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0xec010000}) 10:20:11 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000500)={0x4, &(0x7f00000004c0)=[0x5b5901a4, 0x1, 0xfffff800, 0xfffffe01]}) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) r1 = socket(0x1d, 0x3, 0x9) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000540)=0x70, 0x4) bind(r0, &(0x7f00000005c0)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0x64010101}}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000580)={r1, r3}) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x80000000, @ipv4={[], [], @multicast2}, 0x3, 0x4}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000040)="d45ed000511bd8add42936b09a333825027fea7f8a1b145ad02fa938bfd077", 0x1f}, {&(0x7f0000000180)="ed46dc912452a4c86f140a54b2915c33ef7ec9ed49b647032705797cca2cfb310107f72c87c751144bd6c5ae85e2809b658fc455c18ece2033d050ece25b9e4233a67757ed70f3a61bc5a3415d6f55c3396492182f590475543b2fcbc8eafedf421d0f285fde68bf97e62d", 0x6b}, {&(0x7f0000000280)="57b5147a18a64573f7704462f2b6f370b3be6ad75bd05a5e27d9454c9254993c4714583065c4723af45b1bba663b3de3cb6f7e758bf13c232e6be019a6a0eefa0092fde9816c6ec728106de26856188479777b11b150edd7b80f3d525fab48c0a4ba46ac385417c45fc56ac8760a8a474f5721c6639ae3565f0f2729c585bb1ed4386db8bd44e150cbe72d0d806e05e1954bac88a0cf6a5759a12792788e235a84fec02112baf91ff95854a4b5afa62322923c413b8dded8e341608112c08f7fc2b7f4c8a1ea309716", 0xc9}, {&(0x7f0000000380)="6814d05ac7d38989cc92b0ad32722d042dc35db47e66084366e2c3058d489a06e3439588f043be484ede0220bfaa586a48dab6f82d5eb44f3a2d8750577e33ec80f17a5154558d4fa56190e8847b9023f96dfb96dbbb14d8d4384a65c92f366eb593d9f0c018353a2942b4b70a56d6d3221d8a87c3787725c5eac6076f090f9c3812ae0d6bccfbf4febfc56289b771e8ac1e6a3b584d5537b8a5e5ae06ddc3e9dbd96cf5d33c1048f1fdc4f1392d", 0xae}], 0x4}, 0x4000) 10:20:11 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$cgroup_subtree(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="20000100000000000000000f00"], 0xd) r4 = dup(r1) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000140)={0x7, 0xc, 0x3, "b461453d2480c62d4aa9e69dce5edfa01cb8c7f1f47553f86d45c9b99636b8ea", 0x4745504a}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x82, &(0x7f00000001c0)={r7}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000080)={r7, 0x3c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7ff}, @in={0x2, 0x4e23, @private=0xa010101}, @in={0x2, 0x4e24, @multicast1}]}, &(0x7f00000000c0)=0x10) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000200), 0x2) ioctl$KDFONTOP_SET_DEF(r4, 0x4b72, &(0x7f0000000640)={0x2, 0x0, 0x1b, 0x7, 0x16d, &(0x7f0000000240)="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"}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) 10:20:11 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x40184152, &(0x7f0000001740)={0x0, &(0x7f0000001700)=[&(0x7f0000000240)="630ad5ae5b1ab14af693bbb678848601ad15efd5c5fc7968ed28464e4a81feb42d1a25ccddf2919c30446e6a6bfb9cfd366a3dd68d70aebf6a32af74bd579bd9e82dbef76b40b19717f65eac5c52ce92bae6efc48b026f8c8f3ba0f9b6cc33203175a3403ae008eb5d43ce8cf31d18cbdaa98c7bfe8955e5090a18d884fb5d5d953031065f635f7b9afeb22dbd01524583de34e7fedcf47bbe53d6a884a541bb55955e644c4a748b35eb04aefdd9594e9d0f20", &(0x7f0000000300)="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", &(0x7f0000001300)="5089306a3d386d1ead796689be3aea6d3b6ef7dea781a08af9b46eaf30b6c1bd14e81ef540a23ba3c92ee39abc7ffd4379086ffe5f04314e8425650db00cb3031678c51d06d5898adfcdf37b67e753b01d224d62696983d3b96f5ed1768a467809fe957d0b309efffe7a14bde2e467c1b967c18fe7a4ec9f07a8", &(0x7f0000001380)="59a55f89c46c38a842918050cd3f82b4b82152d9b3bb27f8529f5f67932d83117f526bc13e176e865f8c9249414104af53c71babc412c153f8a69e715c09dec07ac86307069a2384dbc5b89b9cc346f1f8de7f612dea297cc698164e5a9d47cd0035bdaadc10ae2465b26e30a1817b0b1b14c91515007b60f21806ebde53f88ccf4eb728f08dd296f1098e1839452d2e9528c32c638f7424b2323911b0a3e9392024c1e10cf85356d1e10c62bdd2a4c2c55ee81cc9d5ece00a8f9e865c54954f8fc4ad0e03be17f83c690eb4259b527f6fba1751b86a1b6cb0f9a264fb0d183bcfadac567ebe70ebd578ff235c58", &(0x7f0000001480)="346a2fabe73cee1b83cc67a22f6f2743d52f950f51c247e7d87405f47a6d33b7b99c11d719e353724819d9218194d2845fea9a54d585a06d241d85b1aaeb379e49b2974f128c14780cfa2126e613062a03fe980c3c1f76dc8d7b6ccf5ea544f7e209cd5ab09c808c2eb5c6d8f0dab3d8", &(0x7f0000001500)="dc0494e53dc03618fee0f2103cd3fb6d9d400daecd7db7fd99edb93de99ba53391d1e2af6bb113d122b20362719d9754f7a336751b9eb931812f8a81e2b322390249e6bb0540", &(0x7f0000001580)="53b5162f144a8c88d4debde01dcc8a882637f07d5af417c67976be6cf0f2b628dbbf063a1621ca90272b3abd504ecd9798330855ea0ba18122a754dacea71ccb85cb52253ce81b4e5c65f18b6071b3920c897f292e49534ea027df2abf4dfa4a3decef24874f38050eb0c779365c996a012a79e7bacf14d7f420b9dcfc28e6cd9ce87c25347c0ce8b63fee2441dd8ce38320767d1652b12dcc1dbdb2780a7535e3c9f86eebbc665a9b24c4627c9524a4ca4dffea566bcd3a9258de110c7e83065aa492d52a14190203fde6859c27ca4582f27262a89539850cc76d3b60c7f93f9e9d0d04044669455324da55092370da", &(0x7f0000001680)="2bd5a59def1b28113ad43956f4c821835f621550242bc5ac541b8ef5e73820b54cecbf279d36f944704e4d6e0c04325304466f0a1841da68d673dcd00a20678e55f13f115862be1d444c698713c5c6c83118166e31f5475a8713df57c0b4beec76e61ef414a1b337d397c22f8636ce4fdd124a12283a80326fc845a94ee0"], 0x20}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x286080, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(0xffffffffffffffff, &(0x7f0000001800)=ANY=[@ANYBLOB="00000000020400080180c90000009f96f5000000aaaaaaaaaaaa080045000014000000008c996c2cac141406ac1414aaf154b811036c8b348dd6d9485c89475a5c68abe5c7c1274be75bc6411ceeaa7901dbfaf14519ea45fe820e83d92cec4637b48ed7dabbfe7debb79e46a97c545219b717b14c9b215dd0aa76"], 0x55) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0), 0x111, 0xa}}, 0x20) splice(r0, 0x0, r4, 0x0, 0x10005, 0x4) [ 947.227927][T28552] binder: 28549:28552 unknown command 0 [ 947.258872][T28556] binder: 28553:28556 unknown command 0 [ 947.282200][T28552] binder: 28549:28552 ioctl c0306201 400078 returned -14 [ 947.297814][T28556] binder: 28553:28556 ioctl c0306201 400078 returned -14 10:20:12 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0xfeffffff}) 10:20:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 947.482625][T28561] binder: 28557:28561 unknown command 0 10:20:12 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @empty}, &(0x7f0000000140)=0xc) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) [ 947.528680][T28570] binder: 28566:28570 unknown command 0 [ 947.544729][T28561] binder: 28557:28561 ioctl c0306201 400078 returned -14 [ 947.577293][T28576] binder: 28571:28576 unknown command 0 [ 947.585563][T28570] binder: 28566:28570 ioctl c0306201 400078 returned -14 10:20:12 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x1, &(0x7f0000ff6000/0x7000)=nil, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) 10:20:12 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0xffff8000}) [ 947.630667][T28576] binder: 28571:28576 ioctl c0306201 400078 returned -14 10:20:12 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 947.707703][T28577] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 947.825214][T28584] binder: 28582:28584 unknown command 0 [ 947.874372][T28584] binder: 28582:28584 ioctl c0306201 400078 returned -14 [ 947.887003][T28594] binder: 28586:28594 unknown command 0 [ 947.905523][T28597] binder: 28595:28597 unknown command 0 10:20:12 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000040)={0x4b, "e3ee68bba1d366b5e675605df6554f011e1b99e9bbff719085684414c4ab630a1cdafa3216f2e53217ca49333f7711b1ff879858db7d434f201f43811e181c69641d19915cd2b6ad5a0b2f3c97ccf0679f077581f1fea80e090a568df934b464c1fda896152a522b58b0bab522f5195fbe0b1669bd0df2e01d033b722a51bac6"}) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0xc0306201, 0x400078) 10:20:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:20:12 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) sched_getattr(r1, &(0x7f0000000100)={0x38}, 0x38, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0xffffffffffffffb4) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4$rose(r3, &(0x7f0000000140)=@short={0xb, @remote, @bcast, 0x1, @bcast}, &(0x7f0000000180)=0x1c, 0x80000) bind$rose(r4, &(0x7f00000001c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) [ 947.952135][T28594] binder: 28586:28594 ioctl c0306201 400078 returned -14 [ 947.972258][T28597] binder: 28595:28597 ioctl c0306201 400078 returned -14 10:20:12 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0xfffffffe}) [ 948.189265][T28613] binder: 28609:28613 unknown command 0 [ 948.211635][T28613] binder: 28609:28613 ioctl c0306201 400078 returned -14 10:20:12 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0xc0306201, 0x400078) [ 948.240238][T28617] binder: 28614:28617 unknown command 0 [ 948.260818][T28618] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 948.275842][T28617] binder: 28614:28617 ioctl c0306201 400078 returned -14 [ 948.481395][T28626] binder: 28626:28626 unknown command 0 [ 948.517271][T28626] binder: 28626:28626 ioctl c0306201 400078 returned -14 10:20:13 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)) 10:20:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) r2 = socket(0x11, 0x800000003, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x3) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r2, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TUNSETNOCSUM(r5, 0x400454c8, 0x0) dup(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) r7 = fcntl$dupfd(r3, 0x0, r6) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xcc637860721a374a}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x13, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x54804}, 0x4008000) 10:20:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:20:13 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000180)={@void, @void, @eth={@random="9f96f500", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @generic={{0x14, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @dev, {[@cipso={0x86, 0x32, 0x0, [{0x5, 0x12, "4736f9a98e2754003608f1a099c37d80"}, {0x2, 0x4, "cf83"}, {0x6, 0xe, "ec91e7be09b36b2d63ac6143"}, {0x7, 0x8, "4e82a219dcb6"}]}, @ssrr={0x89, 0x7, 0x23, [@multicast1]}]}}}}}}}, 0x5e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) move_mount(r6, &(0x7f0000000040)='./file0\x00', r8, &(0x7f00000000c0)='./file0\x00', 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 948.712153][T28635] binder: 28632:28635 unknown command 0 [ 948.726332][T28638] binder: 28634:28638 unknown command 0 [ 948.751317][T28635] binder: 28632:28635 ioctl c0306201 400078 returned -14 [ 948.764426][T28638] binder: 28634:28638 ioctl c0306201 400078 returned -14 [ 948.801171][T28651] binder: 28637:28651 unknown command 0 10:20:13 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:13 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}) [ 948.853756][T28651] binder: 28637:28651 ioctl c0306201 400078 returned -14 [ 948.933939][T28660] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 10:20:13 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000100)) [ 949.090054][T28668] binder: 28662:28668 unknown command 0 [ 949.130694][T28668] binder: 28662:28668 ioctl c0306201 400078 returned -14 10:20:13 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sched_yield() r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$SHM_STAT(r3, 0xd, &(0x7f0000000080)=""/60) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000040)={0xfff, 0x1, 0xd90d}) 10:20:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 949.157172][T28679] binder: 28672:28679 unknown command 0 [ 949.206621][T28679] binder: 28672:28679 ioctl c0306201 400078 returned -14 10:20:13 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}) [ 949.254913][T28684] binder: 28682:28684 unknown command 0 [ 949.265043][ T26] audit: type=1800 audit(1587637213.914:98): pid=28685 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 [ 949.284188][T28684] binder: 28682:28684 ioctl c0306201 400078 returned -14 10:20:14 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x100) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) 10:20:14 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$isdn_base(r2, &(0x7f0000000040)={0x22, 0x66, 0x40, 0xb0, 0x28}, 0x6) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) [ 949.425211][T28689] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 949.441799][T28693] binder: 28691:28693 unknown command 0 [ 949.475141][T28693] binder: 28691:28693 ioctl c0306201 400078 returned -14 [ 949.505450][T28703] binder: 28695:28703 unknown command 0 [ 949.506376][T28701] binder: 28694:28701 unknown command 0 10:20:14 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4}) [ 949.554035][T28703] binder: 28695:28703 ioctl c0306201 400078 returned -14 [ 949.565751][T28708] binder: 28694:28708 unknown command 0 [ 949.581175][T28701] binder: 28694:28701 ioctl c0306201 400078 returned -14 [ 949.581693][T28708] binder: 28694:28708 ioctl c0306201 400078 returned -14 10:20:14 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) recvfrom(r0, &(0x7f0000000040)=""/4096, 0x1000, 0x0, 0x0, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0xc0306201, 0x400078) [ 949.783671][T28720] binder: 28717:28720 unknown command 0 [ 949.819199][T28720] binder: 28717:28720 ioctl c0306201 400078 returned -14 [ 949.854582][T28727] binder: 28721:28727 unknown command 0 [ 949.882134][T28727] binder: 28721:28727 ioctl c0306201 400078 returned -14 [ 949.950820][T28730] binder: 28718:28730 unknown command 0 [ 949.990089][T28730] binder: 28718:28730 ioctl c0306201 400078 returned -14 10:20:14 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5}) 10:20:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:20:14 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="00007800f9c51905b0b083e04c4232b269750d5d86cb14", 0xffffffffffffffd8) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) 10:20:14 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:14 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x82, &(0x7f00000001c0)={r4}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x400, 0x7, 0xc, 0x800, 0x1192, 0x1, 0x7565bc98, 0x6, r4}, 0x20) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0xc0306201, 0x400078) 10:20:14 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x610000, 0x0) recvmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/252, 0xfc}, {&(0x7f0000000440)=""/147, 0x93}, {&(0x7f0000000500)=""/243, 0xf3}], 0x3, &(0x7f0000000140)=""/26, 0x1a}, 0x10000) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1ad) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10008, 0x0) [ 950.180349][T28740] binder: 28737:28740 unknown command 0 10:20:14 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x9800b672b5e2afc5, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0), r4, 0x0, 0x2, 0x4}}, 0x20) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0xc0306201, 0x400078) r6 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10080, 0x9) bind$packet(r6, &(0x7f0000000080)={0x11, 0x1a, 0x0, 0x1, 0xc3, 0x6, @dev={[], 0x2b}}, 0x14) [ 950.233848][T28740] binder: 28737:28740 ioctl c0306201 400078 returned -14 [ 950.295552][T28760] binder: 28742:28760 unknown command 0 [ 950.315606][T28739] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 950.346143][T28760] binder: 28742:28760 ioctl c0306201 400078 returned -14 10:20:15 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6}) 10:20:15 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0xc0306201, 0x400078) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000100)={0x71, 0x6f, 0x2, {0x8, [{0x10, 0x0, 0x6}, {0x20, 0x1, 0x6}, {0x20, 0x1, 0x8}, {0x8, 0x1, 0x6}, {0x10, 0x3, 0x6}, {0x20, 0x0, 0x2}, {0x4, 0x3}, {0x4, 0x2, 0x7}]}}, 0x71) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x6, 0x30b8c0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x1411, 0x100, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x80) 10:20:15 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000180)={0x0, @adiantum}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_RECSRC(r4, 0x80044dff, &(0x7f0000002040)) sendmmsg$nfc_llcp(r4, &(0x7f0000001f40)=[{&(0x7f0000000400)={0x27, 0x0, 0x2, 0x1, 0x20, 0x6, "13362c19b7c982a315757d631cdea30acc016773d26ba1e03f61005297861ee75fa991a14b215d140c0538a55031a1d88d7b62ffc9254a5c8c83a3466250c0", 0x30}, 0x60, &(0x7f00000006c0)=[{&(0x7f0000000480)="618e656a2793967035", 0x9}, {&(0x7f00000004c0)="bd8b87c750665e6bd264286aa1915cc265a182d3c056b2176b0967f7c6a1b438d41040de38b2ee3a0660fa7b4aebd0d4c91abe6678ef91b9779cf003e01045293d715b04c6b74c23f1c8f182596d2b19f9d92fd7d46b4fad848bd4479ab71263a28636204069e209bd113efc24de6634d5af8ac3dc0f8ddc869e3d001e0c1da36fbfec404befc51568841b36ca15571bb48b0aac3aec7eabc80011e025fa814035555d0db6ab98c89fd7ea22ddf2ad1e8a8e7f62e91615c9cbc99e9a387ad1a27d57d592adfd1b31e0ffcb8c6ba7d55756eddb087176bd5504e693b23e20d7116a87", 0xe2}, {&(0x7f00000005c0)="ced003263b59e15e45b894a323445bfb444ac1bffbcbc2886f8021626ea31be5fe44d89542fb93c7b08500d7cd5d02a72aed79f5ad607b5442d32a", 0x3b}, {&(0x7f0000000600)="bbaf99f83f6b155fda6718e476d9b5d2a9f4d179388ac4f6407124264cc288e4464f9d9ad31330b5f003a06b01e7246c05285cea96db51d20699b0ed2b08d32d8d5f1b158fd037a16314b61d2ba7f799d3e7f8a6881fa8bd0984c6fe2a3b9fccac518aac31948733c7cb42e4f4b85b7bb912fd0fb6e843f2e0b9dc196f631768e0e3d402179d40a96987da64c62e7b70953bea344c2bd6c45f37e4afa9caef48548294ba33b9", 0xa6}], 0x4, 0x0, 0x0, 0x801}, {&(0x7f0000000700)={0x27, 0x0, 0x1, 0x7, 0xb9, 0x7, "40969a090092b9926577f20098a1860f9cbc4bf6350d1bd231f8db403803c578e3217f02dce8e3614462079a1b26e1172f5e543eb00b615457f21ca063313e", 0x27}, 0x60, &(0x7f0000000a80)=[{&(0x7f0000000780)="d9313d2ed2663875ef57213aa9d82f82c3c05c5fafa59245d4b508c166a9a1eaecee83288c6eebbc6b87c8bdfb03bc7497f67352cd8ba7ede312338198382e6704c9eef13be8d6d285d532ade81a2407f4559ac744f905459be34324cd848b14d7106b2266146042715e21007ed9c64c4de5f6134893ee3c4c328186a3718844219a3e064c649bb1ff1ef4f25e69d3e93d9e19845954b224630f7141d2f7bf6b72302ab0248365b74537da53432dc9626677180ce6db1828eaeecc11bb0e3a4db60b", 0xc2}, {&(0x7f0000000880)="321cf74233d29f69a4b54269a01e2330067186d361c000d6ba6c6a73ace2b55a9a0a901e9a33bde7aeeeaf0adcf27113bc20a0d41294b4f1f5079513f3b1cdb8e2ad90ad3102f2d571daef0792c5e15217c234ba3a19e035759bb8f143e1bfce53c07743198e9e04623d699b72ee5af5ea7093e65901bd6b5c7e10b76a20e3a173465687dc529f96f7129680e840c8a70d91caa3ff0dbd72df5a962b1aa15d50293f54e336b7565482748eb442115347d319899e5cf5fc5251e060fc3b11fee676204e5862c251be45d59dfa", 0xcc}, {&(0x7f0000000980)="fee63783aaa5a6139b1b7357af3cc85423260004ae104005c806be8aae5625e30ba03d78b554edc297350d833f7fe77b234ebbfbfdec0669526578c2271ad1ac703dc857e1777ffd762e03ec27194ae912785af31b8e957abf241f7ff1b4127adbc6f07b56095845517fff0eab6137c3dc02ba8fc21dcd910f19b190d4d36a86dcf9794899aec3bb843be8cdf0a0334cf1efd40e2bf04734b3676d76f82a46a637b2743f79200171ff48c54403b699d0712448c5d297646312c24f9bb11a9b5e60f652a75653766a9828baebc7be17122fe0838121c53ab795a1611e56887a5102e26e140a", 0xe5}], 0x3, &(0x7f0000000ac0)={0x1010, 0xff, 0x9, "116719f1ff0ec67756708ede8a8d6304608be35a89ecadd966e93001ced4b8bd59dc538e2dbf2368ac4a030d4e296b9ce7f2340e8a531a969b1a798cf76be2aed6d7546c9c5e815b683592300f118b082e7e73aadbdba9995c65201d110cefc775d569dd674917418a409ea43dc49cbd038ccf67727f9091b01b6436fd417e35b2305d9b721ae16586c36d1d9ef52aa57e8e2f89a04967679b52c837b8f8f0bc7b6c4e2d5f397e526d0fc363526275a86febf11eef20d1e123dbdfa141414392daacdee920eef8cf20f527ac8c91c51dd8664c56581957638f63e854410e8600d958454bdc7217c17d8d9f692af2153dbb3aa56f2c305a5361384849a5c25ab22d9889fc803d5f08d36c92608832c676df1225844d7e1f7de177533052d1e4ebe0b22a7a529b822dc2a6b1d80f609f5cbd679ac56d88564f834ea754368e7e4ed29e498991ffe2cfd8ad6dc15f11f5810accd3a7bd7dbe7e97793479a6305fe36af0d031efb078a4d8224b1f03488f996d1ce904f9daa0c77d5395c2ca3ec94bce4492986e310a3ee8d6fe70d73ab934899ff3f5d1809d20e56d3f906c5af0289285f882ef180b8e826cff38758050d233fb6ac45b6325a56cb8f8d6dcac5690360466b1430ea0c2953656bb6831bd999c33f22f681ffda43158b904af4721873ba5f75b7009aa2b36fae9c44dbb5620af9c14ca86c43f0862b1d99059ff00402e036f58d79aa7537da8de80fb1902d3d32f0a8945458162bf6c3c0485d1f8990e437537469d1ad0987dd5b427a5783a3f561dc2a20c874aebdab9e1b893e2c121f71e2f67cfa6add7fea0aa36a5a2883acbbc497ffe605f06434b2ff4ef9606e924bdd3b584f415ef2558be070a34c06e4e4a5a1e9c8adf8d09241af3bb06e976c0ab17c41c424c118160e3eb35dbb03e03531cec88c7a5586263f5dcb9e9900bde0b905353dc0656789d4fa2f7621fa6062fd45d98b268f4a28a11446547c6a89dd9d10d73a4b0e60a5c369b79695a1d066cd830d3a051def96c53fce6666fcaf9ce654a4a8583689f7657fad9eda0166a2e98a5d771457efe32a1bd3e78d28cfeca74030417ad1726152bf3cea76f2c1f225e78a97bcb2f5d4a1fc23facdd80b2182a773d15a258e619c8954beed0ff5a9ace509e00a93381d117c3ada6529385a2f934bacd04d88a44e4d3cdd19efcc6674b60c12208e52047456d9058d020c3c73d86de0734cb99a3d461bb6675180ea80b52d502d68c4256ab8febf5157399c89cf6a1c94d853fe1347b9317c3501085199f1b6bc69ab9d597716984ae4f878ce41cce57a052c623c306d13bf35cde85c90d12d1737f8af2437f02dacc0f77381e85d53d8b8a40c18d5ad4ffb4e291a1d2abae3a21037bcd267564c5389faf9eda093a118927dc6a448eb61af00ebdefa0e5e86b6bf0a830e2b1eb027f250fec1db1b166f3b27e37a7220e10abcdf6c226d729aa83660ffcf1d84a5fde7492d0656d196c11018518b2517fd8481073e2814a75e146fa11ebc810b7d22a75f7b60bd8faca36a31d461fd31ace55efa84f29be74c230b5b21b9de4d30effa16b1f3ee608149fb0c3a0435e6f642cff2b4d0d820741c6a1089d29a5595475b98e45efa86ca59a5362f77d500826356c915b6ba87debb4283f209ac75d5438bb6f40ece846c843c43a630b3d14f1be790cd00ce37c2e5ee39ef518b39dd724181ab23a4e0127c099d848f94db3c3491a5ad156bb10b4ca95af5ab54960bd76758da866eeeefa4ba2635fb85c5015033bf2cc8b63d1e06aec8bd246fd784626ce1a4e42f3c2eec1e48ef7d2d9130aa88654e449b663195b963c8f7c0d6ad4b848a6c8d0997cda908dc246976a42a47de5e16a00380e6a4a0a6ed91599b7eea342dfd82ccbd0f84ae67069e6a2fd57e994a48f5ce24a404935d5bf035d4bec5b53b91c532ed522d956cadd0f6c8c433a1ec4ca98e862d344fdfae362820a4ce5de1755c54b97a99aadbbd13374942a54d0545d968ea915d91b2579ba2bf75ab9ba0e8a90257682c33f6c24f36898fc50ff22bba1ae0b4ead640b80d09c95e41282414956ebebb1faf7877357d31913f032c025040f50d8b403ef83d8e443c936e3e3f6c7f7845e3a0977e3d54860240e87faa648815ab4950478fbd122e0fe658ac7d7e85aba713330104ed917396ca30553e45b55c4356e4bd6d276d5b4e01920be73691ff3efa39b58cae9500d1fb64aea79737ed39edd0c5ae8bbfb2f7a432c84bb743b4998912675b268cbb3a7fd60317fbd15363be9f216521ad1a47d7df981c2400d493df3c86c7de1116df7ba5216dff47cd85988e952bcb659cb6ab7ccee2938b15473d5c915ad34e15b535d58c098a03a2ddea4ac9984e1ea47be9f4b865f359158e0b9f661444dd4f94d49610a384905e7a737755b0908c776989dbc1e61a1a9c3abff71044fde4001c1e33ed04ecc5e2db1530295b019b0288ecd7f78b0ce71b5ea2c16fb6dd4e00a7935c73f4e9f45e339867a2911aa339c99df7dc7e78f8e499d78d0688338e5149f78715bd4ba65881954d225280176ef5d84beb78e325d7c85cf4694cf1f2a98fefb74f1142e79d4be8453f50e134a0e839444f2516762791f40416c13450b1133b535f90f1e451cb3841df9bbb0e012da7618af74728003f82077e9e82c2edb4d03d1ddcb79a426a4d43057e88b4be6253f611ae678715669e74a2fe927f8fd484f9837ef61471b9e7e44a22a46ecd0fe953c31ec64703377c414157f27df42305344dbe3427fd1a2158fb565a198c154a0027e5d661f27c1fd02536a75940ab1b66186b649037d07a8fa5567d1e98de79ffb9495996408c85f0fd3c824adda7c5f21dc0f3f78868f065190b698cb3ac4334452cf7416c7a779f29e1d7a432fed98013869969adcf60184503820cdc92721b9bbb2c0a6178311dc457cfb1b8adf9045e4bc9e83353189bfca6cb463f3cfe1de6bb90cb2d70ec8fb36cb57746e1c0a8feb3bd2c2170e24b93c3d35250a76bd7d0ce169d9b64fe4946bd2d3ea4cb5dfcafc0ac937b57244f6495fbee00ef56dc24547eb6d94ca3f2dfa4139986b9c702ada8d654c0f34764233eae556724175d454ab2aabdfadc5f3f70af6fa94cd5fc7bbef019bac1c69da673050cc5dbf2ad5061cf08cbdc56a820c97770f8f7ca6b7e273da3f78b0aa4fbf09c441ffc27da48bbf689d7753d0bea789492d3cea40609434d0c642ac74f994b5b36b6c7ac8e58112a0985840866896dd8a911883263d7c9cd55bbdff1cd4fca7e4f1dbcda9b763da125945dc6806d32f79228fad65f1088810ed576b86a68c5e2d23aa575e09f5b32d546d6147842c9e4cbedc2997202d0afeefec5e89f10de1fef40d4d9ad2777bc91c608fdf8c3c75234ac583e81951c747f2f30b210abc6d49c247d07496582f6746bd85b9d8c5698a56de0a695fd773c1bf2b181d353b0e8b471bffe1627b42f0de6c5075e25579f6f78a27766ee373f0475f64cabeafa8ea08d40ae50e3c2d6f0593cc9452c3945e2c1a619108a080c1173092f5c26a97e35d35cfddc09e5be431a85ffbda39e602c18a4f5ab594ec07833cf59773e8ed76192cd226714df8a5033e07c18a78bc95f59cc0bfa3c8c492723a6dcf3bcd38764ce6b986a59be3bbfd1dba01703f723cefa2922f306eacde8f61eed6bd6ea51906092fa8f987a2ec18b5b77a5a6eb00c08a009793b18352bb4e374b3d83bc5698783106deaf0a221c6976550280f88252ee1a64fd33b0d15a61361142fc55d43ed71e63ca3cb116d5e7604e76787b889d3a2d8165853f6b29d774645834479cd7d25bfe9d419e32699cdf31454009282fa64268fcc9d4e0407ed9009b2208b9e006d48a483504d4da69643f93691829237bdb3d4e21905642578d7c3deb282746d228823d74f8bed55e270c0f003a4304efaa5fab84e03a7f3651ea12ec51f3d7402ff23af60bf97e63101e98e7ddfe80ae78b9ae1604f94521fa7e229bbc988f2b5c795c6c0b9505037a4f0dcd3444705c88d706818752234adc80ac17a03b43cb12037baf0d64a55e332ac7e47b7d256f1498f3d2d57682fc52ab00f10211c788368effb4eb9cd83f469dc49b6c557810ba94eea86c5fddfc5b43a4dcff47901fb8a5eb2ad4d675b827b68e75f3e7fd29ad6d8442cdcffc5c9fcaa73c5b4dc332b01e10b0b804b20febfcb71219138aaa6bce017df17d312f757e52235fe879048fef80648676a6497cc1d462743d563845561f64b983f40b1b84db6a3da44d908324a2d12814c22aa31b088483cd853788be7fa4a114b196effa5fbff8fec4c4edb0876fb3ee21444db01f7a8bb16c79b796e07225006f74bfbc0983668e7bc15cd9ad60fcf54271fb3faa6bd1af5a35347cf364681d081e32d665b74b6a27cd5a54e0fc4fca6ca93a8a244a77cc53e8b0bd5cba7f75a864b7aa5956cbed1fe2817bbdc36d35aa73787b529cba517b839420bb8bfe02b07f1c3a5a9822c123d3b924fe9cd42c31b9ac7247abf0ce31b932abbcc5f8bddc8495938d78d7845890243cf5fe618f4b47d44571824d1bd7c3da53cfa4036342e94b19706368b19bcba14a6d0b901dd6a78477ff5aa5a2c683798d134145d0d7dc6abfce3a36a31464ac0f92c07b8f6b544991fd46e2caee7b21e8a9d24c41ec468efb4f50215bafe13616000de71aa180c8354a58e818a5072dda8a5c4ff46cfa54d8e218346bc840f40fdbf546ff79c3a4431521ac9a0a570eaafb3dc74f4ccffe291ad283187182b761e1fc234d6b2f1a31e6affa4059c22cf5e9c126cf00ce935d76764e4f1c83eafba358a3fde8b883409237454c9b98ac2f91b2bca25794f19b070f25498cd7fce08cc71103163ace19f78eec931dacaacfb675ef07670e3a4889f7e7448943bcae5aba3aae0c0faf6d7808f5fce36d29181fdb74f48badf2d53673a414a40e42da08bb30eba299770fb4dcc8e0d246609ff2d96b7e0a21eb3954fe9235b28f3954b7f817bb990f92f935b21233dcc1d23052508077ec0b2ee0ce5894b60dae8942a951e6fe51c833461d5863abf61bbf3784018b184a170f2a589a41512d24f6be4f00d2f64dd9bc293b56558aa40d97036485794afa85588fad52d5fa3a8d7ba17c13528969ffdaf6ad9ea0085ffa4127169300d4d45b2979f1efaebf054772a4559dbf58034e7ea2d80227aac8d41adb7dd869036298749cd408b5b10de86259909eb80f2442d49bf6d8ae8f7eb144f054f4d42921491123c132f9046068019bbbf6404ba0a1985e92f1c43b2d4a011958ca2fd302c3b9f8b433e605ef74e8d6eb7d111f77f4194561f0c51f98383f0e5606cde15acec3c1a7d79decb48b7b5f2cd6f59d27a69432d555bcd3fef53ae62aa0a5f4303e9320620d367ac3f10ed82ec3dfdbbfb05090731b646c89d7f258e6bcc529d79ce1b3b9860a0f67a7662c33141f61cfde9efe750e4d17e496a219ff84e1aac2b8897a53720969ff501d29c3e014e4af342755c6901dc4655c761583c8653ecff8eb2a46cefa4ff986104134fdbda265ac8063d2da0843c633220d0095921c42582750cb0c6dfffbbcd3f6c0c4c7d2d706db89ce8092c0080c935d9757ddf4df226bff7e79f12002262336ec78324f584b7af7d3cb8342c68d5deb5ce2b5510a440f1ed4d140d0cf1845b4620cb8088b96044c2ff980719e9ba47a99a81f68b4698f2044973a51e79528cbd57719d42c18d8cb50847abb996f4b21c50bde6cab51ff2e3abc9a4617bb93859"}, 0x1010, 0xc814}, {&(0x7f0000001b00)={0x27, 0x1, 0x0, 0x1, 0x7, 0x80, "3bb07e3ed17440fa71dfb6a0217407aba55a1bf2c75a5e62bc1806f8a5457f0ffce24e5ae6b562b62fe9f1f776ab6b707034f0882ba7af05ba8bd9442c015f", 0x8}, 0x60, &(0x7f0000001c80)=[{&(0x7f0000001b80)="39bdff5fe8152b7208711fd82b0487c4a0fc2683f9688dc947acd5d73be1f70e9e147e4ba19199e1e82412a435d49d9fd4d069a81b56ce7727a888a4921b3891c3ab89f88f6d710fc8c09a4d9e3b39ccb001a90f032d844e5ba8e6a00e5351941b743bb990585f8f326a9133c957db0a9a03b1d3d4caa0e4998eb239afaf71815578f0e43b082100ef7c78028c4fc4fc0286175cde8405f0f6de99ec0d4048bc4b3305f92f7f787d936c840b9eb0801c208e3368720448e3e7f2b67c127543ffb3ba9b037fded3999eb4304d1f4160aa81b80a95d7613bc62f079d72a9", 0xdd}], 0x1, &(0x7f0000001cc0)={0x40, 0x3a, 0x6, "7dff3554775dc4c949e53e8c6f88e9cc9e297b1c4e0b86221d5c648534be75b3c2fcc1ac6d0f5ff8e5e987f78e"}, 0x40, 0x40000}, {&(0x7f0000001d00)={0x27, 0x1, 0x1, 0x1, 0x1, 0x6, "bc73a948237879fa2a31af58846efc630bbac5622591b387d10c6d9b1d38efc77b688c0b47854ade7217c89f158e7b5b29afd5e8c8cf74686661788740ffa2", 0x8}, 0x60, &(0x7f0000001e00)=[{&(0x7f0000001d80)="18c6f68818657d9cd6661d31d62856350dfb6dfd5ed26f907c8b3f78a0a1849df810c75334b6dbcab3d77a9deb34c9eb23b2e6d7975b07f1b96250c0f5270d8f8fa089aa2e2ec601e57d70baf5628a9c3d002fe9857946b5", 0x58}], 0x1, &(0x7f0000001e40)={0xe8, 0x107, 0x9, "30bc5a9ca46d772bf312b52aca5504b9d64b457ecf09f578af5791fbadf1aca8f3a7bb590ce2c30533b6ad33db774c8e8367a38b44a3ea56a7aa6b648027a36e880822e7d2b7523c87f15cbeeb8d300ac8e8d1fb48fd8572a6378ba2474dee7424d7f590779f403ac82053eedad1d6405e4fb2e7b922990d26aa0ea0a76c14d0e88270616b8056695d3a50336590ccf666e3f2b408f311682924b5d7c2c804d7f32f9837a2c051c92e01a16a89a350f64148605eac9e48381ef5a8490c39979f2092269b43a525f0df46deb0d6a6854af63eee900a"}, 0xe8, 0x40}], 0x4, 0x8000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/capi/capi20\x00', 0x80000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x78, 0x4, 0x8, 0x401, 0x0, 0x0, {0x2c6d0a638229d1c6, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88ca}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x884c}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8914}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}]}, 0x78}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$packet_buf(r6, 0x107, 0x16, &(0x7f0000000280)="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", 0x15e) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_open_dev$media(&(0x7f0000002080)='/dev/media#\x00', 0x4, 0x462400) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) getsockopt$SO_TIMESTAMPING(r7, 0x1, 0x38a77d9721436e49, &(0x7f0000000000), &(0x7f0000000140)=0x4) 10:20:15 executing program 3: clone(0x3a3dd4008404af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 950.625354][T28777] binder: 28771:28777 unknown command 0 10:20:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 950.666222][T28777] binder: 28771:28777 ioctl c0306201 400078 returned -14 [ 950.702572][T28786] binder: 28780:28786 unknown command 0 10:20:15 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) [ 950.737370][T28786] binder: 28780:28786 ioctl c0306201 400078 returned -14 [ 950.769355][T28789] binder: 28787:28789 unknown command 0 [ 950.806556][T28789] binder: 28787:28789 ioctl c0306201 400078 returned -14 10:20:15 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f0000000180)) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(r2, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000140)={0x4, &(0x7f0000000040)=[{0x101, 0x0, 0x3, 0x8000}, {0x3, 0x2f, 0x9, 0x8f}, {0x4, 0x0, 0xff, 0x4}, {0x81, 0x3, 0x20, 0x8}]}) dup2(r5, r3) 10:20:15 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x82, &(0x7f00000001c0)={r6}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000040)={r6, 0x2}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RNDGETENTCNT(r8, 0x80045200, &(0x7f00000000c0)) r9 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0xc0306201, 0x400078) [ 950.944508][T28802] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 950.957860][T28801] binder: 28798:28801 unknown command 0 [ 950.994427][T28801] binder: 28798:28801 ioctl c0306201 400078 returned -14 10:20:15 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:15 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x42}) 10:20:15 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @dev, @dev}}}}}}, 0x26) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x100, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xe}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}]}]}}]}, 0x44}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={@private1={0xfc, 0x1, [], 0x1}, 0x1c, r5}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', r5}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) [ 951.164342][ T26] audit: type=1326 audit(1587637215.814:99): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=28809 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 951.291951][T28825] binder: 28823:28825 unknown command 0 [ 951.322859][T28825] binder: 28823:28825 ioctl c0306201 400078 returned -14 10:20:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:20:16 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000040)=[0x3, 0x1]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x82, &(0x7f00000001c0)={r7}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000140)={r7, 0x7, 0x3, [0x7ff, 0xfff9, 0xfffd]}, 0xe) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) [ 951.344273][T28835] binder: 28827:28835 unknown command 0 [ 951.378943][T28835] binder: 28827:28835 ioctl c0306201 400078 returned -14 10:20:16 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1ec}) [ 951.547103][T28841] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 951.586070][T28847] binder: 28845:28847 unknown command 0 10:20:16 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}) [ 951.614557][T28847] binder: 28845:28847 ioctl c0306201 400078 returned -14 10:20:16 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 10:20:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 951.813832][T28861] binder: 28860:28861 unknown command 0 [ 951.853394][T28861] binder: 28860:28861 ioctl c0306201 400078 returned -14 10:20:16 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x500}) [ 951.881759][T28868] binder: 28862:28868 unknown command 0 [ 951.905842][T28868] binder: 28862:28868 ioctl c0306201 400078 returned -14 [ 951.960881][ T26] audit: type=1326 audit(1587637216.614:100): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=28809 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 952.097463][T28879] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 952.118281][T28881] binder: 28875:28881 unknown command 0 10:20:16 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = accept$ax25(r0, &(0x7f0000000100)={{0x3, @null}, [@remote, @default, @netrom, @null, @default, @netrom, @netrom, @bcast]}, &(0x7f0000000040)=0x48) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000180), &(0x7f00000001c0)=0x8) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) [ 952.189192][T28889] binder: 28883:28889 unknown command 0 [ 952.197990][T28881] binder: 28875:28881 ioctl c0306201 400078 returned -14 10:20:16 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x600}) [ 952.241716][T28889] binder: 28883:28889 ioctl c0306201 400078 returned -14 [ 952.427243][T28901] binder: 28896:28901 unknown command 0 [ 952.469472][T28901] binder: 28896:28901 ioctl c0306201 400078 returned -14 [ 952.497216][T28907] binder: 28902:28907 unknown command 0 [ 952.539367][T28907] binder: 28902:28907 ioctl c0306201 400078 returned -14 10:20:17 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:17 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) sendto$inet6(r0, &(0x7f0000000100)="ce0407008b3350ec00911efc0bb35c02630dffffa301010000000000007b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x4004054, 0x0, 0x0) 10:20:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:20:17 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x700}) 10:20:17 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xe}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}]}]}}]}, 0x44}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={@private1={0xfc, 0x1, [], 0x1}, 0x1c, r6}) sendmsg$xdp(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x2c, 0x7, r6, 0x22}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="5ddb40b513471b38809e17e91530670956a907807362bfdc131a29dfc3d088436fe65bbb14c9ea9ba25c76a0e55a6d3fda97d4a00cc33969f38742ef2235f0d7cc4ee78da8870007f68d588031d5e0719bb21c9b11a2ed839e6b6ac73ae6717afdd3535610f060230d1073cf7e9e0afa2e32cb875a5310be4fdd41c4b87b4fa52700b66e08fbceb1f10ab59361eb9ae3c27f372c40905f5bf865e870aa36e969d979f1aa02dce019073c2d213476c41cf753a50c4c60cbd676fb5d7a67844f9d087794", 0xc3}, {&(0x7f00000000c0)}], 0x2, 0x0, 0x0, 0x10000080}, 0x4880) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 952.898765][T28920] binder: 28919:28920 unknown command 0 [ 952.953246][T28920] binder: 28919:28920 ioctl c0306201 400078 returned -14 10:20:17 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3f00}) [ 953.033412][T28940] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 10:20:17 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040), &(0x7f0000000100)=0x4) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r2, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) [ 953.115559][T28941] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 953.220282][T28952] binder: 28949:28952 unknown command 0 [ 953.257999][T28952] binder: 28949:28952 ioctl c0306201 400078 returned -14 [ 953.291993][T28961] binder: 28954:28961 unknown command 0 10:20:18 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 10:20:18 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4000}) [ 953.334986][T28961] binder: 28954:28961 ioctl c0306201 400078 returned -14 10:20:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:20:18 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGPTPEER(r2, 0x5441, 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) [ 953.531637][T28970] binder: 28965:28970 unknown command 0 [ 953.560526][T28970] binder: 28965:28970 ioctl c0306201 400078 returned -14 [ 953.582009][T28978] binder: 28971:28978 unknown command 0 [ 953.626623][T28978] binder: 28971:28978 ioctl c0306201 400078 returned -14 [ 953.648056][T28973] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 10:20:18 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:18 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4200}) 10:20:18 executing program 4: prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) 10:20:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:20:18 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x101080, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="000000009f96f50083305dc1c8b7bd0000aaaaaaaaaaaa2400452000dcff00000000299078ac141400ac141400065c4b45aacd2b2f8ec0730a8c329959ca846bdae8193adff2154a626f524ad175b58907387aefd4c1cd094096e4e191b9a855736caa8e2c38efa8b495b885f6a3ce71f36180ae024aa80e560a44042dfdf144a590541d6808a43351a6043da26b249fc36707aab8e3e8f7547aad0d7448b023647c888f9b450bcc98d5e2899312902d146e3064c4ee943280b4b7d27d92c01f6aab6e43701e44ff43501a22107e6f8b18ad1f316f5e012b36f9cf94eefe7a506af6b8aa27c1167b6f12e45eefd6015e2a5cb7226467"], 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 954.193535][T29001] binder: 28999:29001 unknown command 0 [ 954.226460][T29001] binder: 28999:29001 ioctl c0306201 400078 returned -14 [ 954.271209][T29016] binder: 29004:29016 unknown command 0 [ 954.305197][T29003] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 10:20:19 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xec01}) [ 954.318498][T29016] binder: 29004:29016 ioctl c0306201 400078 returned -14 10:20:19 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) socket$unix(0x1, 0x5, 0x0) getitimer(0x2, &(0x7f0000000040)) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket(0x10, 0x6, 0x7fff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x82, &(0x7f00000001c0)={r5}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000100)={r5, 0x6}, 0x8) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) [ 954.514800][T29034] binder: 29030:29034 unknown command 0 [ 954.546004][T29034] binder: 29030:29034 ioctl c0306201 400078 returned -14 [ 954.572422][T29042] binder: 29036:29042 unknown command 0 10:20:19 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400000}) [ 954.632014][T29042] binder: 29036:29042 ioctl c0306201 400078 returned -14 10:20:19 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x1000000}) 10:20:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec12a4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) 10:20:19 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000500)={&(0x7f0000000100)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="3fec0ba7c8d60e81251cf98c676ea4ce3cf697c7bb6a48a8e640c3f6dea473149b347f85012d28fe8727bc50c6eb0e5e85abf31afdef03d2e7ccc94576d483c7e8a5c2ef49efb53bb4ddebe65a158e7b7cc5ca974fa4d0abb06e29912f411199fb6e7fe5e207fae25d51d6eb039f3cfe", 0x70}, {&(0x7f0000000280)="9d27ab3001709189b811ef8352c06446b09efadc9a2f886b1db5c704d0e875e20eb5b299d1c36c658b8d7e6332b546fa7806e7c2b1df71e7a8c0762c868bbf1665e0d2e4adebf3976d6337f0a5dd87ece2632b79470de046dbac99286a0c673ad45520cdd0", 0x65}, {&(0x7f0000000300)="a94dc42b033a62ac76cb3f09dd8d28e0d55c828f3a22266bb4d96c707a315850f0ae9bab719d9e25539b7d0cdd6a1bf7844c13afce2a24b7b14a2cc96f5987e1ddc796e0a961e3628e51e53f37023c8a94c84d9a00cbbd09e924bae3514731f426f00c5195919ddd2e428c62e78af6f63291b18703d95c393fb12584d29f0d299b3ded0697621dabf3cb21d12bbfb2c5f11cf13e3e3b3003ef93497f265017cae5ff98b17e8dee16d9c76c362724d2591f7ef81af8542052932b6c7bdd014e3567f001279f2e485655874a", 0xcb}, {&(0x7f0000000400)="498aea891cbabc661835b14f45f2a502a002f831d1f8ec939eec2888bc7826d0951300ddcfb21d8818042f73cbf940aab9f22fde134fb2f139c753f66a3cbb5871b6098e80a2baaf8579a3f1f483ea512c0e27721e1b8f0cf77470a392f8b5d4c9eb3ce3cef769fb8fb4a4f8f0119c0862fa34f2f9f62194df3789f5175d22c1318f1e07d2cfebf9af9f17c69751833bad", 0x91}], 0x4, &(0x7f00000004c0)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x30}, 0x40000000) [ 954.853047][T29053] binder: 29050:29053 unknown command 0 [ 954.882922][T29053] binder: 29050:29053 ioctl c0306201 400078 returned -14 [ 954.895426][T29062] binder: 29054:29062 unknown command 0 [ 954.930011][T29060] binder: 29052:29060 unknown command 0 [ 954.943586][T29062] binder: 29054:29062 ioctl c0306201 400078 returned -14 10:20:19 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80ffff}) [ 954.970763][T29060] binder: 29052:29060 ioctl c0306201 400078 returned -14 [ 954.979446][T29072] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 955.159700][T29080] binder: 29076:29080 unknown command 0 [ 955.191615][T29080] binder: 29076:29080 ioctl c0306201 400078 returned -14 [ 955.243148][T29088] binder: 29081:29088 unknown command 0 [ 955.271174][T29088] binder: 29081:29088 ioctl c0306201 400078 returned -14 10:20:20 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:20 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x6}) 10:20:20 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x8}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x44094}, 0x4a000) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) 10:20:20 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000000}) 10:20:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:20:20 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r6, 0x80082102, &(0x7f0000000040)=r9) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 955.491239][T29099] binder: 29097:29099 unknown command 0 [ 955.519912][T29104] binder: 29098:29104 unknown command 0 10:20:20 executing program 3: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x4}) [ 955.544230][T29099] binder: 29097:29099 ioctl c0306201 400078 returned -14 [ 955.575553][T29104] binder: 29098:29104 ioctl c0306201 400078 returned -14 10:20:20 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000000}) [ 955.655367][T29123] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 10:20:20 executing program 4: setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) [ 955.785625][T29134] binder: 29128:29134 unknown command 0 [ 955.813289][T29138] binder: 29130:29138 unknown command 0 [ 955.819172][T29134] binder: 29128:29134 ioctl c0306201 400078 returned -14 10:20:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec5da4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) [ 955.854654][T29138] binder: 29130:29138 ioctl c0306201 400078 returned -14 [ 955.886319][T29148] binder: 29139:29148 unknown command 0 10:20:20 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3000000}) [ 955.928281][T29148] binder: 29139:29148 ioctl c0306201 400078 returned -14 10:20:20 executing program 3 (fault-call:6 fault-nth:0): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0xf50, &(0x7f0000000100)) [ 956.135672][T29160] binder: 29157:29160 unknown command 0 [ 956.152713][T29156] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 956.165803][T29160] binder: 29157:29160 ioctl c0306201 400078 returned -14 [ 956.190825][T29168] binder: 29162:29168 unknown command 0 [ 956.220739][T29165] binder: 29161:29165 unknown command 0 [ 956.243682][T29168] binder: 29162:29168 ioctl c0306201 400078 returned -14 [ 956.250393][T29172] FAULT_INJECTION: forcing a failure. [ 956.250393][T29172] name failslab, interval 1, probability 0, space 0, times 0 [ 956.265630][T29165] binder: 29161:29165 ioctl c0306201 400078 returned -14 [ 956.323404][T29172] CPU: 0 PID: 29172 Comm: syz-executor.3 Not tainted 5.7.0-rc1-syzkaller #0 [ 956.332211][T29172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 956.342378][T29172] Call Trace: [ 956.345719][T29172] dump_stack+0x11d/0x187 [ 956.350169][T29172] should_fail.cold+0x5/0xf [ 956.354753][T29172] __should_failslab+0x82/0xb0 [ 956.359622][T29172] should_failslab+0x5/0xf [ 956.364086][T29172] kmem_cache_alloc_trace+0x26/0x5f0 [ 956.369426][T29172] ? security_capable+0x8a/0xa0 [ 956.374373][T29172] ? ns_capable_common+0xad/0xc0 [ 956.379400][T29172] io_uring_setup+0xd6e/0x16a0 [ 956.384206][T29172] ? __this_cpu_preempt_check+0x3c/0x130 [ 956.389879][T29172] ? __sb_end_write+0xc2/0x120 [ 956.394675][T29172] __x64_sys_io_uring_setup+0x37/0x50 [ 956.400391][T29172] do_syscall_64+0xc7/0x3b0 [ 956.405034][T29172] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 956.410944][T29172] RIP: 0033:0x45c829 [ 956.414864][T29172] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 956.434608][T29172] RSP: 002b:00007fb600c9ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 956.443171][T29172] RAX: ffffffffffffffda RBX: 00000000004e0bc0 RCX: 000000000045c829 [ 956.451165][T29172] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000f50 [ 956.459145][T29172] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 956.467183][T29172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 956.475284][T29172] R13: 0000000000000204 R14: 00000000004c425f R15: 00007fb600c9b6d4 10:20:21 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:21 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x82, &(0x7f00000001c0)={r7}, 0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000040)={r7, 0xda}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r8, &(0x7f0000000180)=0x4) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) 10:20:21 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4000000}) 10:20:21 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0xf50, &(0x7f0000000100)) 10:20:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:20:21 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f00000000c0)={&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x0, 0x4, 0x3, 0x2, {0xa, 0x4e20, 0xee, @dev={0xfe, 0x80, [], 0x22}, 0x1000}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000200)="f6354a160e4d78893835d9f30e7854bd1ba33e21359a807e24bf875efdb3c34a74784ba9d7ae7df73596216b44bdee27d98c8dd5e546f25624b8cbe289bc59922e52695aac18c49d61e82b34373b36bdd08de353cf183098a15aa949c0de1c2fe27bd851b8a357d47eeb4c68e6f1c9da65e6deb579c0a90c496bec78e5d603217158e26f05a6b7d945850128b6f56979568c73c687380ef5fca497284e9c345869d22ee121c7e1", 0xa7}, {&(0x7f00000002c0)="08d6575e68c07fccab7c7fe188ef41a1f774a8a352e24b70d49defe1ef3f80c4dfdcaae43b115d8b84e30d7abc6a7eb959fabc44755003ba70032d79092bd29e75c41a94a6b8b843fbb836fa66a450b7d15b1fd216b576f96bd5a8f1559b05e74f5059f6c24d25", 0x67}, {&(0x7f0000000040)="71952a55075bbd8b5b8bd60deae65a9401", 0x11}, {&(0x7f0000000340)="ed02607babfb0e1d046112c68ba381182453be613803103777e3f7ff5c2a68c45c70e48d9e94d0dda88dc27e8363eb5f24c5cd16346e75002f093955859108d0df6348ab72b6fad67394701006aacd684f324ee0bcfe", 0x56}, {&(0x7f00000003c0)="f281d201ed02c869b8cc7397a947c120cc34b3dbf0830a345188334fee6974405c45c0f3feda9a5ba407568f2479769788b0a43bc9afde954a9bbb0334654118eec9c73ffc14a33aab38d02696e18973094fbe545a26df6ac888c6f9c19eb4ea6d2cb89650ebab10d7f3ccacc13a1a85b101e0c8d380b67dc0e1e6fdecba18cc9c7186ee2631132511a9e5bf66", 0x8d}, {&(0x7f0000000480)="7ae6dd3dbfd01ca98783c2a5b07e7bed0f67d2749619e545e0cf17919df985c3c5660b675a7924869e53338e14c22ba4ce57e145bc1f6b1821940c2281a4779717d22d438beac816fd3a83ace93cc712f2a4d1cbfcec2495feb9dc8e892b90a46d2a6ef0050f2c8f66c2465f36006f4ebf3d47bf84a203fe709e929eaa262bbc1bc76618f3442781349a5630f13b76138926e1cba08ee4f25f86c06e86ac3a", 0x9f}, {&(0x7f0000000540)="14d924977bf504edc834ac535cf26fd96847929d2dcae1b382accc0fca27f6a34388e9095d0f26231ea72ab852e1557854650c336c646cf13ebc623af4415e33b4f0a446e850a8004168e11aa4ecb49323a8a9f0c21e8697384566ac39e57818f067771572b51c8552881249da497317d5bf2cff51e089642ea6e1c2dc0672f3744c3101989f9fda8b5b07eefc3f33c8948470864bc2fb636ec834cd7a6ea0878ddcab616f22e97cb4df38371a7102ec", 0xb0}, {&(0x7f0000000600)="27f0b0654e947a6e36621c02041566f551f47f528a156765961577fe012cef225cfd2fefe26d426e5405d06186c9eb419dc756bdd1d695afe29e0fb31a239180b7a19766c139ea00cee404d608aa45b700b3aabf75bb2ee386db433b7935a5e1f476de3db05f7e2f82c7f06280df1314faec6018c27080fefc9dbca9c8a5308ab27216dc9abbc7efebd91e16085445e91668beed9f412d26d6", 0x99}, {&(0x7f00000006c0)="1f27b2ca3fa18c58fe8f66e257b12c9d58ceec5788850db9419a6daaa7c528ae3f58ed7c1b501deeedace9699bbce399326c30e60b691a69505def4596ad49332a89c438dc1170936b874d962173ae401490670526030ca3e2605a824d9916df2675b30dbf8681ccce3c1b6e11d69557e02a3aefb5d0783328f344f9e9247283d579ac80db97", 0x86}], 0x9, &(0x7f0000000840)=[{0x80, 0x10f, 0xfffffff7, "47e29b832270820499f9d32742cb860aacb5e8ebc9f458392679b5e1e05eaf7c49ce9fd2e96e2227c7e1d7a8a7d3a631db95b2649b04445a742b486ea9693bb50e83dda08410967f9ed0872eaa3f64b617f95cfeaa601aa729b8b88410e19975b133a6b033caad0365"}, {0xd8, 0x111, 0x7, "44ad0dc7d961d89f019bf84c4a4634a67920323bb93e4a2105069f6089855267c03bed677c74cfbbccf1c741f6da2b76410c95d6a1bb7d125cee9778645270d50ca80cbf293ad70b7de71a2d0b202cb970d5d468673a0e274163bc3a57c8448aa3dc27c707bc32122fd08eedc97f75a3061f564e65485b4aac2d9f573941965adc61ced407d5ef9665f722aaad187b36afdbc523a05e2a8da3728ed90db509defff1eaa54f7e08995ab41e77e77acf9e64a0a92c8f54987ca25bfef7d66cfa33ed6664dc5989e4"}, {0x50, 0x84, 0x3, "790369da70ec294a9b998c98b23d72bf0ec67eea856e310ef89580017d6eb62ed5400ffc45386bd3a8a1625017499968ea1ecb7be769d56bef3d8bf5"}, {0x48, 0x109, 0x536, "41da40c0247157d99f61bd812faca1e519b35b76e56b2930bceb6319317884712252f368f00711fdd385c27ada931bb133808fcc105d75"}, {0xb0, 0x104, 0x0, "e56cacac84b7ff3bb6c01966ab7f105014c2ddd5fdcb3e4ad16fcde4e15287bd0a08199c6391b308c0ea222cf47c195d8562a35bffaa3a51146ab41e22c0eebb5a87bf880ea236285c44130c6ba233d993ff11c1adc1604c6cf3e995e7bfd0682b376efb9b6da1bb173e66e9ef5ccc95eeaca6e42d5be0ab5dc67dfb67b955698da48ffbab51582b6454344bca32b32202d37b4ec0943090cb18"}, {0x1010, 0x101, 0x5, "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"}, {0x58, 0x0, 0x4d05, "981c53bfa25e0ff2e40f49fdc18033d53895fed613db37cc11bd0985184b8d0963579dff7eeffe103107c190e488a652d62f2c19e18014193794e585d941eb37261a21a44fcf5af5"}, {0x48, 0x10c, 0x10001, "e4fd6ace6877759f845ea5504fc5569fa4e6fa151ff48693892f62b9dfc9392cbea8906433c775676e5043a61ce91c4789f8f0ed6d36"}, {0x80, 0x0, 0x5, "2d903c27e6b02a170f4b886df8b2f974562d082b2e004ee475b7245a0a8e6efb03f2c755ad52c0af168a7218ab70afde3775e8d7329b9bc3ac2e9475b545e4e531176505ada13f9b09cf083cc76ba3444302dd8b03453170ea799e68fa9d09c9733d7ba99bc225171b"}, {0x1010, 0x10d, 0x2, "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"}], 0x23e0}, 0x805) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$tun(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000aaaaaaaaaaaa0800450000140000000000299078ac141422ac141400"], 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 957.215667][T29185] binder: 29181:29185 unknown command 0 [ 957.244940][T29186] binder: 29183:29186 unknown command 0 [ 957.284670][T29185] binder: 29181:29185 ioctl c0306201 400078 returned -14 [ 957.313774][T29186] binder: 29183:29186 ioctl c0306201 400078 returned -14 [ 957.319271][T29200] binder: 29190:29200 unknown command 0 10:20:22 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0xc0306201, 0x400078) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xe}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}]}]}}]}, 0x44}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={@private1={0xfc, 0x1, [], 0x1}, 0x1c, r5}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', r5}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000002c0)={r6, 0x1, 0x6, @broadcast}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0xf50, &(0x7f0000000100)) [ 957.374095][T29205] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 957.396991][T29200] binder: 29190:29200 ioctl c0306201 400078 returned -14 10:20:22 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5000000}) [ 957.523121][T29219] binder: 29216:29219 unknown command 0 [ 957.580137][T29219] binder: 29216:29219 ioctl c0306201 400078 returned -14 10:20:22 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) r1 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000140)={0xea, 0x2, 0xc8be}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040)=0xffff, 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) 10:20:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c80336c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) [ 957.700282][T29232] binder: 29228:29232 unknown command 0 [ 957.727604][T29232] binder: 29228:29232 ioctl c0306201 400078 returned -14 [ 957.753169][T29238] binder: 29233:29238 unknown command 0 [ 957.782162][T29238] binder: 29233:29238 ioctl c0306201 400078 returned -14 10:20:22 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6000000}) [ 957.953692][T29242] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 957.995484][T29247] binder: 29246:29247 unknown command 0 10:20:22 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r3, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x480d0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) [ 958.046593][T29247] binder: 29246:29247 ioctl c0306201 400078 returned -14 [ 958.067965][T29255] binder: 29248:29255 unknown command 0 [ 958.112897][T29255] binder: 29248:29255 ioctl c0306201 400078 returned -14 10:20:23 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:23 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7000000}) 10:20:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:20:23 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(r6, &(0x7f0000000180)={@void, @void, @eth={@random="9f96f5002000", @local, @void, {@canfd={0xd, {{0x1, 0x1, 0x0, 0x1}, 0xb, 0x4, 0x0, 0x0, "b2635524b78e97c052caaa6f4b5b9bbff4c7f55afd6e3215762c01c5b3c265c827432f7eba97027ba72c7380f1b6c37fd9ce0b89f7daec255dda9c20936f1c29"}}}}}, 0x56) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 958.768833][T29272] binder: 29271:29272 unknown command 0 [ 958.804612][T29272] binder: 29271:29272 ioctl c0306201 400078 returned -14 10:20:23 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000040)=r4, 0x1) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) [ 958.860471][T29281] binder: 29274:29281 unknown command 0 10:20:23 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3f000000}) [ 958.921512][T29281] binder: 29274:29281 ioctl c0306201 400078 returned -14 [ 958.944487][T29294] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 10:20:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:20:23 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000015c0)=ANY=[@ANYRES64, @ANYPTR, @ANYPTR64, @ANYPTR64, @ANYRESDEC, @ANYBLOB="838dc3bcb5516d453bfb5c1c6b60b3256f21ea83ae0e4d6db3fa06669dd1476fc1943cca9dca93b9c2e2fbe96769f85dc930789eb7be14a451accdcd0c15c8a12bc635c902edafeec9deaebef17e9e6052d1ab522f4191091105482280ba054442b513d0463b795a1712a20feaed2a99faf4bee5f366ce845be28e30a7cea2ee664220a926b2816227c5f0aec44884cac68f09cb8578db", @ANYRESOCT, @ANYBLOB="8a1b3af096d40348842d5a31630f25dfcaec836fc48e31117d8ad61e948f8c01200273a2ae59a8ceccd5ff1d3687648ed8b3e032f571f2f7411ddfbae7cc591def7a5b8e4c27159a9a5436b8eac46f575512d5f8b673046bb1d4a2cc70070d27da5d6a1d8b3d4ff3854031dee168818bcd4431d5dc19bc5d62dbc978c3abf2ab67e2a309d7094b1d02e991c057207200054e92ab955706931d6efc5da2bfcaf159754becb9b5db01c8d0b3bc4dafe09d0c"], 0x0, 0x193}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/2, 0x2}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) [ 959.179924][T29304] binder: 29303:29304 unknown command 0 [ 959.208858][T29304] binder: 29303:29304 ioctl c0306201 400078 returned -14 [ 959.250782][T29311] binder: 29305:29311 unknown command 0 10:20:24 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x40000000}) [ 959.292211][T29311] binder: 29305:29311 ioctl c0306201 400078 returned -14 [ 959.323116][T29312] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 10:20:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 959.524401][T29327] binder: 29325:29327 unknown command 0 [ 959.572631][T29327] binder: 29325:29327 ioctl c0306201 400078 returned -14 [ 959.584661][T29333] binder: 29328:29333 unknown command 0 10:20:24 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x42000000}) [ 959.615699][T29333] binder: 29328:29333 ioctl c0306201 400078 returned -14 [ 959.786842][T29340] binder: 29339:29340 unknown command 0 [ 959.802348][T29340] binder: 29339:29340 ioctl c0306201 400078 returned -14 [ 959.848713][T29347] binder: 29339:29347 unknown command 0 [ 959.866257][T29350] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 959.881584][T29347] binder: 29339:29347 ioctl c0306201 400078 returned -14 10:20:24 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xec010000}) [ 960.216691][T29355] binder: 29354:29355 unknown command 0 [ 960.242923][T29355] binder: 29354:29355 ioctl c0306201 400078 returned -14 [ 960.269251][T29361] binder: 29356:29361 unknown command 0 [ 960.294824][T29361] binder: 29356:29361 ioctl c0306201 400078 returned -14 10:20:25 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:25 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfeffffff}) 10:20:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:20:25 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = geteuid() sendmsg$nl_netfilter(r3, &(0x7f0000001500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000014c0)={&(0x7f00000001c0)={0x12ec, 0xe, 0x5, 0x301, 0x70bd2a, 0x25dfdbfc, {0x1, 0x0, 0x4}, [@nested={0xe1, 0x7f, 0x0, 0x1, [@generic="8a33699eaf690349db8e78017a49c46522ab1e46f21e9e0015d0c6551e235c1b4ff96bc316ce756630dcb9d16f47c17061215b11592567bb288e1782c5e1532a091177798f8e180d7e8033d7957bde93ccbd9f54ffb9e6112eb1cd90d544ba96b81e9ff5cd2137677e1b4de51baca857b74c1f7ef3a1a18885566624a10df0742cd9d5bf9e91f51fbaabca8ee221fd624c82e934312936c19378fc75a38b9b842fba586325b891aea7e6776b100e8e", @typed={0xc, 0x46, 0x0, 0x0, @u64=0x7f}, @typed={0x4, 0x8b}, @generic="50e34b5260ebb277feef", @typed={0x8, 0x53, 0x0, 0x0, @uid=r4}, @typed={0xc, 0x3e, 0x0, 0x0, @u64=0xfadc}]}, @generic="07b858d54f8740f8e39162c144e628c40d34d6fdece7470a2b9dd6b3fc99375781744152a6b19fc6", @nested={0x10f0, 0x1, 0x0, 0x1, [@typed={0x1004, 0x80, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x4, 0x0, 0x0, @ipv4=@empty}, @generic="850702cf10049e5fb636f311f24448c1d6346f58da69d1fc64637c675270dad881abd9e21d049c91eeea0a63248806ed03a59008d60580d383784ee103791de6986d98ed6d5c9083f933edbedd75661afc28f2bf45d068f910466a2e68b0ebd593844e0f2ff375aa015744e37cc3ef3419dbd32cbe1d16d2efd868c753f3381ad92730392a42830b481a3c00dfb95a11d099bc6107f107203a081589ab2308ea60f12e368a8064881db01fcc7c87aacaf0dab66164331ef8b126a80d43f3993b1a8ca4257f02fa24ff0e33506efb1e678956a35cdb26e2b6e5c2f458cc0dbabd"]}, @generic="4c01e656f428ba7b94ddc8c34a60da1edf2e5f9174bd606734a6db98cc255890cdabfe79874ea97b4c04b7e25a8a1ddbfffaa4ec5414b5065993bd71691367f06ca8f932fd93ed06eaf7c968ecb1f7f44fcade3e6be728", @generic="aa4f1756e29652918bc5936f6cebeb275de002e41b1040812bcdb8cbbafa7bc81daba51569e59676a8c7f93339a97b76b6a52948cddbedb718ea86a3f4f4fe9dc98f48d14854906834918790217e7c90c32ba09bebc606ae1be37714376fd14686e904892d4cd1ca92effa7062fca9cf34e2dcdff7de1caa06a253114107de31f766"]}, 0x12ec}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x0, 0x6007}, @void, @eth={@random="9f96f500", @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x28, 0x0, @dev, @dev}}}}}}, 0x26) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0xc3176dd03300caec, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) accept$unix(r8, 0x0, &(0x7f00000000c0)) r9 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 960.599511][T29368] binder: 29366:29368 unknown command 0 [ 960.639434][T29368] binder: 29366:29368 ioctl c0306201 400078 returned -14 [ 960.673315][T29378] binder: 29369:29378 unknown command 0 [ 960.727746][T29370] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 960.744610][T29378] binder: 29369:29378 ioctl c0306201 400078 returned -14 10:20:25 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffff8000}) [ 960.920872][T29397] binder: 29396:29397 unknown command 0 [ 960.958010][T29397] binder: 29396:29397 ioctl c0306201 400078 returned -14 10:20:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 961.009570][T29404] binder: 29399:29404 unknown command 0 10:20:25 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffe}) [ 961.057384][T29404] binder: 29399:29404 ioctl c0306201 400078 returned -14 [ 961.262623][T29410] binder: 29407:29410 unknown command 0 [ 961.295279][T29410] binder: 29407:29410 ioctl c0306201 400078 returned -14 [ 961.295506][T29413] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 961.333843][T29417] binder: 29411:29417 unknown command 0 [ 961.367248][T29417] binder: 29411:29417 ioctl c0306201 400078 returned -14 10:20:27 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00a5001d9f96f5000000aac4aaaaaaaa080045000014000000006a8f1483a9f092a00029a678"], 0x26) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000040)={0x7, 'bond_slave_1\x00', {0x8}, 0x1}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TCGETA(r7, 0x5405, &(0x7f00000000c0)) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 10:20:27 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)) 10:20:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:20:27 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:27 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x9, 0x6}, 'port1\x00', 0x8, 0x1100a, 0x7, 0x7, 0x7, 0x0, 0x80000001, 0x0, 0x1, 0x85}) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000040)=@bpq0='bpq0\x00', 0x10) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$sndmidi(&(0x7f00000003c0)='/dev/snd/midiC#D#\x00', 0x57, 0x300) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000140)={0x0, 0x0, {0x19, 0xc76, 0x0, 0x3}}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r2, 0xc02064a5, &(0x7f00000002c0)={0x7, 0x1, &(0x7f0000000180)=[0x8001], &(0x7f00000001c0)=[0x7, 0x0, 0x200], &(0x7f0000000280)=[0x9, 0x800, 0x3, 0x2, 0x1, 0x8000, 0x7ff, 0x2a9a]}) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) [ 962.474941][T29433] binder: 29428:29433 unknown command 0 [ 962.526461][T29433] binder: 29428:29433 ioctl c0306201 400078 returned -14 [ 962.565700][T29447] binder: 29438:29447 unknown command 0 [ 962.604286][T29450] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 962.613640][T29447] binder: 29438:29447 ioctl c0306201 400078 returned -14 10:20:27 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2}) [ 962.842205][T29461] binder: 29459:29461 unknown command 0 [ 962.895333][T29461] binder: 29459:29461 ioctl c0306201 400078 returned -14 [ 962.911607][T29471] binder: 29463:29471 unknown command 0 10:20:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 962.980247][T29471] binder: 29463:29471 ioctl c0306201 400078 returned -14 10:20:27 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3}) [ 963.231372][T29483] binder: 29481:29483 unknown command 0 [ 963.277186][T29483] binder: 29481:29483 ioctl c0306201 400078 returned -14 [ 963.310910][T29494] binder: 29484:29494 unknown command 0 [ 963.335603][T29482] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 963.351781][T29494] binder: 29484:29494 ioctl c0306201 400078 returned -14 10:20:28 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x82, &(0x7f00000001c0)={r5}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000100)={r5, 0x3, 0x93, "dcb3ab7fba7d0706bd6342840be8a1abdfc6dbf87138ef8ec800d00966d7bd7b1ec6359e663e38a83aac4e1eea87419547071427ebd3540dbbca26fa22ea7f6620a02d80ab8b4920c8914edd583c1293c81d2afd0a1130af6eb14f4e17c1ddf4110b20c885a4caeb499ec643d423e4788d023cf044835dc57f8fce4b0bd1fa4b50000d1563a108d76e5d6b1aee284f279b8796"}, 0x9b) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) 10:20:28 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4}) 10:20:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 963.596957][T29501] binder: 29498:29501 unknown command 0 [ 963.632337][T29501] binder: 29498:29501 ioctl c0306201 400078 returned -14 10:20:28 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5}) 10:20:28 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 963.881913][T29511] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 963.917582][T29517] binder: 29515:29517 unknown command 0 [ 963.962332][T29525] binder: 29518:29525 unknown command 0 [ 963.984335][T29517] binder: 29515:29517 ioctl c0306201 400078 returned -14 [ 964.005256][T29525] binder: 29518:29525 ioctl c0306201 400078 returned -14 10:20:28 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6}) 10:20:28 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) r6 = dup2(r5, r0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r6, 0x4040ae72, &(0x7f00000000c0)={0x9, 0x0, 0x7b, 0x3, 0x9e}) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@val, @void, @eth={@random="9f96f500", @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 964.216333][T29542] binder: 29537:29542 unknown command 0 [ 964.252761][T29542] binder: 29537:29542 ioctl c0306201 400078 returned -14 [ 964.282256][T29549] binder: 29543:29549 unknown command 0 [ 964.327795][T29549] binder: 29543:29549 ioctl c0306201 400078 returned -14 [ 964.378213][T29550] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 10:20:29 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7}) [ 964.531621][T29559] binder: 29556:29559 unknown command 0 [ 964.569311][T29559] binder: 29556:29559 ioctl c0306201 400078 returned -14 [ 964.591666][T29567] binder: 29561:29567 unknown command 0 [ 964.627896][T29567] binder: 29561:29567 ioctl c0306201 400078 returned -14 10:20:29 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x42}) 10:20:29 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x0, 0x806}, @void, @eth={@remote, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 964.883864][T29576] binder: 29574:29576 unknown command 0 [ 964.940638][T29576] binder: 29574:29576 ioctl c0306201 400078 returned -14 10:20:29 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1ec}) [ 965.196413][T29595] binder: 29590:29595 unknown command 0 [ 965.240885][T29588] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 965.248994][T29595] binder: 29590:29595 ioctl c0306201 400078 returned -14 10:20:30 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) [ 965.328840][T29607] binder: 29590:29607 unknown command 0 [ 965.379045][T29607] binder: 29590:29607 ioctl c0306201 400078 returned -14 10:20:30 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x300}) 10:20:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 965.714481][T29615] binder: 29613:29615 unknown command 0 [ 965.741526][T29615] binder: 29613:29615 ioctl c0306201 400078 returned -14 [ 965.780654][T29622] binder: 29617:29622 unknown command 0 [ 965.821804][T29622] binder: 29617:29622 ioctl c0306201 400078 returned -14 10:20:30 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x500}) [ 965.910297][T29630] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 966.099681][T29635] binder: 29631:29635 unknown command 0 10:20:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81136c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) [ 966.159665][T29635] binder: 29631:29635 ioctl c0306201 400078 returned -14 10:20:30 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x600}) [ 966.341418][T29645] binder: 29643:29645 unknown command 0 [ 966.374033][T29645] binder: 29643:29645 ioctl c0306201 400078 returned -14 10:20:31 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x700}) [ 966.391601][T29652] binder: 29646:29652 unknown command 0 [ 966.414267][T29652] binder: 29646:29652 ioctl c0306201 400078 returned -14 [ 966.473209][T29647] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 966.605633][T29657] binder: 29656:29657 unknown command 0 10:20:31 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="00009200010408000400020003009f96f5000000aaaaaaaaaaaa08004500001400000000002964b1832d7306375b0001"], 0x30) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000002000000faffffffffffffff0700000000000000ff07000000000000060000000000000000000000000000000000000000000000000000000000000000000000ff0000000101000000000000ff010000000000000200000000000000840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"/448]) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000040)={0x10004}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) [ 966.657889][T29657] binder: 29656:29657 ioctl c0306201 400078 returned -14 [ 966.685962][T29666] binder: 29658:29666 unknown command 0 10:20:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:20:31 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) [ 966.732385][T29666] binder: 29658:29666 ioctl c0306201 400078 returned -14 10:20:31 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3f00}) [ 966.931172][T29682] binder: 29677:29682 unknown command 0 [ 966.971295][T29682] binder: 29677:29682 ioctl c0306201 400078 returned -14 [ 966.982167][T29690] binder: 29684:29690 unknown command 0 [ 967.011715][T29692] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 967.019146][T29690] binder: 29684:29690 ioctl c0306201 400078 returned -14 10:20:31 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4000}) 10:20:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 967.245610][T29701] binder: 29700:29701 unknown command 0 [ 967.282131][T29701] binder: 29700:29701 ioctl c0306201 400078 returned -14 10:20:31 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4200}) [ 967.475392][T29713] binder: 29711:29713 unknown command 0 [ 967.480808][T29709] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 967.507204][T29713] binder: 29711:29713 ioctl c0306201 400078 returned -14 [ 967.539192][T29720] binder: 29714:29720 unknown command 0 [ 967.615414][T29720] binder: 29714:29720 ioctl c0306201 400078 returned -14 10:20:32 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xec01}) [ 967.810792][T29728] binder: 29727:29728 unknown command 0 [ 967.867684][T29728] binder: 29727:29728 ioctl c0306201 400078 returned -14 [ 967.897487][T29736] binder: 29729:29736 unknown command 0 10:20:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c82f36c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) 10:20:32 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x400000}) [ 967.951023][T29736] binder: 29729:29736 ioctl c0306201 400078 returned -14 [ 968.134557][T29741] binder: 29738:29741 unknown command 0 [ 968.185676][T29741] binder: 29738:29741 ioctl c0306201 400078 returned -14 [ 968.219645][T29750] binder: 29742:29750 unknown command 0 [ 968.260628][T29754] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 968.273016][T29750] binder: 29742:29750 ioctl c0306201 400078 returned -14 10:20:33 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x311001, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fcntl$setlease(r0, 0x400, 0xc75bfabfb5c05606) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) splice(r7, 0x0, r9, 0x0, 0x10003, 0xa) 10:20:33 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80ffff}) 10:20:33 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 10:20:33 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r2, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x0, 0x800) ioctl$SNDCTL_DSP_GETBLKSIZE(r4, 0xc0045004, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x70) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r3, 0x4) [ 968.499637][T29768] binder: 29762:29768 unknown command 0 10:20:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 968.544663][T29768] binder: 29762:29768 ioctl c0306201 400078 returned -14 [ 968.576930][T29779] binder: 29769:29779 unknown command 0 10:20:33 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1000000}) [ 968.614874][T29779] binder: 29769:29779 ioctl c0306201 400078 returned -14 [ 968.765734][T29783] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 968.826238][T29787] binder: 29786:29787 unknown command 0 [ 968.860843][T29787] binder: 29786:29787 ioctl c0306201 400078 returned -14 10:20:33 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2000000}) 10:20:33 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) bind(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x3, 0x2, 0xfffffffd, 0x3, {0xa, 0x4e23, 0x8, @private1, 0x1}}}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$FUSE_NOTIFY_INVAL_ENTRY(r6, &(0x7f0000000040)={0x30, 0x3, 0x0, {0x2, 0xf, 0x0, '.^vboxnet1GPL)^'}}, 0x30) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22, @private=0xa010100}}}, 0x84) r8 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000000340)=0x8, 0x4) [ 968.877370][T29796] binder: 29788:29796 unknown command 0 [ 968.901844][T29796] binder: 29788:29796 ioctl c0306201 400078 returned -14 10:20:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 969.093486][T29800] binder: 29799:29800 unknown command 0 [ 969.126270][T29800] binder: 29799:29800 ioctl c0306201 400078 returned -14 [ 969.136400][T29808] binder: 29802:29808 unknown command 0 10:20:33 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3000000}) [ 969.180822][T29808] binder: 29802:29808 ioctl c0306201 400078 returned -14 10:20:33 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYRES64=r3, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0xd1) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) getpeername$llc(r0, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000280)=0x10) [ 969.372027][T29818] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 969.404028][T29820] binder: 29817:29820 unknown command 0 [ 969.446329][T29820] binder: 29817:29820 ioctl c0306201 400078 returned -14 10:20:34 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4000000}) [ 969.775546][T29834] binder: 29832:29834 unknown command 0 [ 969.808207][T29834] binder: 29832:29834 ioctl c0306201 400078 returned -14 [ 969.845995][T29842] binder: 29835:29842 unknown command 0 [ 969.881665][T29842] binder: 29835:29842 ioctl c0306201 400078 returned -14 10:20:34 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5000000}) 10:20:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81023c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) 10:20:34 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:34 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_buf(r4, 0x0, 0x24, &(0x7f0000000180)=""/195, &(0x7f0000000040)=0xc3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r7) dup(r7) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:34 executing program 4: r0 = socket(0x26, 0x800000003, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_buf(r2, 0x107, 0x1, &(0x7f0000000000)="a2e6fa9a", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fbff944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00015934319700000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) [ 970.105887][T29849] binder: 29845:29849 unknown command 0 [ 970.152519][T29849] binder: 29845:29849 ioctl c0306201 400078 returned -14 [ 970.174841][T29863] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 970.174904][T29862] binder: 29852:29862 unknown command 0 [ 970.302335][T29862] binder: 29852:29862 ioctl c0306201 400078 returned -14 10:20:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:20:35 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6000000}) 10:20:35 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x4800, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000100)=0x6) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind(r4, &(0x7f0000000080)=@llc={0x1a, 0x20, 0x3, 0x6, 0x8, 0xf4, @random="7903a4b8e6d4"}, 0x80) sendto$inet6(r2, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) [ 970.554255][T29881] binder: 29878:29881 unknown command 0 [ 970.591599][T29881] binder: 29878:29881 ioctl c0306201 400078 returned -14 10:20:35 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7000000}) [ 970.635297][T29889] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 10:20:35 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000100)="69690387000000537b191b4ee35130b76b1ea19a37036a117ed32dc58e0ef54feebd0c814ea0e63886a09bc4ff93d8c7375838eba125736e787dff882df1568d9792958c44b5a4aac91fced3c8dd40e952ff1af28eb5eb0fc968cffe1ca8", 0x9e) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) syz_mount_image$vfat(&(0x7f0000001b00)='vfat\x00', &(0x7f0000001540)='./file0\x00', 0x0, 0x4, &(0x7f0000001980)=[{&(0x7f0000001580)="3582605d58c3ec2e1c7621445a6f3f3668dec33c05e13226bb575f87286b7b6d41c9ffc4810021c1b0b36025fc29276c99de65c0a59fcfdfdc3725766d53560e52e5d15ab10c6cf5acfb334b43127f9eb2f48df11154b7f192f72db7bc015706bba16bedc6421db787548caac48d0111f60180d809cd3dc32b9ca61d0a6dbd6a71743a7f04467e1f5968e05bae385fab1968fadb741246c75e46fda4ef93a143dc1c80def89a108e4258c5777d20ef7e75d87d7dbdb1cdcebd87d77e040cdcb9e2ec704d3aebab87616d376f1ea0981278ade5be3fa4de5bdb746c9d69b9c73b10ac2ec492ae1b87ec", 0xe9, 0x3}, {&(0x7f0000001680)="4e54460cdc61edf6687506a038bcade922d4d0ae72ae66fd7c95c62c44945e946f872119e504d7206dcd0e63c66cf017d745c2eb5a6975c641159482bd161e32311c9e5555f1f13b8320d4ddc3f72cd8476102ad2d17f83c106c9968480680ff45522017c8c6cc1ca9f5538a0b8fc046680a1d1c0b87693e4153c9a0dd41bfa1300bf060a6b38372afb16b74b3a21c458d666e9f5b50efae5a2d66668c4dc3b8e2c993da85716e6ca3a94ea6c68363e3a2370dc985d3e1a9558b72de042fc6a407317d3dda83717f723585e17a568db89f7d4fc0", 0xd4, 0x7fffffff}, {&(0x7f0000001780)="2cc410285393e0f8c7bad44c9620df557ed9edd5c02dc532cb86f462cceb744a26c445c200f2fcec0fdf582a8d1f4671e56ee51d6e0e06919d41b5f9be4420ca0827210f8bbd6ce77e7cffcddf49a740ffffce22605025330fa1a201b09b129c2227d8897d1a315365309f535abf79356ea0abe173ba2835690ee43841f37d23b459345e02e7cfa432a108791feac5458bb345078a4900d0cdffdfee1a8cf0b582a6af78dbb4f5e992cb39adf94bc528252c4722fd3eae2495a0daf10c58af016a30cf7261c875332510d7689dda0eb524f327133f2b30cbe680a3d4b9e35b159eb32444e6f1671a67d7f491b8462216d82f281f1d3d", 0xf6, 0x8}, {&(0x7f0000001b40)="df4a6e7c6784b92056598d6d6efd1e63655a4e96d1516ecdb3963585b858f21c3f4c1e9aabe1a29b2c968db2209fbad446b95b320d8448bd2f62228d654ddeb77fdc71e963b9321aadc396a385a4dec0588c2a6e55fbfc1f06daa159f5ac080e0cd887a14611c1a249ad8b4a07e5172d5b760dc7d1cd090c21fb89e19c653e8f8f4114f3f189712b1787cc77fb6510bff0dd371938424035cdd3e71a5b61b7b6f1467c65942b238279215f3da4bf947db2d562b6a12e001ae9629c6ee717a28b7305ef3a2a2398082a8be01d098525635203f854faed9b5fcab3551726a0542b3767403880e9eced0bb30d1110ba6100"/260, 0x104, 0x312}], 0x8c012, &(0x7f0000001880)={[{@shortname_win95='shortname=win95'}, {@uni_xlateno='uni_xlate=0'}, {@fat=@check_normal='check=normal'}, {@shortname_win95='shortname=win95'}, {@shortname_lower='shortname=lower'}, {@rodir='rodir'}], [{@fsname={'fsname', 0x3d, '!nodev-selinuxsecurity$wlan1+wlan1eth1ocpusetuserloselinuxcpusetposix_acl_access'}}, {@dont_appraise='dont_appraise'}, {@obj_role={'obj_role'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x95GPLnodev'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @private=0xa010102, 0x4}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000280)="38a4e218f140c07fbe46d79c983d3e4962db04858f7521df071d08e9928e021b23729a2d8d186463f90e990fafe398c828cac5c38c6424512008daa4a603e09926408e2726ca471a7883b43b285ae3ddcfa6944fffe61ee6be061f261cfc0a86a3b4f49ad7c76316d08f6563e00a4d2180ad752f2a96e2c345a738832e916fef8241785cb045dd4b2755b670981fa6b55035516126c8567858c8dba679c7733c", 0xa0}, {&(0x7f0000000340)="cf868616ea736dd9a12b84d499989a7303b763d8fc3640ec994485113d85020d2112ac727e0aed5ee2b45054ce9115ec2ca4d25b6372a8ef89dc1c249fd47e05d9d22fc6f98ab46773b7f9995bc16129d1c123fe7e4c59bf87726052b3a09ebe7edd53fb4513004278310788c958d067b4ecee2a54c66240bfdb13e0e71b8c8afc5f25270e858ce1051f50a008acc8c36f86f3fbcd2ca0f7935db1bdafa7c189c9d87b9b56f33ac93c748a5224c92daa7a3a32d42e6580641434a5878a318b7c9645b2cb62fa786e442b05cf06a4df4ce0c83104206d6d8e3faab97924e6959b72d467c829c7af5ed5846ce6ac8e9de19cfa6be261da39d678968a8426f99ef73b50954f9eff9fab1cb256da085f2c16e84389e81a6c4e35dada2ed850b3b4e95655e71b441ad8da239daf968f10b2c89c3008fb60c5056fc68941392903b902e4738aee756ab00ff0f0efd6abd4e095ee2320cfac3110540337ac8c7223f8b962bd624971edc5d7bf0fa051a9413830530a22099ff0dc20104bfae5c9b3aad081a67aa416638fcb10bdf8bb472cc24479bd3eb3260919d5c4982bc047352162f674d94908c41054a3274c3148b65a8025a770b8bc0dc8050f45f72b8ac8ab459cbbfbb192753c1dfd5273eee96636100c0c6791d280026200d22d20f2783e0dd9f82d94fe2e077c3d224282a1efac5828d7f8b8e832a25304d965050ded1cc4076741855ae58e75ffd2796854cc8eeef6216f7b0ea51ec6c818bcdd7ebc53c7eeafa69fb8a9d1b215e5284f59fd28e313ed37ab60ec535c08b40d9e19d1880f78e20d5423b57b7608e52ff7895f551a29acc903463e455788b7632c175e2ab01b743a0b421a0bb280880b46250c97fb70c6955e80b2d95f1c4421ddd7ab4e5a43ff7ca0148d4fbed461a0c976dea0d6755402dd16bf5318a72de1988fc6319c16a984373eda718c8cbd328781a85ff3231a725896618498c7047affd1e775d85d79a2b5ccbd50403716cec0835a2f5f318be65077f5b6fcf911335b0a76f0326f313475175e610781517336cdbb3bae93cdf3fac19e259bdaeedff22a63787531a3734fac23fbdfc88f2b89ce3a9897ff393b6feadb4aa3aaa459049adf492434a8edd175861363f1cde7c3815e09348f1fb4c70d2537105ccf5e4c36ee999bb77ab661720f4a28e0759bb92db6b22509e3c46e2e5d8cf30c926a56f02856906abefb6802e6e9620adf926c8b447512f3a55c5477914fe68cae605cf9d9f6ee5057e1da79598cfcfdcbdbb1ed8a73eb8a4cfbdd6519fd1547169bc9cd30e18449ff427748c7ce440897038c6c705b1fc0377830694f2e75c4394aa4aa7a61c1b08663e4455c3943a7675623410a18c8e37f8242a6a8dd608c32fb97742e2bb106ab2ffcb406c0c6b9f2cc7a87cdbb6af0ade55a7f3034259fac11ba6bef1d31226d17fcbed2f2c9c2262028a984e39d1da15c2f5d74290b25bfbab5517a7f3453fbeacee427f947f61d93436ad0ef55319b3ac05178e913351feeda3bc06be32cbcb4b3f514a275339f52ff3ce247c273b0329f9315634f01467aa8a7497aba8d4a691e54bdd28bc586fbbe227e174cb2da3a0a0e21adb17bc6bc1128df0b63c2994515fd484365cbb5fdb95921bc09dc880341c7ccb595b10a69f4827699eccd97a01e93e18f05fb770e2528224a0a30130289b68e1f57fc6cc31beb96207794fa42bb4b7501aefdd07f6fb14175d28846e5e4961fbb5588c9442dcf90645bc85f2096d0f566b1c22cfc72751504a006088946bb081f68f39b8a5c40b969d21374e52335f0bdc1e3d1349362cbe2414b95c5ad5d436ab9ce3c26f1101e5d4116c05728ecadb56122f3803e1081d9b1bf394b62c39a23f25829789db95a035f866510511fb27f6a65a855bb96766ffeb020b776511baf7c6413917c63b4587866e600dfc38ff42cdf2dcf49e340e17af3c8ba54fa9e607c2f1f8a959e6ca34bf59fabb09021849f7f63893e6f31139b837760523a35599f342a0133a7f3bc748392e9755111f5960a4cc497aa359ca3cf9106ce7c1fd49c9865cdfe4d7eb3b5c92c7c04709ff029368ed84f6061a9141cf04eba4d9b5b8e5c5d2c7849a72fc62a69215e3d231bb920637a31b8427beea8c43d86b0cd0aaec85df5c9a257994e9f4980d10e8a4c2800f728f7cd9cd9290a8ca54e72636581fb2d76de0ec38d93c7af790b0a97871220245f67fc28e740c19903fdd1c90d41941e8af56c3b33e05def3500688461dde525a4006a75c5f30d6bc08f8253d81f177762c1aab3a8916cc81c764844e572a2843c3b004652761ac2165d53ed9b19eb9ae221c363743475de979f7bf3e55799c262f5658ec1d5e63060fd287a35babe6d3ec5ffda144058382a5667dcab8c3f872a3d16efb53025b6327c8ab461f6dc85f56be125ef29ee39b05a8b4eaa9a239324f07d64cb658f03368a261d516bf0f39f012e6cc46cae61054c02900027435a16869a06b00c4f2daae82bf2b9cdc38a58fca7522f488648e2d06740d30626d6821eeced61c961a2d2365f2de14895c313138dee136d244d48f0c4741262517a9d2820849615d9ad94102ac6ec0fdb64522ef76084afa0e230d4f2387bd06e9091000a71dc3ae9e635f10888ec55796f82e5b9d447d868f28ff5803f15bbf04b0ac58d8df4f42632757ab9b3feb3afc9764c595d88693671eb030a094ebd0d6cd8f3a39d14346dc1405a3a9fe63e8112601c4f69ed483af6817fb0a8e49a621428d43c6ed9c5600fae7c7217590fa0d0038df26f681b172595f60c7fe14123acced8acc29fe2f2a88daaf9eccadab9ae28c35d21b0c0053ab4c6acaabdd1cf7a310e33410748e40fb440825c303551458dbe79577b349e38a2fcfa2088c31a8721023143f5ffd98d175ef03cdd6b6cf4d5d09d9fa22af5dea643d6505718d66e12737437022f5e7207958c20036fc07df3e7cf4f4ac07efa0bd133467f0c7355960a71724e2c73dd68e0a2fde6432d645a3457a3bf7b8369b8437b54b0ec4ca1664f8193fd51650d410159e5c110e9672a19891a20bca4a03d801140c51ed70f307274409d49023a6fbdcd184ae2dc9762452fd77d7123a3c1a9df9b7dcb642512ca91145cfab4fb8604d388c7fc11c5d6d387e4ff458d7d85f7c05789fb93dc0b03d345e582de2d82e9e3a798cddb06ce923b21f715c18948099edf44649c1ca38e511ef696f16638dd40e1647b3e0d3f30e848815f800f651b1d2de96fbc7b83a4ad2f87a0ebd1b52db05b1765490ff30228216de33889e8a3ad9bd701ff90e553346805312e2b68cc6128bc470b766f41df39a4b09163bf0a268d4747c9d6048eed805b9aed29e337c4ec134297cc523d5ca1bbd57556aecf2175030d19b0824621b96d211d56a018715d9d45b060b4f43d9400219eaefe05766b48128b878f4a9d1f2ffa6938b06846fe50a1832a3d28d2f8f03e2c330e61f548e8b9736d986cb60b1167585994ca31cbf1f63ae60acc9ed8edc5ec43f00643e844b8481c8a63607cd8267703f83eaabe0b39c40a2865615cae1cf4ca318df23164a539b3fa7130505564d701e483a9841ec576fd38f3f73f67318c73e5e885257cc79067e17b9ec10ee26f2f8cd832763c8940bf097613164b9ec681c7c2ac919c3a1118e89fc5c8045f8cc534e18f777591af28544274e4290b6ce2f215771ef98bc13d85a382e68289c045a4416656c2998c57957ee568b5fad29025dd574db02ecab8ce848151a094628cb59e0cfee16f01ee801fe6c3e362ffc4997669c87574b4c3d3292c40c45e94a5448a2579da08907f6e5f9ae7dfaef5750ae3aec50ac4f71934af9b2125641b9413b05fdb8c161dcea2f010758795d0119d101ee1b83e97a1368c5f9c2953d22e454aeb04f92d1f7235137d81397cc6b5830a7f70dde348f57c9da6ffa6b1566387fea53d14413d9bf82949aec2790898aac31e265082eb89c7c90854391b2c1277b8714c228e8d663b69609e079b60f4264c30bc72d0664cc3ddbbf8982acc496aaa69455e7841dfaa24c0bcddc5e9d5cfd2c0d3dc12ad53b6a5616b7b1a71a4bf33f6dc9a3798016d6eeb044603982561c16e4fc67f1510fb43ae6d09a0cc88bdd6396eb2f93dbdbbf6a5ef35d81e4b2f6239e3ffe000e641b588ebf4128e6891fb9e251081ea2404b263d0f056c254af6a176dc0a3df940d5ce0f582ccd8d8accfd0c207a2904a57915056f79bbbc964342562e8a5c6a015c3aa7e96a4ec70290f6ebc27699e4c9573205fbec701d133bbb5341784b5afbdd333ad7ba2b5761dc908d011610d861d4f96963dd2e464c57c478ef688aed608ae355b151bd39d62db8f101c8b69f55566a2f619265f1d18bba1b5056bab17c99be538c57e9f5833d10b3bf536da8fb124396a158df4fed65ddcceea982c3b51da751621b4c6cd587856de99520fe546aee5c89d088d578d445973a32a9f7a7c0c30f9e6b53224fe9338abd9063f1e870f59f90ccf22934a6a68d6a9c412265d80bea94ec29e522cbfdaaf74ae085429b69ab1f761f4807d091997b0d1be70c78799e559b09b679516c0da064dfa7513f3c595f0545dfdb5041c81f1d15b5fced9e3f0ea5a287067703306d2ea9446c0fb878de0966986e793d7e330dc2c7176c1b3e5be536d455c5934903da804240e57ba125c7018bf5acc8f1394097b4136b871bcfb5866f8142558d4a4145650c61924bcf1e52c71ad81bd474eb42c9f81b403cb49ec54a46704c09be324dee12b471d1eb58b332362b341e91e3e2c572c5724df1c6bf17cfd7c9af10f283424649a883790294d7191769ea76184dbd7af4f031ee4c91b0410fe917c013091dae3ddab379546aa59712e50aa7c405303fb4208f223d9188c3eb4afc74eeaa3bc4a1e3d9c6f38976e24ed93b6c12202bffa8a2115cc6906b4b474e5b3cf49d32cdeb38be0e9f2d6fd290466875a1c5ef6b8c160ce36bddd1ad4ef72cf7a2e8f165674c818c909a558d3a15432e6d2d1d6fb48e77ca06ffefa8185b8e8641b003124d992a43b81a71db074c6f5341c3d1180ef4d3ddf3448c58e2b8f96b52553d2d3860f6857b622ca2d3a87417a6bb46b147197bb61dd5656801c3de5b0ec00c212a214c1934bbe885f1d39d71f99d49bb45ef598c16a0251ed6b83534a2bc449a7c3ee61b100cfb7f9450a917abefe3dd39af69d5264c7b04d2086bb32ca79313e51451d4544e734c0b2b496e7ad485b76c81570b5359fde2a7d6946e157cf042834ad1d7f18d7efe91b829a5f7a26f497bf355e513606efe67bcb2c09d107486ddf53be1d5ac093f90de888de6fc350390eac72961b17d59061b03f8e9a3ae50511ba6d9d585028853cc51c938c55ec97151e17da685bd117ae50c8e1ef27fa8c95fadedd94f07c039a1d69b9238bc7b9bdbfec55d7e83c33714fcd422f92500545843d913c32fec9abac8068108422acb677fac27f278a3b61405a2c0eb174679bfe7851ca633de958ff6ec1dd5d7784c687d31501911ae294ae767f23bde3f26f715109d92a5d1d7c7e185cc56dfa02187feaba18f9e4dc5219afa5d00fc556f856e7837fd575320b68d56f5e69fbe6411d8f0a9ae84f38804d98bbc68e74a293e7cbfce95902916c6688840daffc5c4c14c9887195d46b840c92c2949f8b8f20f7c5889ea7976585222db0e5a9b79871fe3888385fd0928a8aeab96f49a62de44542b940758803e10c2d80e19d36280d03de46b6e58fdc340313063749a00bd4b18d4f71", 0x1000}, {&(0x7f0000001340)="aa6512eae3ae2285aeabc647e349a4f1e84eedb28d4f697a449da8df2cd4114199f8a9eaa1254a116614bbfa6f5706ed3b7a26aff727da9674cf410367d7fb2b8f93272dfde5adbd4e179fe750c4e4c3a1406489c20e8150166ac354bc1e418fa989e293bc353ed240ac5085529eb888ac13343eb09841811281d7a1dce3271e6494931b5a3c2336eeb3b7c4dad555916ff119c170217c9efa03b1dac823486d72586d318f6142d2982ca836ff3a466d15bfb0b4495756bf4baec6ca5828", 0xbe}], 0x3, &(0x7f0000001400)=ANY=[@ANYBLOB="600000000000000000000000020000002a4f4ff5b8ec4054f72a33e709dd8e447c706c1f824721719702cac06f4255fb78581fa0056d27ed844fe6c56bd52a83f71da5cfaa5ecf638e2c2ce15f403303c35560bcfb8ad76fe3000000000000008800000000000000160100000800000042b2d9712c5c76dd887727b733c4f6016572f2d9864324862b5cccd3b1144b97dd42b3580eb304e4beefb58caaa95e39efaa7b58751655f77143b72df433d8ccc87ee10bfa881489c73f1003c09b3cf951b2de77cc11250d3a84567d3e8db7516863342c7c44c3d244f7f90c4456c8661e885fbec0a2cc00"], 0xe8}, 0x10) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) [ 970.820122][T29898] binder: 29894:29898 unknown command 0 10:20:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c8102bc93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) [ 970.870579][T29898] binder: 29894:29898 ioctl c0306201 400078 returned -14 10:20:35 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3f000000}) 10:20:35 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0xfffffffffffffd56) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = accept(r3, 0x0, &(0x7f0000000140)) connect$bt_l2cap(r4, &(0x7f0000000180)={0x1f, 0x401, @any, 0x0, 0x2}, 0xe) [ 971.184233][T29911] binder: 29909:29911 unknown command 0 [ 971.221022][T29911] binder: 29909:29911 ioctl c0306201 400078 returned -14 [ 971.266503][T29919] binder: 29913:29919 unknown command 0 [ 971.322136][T29919] binder: 29913:29919 ioctl c0306201 400078 returned -14 10:20:36 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x40000000}) [ 971.375968][T29926] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 971.603273][T29932] binder: 29930:29932 unknown command 0 [ 971.664682][T29932] binder: 29930:29932 ioctl c0306201 400078 returned -14 10:20:36 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:36 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x42000000}) 10:20:36 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000040)={'erspan0\x00', {0x2, 0x4e20, @multicast2}}) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) 10:20:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 972.114666][T29944] binder: 29942:29944 unknown command 0 [ 972.143956][T29944] binder: 29942:29944 ioctl c0306201 400078 returned -14 [ 972.158581][T29953] binder: 29948:29953 unknown command 0 [ 972.191497][T29953] binder: 29948:29953 ioctl c0306201 400078 returned -14 10:20:36 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xec010000}) [ 972.279713][T29955] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 10:20:37 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r1) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'bond0\x00', 0x2}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000002ac0)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @val={@val={0x9100, 0x0, 0x0, 0x2}, {0x8100, 0x1, 0x1, 0xfff}}, {@mpls_uc={0x8847, {[{0x200, 0x0, 0x1}], @generic="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"}}}}}, 0x101a) write(r0, &(0x7f0000001180)="276f73aa2b3a2c69e1647719a0f92c6de613ff1445f76fb9483a44b0756f16cfcbe9eec03c1d7690649384ed5a6b47d79bc0ece0138018bbbfe8d48e25c1485c465af3193ba82068cb04fd8f63965e59ba1398f09c296847eac7fcef6bd1d574890cd3a1a194396fd45d1634a6586dd88213f811f03d48bcc9cedb73c8f962f598c0c09816923766c9893a95f62dd5c429260bdd984ffaffa4805a25bf04553535ba61a21990a08bc02daf6ab1559a8bfb25db0a72f546b53763634133bfb4e6c3c96dec9d6223d50bb79bd0a99bb8093217e91e674670b6ded8c56d7ddc4bc0f79ba2b6e54926f9dba938", 0xeb) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002900)={0x2, 0x3f, {}, {0x0}, 0xff, 0xff}) syz_mount_image$gfs2(&(0x7f00000000c0)='gfs2\x00', &(0x7f0000001280)='./file0\x00', 0x0, 0xa, &(0x7f0000002800)=[{&(0x7f00000012c0)="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", 0x1000, 0x3}, {&(0x7f00000022c0)="e49ba919b3498715c1581f439c53d238c6c05b57f2941123486b3e7ff458a3fefd4e8c4bb32385b943bee6ca0ecc76bc1284ba4a559b2d9a58eb90ff3f51e514716d8e7ea389f0e5bfb92110dd4ea86bc09fdc3072adfb173c98eda29f9d3c0856c4b5b01df0dc5fbf65262056232a91f98a98cff6e8349d61b920131b6b41777e041ed0ebd108294445ad8280f6c95e1104a8ac2170dca60b179fc0b18011557c524d8dc1f6b51b16ba042642bcef682a8231340b1a8d7885e98977fbe5", 0xbe, 0x4}, {&(0x7f0000002380)="78afd0144c99e9cab931ada481d22266e14be8a3caef149cecd495013576733fa66189c98d517bb29f1c1e561b7cdc8e965c4b80e7b3b338a30422bff021a5a64ba790af67a65d0c8469d7fbfa54f0343347a104ccf1b364f8f1394ec978e187a70abe4b0e9a948bb7f225", 0x6b, 0x8}, {&(0x7f0000002400)="84b8bd470692df3b68c1d4409214276502d94cce9f23ac59b05d8b178b764e79afbd20226d9cef2136e9aef8be20b8bbc1716c93b4887d1fb4379bd9c58eb5ad8b0e56c467ed579d9c10c600925e23dad9a83cdeed22d63d27e272abd12e4ff620b235c774362e3c47b2d2d216b6a8abb12643d0912315aaf086517229cbc909c305e1b5efa7e90c6146083e5c0a2910df337e40d7191e2c25a9d3d65dc745e2178cf0fbe7aa0f6e7de05e447ed6df745dac93137893aebcb60b780acec86f692c2e33c82c1fd7bec3f88eb7f56f04c2bd24d9ec8318fb800a591e3bf460870fd631c371cd02aa5d782c8d732e83", 0xee, 0xffffffff}, {&(0x7f0000002500)="00ae03fb512eaa067c457af1786af7baebdaa696fe621c76115ee8165c63975203937862e289a89fb3158b404b645d666b3e4b07a4cad4fe643b08dd63bfc06f28e7f74505ea5331db032cafeb880c2c7c1c02c4e78ce8136ff14af421d3346413af20ca10552d8bbe33c4383b1d3e07eb", 0x71, 0x330}, {&(0x7f0000002580)="d346a5c3de9afde78e0244c3b1c0e74a14e5702e5f1e00b53c029019a829c8292c020c13d27b06ebdfd735443ec7729854925c435b96aa29c8a3c22fd06e265c39737cde746d8081890b66eeb28680754b54c4f9a40439095905ccc57d8a80e633590ae80f40e84529c3c210fc7d48a7ad50e8690c79bd866c4da76d0f572322caac3b86335701f9ffafda10ce94f77c1893e9870e0601e4796e90d40b9046d3cc6d3b0a13d841f522738cf879c292469bc995069c75c2839a0889d55030637d329e58e8c73e6638a0f7d9fe1ca06907f990c8b7b2a977b16f", 0xd9, 0x6}, {&(0x7f0000002680)="c744773ffe51ef03a8fb850cd69827ae92fb", 0x12, 0x7}, {&(0x7f00000026c0)="5d257d938e978093d75fca98b7493aacfc679dd4cff2d6fc40e394e41583abdf4d23fc7f733154dec86eee4d14569c8e019146c734381fed93f063b16e8bcceb7136581f176faf7741b4338083791dd599d21125f1205c24aeaaab1abb205353", 0x60, 0x5}, {&(0x7f0000002740), 0x0, 0x905}, {&(0x7f0000002780)="82d096ce418f619c2301f4f57087f18486cdec21dcb0c7e7856a06953123905cc914ec4f27e3141eb2574bf5b138603e7d85b9852c408b8f90279844c41279ef4737ff3e38be7a9bf88c03c8d7d0d0ad18e291bb36e66b331fe29086a6cfe0bf8f6810e4266126ee00a00245406af3acce7b8551cdc8e85494ca39", 0x7b, 0x1000}], 0x20001, &(0x7f0000002a00)=ANY=[@ANYBLOB="7374617466735f70657263656e743d3078303030302b30303030303030303030362c636f6d7f00743d3078303030303030303030303030303030332c6f626a5f757365723d73797a6b616c6c657231002c657569643d64f9828912ce", @ANYRESDEC=r9, @ANYBLOB=',subj_user=/dev/net/tun\x00,\x00']) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 10:20:37 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SMI(r2, 0xaeb7) [ 972.393061][T29968] binder: 29964:29968 unknown command 0 [ 972.459355][T29968] binder: 29964:29968 ioctl c0306201 400078 returned -14 10:20:37 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfeffffff}) 10:20:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81030c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) [ 972.714493][T29989] binder: 29985:29989 unknown command 0 10:20:37 executing program 4: r0 = socket(0x2, 0x800000003, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000100)) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x3ff, 0x6, 0xfff, 0xddde}, 0x8) [ 972.767671][T29989] binder: 29985:29989 ioctl c0306201 400078 returned -14 [ 972.776538][T29996] binder: 29990:29996 unknown command 0 10:20:37 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffff8000}) [ 972.824640][T29996] binder: 29990:29996 ioctl c0306201 400078 returned -14 [ 972.859562][T30002] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 973.032556][T30008] binder: 30007:30008 unknown command 0 [ 973.080265][T30008] binder: 30007:30008 ioctl c0306201 400078 returned -14 [ 973.113132][T30019] binder: 30011:30019 unknown command 0 [ 973.157517][T30019] binder: 30011:30019 ioctl c0306201 400078 returned -14 10:20:37 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) 10:20:38 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 973.449513][T30028] binder: 30027:30028 unknown command 0 [ 973.507988][T30028] binder: 30027:30028 ioctl c0306201 400078 returned -14 [ 973.555240][T30037] binder: 30029:30037 unknown command 0 [ 973.603515][T30037] binder: 30029:30037 ioctl c0306201 400078 returned -14 10:20:38 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)) [ 973.681312][T30045] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 10:20:38 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0x9e18059e97bb64fe, &(0x7f0000000000)="a2e6fa9a", 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r4}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000180)={0x2, [0x4, 0x9]}, 0x8) r6 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x78) sendto$inet6(r2, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) [ 973.830617][T30052] binder: 30048:30052 unknown command 0 [ 973.870500][T30052] binder: 30048:30052 ioctl c0306201 400078 returned -14 10:20:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 973.894492][T30059] binder: 30054:30059 unknown command 0 10:20:38 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) [ 973.945342][T30059] binder: 30054:30059 ioctl c0306201 400078 returned -14 10:20:38 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000980)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x0) write$binfmt_misc(r1, &(0x7f0000000bc0)=ANY=[@ANYRES64=0x0, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRESOCT], @ANYRESHEX, @ANYRES64, @ANYRESOCT, @ANYRESHEX=0x0, @ANYRESDEC=r7], 0x67) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) write$binfmt_elf64(r2, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x8, 0xb2, 0xcc, 0x5, 0x2, 0x6, 0xbc, 0x22f, 0x40, 0x1b8, 0x9, 0x7f, 0x38, 0x1, 0xdb2, 0x101, 0x5}, [{0x7, 0x0, 0xfff, 0x1, 0x4, 0x5, 0x3, 0x200}], "8c93ad428abb78d87a2f8ec7551528996279d8de96119b3d47637121be726bd1353aa9a1ffdde0042a5a74de1c6e39076b4155213df027913a5386799aa88fd17c96cf6b69d41e0905b9fbb46bbd723fadd708c2efa2d71d0364e5130a4633d7f52b0af594f630ba1ab2a7ce0e2b81cc73f04929a75e8c2f0a2761f55761849cb9540c4be8631a327be7253b006a226eeab7c1a6a9fe2b220532892e289d6eb58768bf40a238cb65ceb481fcbb6fb4a3a35ebf003ad234f776c87b0b4a55b879ea2f18ec664b70e0199b45bab4b2b319246295a17b5d6df81a1c7ee01c373d2cabaabec5f0fdabd619c06ca8319b5f", [[], [], [], [], [], []]}, 0x767) [ 974.187867][T30072] binder: 30069:30072 unknown command 0 [ 974.208898][T30074] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 10:20:38 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000100)="a2e6fa9a9345e5998cecb84ed090d5c6bacc6b724777c2551a7b59f3ab793a821e616231c4b6f8458812a818d374563023ec632e9e9a49a59e928d8d40993eab68093e5008715235e2f6af4093dc312b0cc49767c25de95a5393a24edc925961efa69eb56b33e31a13987d6720d4d3143f7f7fa04a8cea31bb3ea6826896225fa978d5e45240", 0x86) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x200, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000000)={0x5b, "0e3dfb4404292e678283c33f395466388271034109a8cb59169a7562527a04d5", 0x0, 0x1}) r2 = socket$pppoe(0x18, 0x1, 0x0) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) [ 974.262457][T30072] binder: 30069:30072 ioctl c0306201 400078 returned -14 [ 974.271923][T30079] binder: 30073:30079 unknown command 0 [ 974.350956][T30079] binder: 30073:30079 ioctl c0306201 400078 returned -14 10:20:39 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 10:20:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 974.592916][T30095] binder: 30094:30095 unknown command 0 [ 974.634253][T30095] binder: 30094:30095 ioctl c0306201 400078 returned -14 [ 974.670006][T30101] binder: 30096:30101 unknown command 0 [ 974.704245][T30101] binder: 30096:30101 ioctl c0306201 400078 returned -14 10:20:39 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 974.957506][T30112] binder: 30110:30112 unknown command 0 10:20:39 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000040)) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000280)={"2786f231f2ead5b5a4d3528ff2af4aa9e9ddbd4c0a3d2ff4a481d3c8cb114ef591c287170c439d2c883a3080dce299be8e79d14e4f5324c5a7c642792d7feb851fef42b1a1a816c720a0a35fa0c99a0e50d496c63f41f36d04769378570082910f06e3eb9084054f6addc99f110daf266134e2d4b1ad7be1928ab861ef9a4b6c92c276cac8bdad9d421bf0c2b021d373fb45889e875401b62f19766779ec8419434ef44722004e9d9b508783a2e0009c43a13b1feb7de70199ed8f6129fa56066057e5dd785a4142a8f200c55eb4fd125fccb25d25c70d650ce66bf7e7739c7a8aaf060735b0aae67ce1062408dbd2ade5e47e47929f1862b3c3e078ab44e88c0772cd82b9e70488cb2a29992cc4c4e8cf87f84e7ac5bb04fc14a9c9fa2a2f7cda78b356462dba3c816f8b6af177ab5687b73eec4d29fb422939bd4e76def07cb6d5403fa69ec5da7a60157d13fa30fe0dd98cae8159d59918380a1d2d9da043f9f0a0eb1f37de90d50cee2bb25286b00162b5a36700ae76c26b3fc60289dcfd0017f4cf8b003643d7b5b2487657f1356b16e7fca22e6077d0b9d2299a02a139c7b43ddefb15f45d159fa15042126737815c73f8a2d75ec725ad44fd505eafc61267a14b91556dacc63ecde3a69a9e847abc4481950386865e45b58ed3f5bc02e4ac23270a655647f5b9da45831179eef127ec4cc315b4a81870fc6e7ac1c524f44633240bc6515f97953dd056e60f9925567f9afa6ff0c3af5fc0abf2d486e145afe8c586f894fa6de0d5426a1e496237b29040d29560e270a7959d8640b28234ba61fac7ed2d43e8274128405bc5983b7a743b6496732038a825cec5200b5885000a7e98560e796c6ac7fccd78468a21b63daa284e2b8212a8d4ba3c01471872897ac2e6052d37b0f3eb1ca89c476a77d1664423b0c5dd0a192ee0c861dc1025aec789a4b8f58117741873f23410f10e5d7b7d20ef83f8d4a818f851c4a4763d6547047ca726c8a4ee4c560a008410faf43b53f90c37ff377fa0bc7ef2063146f1860c3e42a1c9a14f0865afa769b7486c4aaa7b0b1c86606c215431082bbc3de56f0f4c12b250f9a0f39f4e7a5d08c52f661ea1f2c8ea4c27f666cbaced6ff10b34f7f53bb299b6b0251f5fefe6e5adf80c0d8d935da1e0d9d8bdb50698d4123ebac5f07d7cdcc476cb9d7859ed9867b302f49ae04fe006c99fec6d29e8cd0b09fc2e23681f3f4a624151928a09dadf7e4f8544545a0a8e1633c226fdf42002d40d84d7e38aacf19d13c531e858cfcfb075c7ece14757706e4262fa9919fd40b8110ce2e88b403e1f9642daf860eae9b15c48e27a520db921924610927809e2af489ab4fe7f5804c2d4ca4bd774a5d9f308af042b1de933e4b44fdfe7fe8428efc4c7532f4f0eb4eac816146f2772482eed293b9fb972827478a36751e031"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e24, 0x1c4, @mcast1, 0x4}, 0x1c) r7 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r7, 0x80dc5521, &(0x7f0000000100)=""/75) [ 975.000819][T30112] binder: 30110:30112 ioctl c0306201 400078 returned -14 10:20:39 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:39 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 10:20:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c90a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) [ 975.384763][T30131] binder: 30128:30131 unknown command 0 [ 975.431185][T30131] binder: 30128:30131 ioctl c0306201 400078 returned -14 [ 975.457315][T30140] binder: 30132:30140 unknown command 0 10:20:40 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) [ 975.512506][T30140] binder: 30132:30140 ioctl c0306201 400078 returned -14 [ 975.530971][T30133] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 10:20:40 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @dev, @dev}}}}}}, 0x26) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 975.784582][T30157] binder: 30155:30157 unknown command 0 [ 975.823484][T30157] binder: 30155:30157 ioctl c0306201 400078 returned -14 10:20:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 975.847009][T30166] binder: 30158:30166 unknown command 0 10:20:40 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) [ 975.888601][T30166] binder: 30158:30166 ioctl c0306201 400078 returned -14 [ 976.075134][T30172] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 976.092904][T30176] binder: 30174:30176 unknown command 0 [ 976.124276][T30176] binder: 30174:30176 ioctl c0306201 400078 returned -14 10:20:40 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) 10:20:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 976.369822][T30190] binder: 30189:30190 unknown command 0 [ 976.400109][T30190] binder: 30189:30190 ioctl c0306201 400078 returned -14 10:20:41 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1ec}) [ 976.450780][T30197] binder: 30191:30197 unknown command 0 [ 976.474305][T30197] binder: 30191:30197 ioctl c0306201 400078 returned -14 [ 976.645002][T30198] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 976.705862][T30205] binder: 30204:30205 unknown command 0 10:20:41 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x20) clone3(&(0x7f0000001780)={0x0, &(0x7f0000000180)=0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000001540), {0x6}, &(0x7f0000001580)=""/206, 0xce, &(0x7f0000001680)=""/153, &(0x7f0000001740)=[0x0, 0x0], 0x2}, 0x50) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) keyctl$chown(0x4, 0x0, r2, 0xee01) stat(&(0x7f0000001800)='./file0\x00', &(0x7f0000001840)) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) keyctl$chown(0x4, 0x0, r4, 0xee01) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) setgid(r5) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000000280)="348723699c469efa29c26b7f0560cc936c40c0f430305b9e540944f006a7cf2eafb259296f7940457166308400cdac6e9b2d9e229ef183950e7df58f17a86cddf6c7ef16e02b700652f544e1bd42d011ac5297b23af7e43f9fee63925a22d3c680ba70cbf37c8f53bf27bf095829992458bbe5b2c95b884d874de07e320b88f8da76862a", 0x84}, {&(0x7f0000000340)="470f015c2e1490ff99039878021087651f22083238873c4342d827a9d50b6597cf1550830522be587eba7e56e97689650d83b1f9744bbaf6228d0af8a8e05251e5f9b45e897e4770f66dae935fcc328ec709880428ec441b18933d3d19afaa28a575aa9cfd8d3f6d6c22a2c9277e9f5117aab4098116e0499d3e360b6d1838482bb8e2abdf60b6879dbab244eea2c94019245b6216ee894b2a1d050d64a1dab3bbef53cb5b29a70c86aaecf0c7344cd5192796fcfc3f3a3a85858330bab59b88363b", 0xc2}, {&(0x7f0000000440)="9cbf4ecb63dcb69c2521bbf1dc30c73fd77efbf6f33386837c197a704fbaa51b3a20629e2cb6ce529afcedc6c7ca58ad483804a48b0b16e1a565b15a9309f7a455250a0fd3b3d9a1923e69ec1b4050d478d567e93e6c319520b27c697b56cdbe7fcbe4f921f5092b0ef27ba4f3b3410f0967fbde14062a3b73e70021f324ac3cb60dac8c590e4e19c6ed36bc771a80794a568853a977e0056b462979ec0d4d3ca3b781101cbcf52fb419b61be8236d2b0f0eeac2c05dadd2382fa8d0007006373f1aeb787befd142d6347df3e2c934971dc31298cd3c1c6b520e6d2eaa2b94399665c9591e4e5a60a8bd1cb2daaff77974b02413cac363b7e7", 0xf9}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001980)="9fbfb54cd22b59616fdf07aa2e34bfd1912f5a8a82cc8b5a6e3e4f7213ff79b0e4655c88ae850f72acba92f54f407a20da164afd9d40e31d7286dad5f5ff9bdcd4fd363ea3d5f5c93ac651d0a6a1d93e5bf4690f638570d89258bfc4c2bfa8a14adcbf0955ced32d147d2f8f27ca0b3f6085b9f20f253f5a3f68bbc423b73994a61a35cb141b9f0e3d9d71ff32cbcbd170bd9f4441364c98cf9455551a4959fa2d10e5cf6b2513ecf332348fa6d021f58fb64e5934b35f6913d0572f35c8592c6a4fdc5e771f5b4fbf1860d8066f5d9898a35c3546e9c1b749de8d4c057df92380b64e09785686f50080432b988783092b11ca0333ee4bd231a06c5c", 0xfc}, {&(0x7f0000001a80)="788b297c6a2d27f67b38807950422d6bab417f0f07840776380ae10f639574b11b21e54f618faa2d10bd41929609ca6625dd1833e1ba16bc7d3304929dc4ca36deee617c17afa10bfe038c5ff0dd5b62883f00cb1361c7a0e0471ad4fff27ac7da027f9ff949bdaec9878e6f1347dc4a30d5eced43f1a46e8794627f6c5879ed9d6c1fe8a2", 0x85}, {&(0x7f0000001b40)="02843b146247f0159285d5bcb25a1a195798dd50d4e1de2579042204cebb28d5936a042376a47ef47f7eca149c12cea38271d8b2f7414fcbc3fc55ba0215f44ea4cd8bc51a0acda7f7e841b3cebf32cb9b5ab22adead0f10f015a8a4484344c55188627810ea5a456d0ce3531d739264d6186859e9404a49fb07dcd40f010c4344ba3f19bb40acd4198bb89a29d9d881a02f1cf7bdea94caa097410b2a19e00328c0b92995a3680bb157b86efbcf64295a0445d66448ae2594688df613132962541c38e23f4622d5b455f7cf3bbdfba9994f33600ebd3e580248f54d9d3fbb2910bf4fc50334", 0xe6}, {&(0x7f0000001c40)="0a5c0921c6d4171d08d7008313c18c2e9632749bc901161b422757ceadd39ac8b4b71c86e3d06758885e110961e2cde990bc135f8750e4531de9adf776bb1d806d6d3268532c0067ec2ac8e6354d203e5b3dd46a6ae5fcb7", 0x58}], 0x8, &(0x7f0000001d40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88, 0x8800}, 0x20008000) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) [ 976.752935][T30205] binder: 30204:30205 ioctl c0306201 400078 returned -14 [ 976.778387][T30213] binder: 30208:30213 unknown command 0 10:20:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 976.842242][T30213] binder: 30208:30213 ioctl c0306201 400078 returned -14 10:20:41 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:41 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) [ 977.115699][T30226] binder: 30223:30226 unknown command 0 [ 977.142998][T30228] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 10:20:41 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="000000009f96f5000000aaaaaaaaaaaa4801450000140000000000299078ac141400ac141400"], 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x109000, 0x0) lseek(r5, 0x7, 0x1) close(0xffffffffffffffff) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r7, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {r7, 0x10, 0x0, @in6={0xa, 0x4e22, 0x40, @empty, 0x23}}}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 977.162058][T30226] binder: 30223:30226 ioctl c0306201 400078 returned -14 [ 977.182659][T30235] binder: 30227:30235 unknown command 0 [ 977.223442][T30235] binder: 30227:30235 ioctl c0306201 400078 returned -14 10:20:41 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x500}) 10:20:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 977.467657][T30250] binder: 30248:30250 unknown command 0 [ 977.513058][T30250] binder: 30248:30250 ioctl c0306201 400078 returned -14 [ 977.539193][T30258] binder: 30252:30258 unknown command 0 [ 977.554699][T30258] binder: 30252:30258 ioctl c0306201 400078 returned -14 10:20:42 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) 10:20:42 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x30, r2, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'wg1\x00'}}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x6041}, 0x40000) unlink(&(0x7f0000000280)='./file0\x00') [ 977.718492][T30259] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 977.783713][T30268] tipc: Enabling of bearer rejected, failed to enable media [ 977.791626][T30269] binder: 30267:30269 unknown command 0 [ 977.824517][T30269] binder: 30267:30269 ioctl c0306201 400078 returned -14 [ 977.851677][T30279] binder: 30272:30279 unknown command 0 10:20:42 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x700}) [ 977.880080][T30268] tipc: Enabling of bearer rejected, failed to enable media [ 977.900700][T30279] binder: 30272:30279 ioctl c0306201 400078 returned -14 10:20:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:20:42 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) [ 978.114531][T30285] binder: 30283:30285 unknown command 0 [ 978.146218][T30285] binder: 30283:30285 ioctl c0306201 400078 returned -14 [ 978.202378][T30293] binder: 30286:30293 unknown command 0 [ 978.253123][T30293] binder: 30286:30293 ioctl c0306201 400078 returned -14 10:20:42 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}) [ 978.312818][T30298] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 10:20:43 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='veth0_virt_wifi\x00') setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) [ 978.491239][T30307] binder: 30305:30307 unknown command 0 [ 978.524281][T30307] binder: 30305:30307 ioctl c0306201 400078 returned -14 10:20:43 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 978.593644][T30318] binder: 30308:30318 unknown command 0 [ 978.631870][T30318] binder: 30308:30318 ioctl c0306201 400078 returned -14 10:20:43 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}) 10:20:43 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@val, @val={0x0, 0x80, 0x7, 0x97a3, 0xfffc, 0x7}, @eth={@random="9f96f500", @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @dev, @dev}}}}}}, 0x30) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @initdev}, &(0x7f0000000140)=0xc) ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f0000000180)=r9) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000001c0)=0x7, 0x2) 10:20:43 executing program 4: r0 = socket(0x11, 0x800000003, 0x4) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) 10:20:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 978.786623][T30324] binder: 30322:30324 unknown command 0 10:20:43 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4200}) [ 978.829978][T30324] binder: 30322:30324 ioctl c0306201 400078 returned -14 [ 979.066077][T30349] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 979.094699][T30350] binder: 30345:30350 unknown command 0 [ 979.114608][T30350] binder: 30345:30350 ioctl c0306201 400078 returned -14 [ 979.179826][T30357] binder: 30351:30357 unknown command 0 [ 979.235708][T30357] binder: 30351:30357 ioctl c0306201 400078 returned -14 10:20:43 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xec01}) 10:20:43 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$packet_buf(r3, 0x107, 0x1, &(0x7f0000000380)="640f7bb610bc0b4db0644151f970eb88616fe82b91adcbe3e3c23798eb5778f6d1c4eba271ecf0187ed987bf504db51ac54b2c9ea1f8ef2d22daa9ac67c3f86a3ebb0997951529f99ccadb8dd07fc8b2d29ade57f4cb9eaf01f76d153e96f49b6f8066e92bebb42e401f5af0c97d8bb5b34ac14d5ea1904fa1c109464649c6c2240ce47204013dd5e572f89ba4d6029d270e325a41ce019ed9e118d837448a460812c5626d9b335fdaa45184117b33d4fce65b72dfe3f9720ad074966091902542a7030740be452a210bd05aa9dd8b39e83daea020f19f4338e9fa4d00b5658cf4fe4f2dbbbf42f48a06b1f68b5c7bac", 0xf0) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getpeername$netrom(r4, &(0x7f0000000300)={{0x3, @netrom}, [@netrom, @default, @default, @null, @null, @bcast, @netrom, @bcast]}, &(0x7f0000000040)=0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) r6 = fcntl$dupfd(r5, 0x0, r0) ioctl$TIOCSSERIAL(r6, 0x541e, &(0x7f0000000280)={0x3, 0x5, 0x101, 0x3, 0x200, 0xfffff736, 0x1, 0x1, 0x0, 0x7, 0x8, 0x8001, 0x8, 0x7, &(0x7f0000000100)=""/163, 0xaa41, 0x2, 0x1}) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) 10:20:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d45d2a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) [ 979.447857][T30366] binder: 30364:30366 unknown command 0 [ 979.474628][T30366] binder: 30364:30366 ioctl c0306201 400078 returned -14 10:20:44 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}) [ 979.670949][T30375] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 979.753751][T30381] binder: 30380:30381 unknown command 0 [ 979.790303][T30381] binder: 30380:30381 ioctl c0306201 400078 returned -14 [ 979.824154][T30389] binder: 30382:30389 unknown command 0 10:20:44 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000000)="a2e6fa9a", 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000140)={0x1}) bind(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4, 0x3, {0xa, 0x4e22, 0x82, @mcast1, 0x40}}}, 0x80) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'dummy0\x00', {0x3}, 0x400}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x19, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000440)=0xffffffffffffffbb) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x82, &(0x7f00000001c0)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000340)=ANY=[@ANYRES32=r5, @ANYBLOB="f8000000b3346881d87c25f72d2024bddd03df58ed6cbf6c4177019ad8cc9bca45118b7203cbb73733c10977b74866e1c5cd103f81608fc479cbf3d753cd3201aea11d159f15fa34cdac1c3babf544b741b34e6416bffb7f324f1132511c2088e9ad5d06894b8b3b3066ae41e9a5c9dcb95fac8e27b127ab402094d985053999529eb1ca4def9824e466819ef3f8a7f90b4e15832b43efdcf138851ba1dc6b48c2eaf8fffc24c8afafd6c794467266bdfe004cf457e7410ca2f232b1e384dc3a08000000000000005f10ab63a091a83ba637a1e098582de4f4f81cc86ed1cc0d390b33de277c83bb108200"/245], &(0x7f00000001c0)=0x100) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f0000000280)={0x0, @reserved}) dup(r2) dup(r2) 10:20:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4415d763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) [ 979.867009][T30389] binder: 30382:30389 ioctl c0306201 400078 returned -14 [ 980.162548][T30398] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 10:20:44 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:44 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff}) 10:20:45 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000180)={&(0x7f0000000040)=[0x5, 0xffffffff, 0x4c, 0x2, 0x5, 0x1, 0xffff], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x7, 0x7, 0x4b4b4b4b}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:45 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000040)={0x5, 0x10001}) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(0xffffffffffffffff, &(0x7f0000000080)=@isdn={0x22, 0x1f, 0x4, 0x20, 0x2}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) 10:20:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 980.437354][T30412] binder: 30411:30412 unknown command 0 [ 980.484854][T30412] binder: 30411:30412 ioctl c0306201 400078 returned -14 [ 980.497797][T30421] binder: 30413:30421 unknown command 0 [ 980.503394][T30421] binder: 30413:30421 ioctl c0306201 400078 returned -14 10:20:45 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) [ 980.699559][T30431] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 980.743193][T30442] binder: 30440:30442 unknown command 0 [ 980.783357][T30442] binder: 30440:30442 ioctl c0306201 400078 returned -14 10:20:45 executing program 4: r0 = socket(0x11, 0xa, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000500)=0x1) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mq_open(&(0x7f0000000040)='\x18cpuset\x00', 0x800, 0x60, &(0x7f0000000280)={0x4, 0x80000001, 0x2, 0x1000}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvfrom(r4, &(0x7f0000000100)=""/111, 0x6f, 0x10040, &(0x7f0000000180)=@nfc_llcp={0x27, 0x1, 0x0, 0x6, 0x9, 0xc0, "6a97a8e9cc3df5ca090cd1e6d0affcb7cdcd0969480f2ece98c6d9b12026c3fabc7dbce75c358e1d9875311102b2fb4c78cb92552288396450449b58a830d0", 0x1d}, 0x80) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) sendmsg$inet(r5, &(0x7f0000000540)={&(0x7f00000002c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="115eac2a9cd008539e3b118babeb18a1b064793fd3b4f5e842cc57c96cee87ce6b69f918649fa3e23c76e9ab7d5ed299812b89ca54926086096cd34e801f6b3839437a50dc5e8ec07d492c3e6354201f489e47a85129c59b694a55c58dbd0224d4fbdd73a9a98105863781736b053b718806c7ee0db7c8a6d95d14918e591f783f8b5ecc770535ad6bd0134b0d3317d95587c64b1ca426358cc1fb391357f85b78d1420fd87f826c7fa2157f3e6cfe58a7c7f861f71574af026c0ae22e9f84d69023b8536ccd9fdd3dd43185f23aa05b42a02a38214e6ff9f4672c188eb2b22d2816b7", 0xe3}, {&(0x7f0000000400)="ca981fbaa9ec17554a5e94fa4421e62f6227bb3118c66fa033b00c8cda46dffe2ee56e6ef764ca28fa96115edb30cf6e71a2b5c14ad13921274838ce8c2eb42fa63ed1829ad4c9883b61e0b46ae106522b09a8231ee0cfc96882b6e87a040c27afad43d9f8d6b6835dc375f3043b4e2a97d000568f23382295f7bc96df96c2527cf0560c151beaab98b04a", 0x8b}], 0x2, &(0x7f0000000500)}, 0x8094) [ 980.836484][T30451] binder: 30443:30451 unknown command 0 10:20:45 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) [ 980.882890][T30451] binder: 30443:30451 ioctl c0306201 400078 returned -14 10:20:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a253b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) [ 981.073137][T30460] binder: 30456:30460 unknown command 0 [ 981.103655][T30460] binder: 30456:30460 ioctl c0306201 400078 returned -14 [ 981.159508][T30467] binder: 30461:30467 unknown command 0 [ 981.199044][T30467] binder: 30461:30467 ioctl c0306201 400078 returned -14 10:20:45 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) [ 981.243823][T30471] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 10:20:46 executing program 4: r0 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x202002) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000040)={r0, 0xe, 0x87}, &(0x7f0000000100)={'enc=', 'oaep', ' hash=', {'crct10dif-generic\x00'}}, &(0x7f0000000180)="c03d8704126e89050318f6efd524", &(0x7f0000000280)=""/135) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r1, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000340)=[@in6={0xa, 0x4e22, 0x2, @private0, 0x4}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x27}}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfff}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e24, 0x0, @private0, 0x3}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e23, @multicast2}], 0xa4) [ 981.451937][T30477] binder: 30473:30477 unknown command 0 [ 981.489823][T30477] binder: 30473:30477 ioctl c0306201 400078 returned -14 [ 981.516059][T30486] binder: 30479:30486 unknown command 0 [ 981.561619][T30486] binder: 30479:30486 ioctl c0306201 400078 returned -14 10:20:46 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) [ 981.788938][T30493] binder: 30491:30493 unknown command 0 [ 981.843035][T30493] binder: 30491:30493 ioctl c0306201 400078 returned -14 [ 981.873590][T30499] binder: 30494:30499 unknown command 0 [ 981.924447][T30499] binder: 30494:30499 ioctl c0306201 400078 returned -14 10:20:46 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a5c3b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) 10:20:46 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x5}, &(0x7f00000000c0)=0x8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:46 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}) 10:20:46 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x100800) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="8ce69b9a", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000040)=0x9) sendto$inet6(r0, &(0x7f0000000200)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b0644e9ff170099dbe547f481705924fac300000000309662bd845011399e970800d82b330a7da6d0edc542cff0c2d1e327fb132880f7", 0x54, 0x0, 0x0, 0x0) [ 982.136854][T30507] binder: 30506:30507 unknown command 0 [ 982.199736][T30507] binder: 30506:30507 ioctl c0306201 400078 returned -14 10:20:46 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) [ 982.245472][T30509] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 10:20:47 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) r6 = dup2(r5, r0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r6, 0x4040ae72, &(0x7f00000000c0)={0x9, 0x0, 0x7b, 0x3, 0x9e}) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@val, @void, @eth={@random="9f96f500", @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 982.452171][T30537] binder: 30531:30537 unknown command 0 [ 982.506833][T30537] binder: 30531:30537 ioctl c0306201 400078 returned -14 10:20:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 982.561284][T30544] binder: 30538:30544 unknown command 0 [ 982.602018][T30544] binder: 30538:30544 ioctl c0306201 400078 returned -14 10:20:47 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}) [ 982.817559][T30552] binder: 30549:30552 unknown command 0 [ 982.857819][T30552] binder: 30549:30552 ioctl c0306201 400078 returned -14 [ 982.882495][T30557] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 982.898611][T30560] binder: 30554:30560 unknown command 0 10:20:47 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}) [ 982.935703][T30560] binder: 30554:30560 ioctl c0306201 400078 returned -14 [ 983.141784][T30569] binder: 30567:30569 unknown command 0 [ 983.202680][T30569] binder: 30567:30569 ioctl c0306201 400078 returned -14 [ 983.233905][T30577] binder: 30570:30577 unknown command 0 10:20:47 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}) [ 983.271812][T30577] binder: 30570:30577 ioctl c0306201 400078 returned -14 10:20:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 983.463637][T30580] binder: 30578:30580 unknown command 0 [ 983.502455][T30580] binder: 30578:30580 ioctl c0306201 400078 returned -14 [ 983.534469][T30587] binder: 30581:30587 unknown command 0 [ 983.579225][T30587] binder: 30581:30587 ioctl c0306201 400078 returned -14 [ 983.628200][T30590] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 10:20:48 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:48 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x42000000}) 10:20:48 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00a5001d9f96f5000000aac4aaaaaaaa080045000014000000006a8f1483a9f092a00029a678"], 0x26) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000040)={0x7, 'bond_slave_1\x00', {0x8}, 0x1}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TCGETA(r7, 0x5405, &(0x7f00000000c0)) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 10:20:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:20:48 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="000000009f96f5000000aaaaaaaaaaaa08004500001400170a000000000000141400ac141402"], 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 984.229999][T30614] binder: 30602:30614 unknown command 0 [ 984.254345][T30614] binder: 30602:30614 ioctl c0306201 400078 returned -14 [ 984.287017][T30613] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 984.315980][T30622] binder: 30602:30622 unknown command 0 [ 984.365938][T30622] binder: 30602:30622 ioctl c0306201 400078 returned -14 10:20:49 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xec010000}) 10:20:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 984.646360][T30633] binder: 30632:30633 unknown command 0 [ 984.691986][T30633] binder: 30632:30633 ioctl c0306201 400078 returned -14 [ 984.715885][T30641] binder: 30634:30641 unknown command 0 [ 984.754286][T30641] binder: 30634:30641 ioctl c0306201 400078 returned -14 10:20:49 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}) [ 984.838340][T30642] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 10:20:49 executing program 4 (fault-call:9 fault-nth:0): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) [ 984.983147][T30650] binder: 30647:30650 unknown command 0 [ 985.020761][T30650] binder: 30647:30650 ioctl c0306201 400078 returned -14 [ 985.062759][T30661] binder: 30652:30661 unknown command 0 10:20:49 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000}) [ 985.106463][T30661] binder: 30652:30661 ioctl c0306201 400078 returned -14 [ 985.265295][T30663] FAULT_INJECTION: forcing a failure. [ 985.265295][T30663] name failslab, interval 1, probability 0, space 0, times 0 [ 985.311368][T30668] binder: 30665:30668 unknown command 0 [ 985.346535][T30668] binder: 30665:30668 ioctl c0306201 400078 returned -14 [ 985.356002][T30674] binder: 30669:30674 unknown command 0 [ 985.405691][T30663] CPU: 1 PID: 30663 Comm: syz-executor.4 Not tainted 5.7.0-rc1-syzkaller #0 [ 985.414408][T30663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 985.420966][T30674] binder: 30669:30674 ioctl c0306201 400078 returned -14 [ 985.424470][T30663] Call Trace: [ 985.424500][T30663] dump_stack+0x11d/0x187 [ 985.424532][T30663] should_fail.cold+0x5/0xf [ 985.443648][T30663] __should_failslab+0x82/0xb0 [ 985.448427][T30663] should_failslab+0x5/0xf [ 985.453396][T30663] kmem_cache_alloc_trace+0x26/0x5f0 [ 985.458737][T30663] ? ovl_test_flag+0x27/0x30 [ 985.463344][T30663] ovl_iterate+0x4aa/0x6d0 [ 985.467857][T30663] ? security_file_permission+0x86/0x300 [ 985.473561][T30663] iterate_dir+0x152/0x360 [ 985.478099][T30663] __x64_sys_getdents+0x14b/0x2b0 [ 985.483133][T30663] ? fillonedir+0x1c0/0x1c0 [ 985.487656][T30663] do_syscall_64+0xc7/0x3b0 [ 985.492178][T30663] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 985.498085][T30663] RIP: 0033:0x45c829 [ 985.502001][T30663] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 985.521996][T30663] RSP: 002b:00007fd6c108bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 985.530425][T30663] RAX: ffffffffffffffda RBX: 00000000004dc700 RCX: 000000000045c829 [ 985.538433][T30663] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 985.546417][T30663] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 10:20:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:20:50 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) [ 985.554406][T30663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 985.562392][T30663] R13: 00000000000000f1 R14: 00000000004c376a R15: 00007fd6c108c6d4 [ 985.722326][T30678] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 985.760353][T30686] binder: 30682:30686 unknown command 0 [ 985.792322][T30686] binder: 30682:30686 ioctl c0306201 400078 returned -14 [ 985.809127][T30692] binder: 30687:30692 unknown command 0 [ 985.859918][T30692] binder: 30687:30692 ioctl c0306201 400078 returned -14 10:20:50 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:50 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:50 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)) 10:20:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 986.084949][T30705] binder: 30700:30705 unknown command 0 [ 986.131504][T30715] binder: 30707:30715 unknown command 0 [ 986.144208][T30705] binder: 30700:30705 ioctl c0306201 400078 returned -14 [ 986.164839][T30715] binder: 30707:30715 ioctl c0306201 400078 returned -14 10:20:50 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x2]}) [ 986.311535][T30725] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 986.348148][T30726] binder: 30724:30726 unknown command 0 [ 986.380461][T30726] binder: 30724:30726 ioctl c0306201 400078 returned -14 [ 986.406373][T30733] binder: 30727:30733 unknown command 0 10:20:51 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x3]}) [ 986.438880][T30733] binder: 30727:30733 ioctl c0306201 400078 returned -14 10:20:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b05040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) 10:20:51 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) [ 986.652475][T30739] binder: 30738:30739 unknown command 0 [ 986.679287][T30739] binder: 30738:30739 ioctl c0306201 400078 returned -14 [ 986.715465][T30746] binder: 30741:30746 unknown command 0 [ 986.753661][T30746] binder: 30741:30746 ioctl c0306201 400078 returned -14 10:20:51 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x4]}) [ 986.870084][T30752] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 986.994666][T30755] binder: 30753:30755 unknown command 0 [ 987.044912][T30755] binder: 30753:30755 ioctl c0306201 400078 returned -14 [ 987.066987][T30764] binder: 30756:30764 unknown command 0 10:20:51 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x5]}) [ 987.102530][T30764] binder: 30756:30764 ioctl c0306201 400078 returned -14 10:20:51 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x2) [ 987.325905][T30771] binder: 30770:30771 unknown command 0 [ 987.380160][T30771] binder: 30770:30771 ioctl c0306201 400078 returned -14 [ 987.404797][T30777] binder: 30772:30777 unknown command 0 [ 987.446192][T30777] binder: 30772:30777 ioctl c0306201 400078 returned -14 10:20:52 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x6]}) [ 987.609170][T30782] overlayfs: maximum fs stacking depth exceeded 10:20:52 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:52 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)=0x1) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_elf32(r3, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x3f, 0x7f, 0x7, 0x615addbf, 0x3, 0x3e, 0x100, 0x19, 0x38, 0xa, 0x8001, 0x6, 0x20, 0x1, 0x7fff, 0x4, 0x2}, [{0x6, 0xffffffff, 0x6, 0x8, 0xff, 0x541, 0x64, 0x1}], "85c255bf6a47456fb7738b9be1b2675a5be4e5ffd02247b797d84f12686c41199d7ac8e1cb2249a48ef200f3b9997a03e37f73f6024b2f1ce9d1a80ee2c5b6cd91072e916ed737f43fc2b67872a149dc48d8e20d41df41633316dfe72ee1dd1fb2a05913bf198822026f18dae95e26dae93636688979195ca068415464ccb246ddf7801529e5b6287a9d485666f7465d7421b726e462ebc1ee9aac15363a6b6fa47b412fff6ca5ab85672f21b7eefbd6f760cad650ce2c995be307b3065535cdcdb62ca900b0126cae5720769c08cd138d7330e2fcbeed80cd6073aeee38e1ac0cc64891815887", [[], [], [], []]}, 0x53f) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 987.652033][T30779] overlayfs: maximum fs stacking depth exceeded [ 987.746419][T30785] binder: 30784:30785 unknown command 0 10:20:52 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x3) [ 987.816570][T30785] binder: 30784:30785 ioctl c0306201 400078 returned -14 [ 987.855995][T30802] binder: 30790:30802 unknown command 0 10:20:52 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x7]}) [ 987.918913][T30802] binder: 30790:30802 ioctl c0306201 400078 returned -14 [ 987.945768][T30794] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 988.107578][T30816] binder: 30814:30816 unknown command 0 [ 988.141507][T30816] binder: 30814:30816 ioctl c0306201 400078 returned -14 10:20:52 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x42]}) 10:20:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 988.254748][T30825] overlayfs: maximum fs stacking depth exceeded [ 988.292714][T30819] overlayfs: maximum fs stacking depth exceeded [ 988.386920][T30829] binder: 30826:30829 unknown command 0 10:20:53 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x4) 10:20:53 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x1ec]}) [ 988.429328][T30829] binder: 30826:30829 ioctl c0306201 400078 returned -14 [ 988.532022][T30842] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 988.655816][T30846] binder: 30843:30846 unknown command 0 [ 988.693689][T30846] binder: 30843:30846 ioctl c0306201 400078 returned -14 [ 988.731499][T30857] binder: 30848:30857 unknown command 0 [ 988.769942][T30857] binder: 30848:30857 ioctl c0306201 400078 returned -14 10:20:53 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x300]}) [ 988.968322][T30863] binder: 30859:30863 unknown command 0 [ 989.006234][T30863] binder: 30859:30863 ioctl c0306201 400078 returned -14 [ 989.041310][T30869] binder: 30864:30869 unknown command 0 [ 989.081046][T30869] binder: 30864:30869 ioctl c0306201 400078 returned -14 10:20:53 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x500]}) [ 989.179025][T30858] overlayfs: maximum fs stacking depth exceeded [ 989.192475][T30858] overlayfs: maximum fs stacking depth exceeded 10:20:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:20:54 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 989.326355][T30874] binder: 30873:30874 unknown command 0 10:20:54 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x5) [ 989.375916][T30881] binder: 30875:30881 unknown command 0 [ 989.388457][T30874] binder: 30873:30874 ioctl c0306201 400078 returned -14 10:20:54 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x600]}) [ 989.424858][T30881] binder: 30875:30881 ioctl c0306201 400078 returned -14 [ 989.529865][T30882] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 989.651686][T30889] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 989.685704][T30903] binder: 30897:30903 unknown command 0 10:20:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 989.745970][T30903] binder: 30897:30903 ioctl c0306201 400078 returned -14 [ 989.778226][T30912] binder: 30904:30912 unknown command 0 [ 989.786139][T30910] overlayfs: maximum fs stacking depth exceeded [ 989.821787][T30912] binder: 30904:30912 ioctl c0306201 400078 returned -14 [ 989.831905][T30900] overlayfs: maximum fs stacking depth exceeded 10:20:54 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x700]}) 10:20:54 executing program 2: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) 10:20:54 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x6) [ 990.058404][T30923] binder: 30920:30923 unknown command 0 [ 990.062967][T30924] binder: 30922:30924 unknown command 0 [ 990.066460][T30925] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 990.114531][T30924] binder: 30922:30924 ioctl c0306201 400078 returned -14 [ 990.118357][T30923] binder: 30920:30923 ioctl c0306201 400078 returned -14 [ 990.127368][T30934] binder: 30927:30934 unknown command 0 10:20:54 executing program 2: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) [ 990.171172][T30934] binder: 30927:30934 ioctl c0306201 400078 returned -14 10:20:54 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x3f00]}) 10:20:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 990.382436][T30949] binder: 30947:30949 unknown command 0 [ 990.422358][T30949] binder: 30947:30949 ioctl c0306201 400078 returned -14 10:20:55 executing program 2: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1cf) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b04b030400000000000092290a7e4555a763c15ceda085e276ed3ae7a290ab0e74467713328b5e4577124d1a2e21da765cd1ce2356a8f87e56f0bf8893cc7149595314f0771b65d33e129933dd93f99f03cd6b3e5903e1ddb592a67f706eb14c1d3d1a204fe2e9c50d7920f69e068d2c7faba4084e7a3b0c6c699890e19745ba9a37cfdd7ff58b659bbf65d6a2b2e441a0e0c44a3d9abeb7d90f0d01107d0e077d0d67090000000022c36fac7585"], 0xbd) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x20, 0x32190, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'L+', 0x3f}, 0x16, 0x0) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0xdc2b, 0x0) futex(&(0x7f0000000000)=0x2, 0x9, 0x2, 0x0, 0x0, 0x1) unlink(&(0x7f0000000040)='./file0/file0\x00') [ 990.483096][T30954] binder: 30948:30954 unknown command 0 [ 990.531956][T30954] binder: 30948:30954 ioctl c0306201 400078 returned -14 [ 990.553075][T30960] overlayfs: maximum fs stacking depth exceeded [ 990.562736][T30963] binder: 30955:30963 unknown command 0 [ 990.572329][T30946] overlayfs: maximum fs stacking depth exceeded [ 990.638390][T30963] binder: 30955:30963 ioctl c0306201 400078 returned -14 [ 990.801127][T30970] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 10:20:55 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:55 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x4000]}) 10:20:55 executing program 2: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/298], 0x121) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000000)={&(0x7f0000000300)=""/68, 0x44}) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x51) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) r2 = creat(0x0, 0x10) bind$unix(r2, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3fc0000000000000, 0x0) 10:20:55 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x7) 10:20:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b4c040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) [ 991.062042][T30985] binder: 30982:30985 unknown command 0 [ 991.111272][T30985] binder: 30982:30985 ioctl c0306201 400078 returned -14 10:20:55 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x4200]}) [ 991.256049][T30993] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 991.335486][T31005] overlayfs: maximum fs stacking depth exceeded [ 991.381166][T30995] overlayfs: maximum fs stacking depth exceeded [ 991.429920][T31013] binder: 31006:31013 unknown command 0 [ 991.480338][T31013] binder: 31006:31013 ioctl c0306201 400078 returned -14 [ 991.508795][T31019] binder: 31014:31019 unknown command 0 10:20:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 991.592202][T31019] binder: 31014:31019 ioctl c0306201 400078 returned -14 10:20:56 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xec01]}) 10:20:56 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x8) [ 991.893506][T31024] binder: 31021:31024 unknown command 0 [ 991.938175][T31024] binder: 31021:31024 ioctl c0306201 400078 returned -14 [ 991.942365][T31022] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 991.950995][T31035] binder: 31027:31035 unknown command 0 [ 991.981268][ T26] audit: type=1804 audit(1587637256.634:101): pid=30994 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir784163862/syzkaller.H2XfT9/355/file0" dev="sda1" ino=16883 res=1 [ 992.105243][T31035] binder: 31027:31035 ioctl c0306201 400078 returned -14 10:20:56 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x400000]}) 10:20:56 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e23, @rand_addr=0x10001}, {0x2, 0x4e24, @rand_addr=0x1ff}, 0xc, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)='veth1_vlan\x00', 0x7fe00000000000, 0x6, 0x4}) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) r1 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x81040, 0x0) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000000240)) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="5b643a3a5d2c303a3a00f980f100009885ccbb3c3aeead2e22c90fef072256e00e67010000803b5d2fcf887ffa7f0ec00b74473a06025b5a64b0491236a3645b3cb24200b5a1c6aafda946ebf888518b9b1ad3e4a3b1caa195a69561039f6e107eafa89021a7503aaec0b01542ab5bd2d23e04b258634bd7d4c9d2488ad379fadccbfda227bd28f64d155039b07f843118590f6daf256b5f0876a20b9c01607839eaecf5034b7d6979a3686a0feeac04a641cd5e133437fd1514c1c9bb0000"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x1000000c8) accept4$rose(r4, &(0x7f0000000080)=@short={0xb, @dev, @netrom, 0x1, @null}, &(0x7f0000000140)=0x1c, 0x80000) [ 992.348473][T31036] overlayfs: maximum fs stacking depth exceeded [ 992.369785][T31029] overlayfs: maximum fs stacking depth exceeded [ 992.430997][T31051] binder: 31048:31051 unknown command 0 [ 992.475067][T31052] binder: 31052:31052 unknown command 0 [ 992.512065][T31052] binder: 31052:31052 ioctl c0306201 400078 returned -14 10:20:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b68040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) 10:20:57 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:20:57 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x48) [ 992.529238][T31051] binder: 31048:31051 ioctl c0306201 400078 returned -14 10:20:57 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x80ffff]}) [ 992.770732][T31063] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 992.841758][T31070] binder: 31067:31070 unknown command 0 [ 992.925630][T31070] binder: 31067:31070 ioctl c0306201 400078 returned -14 [ 992.934181][T31084] binder: 31073:31084 unknown command 0 [ 993.001195][T31084] binder: 31073:31084 ioctl c0306201 400078 returned -14 [ 993.005248][T31088] overlayfs: maximum fs stacking depth exceeded 10:20:57 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x1000000]}) [ 993.051148][T31074] overlayfs: maximum fs stacking depth exceeded 10:20:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b6c040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) 10:20:57 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x4c) [ 993.295112][T31093] binder: 31092:31093 unknown command 0 [ 993.367994][T31093] binder: 31092:31093 ioctl c0306201 400078 returned -14 [ 993.390171][T31100] binder: 31094:31100 unknown command 0 [ 993.447713][T31100] binder: 31094:31100 ioctl c0306201 400078 returned -14 10:20:58 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x2000000]}) [ 993.548449][T31109] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 993.717915][T31112] overlayfs: maximum fs stacking depth exceeded [ 993.725301][T31108] overlayfs: maximum fs stacking depth exceeded [ 993.737423][T31114] binder: 31111:31114 unknown command 0 [ 993.798730][T31114] binder: 31111:31114 ioctl c0306201 400078 returned -14 [ 993.816441][T31124] binder: 31115:31124 unknown command 0 [ 993.866157][T31124] binder: 31115:31124 ioctl c0306201 400078 returned -14 10:20:58 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x3000000]}) [ 994.096264][T31131] binder: 31128:31131 unknown command 0 10:20:58 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x68) 10:20:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 994.172519][T31131] binder: 31128:31131 ioctl c0306201 400078 returned -14 [ 994.178505][T31137] binder: 31132:31137 unknown command 0 [ 994.194043][T31137] binder: 31132:31137 ioctl c0306201 400078 returned -14 [ 994.386273][T31143] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 994.579565][T31152] overlayfs: maximum fs stacking depth exceeded [ 994.624925][T31148] overlayfs: maximum fs stacking depth exceeded [ 995.464932][T31061] libceph: resolve '0' (ret=-3): failed [ 995.506982][T31061] libceph: Failed to parse monitor IPs: -3 10:21:03 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e23, @rand_addr=0x10001}, {0x2, 0x4e24, @rand_addr=0x1ff}, 0xc, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)='veth1_vlan\x00', 0x7fe00000000000, 0x6, 0x4}) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) r1 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x81040, 0x0) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000000240)) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="5b643a3a5d2c303a3a00f980f100009885ccbb3c3aeead2e22c90fef072256e00e67010000803b5d2fcf887ffa7f0ec00b74473a06025b5a64b0491236a3645b3cb24200b5a1c6aafda946ebf888518b9b1ad3e4a3b1caa195a69561039f6e107eafa89021a7503aaec0b01542ab5bd2d23e04b258634bd7d4c9d2488ad379fadccbfda227bd28f64d155039b07f843118590f6daf256b5f0876a20b9c01607839eaecf5034b7d6979a3686a0feeac04a641cd5e133437fd1514c1c9bb0000"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x1000000c8) accept4$rose(r4, &(0x7f0000000080)=@short={0xb, @dev, @netrom, 0x1, @null}, &(0x7f0000000140)=0x1c, 0x80000) 10:21:03 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:21:03 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x4000000]}) 10:21:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:21:03 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x6c) 10:21:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x982521ec5841a5ef) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000180)="09bb06d30dec85a1f8f5be242856c93d5f900d68e5356be372abd9f56ac339facab414df0c596c29321ea6c7c2490d11ad2997bcb4857fe2f20bc7ecd4c9195188f4e99d6aa0073bef537f5ae642144a10de595c6b4d37f42aecec9845d70eb1420589f7b1da0cd745f0bfae1f0c22e3e3fc59ff2d34d6752ad53a57287a35931f6db8104e012512480298d4ed5e05fd", 0x90, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000240)={r1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x9}) ppoll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x1}], 0x1, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000300)={[0x8]}, 0x8) [ 999.101846][T31171] binder: 31164:31171 unknown command 0 [ 999.132929][T31174] binder: 31165:31174 unknown command 0 10:21:03 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000080)=0x6, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in6, @in=@broadcast}}, {{@in6=@mcast2}, 0x0, @in6=@private2}}, &(0x7f0000000040)=0xe8) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_uring_setup(0xf50, &(0x7f0000000100)) [ 999.154969][T31171] binder: 31164:31171 ioctl c0306201 400078 returned -14 [ 999.181098][T31185] binder: 31172:31185 unknown command 0 [ 999.185607][T31174] binder: 31165:31174 ioctl c0306201 400078 returned -14 [ 999.226771][T31191] overlayfs: maximum fs stacking depth exceeded [ 999.243770][T31185] binder: 31172:31185 ioctl c0306201 400078 returned -14 10:21:03 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x5000000]}) [ 999.271940][T31170] overlayfs: maximum fs stacking depth exceeded 10:21:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:21:04 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x74) 10:21:04 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000180)={0x40000000, 0x1, "ac53fb52ac051ee6553b8d75cc86030e1212148f723737268f57d1b2474bc362", 0x5, 0xffffffffffffff52, 0x7, 0x9, 0x67, 0x0, 0x4, 0x6, [0x1, 0x7, 0xb23, 0x6]}) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0xf50, &(0x7f0000000100)) [ 999.485030][T31201] binder: 31199:31201 unknown command 0 [ 999.545253][T31201] binder: 31199:31201 ioctl c0306201 400078 returned -14 [ 999.578658][T31210] binder: 31202:31210 unknown command 0 10:21:04 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x6000000]}) [ 999.625604][T31210] binder: 31202:31210 ioctl c0306201 400078 returned -14 [ 999.723675][T31212] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 999.743272][T31217] binder: 31213:31217 unknown command 0 [ 999.758169][T31217] binder: 31213:31217 ioctl c0306201 400078 returned -14 [ 999.799339][T31226] overlayfs: maximum fs stacking depth exceeded [ 999.844913][T31216] overlayfs: maximum fs stacking depth exceeded [ 999.877381][T31230] binder: 31223:31230 unknown command 0 [ 999.939366][T31230] binder: 31223:31230 ioctl c0306201 400078 returned -14 [ 999.974044][T31239] binder: 31232:31239 unknown command 0 [ 1000.029442][T31239] binder: 31232:31239 ioctl c0306201 400078 returned -14 10:21:11 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e23, @rand_addr=0x10001}, {0x2, 0x4e24, @rand_addr=0x1ff}, 0xc, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)='veth1_vlan\x00', 0x7fe00000000000, 0x6, 0x4}) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) r1 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x81040, 0x0) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000000240)) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="5b643a3a5d2c303a3a00f980f100009885ccbb3c3aeead2e22c90fef072256e00e67010000803b5d2fcf887ffa7f0ec00b74473a06025b5a64b0491236a3645b3cb24200b5a1c6aafda946ebf888518b9b1ad3e4a3b1caa195a69561039f6e107eafa89021a7503aaec0b01542ab5bd2d23e04b258634bd7d4c9d2488ad379fadccbfda227bd28f64d155039b07f843118590f6daf256b5f0876a20b9c01607839eaecf5034b7d6979a3686a0feeac04a641cd5e133437fd1514c1c9bb0000"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x1000000c8) accept4$rose(r4, &(0x7f0000000080)=@short={0xb, @dev, @netrom, 0x1, @null}, &(0x7f0000000140)=0x1c, 0x80000) 10:21:11 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000000000000010000000000000069623a77673100"/38], 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x24, r4, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x7}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x44801) clone(0x3a3dd400a4859b01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0x220, &(0x7f0000000100)={0x0, 0x0, 0x5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_ASSIGN_SET_MSIX_NR(r8, 0x4008ae73, &(0x7f0000000200)={0x80, 0x6}) 10:21:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:21:11 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x7000000]}) 10:21:11 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x7a) 10:21:11 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1007.252998][T31278] binder: 31274:31278 unknown command 0 [ 1007.306052][T31278] binder: 31274:31278 ioctl c0306201 400078 returned -14 [ 1007.343125][T31292] binder: 31282:31292 unknown command 0 [ 1007.361966][T31295] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1007.379472][T31294] overlayfs: maximum fs stacking depth exceeded [ 1007.392041][T31292] binder: 31282:31292 ioctl c0306201 400078 returned -14 10:21:12 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x3f000000]}) [ 1007.407258][T31277] overlayfs: maximum fs stacking depth exceeded 10:21:12 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, r5, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e15}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x246a21a5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70e374bd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5013}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1ae3}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29ab097e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d69d35c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb510fb2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x738237fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe1d1}]}]}]}, 0x70}}, 0x40010) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0xf50, &(0x7f0000000100)) 10:21:12 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x300) [ 1007.614338][T31308] binder: 31305:31308 unknown command 0 [ 1007.651994][T31308] binder: 31305:31308 ioctl c0306201 400078 returned -14 [ 1007.654332][T31309] binder: 31306:31309 unknown command 0 [ 1007.673797][T31316] binder: 31310:31316 unknown command 0 [ 1007.711253][T31316] binder: 31310:31316 ioctl c0306201 400078 returned -14 10:21:12 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x40000000]}) 10:21:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 1007.732009][T31309] binder: 31306:31309 ioctl c0306201 400078 returned -14 [ 1007.932222][T31327] binder: 31324:31327 unknown command 0 10:21:12 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0xf50, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @multicast2}, &(0x7f0000000080)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', r7}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) prctl$PR_GET_THP_DISABLE(0x2a) ioctl$TIOCSCTTY(r9, 0x540e, 0x0) [ 1007.987176][T31327] binder: 31324:31327 ioctl c0306201 400078 returned -14 [ 1008.019261][T31332] overlayfs: maximum fs stacking depth exceeded [ 1008.024701][T31336] binder: 31328:31336 unknown command 0 [ 1008.052701][T31325] overlayfs: maximum fs stacking depth exceeded [ 1008.093146][T31336] binder: 31328:31336 ioctl c0306201 400078 returned -14 [ 1008.134180][T31350] binder: 31340:31350 unknown command 0 [ 1008.186513][T31350] binder: 31340:31350 ioctl c0306201 400078 returned -14 [ 1010.396220][T31296] libceph: resolve '0' (ret=-3): failed [ 1010.402154][T31296] libceph: Failed to parse monitor IPs: -3 10:21:21 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e23, @rand_addr=0x10001}, {0x2, 0x4e24, @rand_addr=0x1ff}, 0xc, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)='veth1_vlan\x00', 0x7fe00000000000, 0x6, 0x4}) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) r1 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x81040, 0x0) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000000240)) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="5b643a3a5d2c303a3a00f980f100009885ccbb3c3aeead2e22c90fef072256e00e67010000803b5d2fcf887ffa7f0ec00b74473a06025b5a64b0491236a3645b3cb24200b5a1c6aafda946ebf888518b9b1ad3e4a3b1caa195a69561039f6e107eafa89021a7503aaec0b01542ab5bd2d23e04b258634bd7d4c9d2488ad379fadccbfda227bd28f64d155039b07f843118590f6daf256b5f0876a20b9c01607839eaecf5034b7d6979a3686a0feeac04a641cd5e133437fd1514c1c9bb0000"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x1000000c8) accept4$rose(r4, &(0x7f0000000080)=@short={0xb, @dev, @netrom, 0x1, @null}, &(0x7f0000000140)=0x1c, 0x80000) 10:21:21 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x42000000]}) 10:21:21 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x500) 10:21:21 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2500, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0xf50, &(0x7f0000000100)) 10:21:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:21:21 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1017.361446][T31403] binder: 31396:31403 unknown command 0 [ 1017.373253][T31402] binder: 31399:31402 unknown command 0 [ 1017.390869][T31402] binder: 31399:31402 ioctl c0306201 400078 returned -14 [ 1017.409810][T31403] binder: 31396:31403 ioctl c0306201 400078 returned -14 [ 1017.435419][T31418] binder: 31408:31418 unknown command 0 [ 1017.477998][T31418] binder: 31408:31418 ioctl c0306201 400078 returned -14 10:21:22 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xec010000]}) 10:21:22 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x7f, 0x2) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0xf50, &(0x7f0000000100)) [ 1017.581847][T31433] overlayfs: maximum fs stacking depth exceeded [ 1017.627631][T31409] overlayfs: maximum fs stacking depth exceeded 10:21:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 1017.681286][T31436] binder: 31434:31436 unknown command 0 [ 1017.703042][T31436] binder: 31434:31436 ioctl c0306201 400078 returned -14 10:21:22 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xfeffffff]}) [ 1017.738107][T31445] binder: 31439:31445 unknown command 0 [ 1017.784423][T31445] binder: 31439:31445 ioctl c0306201 400078 returned -14 10:21:22 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x4}) 10:21:22 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x600) [ 1017.921939][T31455] binder: 31451:31455 unknown command 0 [ 1017.967683][T31455] binder: 31451:31455 ioctl c0306201 400078 returned -14 [ 1018.004552][T31454] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1018.015253][T31464] binder: 31456:31464 unknown command 0 [ 1018.049263][T31465] binder: 31459:31465 unknown command 0 [ 1018.065521][T31464] binder: 31456:31464 ioctl c0306201 400078 returned -14 [ 1018.102168][T31465] binder: 31459:31465 ioctl c0306201 400078 returned -14 [ 1018.431626][T31480] overlayfs: maximum fs stacking depth exceeded [ 1018.443825][T31476] overlayfs: maximum fs stacking depth exceeded 10:21:42 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e23, @rand_addr=0x10001}, {0x2, 0x4e24, @rand_addr=0x1ff}, 0xc, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)='veth1_vlan\x00', 0x7fe00000000000, 0x6, 0x4}) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) r1 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x81040, 0x0) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000000240)) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="5b643a3a5d2c303a3a00f980f100009885ccbb3c3aeead2e22c90fef072256e00e67010000803b5d2fcf887ffa7f0ec00b74473a06025b5a64b0491236a3645b3cb24200b5a1c6aafda946ebf888518b9b1ad3e4a3b1caa195a69561039f6e107eafa89021a7503aaec0b01542ab5bd2d23e04b258634bd7d4c9d2488ad379fadccbfda227bd28f64d155039b07f843118590f6daf256b5f0876a20b9c01607839eaecf5034b7d6979a3686a0feeac04a641cd5e133437fd1514c1c9bb0000"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x1000000c8) 10:21:42 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xffff8000]}) 10:21:42 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000180)=""/4096, 0x1000) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0xf50, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000040)={'nat\x00'}, &(0x7f0000001180)=0x78) 10:21:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:21:42 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:21:42 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x700) [ 1037.791668][T31566] binder: 31562:31566 unknown command 0 [ 1037.824105][T31566] binder: 31562:31566 ioctl c0306201 400078 returned -14 [ 1037.824826][T31567] binder: 31563:31567 unknown command 0 [ 1037.877966][T31577] overlayfs: maximum fs stacking depth exceeded [ 1037.918328][T31564] overlayfs: maximum fs stacking depth exceeded [ 1037.928353][T31585] binder: 31571:31585 unknown command 0 [ 1037.940091][T31567] binder: 31563:31567 ioctl c0306201 400078 returned -14 [ 1037.984808][T31585] binder: 31571:31585 ioctl c0306201 400078 returned -14 10:21:42 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xfffffffe]}) 10:21:42 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0xa2a) 10:21:42 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0xf50, &(0x7f0000000100)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) keyctl$chown(0x4, 0x0, r3, 0xee01) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000180)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@nfs_export_on='nfs_export=on'}], [{@uid_gt={'uid>', r3}}]}) 10:21:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 1038.210137][T31599] binder: 31597:31599 unknown command 0 [ 1038.219887][T31601] binder: 31598:31601 unknown command 0 10:21:42 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)) [ 1038.254495][T31599] binder: 31597:31599 ioctl c0306201 400078 returned -14 [ 1038.260620][T31601] binder: 31598:31601 ioctl c0306201 400078 returned -14 [ 1038.441517][T31615] overlayfs: maximum fs stacking depth exceeded [ 1038.442914][T31616] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1038.461323][T31608] overlayfs: maximum fs stacking depth exceeded 10:21:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x10001, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000180)={0x1, 0x0, {0x8147, 0x7f, 0x1022, 0x4, 0xa, 0x7, 0x2, 0x7}}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0xf50, &(0x7f0000000100)) [ 1038.565092][T31624] binder: 31623:31624 unknown command 0 [ 1038.595495][T31624] binder: 31623:31624 ioctl c0306201 400078 returned -14 [ 1038.628164][T31634] binder: 31626:31634 unknown command 0 [ 1038.686420][T31634] binder: 31626:31634 ioctl c0306201 400078 returned -14 [ 1038.697056][T31639] binder: 31632:31639 unknown command 0 [ 1038.730112][T31639] binder: 31632:31639 ioctl c0306201 400078 returned -14 [ 1038.803111][T31641] binder: 31632:31641 unknown command 0 [ 1038.810017][T31641] binder: 31632:31641 ioctl c0306201 400078 returned -14 [ 1039.162640][T31586] libceph: resolve '0' (ret=-3): failed [ 1039.192280][T31586] libceph: Failed to parse monitor IPs: -3 10:21:44 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}) 10:21:44 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x2a0a) 10:21:44 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0xf50, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PPPIOCATTACH(r4, 0x4004743d, &(0x7f0000000040)=0x2) 10:21:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b038c0000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) 10:21:44 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e23, @rand_addr=0x10001}, {0x2, 0x4e24, @rand_addr=0x1ff}, 0xc, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)='veth1_vlan\x00', 0x7fe00000000000, 0x6, 0x4}) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) r1 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x81040, 0x0) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000000240)) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="5b643a3a5d2c303a3a00f980f100009885ccbb3c3aeead2e22c90fef072256e00e67010000803b5d2fcf887ffa7f0ec00b74473a06025b5a64b0491236a3645b3cb24200b5a1c6aafda946ebf888518b9b1ad3e4a3b1caa195a69561039f6e107eafa89021a7503aaec0b01542ab5bd2d23e04b258634bd7d4c9d2488ad379fadccbfda227bd28f64d155039b07f843118590f6daf256b5f0876a20b9c01607839eaecf5034b7d6979a3686a0feeac04a641cd5e133437fd1514c1c9bb0000"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x1000000c8) 10:21:44 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10005, 0x0) [ 1040.198225][T31663] binder: 31658:31663 unknown command 0 [ 1040.220482][T31667] binder: 31664:31667 unknown command 0 [ 1040.236560][T31663] binder: 31658:31663 ioctl c0306201 400078 returned -14 [ 1040.274489][T31667] binder: 31664:31667 ioctl c0306201 400078 returned -14 [ 1040.289173][T31668] binder: 31662:31668 unknown command 0 10:21:45 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3]}) [ 1040.338221][T31668] binder: 31662:31668 ioctl c0306201 400078 returned -14 [ 1040.375173][T31670] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1040.389285][T31681] overlayfs: maximum fs stacking depth exceeded [ 1040.438382][T31665] overlayfs: maximum fs stacking depth exceeded 10:21:45 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x4800) [ 1040.598978][T31697] binder: 31693:31697 unknown command 0 10:21:45 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x82, &(0x7f00000001c0)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={r4, 0x8ec}, &(0x7f0000000080)=0x8) r5 = fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0xc0306201, 0x400078) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r7) r8 = dup(r7) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r8, 0xc2604111, &(0x7f0000000180)={0x99, [[0x101, 0x7, 0x5, 0xae6a, 0x5, 0x2, 0xefc, 0x2], [0x6, 0x5, 0x1, 0x400, 0x2, 0x1, 0x0, 0x9], [0x9, 0x2, 0xff, 0x8, 0x1, 0x3f, 0x777f, 0x9c2a]], [], [{0x9, 0x20, 0x0, 0x0, 0x1}, {0x4, 0x5, 0x0, 0x1, 0x0, 0x1}, {0x80000000, 0x6, 0x0, 0x0, 0x0, 0x1}, {0xa6dc0c4, 0x6, 0x0, 0x1}, {0x1, 0xffffff63, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x1}, {0x7, 0x8, 0x0, 0x1}, {0x5, 0x7fff, 0x0, 0x1, 0x1, 0x1}, {0x1000, 0xd381, 0x0, 0x0, 0x1}, {0x1e, 0x10000, 0x0, 0x0, 0x1, 0x1}, {0x3, 0x9, 0x0, 0x1, 0x0, 0x1}, {0xab1d, 0x4, 0x1, 0x0, 0x1, 0x1}], [], 0x6}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) io_uring_setup(0xf50, &(0x7f0000000100)) [ 1040.649170][T31700] binder: 31698:31700 unknown command 0 [ 1040.665963][T31697] binder: 31693:31697 ioctl c0306201 400078 returned -14 10:21:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:21:45 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x4]}) [ 1040.698752][T31700] binder: 31698:31700 ioctl c0306201 400078 returned -14 [ 1040.843702][T31703] binder: 31701:31703 unknown command 0 [ 1040.885686][T31703] binder: 31701:31703 ioctl c0306201 400078 returned -14 [ 1040.978724][T31716] binder: 31708:31716 unknown command 0 [ 1041.006934][T31707] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1041.014583][T31716] binder: 31708:31716 ioctl c0306201 400078 returned -14 [ 1041.018470][T31720] binder: 31717:31720 unknown command 0 [ 1041.041395][T31718] overlayfs: maximum fs stacking depth exceeded 10:21:45 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x5]}) [ 1041.083495][T31706] overlayfs: maximum fs stacking depth exceeded [ 1041.104328][T31720] binder: 31717:31720 ioctl c0306201 400078 returned -14 10:21:45 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000080)) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = semget$private(0x0, 0x2, 0x0) semop(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000180)=""/4096) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000001180)=0x7fff, &(0x7f00000011c0)=0x4) io_uring_setup(0xf50, &(0x7f0000000100)) 10:21:46 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x4c00) [ 1041.325119][T31730] binder: 31729:31730 unknown command 0 [ 1041.389335][T31730] binder: 31729:31730 ioctl c0306201 400078 returned -14 [ 1041.450727][T31734] binder: 31732:31734 unknown command 0 10:21:46 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000040)={0x1, 0x8}) r3 = fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd400f3293681, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_uring_setup(0xf50, &(0x7f0000000100)) [ 1041.497309][T31734] binder: 31732:31734 ioctl c0306201 400078 returned -14 10:21:46 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x6]}) [ 1041.820358][T31749] binder: 31747:31749 unknown command 0 [ 1041.841697][T31751] overlayfs: maximum fs stacking depth exceeded [ 1041.844944][T31753] binder: 31750:31753 unknown command 0 [ 1041.868410][T31746] overlayfs: maximum fs stacking depth exceeded [ 1041.881657][T31753] binder: 31750:31753 ioctl c0306201 400078 returned -14 [ 1041.890090][T31749] binder: 31747:31749 ioctl c0306201 400078 returned -14 [ 1042.111231][T31683] libceph: resolve '0' (ret=-3): failed [ 1042.122852][T31683] libceph: Failed to parse monitor IPs: -3 10:22:01 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e23, @rand_addr=0x10001}, {0x2, 0x4e24, @rand_addr=0x1ff}, 0xc, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)='veth1_vlan\x00', 0x7fe00000000000, 0x6, 0x4}) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) r1 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x81040, 0x0) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000000240)) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="5b643a3a5d2c303a3a00f980f100009885ccbb3c3aeead2e22c90fef072256e00e67010000803b5d2fcf887ffa7f0ec00b74473a06025b5a64b0491236a3645b3cb24200b5a1c6aafda946ebf888518b9b1ad3e4a3b1caa195a69561039f6e107eafa89021a7503aaec0b01542ab5bd2d23e04b258634bd7d4c9d2488ad379fadccbfda227bd28f64d155039b07f843118590f6daf256b5f0876a20b9c01607839eaecf5034b7d6979a3686a0feeac04a641cd5e133437fd1514c1c9bb0000"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x1000000c8) 10:22:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:22:01 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10005, 0x0) 10:22:01 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x7]}) 10:22:01 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x202002) keyctl$clear(0x7, r2) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0xf50, &(0x7f0000000100)) 10:22:01 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x6800) [ 1056.741219][T31820] binder: 31817:31820 unknown command 0 [ 1056.757739][T31821] binder: 31815:31821 unknown command 0 [ 1056.807411][T31820] binder: 31817:31820 ioctl c0306201 400078 returned -14 [ 1056.833452][T31821] binder: 31815:31821 ioctl c0306201 400078 returned -14 10:22:01 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0xc0306201, 0x400078) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup2(r2, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x5) io_uring_setup(0xf50, &(0x7f0000000100)) [ 1056.865200][T31834] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 10:22:01 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x42]}) [ 1057.015212][T31841] overlayfs: maximum fs stacking depth exceeded [ 1057.060979][T31825] overlayfs: maximum fs stacking depth exceeded [ 1057.098981][T31848] binder: 31843:31848 unknown command 0 [ 1057.129605][T31848] binder: 31843:31848 ioctl c0306201 400078 returned -14 10:22:01 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x6c00) 10:22:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00008ac4000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) [ 1057.207216][T31856] binder: 31847:31856 unknown command 0 [ 1057.252671][T31856] binder: 31847:31856 ioctl c0306201 400078 returned -14 10:22:01 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x1ec]}) 10:22:02 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x804) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0xc0306201, 0x400078) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x24400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xe}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}]}]}}]}, 0x44}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={@private1={0xfc, 0x1, [], 0x1}, 0x1c}) bind$can_raw(r4, &(0x7f0000000000), 0x10) io_uring_setup(0xf50, &(0x7f0000000100)) [ 1057.503437][T31864] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1057.506104][T31869] binder: 31862:31869 unknown command 0 [ 1057.513119][T31873] binder: 31870:31873 unknown command 0 [ 1057.536185][T31871] binder: 31865:31871 unknown command 0 [ 1057.560488][T31873] binder: 31870:31873 ioctl c0306201 400078 returned -14 [ 1057.585575][T31869] binder: 31862:31869 ioctl c0306201 400078 returned -14 [ 1057.586046][T31871] binder: 31865:31871 ioctl c0306201 400078 returned -14 [ 1057.615012][T31880] overlayfs: maximum fs stacking depth exceeded [ 1057.660148][T31863] overlayfs: maximum fs stacking depth exceeded [ 1058.142070][T31837] libceph: resolve '0' (ret=-3): failed [ 1058.163115][T31837] libceph: Failed to parse monitor IPs: -3 10:22:12 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e23, @rand_addr=0x10001}, {0x2, 0x4e24, @rand_addr=0x1ff}, 0xc, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)='veth1_vlan\x00', 0x7fe00000000000, 0x6, 0x4}) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) r1 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x81040, 0x0) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000000240)) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="5b643a3a5d2c303a3a00f980f100009885ccbb3c3aeead2e22c90fef072256e00e67010000803b5d2fcf887ffa7f0ec00b74473a06025b5a64b0491236a3645b3cb24200b5a1c6aafda946ebf888518b9b1ad3e4a3b1caa195a69561039f6e107eafa89021a7503aaec0b01542ab5bd2d23e04b258634bd7d4c9d2488ad379fadccbfda227bd28f64d155039b07f843118590f6daf256b5f0876a20b9c01607839eaecf5034b7d6979a3686a0feeac04a641cd5e133437fd1514c1c9bb0000"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$rose(r4, &(0x7f0000000080)=@short={0xb, @dev, @netrom, 0x1, @null}, &(0x7f0000000140)=0x1c, 0x80000) 10:22:12 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x300]}) 10:22:12 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0xc0306201, 0x400078) semctl$SETVAL(0xffffffffffffffff, 0x4, 0x10, &(0x7f0000000040)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:22:12 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10005, 0x0) 10:22:12 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x7400) 10:22:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00020000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) [ 1068.069154][T31936] binder: 31933:31936 unknown command 0 [ 1068.122775][T31941] binder: 31934:31941 unknown command 0 [ 1068.131364][T31936] binder: 31933:31936 ioctl c0306201 400078 returned -14 [ 1068.157114][T31952] binder: 31947:31952 unknown command 0 [ 1068.185314][T31941] binder: 31934:31941 ioctl c0306201 400078 returned -14 [ 1068.209917][T31955] overlayfs: maximum fs stacking depth exceeded [ 1068.221165][T31952] binder: 31947:31952 ioctl c0306201 400078 returned -14 10:22:12 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x500]}) [ 1068.256054][T31938] overlayfs: maximum fs stacking depth exceeded [ 1068.259710][T31957] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 10:22:13 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0xc0306201, 0x400078) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x7, @rand_addr=' \x01\x00', 0x4}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x82, &(0x7f00000001c0)={r5}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x1, 0xff, 0x204, 0x7, 0x6, 0x0, 0x2, 0xea2, r5}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$RTC_PIE_ON(r7, 0x7005) io_uring_setup(0xf50, &(0x7f0000000100)) 10:22:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x7a00) [ 1068.462245][T31965] binder: 31963:31965 unknown command 0 [ 1068.486158][T31969] binder: 31967:31969 unknown command 0 [ 1068.503339][T31965] binder: 31963:31965 ioctl c0306201 400078 returned -14 10:22:13 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x600]}) [ 1068.525696][T31969] binder: 31967:31969 ioctl c0306201 400078 returned -14 [ 1068.542512][T31970] binder: 31966:31970 unknown command 0 10:22:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 1068.614814][T31970] binder: 31966:31970 ioctl c0306201 400078 returned -14 10:22:13 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0xf50, &(0x7f0000000100)) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000240)=@add_del={0x2, &(0x7f0000000080)='vxcan1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f0000000180)={{0x20, 0x9}, 'port0\x00', 0xc1, 0x80000, 0x1, 0x4, 0x7fffffff, 0x20, 0x8, 0x0, 0x0, 0x1f}) [ 1068.744619][T31981] binder: 31979:31981 unknown command 0 [ 1068.777547][T31981] binder: 31979:31981 ioctl c0306201 400078 returned -14 [ 1068.820247][T31990] overlayfs: maximum fs stacking depth exceeded [ 1068.834323][T31988] binder: 31983:31988 unknown command 0 [ 1068.862054][T31978] overlayfs: maximum fs stacking depth exceeded [ 1068.864667][T31984] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1068.901709][T31988] binder: 31983:31988 ioctl c0306201 400078 returned -14 [ 1070.564598][T31959] libceph: resolve '0' (ret=-3): failed [ 1070.593640][T31959] libceph: Failed to parse monitor IPs: -3 10:22:20 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e23, @rand_addr=0x10001}, {0x2, 0x4e24, @rand_addr=0x1ff}, 0xc, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)='veth1_vlan\x00', 0x7fe00000000000, 0x6, 0x4}) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) r1 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x81040, 0x0) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000000240)) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="5b643a3a5d2c303a3a00f980f100009885ccbb3c3aeead2e22c90fef072256e00e67010000803b5d2fcf887ffa7f0ec00b74473a06025b5a64b0491236a3645b3cb24200b5a1c6aafda946ebf888518b9b1ad3e4a3b1caa195a69561039f6e107eafa89021a7503aaec0b01542ab5bd2d23e04b258634bd7d4c9d2488ad379fadccbfda227bd28f64d155039b07f843118590f6daf256b5f0876a20b9c01607839eaecf5034b7d6979a3686a0feeac04a641cd5e133437fd1514c1c9bb0000"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$rose(r4, &(0x7f0000000080)=@short={0xb, @dev, @netrom, 0x1, @null}, &(0x7f0000000140)=0x1c, 0x80000) 10:22:20 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x700]}) 10:22:20 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0xf50, &(0x7f0000000040)={0x0, 0x0, 0x7}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) 10:22:20 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0xff00) 10:22:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:22:20 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) [ 1075.668458][T32035] binder: 32030:32035 unknown command 0 [ 1075.702486][T32041] binder: 32036:32041 unknown command 0 [ 1075.719050][T32035] binder: 32030:32035 ioctl c0306201 400078 returned -14 [ 1075.752590][T32045] binder: 32033:32045 unknown command 0 [ 1075.785789][T32041] binder: 32036:32041 ioctl c0306201 400078 returned -14 [ 1075.793083][T32045] binder: 32033:32045 ioctl c0306201 400078 returned -14 10:22:20 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0x872, &(0x7f0000000100)={0x0, 0x0, 0xa}) 10:22:20 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3f00]}) [ 1075.848987][T32056] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1075.900970][T32059] overlayfs: maximum fs stacking depth exceeded [ 1075.944985][T32037] overlayfs: maximum fs stacking depth exceeded [ 1076.035138][T32066] binder: 32062:32066 unknown command 0 [ 1076.083049][T32070] binder: 32065:32070 unknown command 0 [ 1076.088915][T32066] binder: 32062:32066 ioctl c0306201 400078 returned -14 [ 1076.114917][T32075] binder: 32073:32075 unknown command 0 10:22:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:22:20 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x1000000) 10:22:20 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x4000]}) [ 1076.139764][T32070] binder: 32065:32070 ioctl c0306201 400078 returned -14 [ 1076.167574][T32075] binder: 32073:32075 ioctl c0306201 400078 returned -14 10:22:20 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0xf50, &(0x7f0000000100)) [ 1076.350180][T32080] binder: 32077:32080 unknown command 0 [ 1076.373408][T32084] binder: 32081:32084 unknown command 0 [ 1076.387012][T32080] binder: 32077:32080 ioctl c0306201 400078 returned -14 [ 1076.405973][T32084] binder: 32081:32084 ioctl c0306201 400078 returned -14 [ 1076.442231][T32079] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1076.496943][T32088] binder: 32087:32088 unknown command 0 [ 1076.523835][T32088] binder: 32087:32088 ioctl c0306201 400078 returned -14 [ 1076.565397][T32095] overlayfs: maximum fs stacking depth exceeded [ 1076.600618][T32099] binder: 32087:32099 unknown command 0 [ 1076.609213][T32086] overlayfs: maximum fs stacking depth exceeded [ 1076.650632][T32099] binder: 32087:32099 ioctl c0306201 400078 returned -14 [ 1077.040388][T32050] libceph: resolve '0' (ret=-3): failed [ 1077.052012][T32050] libceph: Failed to parse monitor IPs: -3 10:22:22 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e23, @rand_addr=0x10001}, {0x2, 0x4e24, @rand_addr=0x1ff}, 0xc, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)='veth1_vlan\x00', 0x7fe00000000000, 0x6, 0x4}) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) r1 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x81040, 0x0) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000000240)) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="5b643a3a5d2c303a3a00f980f100009885ccbb3c3aeead2e22c90fef072256e00e67010000803b5d2fcf887ffa7f0ec00b74473a06025b5a64b0491236a3645b3cb24200b5a1c6aafda946ebf888518b9b1ad3e4a3b1caa195a69561039f6e107eafa89021a7503aaec0b01542ab5bd2d23e04b258634bd7d4c9d2488ad379fadccbfda227bd28f64d155039b07f843118590f6daf256b5f0876a20b9c01607839eaecf5034b7d6979a3686a0feeac04a641cd5e133437fd1514c1c9bb0000"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$rose(r4, &(0x7f0000000080)=@short={0xb, @dev, @netrom, 0x1, @null}, &(0x7f0000000140)=0x1c, 0x80000) 10:22:22 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x4200]}) 10:22:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000080)) ustat(0xffffffffffffff21, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VFIO_GET_API_VERSION(r5, 0x3b64) 10:22:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:22:22 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x2000000) 10:22:22 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) [ 1077.578285][T32120] binder: 32114:32120 unknown command 0 [ 1077.607771][T32121] binder: 32115:32121 unknown command 0 [ 1077.612971][T32127] binder: 32124:32127 unknown command 0 [ 1077.646194][T32120] binder: 32114:32120 ioctl c0306201 400078 returned -14 [ 1077.663803][T32121] binder: 32115:32121 ioctl c0306201 400078 returned -14 [ 1077.680614][T32127] binder: 32124:32127 ioctl c0306201 400078 returned -14 10:22:22 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xec01]}) [ 1077.728034][T32125] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1077.757193][T32140] overlayfs: maximum fs stacking depth exceeded 10:22:22 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$OSF_MSG_REMOVE(r6, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b40)={&(0x7f00000001c0)={0x964, 0x1, 0x5, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [{{0x254, 0x1, {{0x2, 0xce4}, 0x6, 0x7, 0x4, 0x4, 0x1c, 'syz0\x00', "6234f79970c248b7ca05f72fff8c79a8e50ca1996cd0b35c6dfcf9ee07145f2d", "350dc6227aca4a7c973f121a509003739e3a9ec33be2775bb2bdf12c327cd8b3", [{0x80, 0x0, {0x2, 0x81}}, {0x543, 0x9, {0x2, 0x4}}, {0x3, 0x9, {0x2, 0x8}}, {0x1ff, 0x4, {0x3, 0x401}}, {0x0, 0x1000, {0x3, 0x5}}, {0x200, 0x4, {0x2, 0xfffffffb}}, {0x7, 0x2, {0x2, 0x1000}}, {0x1f, 0x8a2, {0x4, 0xa5}}, {0x0, 0x0, {0x3, 0x800}}, {0x7ff, 0x0, {0x1, 0x6}}, {0x20, 0x40, {0x0, 0x7}}, {0x800, 0x8, {0x0, 0x4}}, {0x9, 0x7ff, {0x3, 0x1}}, {0xd92, 0xf801, {0x0, 0x927}}, {0x712, 0x100, {0x3, 0x1ff}}, {0x1c, 0x1, {0x0, 0x101}}, {0x4, 0x9, {0x2, 0x200}}, {0x5, 0xff00, {0x2, 0x3ff}}, {0xfffd, 0x24d3, {0x0, 0x2}}, {0x1ff, 0xf45a, {0x7, 0x63}}, {0x9, 0x200, {0x3, 0x2}}, {0x9, 0x1, {0x2, 0xae0f}}, {0x8, 0x9, {0x3, 0xc0}}, {0x0, 0xc0, {0x3, 0x8}}, {0xbe, 0xee, {0x1, 0x8001}}, {0x7f, 0xe9d5, {0x2, 0x1}}, {0x80, 0x1, {0x2, 0x1}}, {0x33b, 0x9, {0x2}}, {0x401, 0x4, {0x1, 0x7fffffff}}, {0xa57c, 0x6, {0x0, 0x6}}, {0x5, 0x8001, {0x0, 0x29a6}}, {0x0, 0x4, {0x1, 0x4}}, {0xffdc, 0x4, {0x2, 0x180000}}, {0xa06, 0x100, {0x1, 0x1}}, {0x5, 0x1, {0x2, 0x9}}, {0x1, 0x9555, {0x2}}, {0x8, 0xb138, {0x1, 0x8001}}, {0x3, 0x3ff, {0x1, 0x5}}, {0xfffe, 0x5, {0x3, 0x7ff}}, {0x200, 0x3, {0x2, 0x7}}]}}}, {{0x254, 0x1, {{0x2, 0xfffff801}, 0x4, 0x6, 0x8, 0x8, 0x1, 'syz0\x00', "4953eb496782126d95c73811bab413dc5c6cef0c8ff375c3e709d5dbd53000b9", "8285750e0110524265fe1aa2f5e62b81eb3913aa7d5d681ae6fc1f736ea090d6", [{0x3, 0x20}, {0x99, 0x1ff, {0x1, 0x8001}}, {0x0, 0x3f, {0x3, 0xff}}, {0x2, 0x5, {0x3, 0x627}}, {0x8, 0x81, {0x3, 0x4}}, {0x7, 0x6, {0x1, 0x6}}, {0x2, 0x97e, {0x2, 0x1}}, {0xa01, 0x5, {0x3, 0x8001}}, {0x77f, 0x0, {0x3}}, {0x2, 0x0, {0x2, 0x3}}, {0x0, 0x9, {0x1, 0x81}}, {0x8000, 0x5, {0x1, 0x2}}, {0x7298, 0x5af, {0x3, 0x3}}, {0xebef, 0x2, {0x0, 0x128}}, {0x24, 0xffc1, {0x3, 0xfffffffb}}, {0xff, 0x0, {0x3, 0x7}}, {0x401, 0x1, {0x1, 0x3f}}, {0x2, 0x7fff, {0x0, 0x1}}, {0x3, 0x6, {0x1, 0x7}}, {0x6, 0x1, {0x1, 0x7}}, {0x81, 0xdce, {0x0, 0x8c4}}, {0x7ff, 0x9, {0x3, 0x78}}, {0x2, 0xf000, {0x3, 0x3}}, {0x200, 0x1f, {0x0, 0x5}}, {0x9, 0x3f, {0x2, 0x9}}, {0x0, 0x1ff, {0x3, 0x2}}, {0xdb2, 0x9, {0x1, 0x10001}}, {0x0, 0x8, {0x1, 0xb8}}, {0x9deb, 0x8, {0x2, 0x7ff}}, {0x5, 0x7, {0x3, 0x2}}, {0x9, 0x7, {0x2, 0x2}}, {0x3, 0x40, {0x3, 0x7}}, {0x3, 0x100, {0x1, 0x5}}, {0x9, 0x1, {0x2, 0x2}}, {0xd7fe, 0x8, {0x1, 0x100}}, {0xf0, 0x8, {0x0, 0x3}}, {0x6, 0x4, {0x1, 0x400}}, {0x2, 0x1, {0x1, 0x5}}, {0x6, 0x1, {0x0, 0x401}}, {0xba, 0x4, {0x2, 0x5}}]}}}, {{0x254, 0x1, {{0x3}, 0x1f, 0x9e, 0xfff9, 0x1000, 0x11, 'syz0\x00', "beb11b79eb9fca568c909b9a84a0af2a9fde2681619930849a290192e4438eda", "d1be646d3cb6843f0e97fbe3268b2c7144519ad7ea58ae2a3c9d05e7c9452640", [{0x6, 0x5, {0x0, 0x8}}, {0x52cf, 0x101, {0x0, 0x8}}, {0x5, 0x3e, {0x2, 0x121}}, {0xb9, 0x2, {0x2, 0x800}}, {0x100, 0x1, {0x1, 0xd8}}, {0x6, 0x2, {0x3, 0x101}}, {0x4, 0xf0, {0x3, 0x5}}, {0x4, 0x3, {0x3, 0xd4}}, {0x1, 0x1, {0x0, 0xffffffff}}, {0x200, 0x8, {0x1, 0x20}}, {0x2, 0x7, {0x1, 0x2}}, {0x3f, 0x7f, {0x1, 0x3}}, {0xfffe, 0x0, {0x1, 0x9}}, {0x8001, 0x0, {0x1, 0x4}}, {0x5, 0x0, {0x1, 0x8}}, {0x606b, 0x4, {0x0, 0x4}}, {0xb470, 0x4, {0x1}}, {0x800, 0x1, {0x2}}, {0x10, 0x9, {0x2, 0x9}}, {0xd85, 0x6, {0x1, 0x8}}, {0x1, 0x4, {0x2, 0x5}}, {0x0, 0xff, {0x0, 0x401}}, {0x7, 0xa64f, {0x2, 0x9d64}}, {0x1, 0x7ff, {0x2, 0x4}}, {0x3, 0x56, {0x3, 0xfff}}, {0x401, 0x0, {0x3, 0x219}}, {0x0, 0x6, {0x3, 0x6}}, {0x14ec, 0x1, {0x2, 0x1}}, {0x8, 0x7f, {0x1, 0x8}}, {0x6060, 0x9, {0x2, 0x10001}}, {0x2, 0x0, {0x0, 0x7}}, {0xc409, 0x5, {0x2, 0x5}}, {0x2, 0x7fff, {0x0, 0x8}}, {0x6, 0x8, {0x0, 0x101}}, {0x1, 0x100, {0x3, 0x4}}, {0xffff, 0x0, {0x1, 0x6}}, {0x2c, 0x7, {0x6}}, {0x7fff, 0x1000, {0x0, 0x9}}, {0xe8f, 0x0, {0x1, 0x2}}, {0x5, 0xf1b0}]}}}, {{0x254, 0x1, {{0x3, 0x7fff}, 0x9, 0x5, 0xfa, 0x7, 0x8, 'syz1\x00', "e19352320f9964f26bccabeaa68b81f62547e1bd11b021b8defdfc5f5751f697", "e9386d7df3011b8801ca59e01154201479a738ca12cd880f88729edb7a2b0865", [{0x40, 0x5, {0x1, 0x4}}, {0x81, 0x3, {0x0, 0x665}}, {0x1, 0x6, {0x3, 0x3}}, {0x400, 0x3, {0x1, 0x800}}, {0x5, 0x8001, {0x3, 0x7}}, {0x8, 0x3f, {0x1}}, {0x7, 0xfffb, {0x3, 0x7ff}}, {0x1000, 0x7, {0x1, 0x1ef}}, {0x8, 0x7fff, {0x3, 0xae}}, {0xf5a0, 0x401, {0x3, 0x9}}, {0x9, 0x8, {0x1, 0x2}}, {0x1, 0x0, {0x3, 0x9b}}, {0x8001, 0x2b4, {0x2, 0xffff}}, {0x1ff, 0x7f, {0x2, 0x10001}}, {0x7fff, 0x800, {0x3, 0x8}}, {0x7, 0x6, {0x3, 0x81}}, {0x7, 0xd5de, {0x2, 0x7f}}, {0x1000, 0x2, {0x1}}, {0x8, 0x0, {0x1, 0x7f}}, {0x1, 0x76d0, {0x2, 0x5d12}}, {0x4, 0x4, {0x3, 0x7fff}}, {0x9, 0x3, {0x0, 0x1ff}}, {0x200, 0x20, {0x1}}, {0x62f3, 0x6, {0x3, 0x2}}, {0x1f, 0x2, {0x2, 0x100}}, {0x5, 0x7, {0x0, 0x7}}, {0x4, 0x82, {0x3, 0x10000}}, {0x7, 0x400, {0x0, 0x401}}, {0x3, 0x25, {0x3, 0x8}}, {0x2, 0x6, {0x1, 0x5}}, {0x2, 0x221, {0x2, 0x10000}}, {0xfffd, 0x7, {0x2, 0x2}}, {0x3f, 0x7, {0x1, 0xd47}}, {0x0, 0x4, {0x3}}, {0x200, 0xfff7, {0x1, 0x15}}, {0x6, 0x1, {0x2, 0x4}}, {0x8001, 0x3ff, {0x0, 0x3}}, {0xd5c, 0x2, {0x3, 0x1000}}, {0x7, 0xfffb, {0x1, 0x5}}, {0xfff7, 0x4, {0x1, 0x8}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0xc0}, 0x10000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)={0x0, 0x8, 0x4, 0x100, 0x7, {0x77359400}, {0x3, 0xc, 0x3f, 0xff, 0x7f, 0x20, "e7826420"}, 0x6, 0x3, @offset=0x2, 0x79, 0x0, r8}) ioctl$KVM_SET_NR_MMU_PAGES(r9, 0xae44, 0x5) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x4d) io_uring_setup(0xf50, &(0x7f0000000100)) [ 1077.802881][T32119] overlayfs: maximum fs stacking depth exceeded [ 1077.926244][T32148] binder: 32145:32148 unknown command 0 [ 1077.968550][T32152] binder: 32149:32152 unknown command 0 [ 1077.969276][T32150] binder: 32147:32150 unknown command 0 [ 1077.979534][T32148] binder: 32145:32148 ioctl c0306201 400078 returned -14 10:22:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:22:22 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x3000000) 10:22:22 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x400000]}) [ 1078.011110][T32152] binder: 32149:32152 ioctl c0306201 400078 returned -14 [ 1078.068778][T32150] binder: 32147:32150 ioctl c0306201 400078 returned -14 [ 1078.213256][T32162] binder: 32160:32162 unknown command 0 [ 1078.236404][T32162] binder: 32160:32162 ioctl c0306201 400078 returned -14 [ 1078.250881][T32167] binder: 32163:32167 unknown command 0 [ 1078.306471][T32161] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1078.317188][T32167] binder: 32163:32167 ioctl c0306201 400078 returned -14 10:22:23 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000480)={0x0, 0x14, 0x2, @thr={&(0x7f0000000380)="91cdb239a84bb4f3f663fcdf8210bd51861bca2bbb8aec70b7fa9f66afce2701126a51cd18b0c3f88f0d20947140843a18ba9cfd8e30ec143813aeefe3d8bfe05c9fd9df5d4bdaebdddf7e87a60f8252497c7b9eca41d8c9510381d5c4b0bd6f046cbca54bb0d8f426d9e61713725913ea6e25e8bd76", &(0x7f0000000500)="4acbd972980f15f4a5b2fa9632ecf290b3ea48c23ed24b7acfaf1eeae95a882a375c1eebc6e5fd5286ab3aec5a012bf1bac5d9cc4b0105371cdb1a16a69f0f19633f30ba374ce3b25b6a3601fab5eb1b516363aed37fe805b88718df749b37e395de005f6b3e18e1d3dedfd7f31b15bf277a3b31267064d873c62a05a549a9fe04d9f4dfb998f7dec663020caaac33ec923b655f784aa4a66a2aaf75011b0064403a960a7f61747f2b5b207c9258f82c6cc188a09604733f9e9c2a9730b00368bf61ee1980c627d1bd30c59a2fd63b3247ef7e9b3037a7ab0967710ad15f87006658c8d1c2167b6ed91c44337ad2d1200422edb37a"}}, &(0x7f0000000040)=0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000004c0)={0x20000000, 0x3, 0x1f}) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(r1, &(0x7f0000000340)) r3 = fcntl$dupfd(r0, 0x0, r0) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}}, 0x30) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x201, 0x0) sendto$x25(r4, &(0x7f0000000200)="92f145b40c0d6e1a6469794e09f6e41e9675d9cf5a23c2816ebbee2d0d69a68fc7784ffb53e6c6d8c6cd9a8fdd7ce9cb0022207bdae922b758f1bf3e65b4973e9a5b3d390add5fda26046938eae6bf46c8172f8f6a9e522afc2a7a2cced4e10967e8cd3165fb967097b59b7600296b9cf22c9783d7de6e37955b868796fc7eb3cc2078b96929da60349565811bf68be6279b32da476a96c8243e26f59e9ba22c44e43a071dc196ef2e95d2fa970867540a71ea1188a63aa6ef3afc22270df070ace215766cd3ca0f12a631b9db310cf5cb6459e70049b429f97e93f02876369be0985887288cad", 0xe7, 0x4084, &(0x7f0000000300)={0x9, @null=' \x00'}, 0x12) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000000600), 0x800000000000010c) r6 = syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x2) write(r6, &(0x7f0000000180)="52e1", 0x2) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000440)={0x18, 0xf, 0x1, {{0x1, 0x5, 0x8}, 0xfffffa88}}, 0x18) io_uring_setup(0xf50, &(0x7f0000000100)) [ 1078.410517][T32174] overlayfs: maximum fs stacking depth exceeded [ 1078.452859][T32165] overlayfs: maximum fs stacking depth exceeded [ 1078.503975][T32175] binder: 32173:32175 unknown command 0 [ 1078.557204][T32175] binder: 32173:32175 ioctl c0306201 400078 returned -14 [ 1078.962313][T32138] libceph: resolve '0' (ret=-3): failed [ 1078.974440][T32138] libceph: Failed to parse monitor IPs: -3 10:22:24 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e23, @rand_addr=0x10001}, {0x2, 0x4e24, @rand_addr=0x1ff}, 0xc, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)='veth1_vlan\x00', 0x7fe00000000000, 0x6, 0x4}) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) r1 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x81040, 0x0) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000000240)) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="5b643a3a5d2c303a3a00f980f100009885ccbb3c3aeead2e22c90fef072256e00e67010000803b5d2fcf887ffa7f0ec00b74473a06025b5a64b0491236a3645b3cb24200b5a1c6aafda946ebf888518b9b1ad3e4a3b1caa195a69561039f6e107eafa89021a7503aaec0b01542ab5bd2d23e04b258634bd7d4c9d2488ad379fadccbfda227bd28f64d155039b07f843118590f6daf256b5f0876a20b9c01607839eaecf5034b7d6979a3686a0feeac04a641cd5e133437fd1514c1c9bb0000"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@short={0xb, @dev, @netrom, 0x1, @null}, &(0x7f0000000140)=0x1c, 0x80000) 10:22:24 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x80ffff]}) 10:22:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:22:24 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x4000000) 10:22:24 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) [ 1079.471830][T32190] binder: 32185:32190 unknown command 0 [ 1079.501146][T32196] binder: 32192:32196 unknown command 0 [ 1079.535250][T32190] binder: 32185:32190 ioctl c0306201 400078 returned -14 [ 1079.570094][T32196] binder: 32192:32196 ioctl c0306201 400078 returned -14 10:22:24 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x1000000]}) [ 1079.672211][T32193] overlayfs: maximum fs stacking depth exceeded [ 1079.681054][T32188] overlayfs: maximum fs stacking depth exceeded 10:22:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00120000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) 10:22:24 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x5000000) [ 1079.902009][T32211] binder: 32209:32211 unknown command 0 [ 1079.930306][T32215] binder: 32212:32215 unknown command 0 [ 1079.958131][T32211] binder: 32209:32211 ioctl c0306201 400078 returned -14 [ 1079.986879][T32215] binder: 32212:32215 ioctl c0306201 400078 returned -14 10:22:24 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x2000000]}) [ 1080.012422][T32213] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1080.218785][T32226] overlayfs: maximum fs stacking depth exceeded [ 1080.220503][T32227] binder: 32223:32227 unknown command 0 [ 1080.258770][T32230] binder: 32228:32230 unknown command 0 [ 1080.261039][T32219] overlayfs: maximum fs stacking depth exceeded 10:22:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 1080.300395][T32230] binder: 32228:32230 ioctl c0306201 400078 returned -14 [ 1080.319890][T32227] binder: 32223:32227 ioctl c0306201 400078 returned -14 10:22:25 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3000000]}) [ 1080.580938][T32238] binder: 32235:32238 unknown command 0 [ 1080.604526][T32242] binder: 32240:32242 unknown command 0 [ 1080.634746][T32234] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1080.647015][T32238] binder: 32235:32238 ioctl c0306201 400078 returned -14 [ 1080.669985][T32242] binder: 32240:32242 ioctl c0306201 400078 returned -14 10:22:26 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000240)=ANY=[@ANYBLOB="080000000000000000000006a3b8098c0e0000000000"]) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x3f7, 0x400, 0x70bd29, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) io_uring_setup(0xf4c, &(0x7f0000000100)) [ 1081.615982][T32253] binder: 32252:32253 unknown command 0 [ 1081.649332][T32253] binder: 32252:32253 ioctl c0306201 400078 returned -14 [ 1081.848223][T32208] libceph: resolve '0' (ret=-3): failed [ 1081.853880][T32208] libceph: Failed to parse monitor IPs: -3 10:22:29 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e23, @rand_addr=0x10001}, {0x2, 0x4e24, @rand_addr=0x1ff}, 0xc, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)='veth1_vlan\x00', 0x7fe00000000000, 0x6, 0x4}) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) r1 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x81040, 0x0) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000000240)) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="5b643a3a5d2c303a3a00f980f100009885ccbb3c3aeead2e22c90fef072256e00e67010000803b5d2fcf887ffa7f0ec00b74473a06025b5a64b0491236a3645b3cb24200b5a1c6aafda946ebf888518b9b1ad3e4a3b1caa195a69561039f6e107eafa89021a7503aaec0b01542ab5bd2d23e04b258634bd7d4c9d2488ad379fadccbfda227bd28f64d155039b07f843118590f6daf256b5f0876a20b9c01607839eaecf5034b7d6979a3686a0feeac04a641cd5e133437fd1514c1c9bb0000"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@short={0xb, @dev, @netrom, 0x1, @null}, &(0x7f0000000140)=0x1c, 0x80000) 10:22:29 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x6000000) 10:22:29 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x4000000]}) 10:22:29 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 10:22:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:22:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0xf50, &(0x7f0000000100)) [ 1085.120436][T32276] binder: 32274:32276 unknown command 0 [ 1085.157769][T32277] binder: 32275:32277 unknown command 0 [ 1085.160356][T32285] binder: 32288:32285 unknown command 0 [ 1085.207108][T32276] binder: 32274:32276 ioctl c0306201 400078 returned -14 [ 1085.219531][T32277] binder: 32275:32277 ioctl c0306201 400078 returned -14 [ 1085.244357][T32292] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1085.254063][T32285] binder: 32288:32285 ioctl c0306201 400078 returned -14 10:22:29 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x5000000]}) [ 1085.335846][T32301] overlayfs: maximum fs stacking depth exceeded [ 1085.377822][T32280] overlayfs: maximum fs stacking depth exceeded 10:22:30 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0xc0306201, 0x400078) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) io_uring_setup(0xf50, &(0x7f0000000100)) 10:22:30 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x7000000) [ 1085.495510][T32308] binder: 32307:32308 unknown command 0 10:22:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b008c0300000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) 10:22:30 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x6000000]}) [ 1085.570429][T32308] binder: 32307:32308 ioctl c0306201 400078 returned -14 [ 1085.671804][T32313] binder: 32311:32313 unknown command 0 [ 1085.708483][T32313] binder: 32311:32313 ioctl c0306201 400078 returned -14 10:22:30 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000040)={0x29, 0x3}) r3 = fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_uring_setup(0xf50, &(0x7f0000000100)) [ 1085.798386][T32326] binder: 32319:32326 unknown command 0 [ 1085.850225][T32330] binder: 32327:32330 unknown command 0 [ 1085.860562][T32326] binder: 32319:32326 ioctl c0306201 400078 returned -14 [ 1085.890363][T32331] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1085.901108][T32330] binder: 32327:32330 ioctl c0306201 400078 returned -14 [ 1085.944409][T32334] overlayfs: maximum fs stacking depth exceeded [ 1085.987243][T32320] overlayfs: maximum fs stacking depth exceeded [ 1086.128849][T32343] binder: 32335:32343 unknown command 0 [ 1086.162632][T32343] binder: 32335:32343 ioctl c0306201 400078 returned -14 [ 1087.431250][T32295] libceph: resolve '0' (ret=-3): failed [ 1087.452660][T32295] libceph: Failed to parse monitor IPs: -3 10:22:32 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e23, @rand_addr=0x10001}, {0x2, 0x4e24, @rand_addr=0x1ff}, 0xc, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)='veth1_vlan\x00', 0x7fe00000000000, 0x6, 0x4}) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) r1 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x81040, 0x0) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000000240)) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="5b643a3a5d2c303a3a00f980f100009885ccbb3c3aeead2e22c90fef072256e00e67010000803b5d2fcf887ffa7f0ec00b74473a06025b5a64b0491236a3645b3cb24200b5a1c6aafda946ebf888518b9b1ad3e4a3b1caa195a69561039f6e107eafa89021a7503aaec0b01542ab5bd2d23e04b258634bd7d4c9d2488ad379fadccbfda227bd28f64d155039b07f843118590f6daf256b5f0876a20b9c01607839eaecf5034b7d6979a3686a0feeac04a641cd5e133437fd1514c1c9bb0000"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@short={0xb, @dev, @netrom, 0x1, @null}, &(0x7f0000000140)=0x1c, 0x80000) 10:22:32 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x7000000]}) 10:22:32 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) setsockopt$inet_dccp_int(r4, 0x21, 0x6, &(0x7f0000000400), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r5, 0x3fd08d1a67dd78e8, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0xc4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$tipc(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="ccb9cd61c48c5f16cb856d9c9f2d577c4a979a5dad6e9818dd436fbfbbecdc88230bf40876934379ca431708a662874f8d78862d7f17f9a73256765e1457240651a72dc4139121b7d061dc79035cc466024acf73ccb91f0bb8ed25b8c11faade039fd370f20cea02956f9996c18cc5752c5b871ef79a3fb5687e8afdf3fd47a940385419023a832f2b59022fd70f6fc04378c36a8d98dc5e42ba6ac81b98c1b6f8502df354215e10ed5a870f0327a67127f08c5efe7766cff1ee56c46ce24033744ba74c5c3e06bea35a4a87dca3c816f0c941b860853e445a0cb8e48ab32bdddf8dcda261f6cdd0769a4717", 0xec}, {&(0x7f0000000340)="0c17", 0x2}], 0x2, 0x0, 0x0, 0x40000}, 0x4004) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0xf50, &(0x7f0000000100)) 10:22:32 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x8000000) 10:22:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:22:32 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) [ 1088.201749][T32367] binder: 32359:32367 unknown command 0 [ 1088.219591][T32365] binder: 32362:32365 unknown command 0 [ 1088.246668][T32367] binder: 32359:32367 ioctl c0306201 400078 returned -14 [ 1088.247906][T32373] binder: 32370:32373 unknown command 0 [ 1088.310300][T32365] binder: 32362:32365 ioctl c0306201 400078 returned -14 [ 1088.325187][T32366] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1088.353962][T32373] binder: 32370:32373 ioctl c0306201 400078 returned -14 [ 1088.354984][T32382] overlayfs: maximum fs stacking depth exceeded 10:22:33 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3f000000]}) [ 1088.397868][T32364] overlayfs: maximum fs stacking depth exceeded 10:22:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:22:33 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0xa2a0000) [ 1088.656865][T32394] binder: 32393:32394 unknown command 0 [ 1088.683117][T32397] binder: 32395:32397 unknown command 0 [ 1088.695880][T32394] binder: 32393:32394 ioctl c0306201 400078 returned -14 10:22:33 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x44, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x7}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x110, r6, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x27}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5b}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x136e00}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0xf50, &(0x7f0000000100)) [ 1088.719348][T32397] binder: 32395:32397 ioctl c0306201 400078 returned -14 10:22:33 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x40000000]}) [ 1088.835425][T32405] IPVS: Unknown mcast interface: netpci0 [ 1088.856860][T32406] binder: 32401:32406 unknown command 0 10:22:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2000, 0x0) bind$ax25(r2, &(0x7f0000000180)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x4}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null]}, 0x48) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0xf50, &(0x7f0000000100)) [ 1088.902045][T32408] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1088.915637][T32406] binder: 32401:32406 ioctl c0306201 400078 returned -14 [ 1088.950058][T32416] overlayfs: maximum fs stacking depth exceeded [ 1088.982697][T32404] overlayfs: maximum fs stacking depth exceeded [ 1089.038523][T32417] binder: 32414:32417 unknown command 0 [ 1089.066707][T32423] binder: 32419:32423 unknown command 0 [ 1089.107505][T32417] binder: 32414:32417 ioctl c0306201 400078 returned -14 [ 1089.118239][T32423] binder: 32419:32423 ioctl c0306201 400078 returned -14 [ 1089.160384][T32426] binder: 32420:32426 unknown command 0 [ 1089.195042][T32426] binder: 32420:32426 ioctl c0306201 400078 returned -14 [ 1090.403049][T32384] libceph: resolve '0' (ret=-3): failed [ 1090.431285][T32384] libceph: Failed to parse monitor IPs: -3 10:22:37 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e23, @rand_addr=0x10001}, {0x2, 0x4e24, @rand_addr=0x1ff}, 0xc, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)='veth1_vlan\x00', 0x7fe00000000000, 0x6, 0x4}) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) r1 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x81040, 0x0) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="5b643a3a5d2c303a3a00f980f100009885ccbb3c3aeead2e22c90fef072256e00e67010000803b5d2fcf887ffa7f0ec00b74473a06025b5a64b0491236a3645b3cb24200b5a1c6aafda946ebf888518b9b1ad3e4a3b1caa195a69561039f6e107eafa89021a7503aaec0b01542ab5bd2d23e04b258634bd7d4c9d2488ad379fadccbfda227bd28f64d155039b07f843118590f6daf256b5f0876a20b9c01607839eaecf5034b7d6979a3686a0feeac04a641cd5e133437fd1514c1c9bb0000"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x1000000c8) accept4$rose(r4, &(0x7f0000000080)=@short={0xb, @dev, @netrom, 0x1, @null}, &(0x7f0000000140)=0x1c, 0x80000) 10:22:37 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x42000000]}) 10:22:37 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x48000000) 10:22:37 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x0, 0x0) bind$bt_l2cap(r2, &(0x7f0000000180)={0x1f, 0x7ff, @any, 0x8000, 0x1}, 0xe) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1}) 10:22:37 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96f500", @random="096bd32c9780", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @dev}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 10:22:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 1093.181114][T32462] binder: 32456:32462 unknown command 0 [ 1093.214883][T32468] binder: 32461:32468 unknown command 0 [ 1093.222389][T32462] binder: 32456:32462 ioctl c0306201 400078 returned -14 [ 1093.273454][T32475] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 10:22:38 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0xf4f, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x3}) [ 1093.321585][T32468] binder: 32461:32468 ioctl c0306201 400078 returned -14 10:22:38 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xec010000]}) [ 1093.395232][T32484] overlayfs: maximum fs stacking depth exceeded [ 1093.440531][T32466] overlayfs: maximum fs stacking depth exceeded 10:22:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 1093.592287][T32492] binder: 32491:32492 unknown command 0 10:22:38 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x4c000000) [ 1093.640604][T32492] binder: 32491:32492 ioctl c0306201 400078 returned -14 [ 1093.677372][T32498] binder: 32493:32498 unknown command 0 10:22:38 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfeffffff]}) [ 1093.710775][T32498] binder: 32493:32498 ioctl c0306201 400078 returned -14 10:22:38 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000180)={0x9c0000, 0x81, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x1, [], @p_u16=&(0x7f0000000040)=0x2}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f0000000240)) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x1ff, 0x800) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f00000002c0)={{0x33, @broadcast, 0x4e20, 0x1, 'sed\x00', 0xc3e88d2bf0ff1d1, 0x0, 0x11}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x4, 0xffffffe1, 0x5c, 0x6}}, 0x44) io_uring_setup(0xf50, &(0x7f0000000100)) [ 1093.892992][T32503] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1093.992467][T32509] binder: 32508:32509 unknown command 0 [ 1094.036360][T32509] binder: 32508:32509 ioctl c0306201 400078 returned -14 [ 1094.042537][T32512] overlayfs: maximum fs stacking depth exceeded [ 1094.077841][T32507] overlayfs: maximum fs stacking depth exceeded [ 1094.249240][T32526] QAT: Invalid ioctl [ 1095.154061][T32483] libceph: resolve '0' (ret=-3): failed [ 1095.174476][T32483] libceph: Failed to parse monitor IPs: -3 10:22:51 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e23, @rand_addr=0x10001}, {0x2, 0x4e24, @rand_addr=0x1ff}, 0xc, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)='veth1_vlan\x00', 0x7fe00000000000, 0x6, 0x4}) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) r1 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x81040, 0x0) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="5b643a3a5d2c303a3a00f980f100009885ccbb3c3aeead2e22c90fef072256e00e67010000803b5d2fcf887ffa7f0ec00b74473a06025b5a64b0491236a3645b3cb24200b5a1c6aafda946ebf888518b9b1ad3e4a3b1caa195a69561039f6e107eafa89021a7503aaec0b01542ab5bd2d23e04b258634bd7d4c9d2488ad379fadccbfda227bd28f64d155039b07f843118590f6daf256b5f0876a20b9c01607839eaecf5034b7d6979a3686a0feeac04a641cd5e133437fd1514c1c9bb0000"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x1000000c8) accept4$rose(r4, &(0x7f0000000080)=@short={0xb, @dev, @netrom, 0x1, @null}, &(0x7f0000000140)=0x1c, 0x80000) 10:22:51 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xffff8000]}) 10:22:51 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@private2}}, &(0x7f00000003c0)=0xe8) mount$9p_virtio(&(0x7f0000000200)='syz\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x4000, &(0x7f0000000400)={'trans=virtio,', {[{@uname={'uname', 0x3d, ' \x01\x00'}}, {@version_u='version=9p2000.u'}, {@cache_fscache='cache=fscache'}, {@debug={'debug', 0x3d, 0x5}}, {@aname={'aname', 0x3d, ',bdev!.$em1\x9aeth0\x00'}}, {@version_u='version=9p2000.u'}, {@access_any='access=any'}], [{@appraise='appraise'}, {@smackfstransmute={'smackfstransmute', 0x3d, ' \x01\x00'}}, {@obj_type={'obj_type', 0x3d, ' \x01\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ' \x01\x00'}}, {@fowner_lt={'fowner<', r3}}, {@appraise_type='appraise_type=imasig'}, {@hash='hash'}]}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x82, &(0x7f00000001c0)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)={r5, 0x8f6, 0x4, [0x9c, 0x7, 0x9, 0xfffb]}, &(0x7f0000000080)=0x10) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0xf50, &(0x7f0000000100)) 10:22:51 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x68000000) 10:22:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:22:51 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e23, @rand_addr=0x10001}, {0x2, 0x4e24, @rand_addr=0x1ff}, 0xc, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)='veth1_vlan\x00', 0x7fe00000000000, 0x6, 0x4}) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) r1 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x81040, 0x0) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000000240)) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="5b643a3a5d2c303a3a00f980f100009885ccbb3c3aeead2e22c90fef072256e00e67010000803b5d2fcf887ffa7f0ec00b74473a06025b5a64b0491236a3645b3cb24200b5a1c6aafda946ebf888518b9b1ad3e4a3b1caa195a69561039f6e107eafa89021a7503aaec0b01542ab5bd2d23e04b258634bd7d4c9d2488ad379fadccbfda227bd28f64d155039b07f843118590f6daf256b5f0876a20b9c01607839eaecf5034b7d6979a3686a0feeac04a641cd5e133437fd1514c1c9bb0000"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@short={0xb, @dev, @netrom, 0x1, @null}, &(0x7f0000000140)=0x1c, 0x80000) [ 1107.430534][T32596] binder: 32584:32596 unknown command 0 [ 1107.446404][T32591] binder: 32589:32591 unknown command 0 [ 1107.450806][T32588] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1107.457446][T32601] binder: 32597:32601 unknown command 0 [ 1107.480603][T32591] binder: 32589:32591 ioctl c0306201 400078 returned -14 [ 1107.497465][T32596] binder: 32584:32596 ioctl c0306201 400078 returned -14 10:22:52 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffe]}) 10:22:52 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = dup(r0) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x7, 0x0, 0x5, 0x1f, 0x0, 0x70bd26, 0x25dfdbfe, [@sadb_key={0x7, 0x9, 0x180, 0x0, "7a26d68914a8b5b12c86ba3b3be2001c5ebdbc1506a24f49f371d31e82f55b852c208cdf29e174dfa42f272a1ac1e14a"}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d2}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e23, 0x200, @mcast2, 0xac}, @in={0x2, 0x4e20, @broadcast}}, @sadb_lifetime={0x4, 0x4, 0x4, 0x8000, 0x7ff, 0x9}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in6=@remote, 0x9, 0x10}, @sadb_lifetime={0x4, 0x3, 0x4, 0x0, 0x7fff, 0x9}]}, 0xf8}}, 0x20000840) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_uring_setup(0xf50, &(0x7f0000000100)) [ 1107.522920][T32601] binder: 32597:32601 ioctl c0306201 400078 returned -14 [ 1107.615031][T32609] overlayfs: maximum fs stacking depth exceeded [ 1107.658835][T32593] overlayfs: maximum fs stacking depth exceeded [ 1107.680160][T32617] binder: 32613:32617 unknown command 0 [ 1107.709563][T32620] binder: 32618:32620 unknown command 0 [ 1107.738948][T32617] binder: 32613:32617 ioctl c0306201 400078 returned -14 10:22:52 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)) [ 1107.776762][T32620] binder: 32618:32620 ioctl c0306201 400078 returned -14 [ 1107.794307][T32623] binder: 32622:32623 unknown command 0 10:22:52 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x6c000000) 10:22:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 1107.840275][T32623] binder: 32622:32623 ioctl c0306201 400078 returned -14 10:22:52 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0xf50, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000000040)=0x9) [ 1107.983500][T32634] binder: 32632:32634 unknown command 0 [ 1108.023438][T32634] binder: 32632:32634 ioctl c0306201 400078 returned -14 [ 1108.068485][T32645] binder: 32636:32645 unknown command 0 [ 1108.137625][T32639] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1108.149346][T32645] binder: 32636:32645 ioctl c0306201 400078 returned -14 [ 1108.175655][T32651] overlayfs: maximum fs stacking depth exceeded [ 1108.220653][T32641] overlayfs: maximum fs stacking depth exceeded [ 1108.237738][T32652] binder: 32650:32652 unknown command 0 [ 1108.299783][T32652] binder: 32650:32652 ioctl c0306201 400078 returned -14 [ 1109.042009][T32608] libceph: resolve '0' (ret=-3): failed [ 1109.064073][T32608] libceph: Failed to parse monitor IPs: -3 10:22:55 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e23, @rand_addr=0x10001}, {0x2, 0x4e24, @rand_addr=0x1ff}, 0xc, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)='veth1_vlan\x00', 0x7fe00000000000, 0x6, 0x4}) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) r1 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x81040, 0x0) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(r1) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="5b643a3a5d2c303a3a00f980f100009885ccbb3c3aeead2e22c90fef072256e00e67010000803b5d2fcf887ffa7f0ec00b74473a06025b5a64b0491236a3645b3cb24200b5a1c6aafda946ebf888518b9b1ad3e4a3b1caa195a69561039f6e107eafa89021a7503aaec0b01542ab5bd2d23e04b258634bd7d4c9d2488ad379fadccbfda227bd28f64d155039b07f843118590f6daf256b5f0876a20b9c01607839eaecf5034b7d6979a3686a0feeac04a641cd5e133437fd1514c1c9bb0000"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) accept4$rose(r3, &(0x7f0000000080)=@short={0xb, @dev, @netrom, 0x1, @null}, &(0x7f0000000140)=0x1c, 0x80000) 10:22:55 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x2]}) 10:22:55 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x74000000) 10:22:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040700000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) 10:22:55 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0xf50, &(0x7f0000000100)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000001780)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff], 0x5) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) recvmsg$kcm(r5, &(0x7f0000001740)={&(0x7f0000001280)=@rc={0x1f, @none}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001300)=""/103, 0x67}, {&(0x7f0000001380)=""/176, 0xb0}, {&(0x7f0000000080)}, {&(0x7f0000001440)=""/81, 0x51}, {&(0x7f00000014c0)=""/246, 0xf6}], 0x5, &(0x7f0000001640)=""/203, 0xcb}, 0x10040) r6 = dup(r3) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000001180)={{{@in=@dev, @in=@dev}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e85411, &(0x7f0000000180)=""/4095) 10:22:55 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e23, @rand_addr=0x10001}, {0x2, 0x4e24, @rand_addr=0x1ff}, 0xc, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)='veth1_vlan\x00', 0x7fe00000000000, 0x6, 0x4}) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) r1 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x81040, 0x0) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000000240)) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="5b643a3a5d2c303a3a00f980f100009885ccbb3c3aeead2e22c90fef072256e00e67010000803b5d2fcf887ffa7f0ec00b74473a06025b5a64b0491236a3645b3cb24200b5a1c6aafda946ebf888518b9b1ad3e4a3b1caa195a69561039f6e107eafa89021a7503aaec0b01542ab5bd2d23e04b258634bd7d4c9d2488ad379fadccbfda227bd28f64d155039b07f843118590f6daf256b5f0876a20b9c01607839eaecf5034b7d6979a3686a0feeac04a641cd5e133437fd1514c1c9bb0000"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@short={0xb, @dev, @netrom, 0x1, @null}, &(0x7f0000000140)=0x1c, 0x80000) [ 1111.273716][T32686] binder: 32682:32686 unknown command 0 [ 1111.293776][T32692] binder: 32688:32692 unknown command 0 [ 1111.308551][T32689] binder: 32683:32689 unknown command 0 [ 1111.331562][T32686] binder: 32682:32686 ioctl c0306201 400078 returned -14 [ 1111.363903][T32692] binder: 32688:32692 ioctl c0306201 400078 returned -14 [ 1111.375557][T32689] binder: 32683:32689 ioctl c0306201 400078 returned -14 [ 1111.404280][T32702] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 10:22:56 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x3]}) [ 1111.453297][T32707] overlayfs: maximum fs stacking depth exceeded [ 1111.498687][T32690] overlayfs: maximum fs stacking depth exceeded 10:22:56 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x800, 0xe747, 0xff, 0x3, 0x1274, 0x3}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000080)={0x7, 0x14, [0x7ff, 0x3, 0x4, 0x401, 0x0]}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_GET_DEBUGREGS(r5, 0x8080aea1, &(0x7f0000000180)) io_uring_setup(0xf50, &(0x7f0000000100)) 10:22:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 1111.663973][T32716] binder: 32715:32716 unknown command 0 10:22:56 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x7a000000) [ 1111.707448][T32721] binder: 32718:32721 unknown command 0 [ 1111.720563][T32716] binder: 32715:32716 ioctl c0306201 400078 returned -14 10:22:56 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$pptp(0x18, 0x1, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xe}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}]}]}}]}, 0x44}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={@private1={0xfc, 0x1, [], 0x1}, 0x1c, r3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0\x00', r3}) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0xf50, &(0x7f0000000100)) [ 1111.764739][T32721] binder: 32718:32721 ioctl c0306201 400078 returned -14 10:22:56 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x4]}) [ 1111.884242][T32735] binder: 32732:32735 unknown command 0 [ 1111.921314][T32735] binder: 32732:32735 ioctl c0306201 400078 returned -14 [ 1111.987804][T32733] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1112.000712][T32744] overlayfs: maximum fs stacking depth exceeded [ 1112.025599][T32737] overlayfs: maximum fs stacking depth exceeded [ 1112.062066][T32745] binder: 32742:32745 unknown command 0 [ 1112.081412][T32751] binder: 32748:32751 unknown command 0 [ 1112.115087][T32745] binder: 32742:32745 ioctl c0306201 400078 returned -14 [ 1112.137118][T32751] binder: 32748:32751 ioctl c0306201 400078 returned -14 [ 1112.340357][T32703] libceph: resolve '0' (ret=-3): failed [ 1112.352817][T32703] libceph: Failed to parse monitor IPs: -3 [ 1113.458474][T32685] libceph: resolve '0' (ret=-3): failed [ 1113.486327][T32685] libceph: Failed to parse monitor IPs: -3 10:22:59 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e23, @rand_addr=0x10001}, {0x2, 0x4e24, @rand_addr=0x1ff}, 0xc, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)='veth1_vlan\x00', 0x7fe00000000000, 0x6, 0x4}) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) r1 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x81040, 0x0) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(r1) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="5b643a3a5d2c303a3a00f980f100009885ccbb3c3aeead2e22c90fef072256e00e67010000803b5d2fcf887ffa7f0ec00b74473a06025b5a64b0491236a3645b3cb24200b5a1c6aafda946ebf888518b9b1ad3e4a3b1caa195a69561039f6e107eafa89021a7503aaec0b01542ab5bd2d23e04b258634bd7d4c9d2488ad379fadccbfda227bd28f64d155039b07f843118590f6daf256b5f0876a20b9c01607839eaecf5034b7d6979a3686a0feeac04a641cd5e133437fd1514c1c9bb0000"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) accept4$rose(r3, &(0x7f0000000080)=@short={0xb, @dev, @netrom, 0x1, @null}, &(0x7f0000000140)=0x1c, 0x80000) 10:22:59 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x3, 0x36a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000180], 0x0, &(0x7f0000000040), &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x11, 0x10, 0x9a00, 'geneve1\x00', 'ip6_vti0\x00', 'wg1\x00', 'gre0\x00', @local, [0xff, 0xff, 0xff], @multicast, [0x101, 0xff, 0xff, 0x0, 0xff], 0xe6, 0xe6, 0x116, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x100000000}, {0x7}], 0x1, 0x2}}}, @cluster={{'cluster\x00', 0x0, 0x10}, {{0x1, 0x3, 0x80000001, 0x1}}}], [], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}}, {0x3, 0x6d, 0x890d, 'ipvlan0\x00', 'ipvlan1\x00', 'bond_slave_1\x00', 'gretap0\x00', @local, [0x0, 0xff, 0xff, 0x0, 0xff], @broadcast, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], 0xae, 0xae, 0xde, [@time={{'time\x00', 0x0, 0x18}, {{0x2, 0x20, 0x3028, 0xb8a3, 0x6, 0x57, 0x2}}}], [], @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x3, 0x0, 0x200, 'virt_wifi0\x00', 'virt_wifi0\x00', 'syz_tun\x00', 'rose0\x00', @empty, [], @dev={[], 0x19}, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0xb6, [], [], @common=@ERROR={'ERROR\x00', 0x20, {"28ddf4de11984754306dbfb75ec49f08d66b4af551f5de63cec516c949fc"}}}]}]}, 0x3e2) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0xf50, &(0x7f0000000100)) 10:22:59 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x5]}) 10:22:59 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x8724eaae) 10:22:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040a00000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) [ 1114.882199][ T304] binder: 32767:304 unknown command 0 [ 1114.902089][ T306] binder: 302:306 unknown command 0 [ 1114.924447][ T311] binder: 309:311 unknown command 0 [ 1114.936527][ T304] binder: 32767:304 ioctl c0306201 400078 returned -14 [ 1114.955978][ T306] binder: 302:306 ioctl c0306201 400078 returned -14 [ 1114.995891][ T311] binder: 309:311 ioctl c0306201 400078 returned -14 [ 1115.052542][ T321] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1115.062527][ T323] overlayfs: maximum fs stacking depth exceeded [ 1115.072447][ T303] overlayfs: maximum fs stacking depth exceeded [ 1115.389238][ T322] libceph: resolve '0' (ret=-3): failed [ 1115.394956][ T322] libceph: Failed to parse monitor IPs: -3 10:23:00 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e23, @rand_addr=0x10001}, {0x2, 0x4e24, @rand_addr=0x1ff}, 0xc, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)='veth1_vlan\x00', 0x7fe00000000000, 0x6, 0x4}) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) r1 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x81040, 0x0) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(r1) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="5b643a3a5d2c303a3a00f980f100009885ccbb3c3aeead2e22c90fef072256e00e67010000803b5d2fcf887ffa7f0ec00b74473a06025b5a64b0491236a3645b3cb24200b5a1c6aafda946ebf888518b9b1ad3e4a3b1caa195a69561039f6e107eafa89021a7503aaec0b01542ab5bd2d23e04b258634bd7d4c9d2488ad379fadccbfda227bd28f64d155039b07f843118590f6daf256b5f0876a20b9c01607839eaecf5034b7d6979a3686a0feeac04a641cd5e133437fd1514c1c9bb0000"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) accept4$rose(r3, &(0x7f0000000080)=@short={0xb, @dev, @netrom, 0x1, @null}, &(0x7f0000000140)=0x1c, 0x80000) 10:23:00 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x6]}) 10:23:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 10:23:00 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0xa810cbca) 10:23:00 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) keyctl$chown(0x4, 0x0, r4, 0xee01) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000380)={0x200, 0x9, {r3}, {r4}, 0xf85, 0x8000}) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000003c0)={0x2b, 0x37, 0x2, {0x2, 0x7f, 0x8, r5, 0xd, '/dev/binder#\x00'}}, 0x2b) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0xf50, &(0x7f0000000100)) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) close(r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r8, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {r8}}, 0x10) [ 1116.380796][ T338] binder: 334:338 unknown command 0 [ 1116.387787][ T339] binder: 331:339 unknown command 0 [ 1116.408991][ T333] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1116.412999][ T338] binder: 334:338 ioctl c0306201 400078 returned -14 10:23:01 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e23, @rand_addr=0x10001}, {0x2, 0x4e24, @rand_addr=0x1ff}, 0xc, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)='veth1_vlan\x00', 0x7fe00000000000, 0x6, 0x4}) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) r1 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x81040, 0x0) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(r1) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="5b643a3a5d2c303a3a00f980f100009885ccbb3c3aeead2e22c90fef072256e00e67010000803b5d2fcf887ffa7f0ec00b74473a06025b5a64b0491236a3645b3cb24200b5a1c6aafda946ebf888518b9b1ad3e4a3b1caa195a69561039f6e107eafa89021a7503aaec0b01542ab5bd2d23e04b258634bd7d4c9d2488ad379fadccbfda227bd28f64d155039b07f843118590f6daf256b5f0876a20b9c01607839eaecf5034b7d6979a3686a0feeac04a641cd5e133437fd1514c1c9bb0000"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) accept4$rose(r3, &(0x7f0000000080)=@short={0xb, @dev, @netrom, 0x1, @null}, &(0x7f0000000140)=0x1c, 0x80000) [ 1116.434127][ T339] binder: 331:339 ioctl c0306201 400078 returned -14 [ 1116.442680][ T345] binder: 340:345 unknown command 0 [ 1116.466002][ T341] ucma_write: process 2677 (syz-executor.3) changed security contexts after opening file descriptor, this is not allowed. 10:23:01 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0xc0306201, 0x400078) r3 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x3, 0x102) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x7c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3f}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x883e}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0xdf}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0xa78}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0xb20}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8810) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0xf50, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xe}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}]}]}}]}, 0x44}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={@private1={0xfc, 0x1, [], 0x1}, 0x1c, r7}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r6, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x80) [ 1116.504118][ T345] binder: 340:345 ioctl c0306201 400078 returned -14 10:23:01 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x7]}) [ 1116.622532][ T358] overlayfs: maximum fs stacking depth exceeded [ 1116.665701][ T342] overlayfs: maximum fs stacking depth exceeded [ 1116.709373][ T362] binder: 360:362 unknown command 0 [ 1116.747356][ T362] binder: 360:362 ioctl c0306201 400078 returned -14 10:23:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000000c0)={"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"}) [ 1116.803764][ T372] binder: 365:372 unknown command 0 10:23:01 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807a00, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0xaeea2487) [ 1116.847471][ T372] binder: 365:372 ioctl c0306201 400078 returned -14 10:23:01 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0xc0306201, 0x400078) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl(r2, 0x2, &(0x7f0000000040)="1a354dc160475cfc1b6aeb4bebd544db5e2ee390ecc6e2a060438ab15badd0a8350abdbe2035d219f80134eae2d18b5d5fd5121a15359a14264594320bd94c23e022f38695") io_uring_setup(0xf50, &(0x7f0000000100)) 10:23:01 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x400078) io_uring_setup(0xf50, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x42]}) [ 1117.096540][ T385] binder: 382:385 unknown command 0 [ 1117.112238][ T379] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1117.114375][ T386] binder: 380:386 unknown command 0 [ 1117.156350][ T391] binder: 388:391 unknown command 0 [ 1117.158966][ T385] binder: 382:385 ioctl c0306201 400078 returned -14 [ 1117.211783][ T391] binder: 388:391 ioctl c0306201 400078 returned -14 [ 1117.246812][ T386] binder: 380:386 ioctl c0306201 400078 returned -14 [ 1117.280385][ T401] overlayfs: maximum fs stacking depth exceeded [ 1117.325721][ T389] overlayfs: maximum fs stacking depth exceeded [ 1118.713474][ T366] libceph: resolve '0' (ret=-3): failed [ 1118.746190][ T366] libceph: Failed to parse monitor IPs: -3 [ 1118.980269][T17539] ================================================================== [ 1118.988415][T17539] BUG: KCSAN: data-race in file_update_time / generic_update_time [ 1118.996222][T17539] [ 1118.998671][T17539] read to 0xffff8881213795a8 of 8 bytes by task 16343 on cpu 0: [ 1119.006310][T17539] file_update_time+0xbb/0x2d0 [ 1119.011101][T17539] pipe_write+0xbd3/0xd40 [ 1119.015443][T17539] do_iter_readv_writev+0x4a7/0x5d0 [ 1119.020645][T17539] do_iter_write+0x137/0x3a0 [ 1119.025329][T17539] vfs_writev+0x118/0x1c0 [ 1119.029681][T17539] do_writev+0x203/0x240 [ 1119.033923][T17539] __x64_sys_writev+0x4b/0x60 [ 1119.042427][T17539] do_syscall_64+0xc7/0x3b0 [ 1119.047059][T17539] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1119.052959][T17539] [ 1119.053248][ T351] libceph: resolve '0' (ret=-3): failed [ 1119.055299][T17539] write to 0xffff8881213795a8 of 16 bytes by task 17539 on cpu 1: [ 1119.055324][T17539] generic_update_time+0x109/0x270 [ 1119.055340][T17539] update_time+0x7d/0x90 [ 1119.055361][T17539] file_update_time+0x205/0x2d0 [ 1119.055386][T17539] pipe_write+0xbd3/0xd40 [ 1119.055406][T17539] do_iter_readv_writev+0x4a7/0x5d0 [ 1119.055419][T17539] do_iter_write+0x137/0x3a0 [ 1119.055432][T17539] vfs_writev+0x118/0x1c0 [ 1119.055445][T17539] do_writev+0x203/0x240 [ 1119.055462][T17539] __x64_sys_writev+0x4b/0x60 [ 1119.055482][T17539] do_syscall_64+0xc7/0x3b0 [ 1119.055503][T17539] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1119.055507][T17539] [ 1119.055511][T17539] Reported by Kernel Concurrency Sanitizer on: [ 1119.055530][T17539] CPU: 1 PID: 17539 Comm: syz-executor.1 Not tainted 5.7.0-rc1-syzkaller #0 [ 1119.055538][T17539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1119.055544][T17539] ================================================================== [ 1119.055553][T17539] Kernel panic - not syncing: panic_on_warn set ... [ 1119.055570][T17539] CPU: 1 PID: 17539 Comm: syz-executor.1 Not tainted 5.7.0-rc1-syzkaller #0 [ 1119.055579][T17539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1119.055584][T17539] Call Trace: [ 1119.055607][T17539] dump_stack+0x11d/0x187 [ 1119.055627][T17539] panic+0x210/0x640 [ 1119.055646][T17539] ? vprintk_func+0x89/0x13a [ 1119.055671][T17539] kcsan_report.cold+0xc/0x1a [ 1119.055694][T17539] kcsan_setup_watchpoint+0x3fb/0x440 [ 1119.055731][T17539] generic_update_time+0x109/0x270 [ 1119.064109][ T351] libceph: Failed to parse monitor IPs: -3 [ 1119.069075][T17539] ? __mnt_want_write+0x140/0x1b0 [ 1119.069103][T17539] update_time+0x7d/0x90 [ 1119.069125][T17539] file_update_time+0x205/0x2d0 [ 1119.069212][T17539] pipe_write+0xbd3/0xd40 [ 1119.238732][T17539] ? fput+0x20/0x30 [ 1119.242558][T17539] ? __wake_up_common_lock+0x85/0xb0 [ 1119.247975][T17539] do_iter_readv_writev+0x4a7/0x5d0 [ 1119.253207][T17539] do_iter_write+0x137/0x3a0 [ 1119.257813][T17539] vfs_writev+0x118/0x1c0 [ 1119.262159][T17539] ? __fget_light+0xc0/0x1a0 [ 1119.266763][T17539] do_writev+0x203/0x240 [ 1119.271130][T17539] ? debug_smp_processor_id+0x3f/0x129 [ 1119.276618][T17539] __x64_sys_writev+0x4b/0x60 [ 1119.281309][T17539] do_syscall_64+0xc7/0x3b0 [ 1119.285831][T17539] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1119.291726][T17539] RIP: 0033:0x428fce [ 1119.295637][T17539] Code: 39 d5 48 89 0a 48 89 72 08 48 89 d8 75 de 4c 63 b5 7c ff ff ff 41 b9 14 00 00 00 90 4c 89 c2 4c 89 ee 4c 89 f7 44 89 c8 0f 05 <48> 83 f8 fc 49 89 c4 74 e9 45 85 ff 75 55 48 8d 65 d8 5b 41 5c 41 [ 1119.315344][T17539] RSP: 002b:00007f3268872850 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1119.323785][T17539] RAX: ffffffffffffffda RBX: 0000000000000041 RCX: 0000000000428fce [ 1119.331774][T17539] RDX: 0000000000000005 RSI: 00007f3268872850 RDI: 0000000000000002 [ 1119.339754][T17539] RBP: 00007f3268872a30 R08: 0000000000000005 R09: 0000000000000014 [ 1119.347741][T17539] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000004 [ 1119.355716][T17539] R13: 00007f3268872850 R14: 0000000000000002 R15: 0000000000000001 [ 1119.365004][T17539] Kernel Offset: disabled [ 1119.369459][T17539] Rebooting in 86400 seconds..