ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x82, 0x1000000, &(0x7f0000000100)="c1596d344d6c67fb459a8e33357ac3c61fc92764cf044897b86bec7ced48e077f524b82fd1cbbd54a533322ea1269a556124b935a1cb9ffe75c6c32a5ea4d5f76e6d163260af0665416b48af11091d20d0f2382b7117a3c8fef0159879596abfe33fe4e9f685827f81090589af7c8abe37dea31bf985eb0000f1ffffffffffffff00"}) 08:15:11 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x600, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) [ 2607.998167][ T2711] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2608.023199][ T2711] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2608.048876][ T2711] nbd: error processing sock list 08:15:11 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4000000000000000}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x100000000000000}, 0x0) 08:15:11 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x30) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x5) tkill(r2, 0x30) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x6, 0x100) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x4], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x3f, 0x80, 0x7f, 0x1, 0x0, 0x9, 0x20404, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x3ff, 0xfffffffffffff801}, 0x8000, 0x7fff, 0x7, 0x4, 0x1ff, 0x1, 0x3ff, 0x0, 0x4b, 0x0, 0x9}, r1, 0x6, r3, 0x8) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) 08:15:11 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x600000000000000}, 0x0) 08:15:11 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x430}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r1, 0xa) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0xa, 0x5a, 0x2, 0x0, 0x6, 0x4004, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8001, 0x2, @perf_config_ext={0x10000, 0x6}, 0x8048, 0x1c, 0x4, 0x6, 0x0, 0x4, 0xff7b, 0x0, 0xc455, 0x0, 0x24}, 0x0, 0xe, r1, 0x8) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0x8, 0x4, 0xb9, 0x0, 0xc0, 0xb903, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7fff, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x4180, 0xff, 0x80, 0x4, 0x5, 0x4, 0x81, 0x0, 0x451967be, 0x0, 0x10001}, 0xffffffffffffffff, 0x4, r1, 0xb) 08:15:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x200000000000000}, 0x0) [ 2608.229298][ T2727] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2608.247472][ T2727] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2608.301984][ T2727] nbd: error processing sock list [ 2608.345752][ T2727] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2608.364458][ T2727] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2608.385089][ T2727] nbd: error processing sock list 08:15:11 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x700000000000000}, 0x0) [ 2608.395785][ T2733] binder: 2730:2733 ioctl 400c620e 200000c0 returned -22 [ 2608.426750][ T2737] binder: 2730:2737 ioctl 400c620e 200000c0 returned -22 [ 2608.490812][ T2740] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2608.508273][ T2740] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2608.524959][ T2740] nbd: error processing sock list 08:15:12 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xfefdffff}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x300000000000000}, 0x0) 08:15:12 executing program 3: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x30) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, r0, 0x3, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) 08:15:12 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x800000000000000}, 0x0) 08:15:12 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x700, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) [ 2608.897696][ T2749] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2608.913210][ T2749] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2608.923056][ T2749] nbd: error processing sock list 08:15:12 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x401f000000000000}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x400000000000000}, 0x0) 08:15:12 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x900000000000000}, 0x0) 08:15:12 executing program 3: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='/dev/binder#\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000640)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 2609.158849][ T2768] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2609.176618][ T2768] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2609.179855][ T2771] binder: 2765:2771 ioctl 400c620e 200000c0 returned -22 [ 2609.200646][ T2768] nbd: error processing sock list 08:15:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x500000000000000}, 0x0) [ 2609.215482][ T2773] binder: 2765:2773 ioctl 400c620e 200000c0 returned -22 08:15:12 executing program 3: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/softnet_stat\x00') r2 = pidfd_getfd(r1, r0, 0x0) ioctl$I2C_SLAVE(r2, 0x703, 0x145) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x9, 0x1, 0x1f, 0x6, 0x0, 0x1000, 0x14000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0xfff, 0x6}, 0x210, 0x60000000, 0xe17d38e, 0x1, 0x2, 0x7, 0x3ff, 0x0, 0xffff, 0x0, 0x7}, 0x0, 0xd, r1, 0x0) r3 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) r4 = fcntl$dupfd(r3, 0x0, r0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000100)) 08:15:12 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0xa00000000000000}, 0x0) [ 2609.391689][ T2782] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2609.413782][ T2782] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2609.425310][ T2781] binder: 2778:2781 ioctl 400c620e 200000c0 returned -22 [ 2609.435503][ T2781] binder: 2778:2781 ioctl 40082404 20000100 returned -22 [ 2609.445065][ T2782] nbd: error processing sock list [ 2609.480647][ T2786] binder: 2778:2786 ioctl 400c620e 200000c0 returned -22 [ 2609.502965][ T2786] binder: 2778:2786 ioctl 40082404 20000100 returned -22 08:15:13 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xfeffffff}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x600000000000000}, 0x0) 08:15:13 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0xe00000000000000}, 0x0) 08:15:13 executing program 3: ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, &(0x7f0000000000)={0x2, 0x1, @stop_pts=0x6}) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) 08:15:13 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x1000000, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) [ 2609.917853][ T2793] nbd: error processing sock list [ 2609.922651][ T2795] binder: 2792:2795 ioctl 400c620e 200000c0 returned -22 08:15:13 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4d01000000000000}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:13 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x40, 0x0, 0x5, 0x6, 0x0, 0x20, 0x4c1, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000, 0x2, @perf_config_ext={0x2, 0x80}, 0x540, 0x7, 0x7f, 0x9, 0x4, 0x0, 0x6, 0x0, 0x10001, 0x0, 0x2c8}, 0xffffffffffffffff, 0xc, r0, 0x8) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) 08:15:13 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0xf00000000000000}, 0x0) 08:15:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x700000000000000}, 0x0) 08:15:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x800000000000000}, 0x0) [ 2610.120174][ T2811] binder: 2805:2811 ioctl 400c620e 200000c0 returned -22 [ 2610.144966][ T2815] binder: 2805:2815 ioctl 400c620e 200000c0 returned -22 [ 2610.148746][ T2814] nbd: error processing sock list 08:15:13 executing program 3: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x5) tkill(r2, 0x30) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0xbc, 0x0, &(0x7f0000000300)=[@increfs={0x40046304, 0x2}, @release, @request_death={0x400c630e, 0x2}, @dead_binder_done, @acquire={0x40046305, 0x1}, @increfs_done, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/185, 0xb9, 0x2, 0x5}, @flat=@weak_handle={0x77682a85, 0x1100, 0x2}, @flat=@binder={0x73622a85, 0x190a, 0x2}}, &(0x7f00000002c0)={0x0, 0x28, 0x40}}}, @free_buffer, @increfs={0x40046304, 0x1}, @acquire_done={0x40106309, 0x2}], 0x80, 0x0, &(0x7f00000003c0)="da4914f0329317e4bfe0e9f3b3318de42f7119b9cf0936c357d7850176a7fe011daef02ec4a62795bd58e08e16af51e806ecb06f5ee4cf24ff3d344618cad807b0bfb6c299a5e4027e7cb43e8f9b0391d668af18b0c5355adcc509982d785b2246b7a49a229ad1a736b9c304a7bc797978753d3ad4cbd1043bd5db36d6c22494"}) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xf6, 0xff, 0x6, 0x6, 0x0, 0x101, 0x52000, 0x7, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x7fff}, 0x10, 0xd60, 0x0, 0x4, 0x9, 0xffff, 0x401, 0x0, 0x80, 0x0, 0x40}, r2, 0x4, r0, 0x2) [ 2610.217382][ T2814] nbd: error processing sock list 08:15:13 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x14a3a1d500000000}, 0x0) [ 2610.336885][ T2823] nbd: error processing sock list [ 2610.375255][ T2825] binder: 2822:2825 ioctl 400c620e 200000c0 returned -22 08:15:14 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xfffffdfe}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x900000000000000}, 0x0) 08:15:14 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x1f00000000000000}, 0x0) 08:15:14 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x30) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x800c2, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)=0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x430}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r3, 0xa) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0xa, 0x5a, 0x2, 0x0, 0x6, 0x4004, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8001, 0x2, @perf_config_ext={0x10000, 0x6}, 0x8048, 0x1c, 0x4, 0x6, 0x0, 0x4, 0xff7b, 0x0, 0xc455, 0x0, 0x24}, 0x0, 0xe, r3, 0x8) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x3b, 0x45, 0x1, 0xd5, 0x0, 0x0, 0x8000, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000140), 0xa}, 0x24b0, 0xf0, 0x9, 0x2, 0x5, 0x7, 0x1, 0x0, 0x6, 0x0, 0x9}, r2, 0x4, r3, 0x8) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x0, 0xb4, 0x6, 0x3f, 0x0, 0x1f, 0x20080, 0x9, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x900, 0x8, 0x7, 0x7, 0x3, 0x80000001, 0x7, 0x0, 0x7f, 0x0, 0x2}, r0, 0x10, r1, 0x3) r4 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) 08:15:14 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x2000000, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) [ 2610.957833][ T2838] nbd: error processing sock list 08:15:14 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x6400000000000000}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:14 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x2100, 0x40) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="2b6fba65372c7e0491c68017fbb9f3e120b5eb8d45e6e9e14209173336d01a582ca1ec2da16acf746865936c40e532f13824620813c545a7891da1c54f8f275f5c8fa6a293538e112eeed9c3715a275ffa3fccf45d2c7a3f32b0ecad59f49c4deb82a826097b0f2036c1b4fa47bec5c4af06e35a4faf6abe8ce21e601dee2c1d6887ac9bd52fe153e8754c3f392721303daf60f6602c21cf77a78c68fe27e74eea54f7d61ae7749dc70008ad73b03b05467fd8c4eabfb9d2146db1c3e2e6331980275ef971"], 0x1, 0x1000000, &(0x7f0000000040)="aa"}) r2 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r3, r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f00000003c0)=[@decrefs={0x40046307, 0x2}, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@handle={0x73682a85, 0x10b}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}], 0x3c, 0x0, &(0x7f0000000180)="5eae68ba81f6e3844bad1392dadf8ba75f7e412b6f2c9f54379c651c168d193dbb9840c2c185979e2a6334f01f3a5d0773f56729d8864d29203ff71e"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r4, r1) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) 08:15:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0xa00000000000000}, 0x0) 08:15:14 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x2000000000000000}, 0x0) [ 2611.110570][ T2847] binder: 2844:2847 unknown command 0 [ 2611.120526][ T2847] binder: 2844:2847 ioctl c0306201 20000200 returned -22 [ 2611.156637][ T2847] binder: 2844:2847 unknown command 0 [ 2611.173400][ T2847] binder: 2844:2847 ioctl c0306201 20000200 returned -22 [ 2611.195918][ T2854] nbd: error processing sock list 08:15:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0xe00000000000000}, 0x0) [ 2611.201713][ T2847] binder: 2844:2847 ioctl 40046629 20000000 returned -22 [ 2611.213355][ T2847] binder: 2844:2847 ioctl 400c620e 200000c0 returned -22 08:15:14 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x3f00000000000000}, 0x0) [ 2611.253812][ T2847] binder: 2844:2847 unknown command 0 [ 2611.259693][ T2847] binder: 2844:2847 ioctl c0306201 20000200 returned -22 [ 2611.268890][ T2855] binder: 2844:2855 unknown command 0 [ 2611.274303][ T2855] binder: 2844:2855 ioctl c0306201 20000200 returned -22 [ 2611.285061][ T2857] binder: 2844:2857 ioctl 40046629 20000000 returned -22 08:15:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0xf00000000000000}, 0x0) [ 2611.384092][ T2862] nbd: error processing sock list [ 2611.431866][ T2862] nbd: error processing sock list 08:15:15 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xffffff7f}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:15 executing program 3: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x600000000000000, 0x80000000, 0x7, 0x6}) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) 08:15:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x2000000000000000}, 0x0) 08:15:15 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x4800000000000000}, 0x0) 08:15:15 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x3000000, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) [ 2611.906769][ T2873] binder: 2871:2873 ioctl 400c620e 200000c0 returned -22 [ 2611.926707][ T2878] nbd: error processing sock list 08:15:15 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) 08:15:15 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x7c15000000000000}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:15 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x4c00000000000000}, 0x0) 08:15:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x3f00000000000000}, 0x0) [ 2612.064361][ T2897] __nla_validate_parse: 9 callbacks suppressed [ 2612.064378][ T2897] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2612.089560][ T2896] binder: 2893:2896 ioctl 400c620e 200000c0 returned -22 [ 2612.098555][ T2897] validate_nla: 9 callbacks suppressed [ 2612.098568][ T2897] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2612.122152][ T2901] binder: 2893:2901 ioctl 400c620e 200000c0 returned -22 [ 2612.123029][ T2897] nbd: error processing sock list 08:15:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x4800000000000000}, 0x0) 08:15:15 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x6000000000000000}, 0x0) 08:15:15 executing program 3: sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001700)={&(0x7f0000001780)=ANY=[@ANYBLOB="501000001300080026bd7000fbdbdf25021f81014e214e2040000000040000000400000033070000000000007f0000000800000001010000d6d395b7cc25dc0677197d5cef977e530b94419dc349e770a4c189d798e1786f4a4eb6c81aeff8a43d2738a748d7198e48aa233d297a28", @ANYRES32=0x0, @ANYBLOB="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"], 0x1050}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0xb0, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/142, 0x8e, 0x1, 0x24}, @fda={0x66646185, 0x8, 0x1, 0xa}, @fda={0x66646185, 0x0, 0x0, 0x25}}, &(0x7f0000000240)={0x0, 0x28, 0x48}}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@fd={0x66642a85, 0x0, r0}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/243, 0xf3, 0x1, 0x25}}, &(0x7f0000000400)={0x0, 0x18, 0x30}}, 0x1000}, @clear_death={0x400c630f, 0x1}, @clear_death={0x400c630f, 0x3}], 0xda, 0x0, &(0x7f0000000500)="4ab3e60f7b6481cd5425bc7f8a8a5cf4202e0fdd738271f6eafec890aef0bbbcaaf727d8f2398d0497bbfd71d68d9325d963c7dfeda7f0b235b0a38fa75c20b26d6468e531222206f1cb5fef0321f468ea3be9065b051f05c30ed64c1e0cca91b8d74c1a2f1fa2c8a5005e5a679ba5e88252cb2b4b056b89222d3535c536618b611f05a06f35d2e2f7b4405836a9833dfe979f9cd14385963139bb390fbb04537a297e425dcd508e14e53066156952671c37daa8a3924eb4d4135109005f0b4a6280e6c4a80f51b77be61f02153b96f85ef6a890c5656e7c1abe"}) [ 2612.263129][ T2907] binder: 2906:2907 ioctl 400c620e 200000c0 returned -22 [ 2612.287811][ T2907] binder: 2906:2907 ioctl 400c620e 200000c0 returned -22 [ 2612.304420][ T2912] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2612.316028][ T2912] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2612.330211][ T2912] nbd: error processing sock list 08:15:16 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xfffffffe}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x4a069fb700000000}, 0x0) 08:15:16 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xb31fe4c50f719daa, 0x29) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000040)={0x9, 0x0, {0xffffffffffffffff, 0x1, 0x1, 0x3, 0x9}, 0x7fff}) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) 08:15:16 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x6800000000000000}, 0x0) 08:15:16 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x9a02000000000000}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:16 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x4000000, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) [ 2612.848835][ T2930] binder: 2927:2930 ioctl 400c620e 200000c0 returned -22 [ 2612.876351][ T2937] binder: 2927:2937 ioctl 400c620e 200000c0 returned -22 08:15:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x4c00000000000000}, 0x0) [ 2612.890703][ T2939] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2612.911959][ T2939] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 08:15:16 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x24, 0x0, &(0x7f0000000000)=[@increfs_done={0x40106308, 0x3}, @request_death={0x400c630e, 0x3}], 0x21, 0x0, &(0x7f0000000040)="41cbc5697af5b730f7ccd0c8b68deadd7c6125e782365095bc27907244f00779a5"}) [ 2612.947175][ T2939] nbd: error processing sock list 08:15:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x6000000000000000}, 0x0) 08:15:16 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x6c00000000000000}, 0x0) [ 2612.992314][ T2946] binder: 2943:2946 ioctl 400c620e 200000c0 returned -22 [ 2613.104631][ T2953] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2613.115257][ T2953] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2613.124066][ T2953] nbd: error processing sock list 08:15:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x6800000000000000}, 0x0) 08:15:16 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x7400000000000000}, 0x0) [ 2613.154906][ T2953] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2613.166271][ T2953] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2613.176008][ T2953] nbd: error processing sock list [ 2613.259580][ T2962] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2613.276155][ T2962] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2613.294324][ T2962] nbd: error processing sock list [ 2613.338496][ T2962] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2613.348336][ T2962] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2613.356632][ T2962] nbd: error processing sock list 08:15:17 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x102a08011f1}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x6c00000000000000}, 0x0) 08:15:17 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xcf04000000000000}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:17 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x7a00000000000000}, 0x0) 08:15:17 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x5000000, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) [ 2613.826171][ T2973] binder: 2943:2973 ioctl 400c620e 200000c0 returned -22 [ 2613.852189][ T2976] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 08:15:17 executing program 3: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xd7, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x30) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x81, 0x9, 0x2, 0x2, 0x0, 0x800, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x5}, 0x1a407, 0x6, 0xfffffff9, 0x8, 0x5, 0x1574, 0x80, 0x0, 0x3f, 0x0, 0x4}, r1, 0xb, r0, 0xa) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\x00') [ 2613.871756][ T2976] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2613.887859][ T2976] nbd: error processing sock list 08:15:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x7400000000000000}, 0x0) 08:15:17 executing program 3: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x4, 0x3, 0x0, 0x0, 0xfffffffffffffffb, 0x1200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x9, 0xffffffffffffff01}, 0x41a01, 0x78, 0x0, 0x2, 0x200, 0x3, 0x7, 0x0, 0x5, 0x0, 0x6}, 0x0, 0x0, r0, 0x12) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000240)={0x0, 0x3, @start={0x0, 0x0, "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", "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"}, [0x5, 0x1, 0x8000, 0x1a2c, 0x7, 0x1, 0xfffffffffffff001, 0x10001, 0x49, 0xf5c8, 0x6, 0x30, 0x100000000, 0x8285, 0x9, 0x6, 0x4b57, 0x2ccb6e51, 0x40, 0x100000000, 0x3, 0xfffffffffffffff9, 0x7c, 0x9, 0x1, 0x0, 0x80, 0xc9, 0x2, 0x1, 0xbf, 0xf3, 0x3, 0x4, 0x8, 0x80000000, 0x3, 0x6, 0x1, 0xab8, 0x321, 0x6, 0x3f, 0xaa7, 0x7, 0x3, 0x709, 0x4, 0x382c, 0x4, 0x81, 0x34810000000, 0x7fff, 0x8, 0x1, 0x1, 0xd286, 0x6dd, 0x1, 0x9, 0x8, 0x1ff, 0x1, 0x5]}) 08:15:17 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x9effffff00000000}, 0x0) 08:15:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x7a00000000000000}, 0x0) [ 2614.106471][ T2992] binder: 2990:2992 ioctl 400c620e 200000c0 returned -22 [ 2614.111409][ T2994] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2614.124393][ T2994] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2614.133520][ T2994] nbd: error processing sock list 08:15:17 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0xf0ffffff00000000}, 0x0) [ 2614.159997][ T2996] binder: 2990:2996 ioctl ca289435 20000240 returned -22 [ 2614.188114][ T2992] binder: 2990:2992 ioctl 400c620e 200000c0 returned -22 [ 2614.188453][ T2996] binder: 2990:2996 ioctl ca289435 20000240 returned -22 08:15:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x97ffffff00000000}, 0x0) [ 2614.341484][ T3004] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2614.376658][ T3004] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2614.391517][ T3004] nbd: error processing sock list 08:15:18 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x1000000000000}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:18 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x400000) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000040)=0xf48e) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000440)={0x2, 0x40c, @status={[0x3, 0x1800000000, 0xcf7b, 0x4e, 0x6, 0x1]}, [0x0, 0x1, 0x9a4, 0x7, 0x4, 0x2, 0x4, 0xfffffffffffffffa, 0x6, 0x40, 0x238a, 0x9, 0xffffffffffffffff, 0x1ff, 0x1f, 0x226, 0x7, 0xce1, 0x3f, 0x5, 0x200, 0x7f, 0x449800000000000, 0x8, 0x0, 0x10000, 0x3, 0x1000, 0xffffffffffff61f2, 0x9, 0x100000001, 0x8, 0x80000000, 0x8001, 0x0, 0xffffffffffffff01, 0x3, 0x84, 0x4, 0x100000000, 0x0, 0x3, 0x6, 0x5, 0x3, 0x7, 0xffffffff80000001, 0x7fff, 0x8, 0xfffffffffffffffa, 0x1aa, 0x7, 0x6, 0x0, 0x96e5, 0xffffffff, 0x81, 0x10000, 0x7, 0x3, 0x81, 0x2, 0x6, 0x3]}) ioctl$BINDER_WRITE_READ(r1, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) r2 = syz_mount_image$vxfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x7, 0x2, &(0x7f0000000180)=[{&(0x7f0000000240)="90f5f5726e17c1589503300f1b58dcfe99da2e072418a6cd0f5804757d1c9095b60a55364907a3e7309d097017c5be8b78008c8457344d384a43df2ab1ae8a2633c9562a8f7bbd0e58c5", 0x4a, 0x7}, {&(0x7f00000002c0)="df5cada77ecf8edea4cbf2b38cd774735aad3009d9435a761e6e59f8ff37f1389af301fdef0eda94d208bb1ee381cb39f9f84ee76da6dfd438f453739a5466a6f7d8cad80a3156b8bc99457f206c2af80ea3916f65904cf14a5f926a29e842f41e90f60a315b63f907", 0x69, 0x9}], 0x82, &(0x7f0000000340)={[{}, {'/dev/binder#\x00'}, {'/dev/input/mice\x00'}, {'/dev/input/mice\x00'}, {'/dev/input/mice\x00'}, {'%+'}], [{@euid_lt={'euid<', 0xee00}}, {@obj_user={'obj_user', 0x3d, '@\x01'}}, {@subj_role={'subj_role', 0x3d, '-'}}, {@obj_user={'obj_user', 0x3d, '\\$-,+'}}, {@measure}, {@hash}]}) openat(r2, &(0x7f0000000400)='./file0\x00', 0x2100, 0x100) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x208094, 0x4) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x5) tkill(r3, 0x30) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000ec0)={0x1, 0x80, 0x9, 0x5, 0x5, 0x3, 0x0, 0x5, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000e80), 0x2}, 0x0, 0x0, 0x9e3, 0x0, 0x0, 0x8, 0x9, 0x0, 0x2, 0x0, 0x6}, r3, 0x8, 0xffffffffffffffff, 0x8) 08:15:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 08:15:18 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xfeffffff00000000}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:18 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0xffffff7f00000000}, 0x0) 08:15:18 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x6000000, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) [ 2614.841013][ T3020] binder: 3011:3020 ioctl 400c620e 200000c0 returned -22 [ 2614.857559][ T3022] nbd: error processing sock list [ 2614.874540][ T3020] vxfs: WRONG superblock magic 00000000 at 1 08:15:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0xb4f9d5f400000000}, 0x0) [ 2614.890154][ T3020] vxfs: WRONG superblock magic 00000000 at 8 [ 2614.910380][ T3020] vxfs: can't find superblock. 08:15:18 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0xffffffff00000000}, 0x0) 08:15:18 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0xa8, 0x0, &(0x7f0000000100)=[@increfs_done={0x40106308, 0x2}, @acquire_done={0x40106309, 0x1}, @increfs_done={0x40106308, 0x1}, @increfs_done={0x40106308, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x7, 0x2, 0x6}, @fda={0x66646185, 0x400002, 0x2, 0x15}, @flat=@handle={0x73682a85, 0xa, 0x1}}, &(0x7f0000000080)={0x0, 0x20, 0x40}}}, @acquire_done={0x40106309, 0x2}], 0x7, 0x0, &(0x7f0000000240)="a51eb3a541d5dc"}) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) 08:15:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) [ 2615.093983][ T3037] binder: 3036:3037 ioctl 400c620e 200000c0 returned -22 [ 2615.123032][ T3038] nbd: error processing sock list 08:15:18 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) [ 2615.156524][ T3038] nbd: error processing sock list 08:15:18 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0xfffffffffffff000}, 0x0) [ 2615.293027][ T3047] binder: 3044:3047 ioctl 400c620e 200000c0 returned -22 [ 2615.321535][ T3048] nbd: error processing sock list [ 2615.341205][ T3050] binder: 3044:3050 ioctl 400c620e 200000c0 returned -22 [ 2615.373498][ T3048] nbd: error processing sock list 08:15:19 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x40030000000000}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:19 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0xfdffffff00000000}, 0x0) 08:15:19 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xffffff7f00000000}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:19 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x2}, 0x0) 08:15:19 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\vc\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1000, 0x0, &(0x7f0000000240)="0fd25dae6deb816780a9146a9a21c5b6ab6d48d4bcae9723871f3a40c44e875dfefc0ba913031d3bfbceb5d9e92aa242d1f6e2e11afa28bfb65614f20225d0e1465483dcd8aed436e22f515e56b3047d5db345c92253669eb298734a95c21e7ee96be4f5d38d9ae310865b8138e6b423fbf05e698a7915b05d6f4cc8a67bdf0ac5cb31a36644da6807101cf16a9da791d4fce2e97c67d11c5331d480fc5c493c8115d57823ba73a801df74bcc5298f73b8d074fab7d468dacd1f5c27f0b087c402f304cb05f61724fb44485a59d78113fcbb0afd5378940561f44c0ef00379d8b90b68703048a1589ba01bd5fc7d04400158cf26de88ab422803689e0433c76b5f95bfb314f65aac320dd06d36621167801d9902b85b988aa1c2cdcc1869e41c22b444aea6e5a9ed1c8574b3672ecdd904376df1374251a069c9e63f5edadd8d7ea81701306c7421fe924603163dc20e2ce7af2f4046645ba035b4a9968e39ad7dee676a094f702160176897dd8d728ab0a7dedd842bd9891a743de9e805fd3690757254e95f59beb938844d471ca477e166ccfab9b835f327dba16627144c5dbb5c9cf7eb7117d7b5ce7c90403a154f4fc3bf3d7dc67dddabc04b6a234215a3fcbbeb3af4610f76111aa4d74f30d8e2ec1177829ad07e8c347056dc2f6a60c93a95f849a0f1df2f8365e15fd5d64a03dd3ab81327253b30378cbe89eb042223f3a79aa40261cc4f6d1c73c6ffe4a4ed8022c7c1bbe12d6f534149b05321bfa7079688b27be06e36ea393e30bef71731cf0ea99d23ec4683a50a99de99f80bd90f675083a715b7bd7f0c02b07c6daa645ed3187ac29783c8aea547c56d5c62d1e089951d1ac2aee404b59f4fcb5b45e41ac5c22418a072f8409a582de665eb7187bc51f1e1a167d557cf4e26138b47ce2d73568c4f121f0f14ce2b867317fdebcb6443a5a98eef1823783af8192b91aa110125bf4b5210c970291911525fb8ffbb34b893cb17aa8d6406428450d86511935a2475b409116de65de34a522e3a9ead1eb4dec77439869c5061c17ad6fb34c61c7e75b0710e336058e6ddbb1f13cb18b3b3dccd9acd3c10ac4984b37b78daf367a251796b3b996eca43647786a9a6e084edccb8d20629b39b9ca388d435bc621194db2b10e5cf2a36482e3337cfd03d387fd9e5c445e223c0df955c9d380d32df8d2f0b5257dfc1e7aa06e344d809f91d862c701d44b5d67f137e287ec3e2ee798c4d78b34c4fa7d282b7b8af7867985f73690ac28e8e7db54ebf5bb43ef0a9f4ad89333242d09f3e0fad00f118c577457587f9c3331ea15ad141c4352529d27b9383ec0dea8f4dd822d08652d90e98796c2f0ebb7370e1d8c1f69fc5e969a799113dbfa5a1c402a1f02a894d0ef68705af0ed50dc7cba56baa2a66f7a51b057a186e96fc6860623eb789d5c734b79062146ae6c848c301dce82617d16e628fd7f130a34b7879fc5b166dc6c91e7496dfa296b389e24cb412a292944f6896b85707879d365e3a990a78cb0de89e70525b5b34cd0a3f68350b961e057e3aad0bf54ba6fe20f57c6ee24acb997ec12bb4cc849090d8a2c5fb35aeaaeb8831592bc1df410e9d8c97f7202f66a0e826cb79772c082ee7ea3689e60340afd0e1477642fc9755504533991793e7b8668e4e57fa77549eeaf0c1dca1ee8c1aaa5676998fbf381f7c8ce2c3e9203f9d260705b36898ae469bf2ee44ed27ed2ccb37f3d45b9e84d080b4b40a3905a75c8b377025f98af2de267af89450c703b6d11c3c6add92fe20f51cdb99d0f11e4164e271804820c1fc85148bd99d36d0b5667145b9b62160bcf692b9ed1aee3b85cfd12997486abc484dd8dc803fdf67452cdbb2cfba54569fc4f6c9aa975df5c1ceee16b46d36cefcd6bdfb8bfbccf2a1091d648cd0d00ba5db3d9fc01be9513d184a5260bed21941cc5c0529b866fe471159b493571efdfbcc7110903e992531952f11dd198e971414c7403393c3b83bd5a489dd0e53581814b7146dd21436787ea01e7ff61be15c9a3369f378acef85f074c02de42983a7f6cab1a987a8d1d0f3b350941fbc305563326361d66848be6109f67f3fb6116192eb9ac1c7a5e09da433d05248c4a8475e0f316958f9615b9b7ce065d282be2521f61a36a3fec8f5cf969381e0658bc25413be366a12b653678eb5ed14cc0dcfe6156263fc6dbd238e750abe25e62f1c30667391ae118e006f3978c3a8852962e912db7d706a68b5542262b87ec82a64678f9b3454c2c4ec67eaf391cddbccca6437203a4285a1bad5c1aec7a13bb6d4ee9f3f7ca9410122ac7bd92a52ef7564b94659603f252cc76686ef9335edd186de18262332d12d759a2ce769e4a12cce734e604bab5ed1a0da45f6e438432162587dec2003f11ab5b32cac14cb9d1a025117a24b3d44466e461c288db274b95b49bcc5e657329459014cdf117361cacee2fa2983913d0830e42c836eac48e4f84bc87580c40754b07eecaa124fdf1af98c91a848fd40b1c8e9e9d4dbdc2721a915e2d3bc252f18724b453023411884084e36d7a856a9b0dc5b6d411d85c312a8c1d55a4f8aea9a895a8249655caab6b0d0e471ad97566e1a38e05e724d9b6450dde2a62c4574203ad1908d404a7de9208043286c26720328cfd86b3cb18fd852dfef11bd71123a082b1a7a64e802f8ad66a78c596be4c7d1f4d61221950e37c33d95c69840a66a58a31855aae88c8d967ca8c3be802793fc63b0e1559fb39d028c6eda5c179e00dbbd3ed2c7b444e8fca0f83e070a542f33ff068c6be6e4dee75f57405ab13b8c58c8faaf7facaf7086cd5a4d04807c632989132af8a00b75de95222dbd474978ddd56d0991c10460f8b060354795fb80d3519d6ba02e303bb52cf68421f5edc5a13caa17b90460cf1773c78c5b64f7ff0c269bda4fdf716ee73ab197ad109f6811e651ed81d39724a5945b9621f46a873fbc2ad5922a04f114c0024dc9a6f9b10997194531f50cc18547f718492a0d69efd065116da6d63f3d333f79937eddc66bb684c68009be5ebf6841530d2b2e35c97d35d9a04a181e2813d9393b6bfae5370a6c99bba6be7020d518123702a95cbe7b06d1d37213f0f52518dd17804414fae75741af316c7d0139aca91ce1b858d59c6b0573026b18d79bdf75e7490b77dbaed830df5a5c48972db8b88080de03f2deb78ee56d7d364f9ff37d7fd6adf2fd56707d0e99ccdae92df66dd91c19e95223cb5142d4e267b9759c813939afb033fffdb1363e48338dccce41c2663c5c0cbe6438c92ebebb19d439aee38df851015806ad4eb0a93f50e2633528eb18d04c3e69bf99c9b890706d09db5b29491b062b673d247144fe7ea6694b4b0a57c19bf36bf4225916b6d6671bb33e784280b435018852862ade8d740be7cf3d2eb921d8f7a24b431c672095c290def8c5b7904cc79b354a01c9ef0c8487d191d9151e1768dfe7570a0f4d027b4457ab23e32d4f09471c505c3371384e84048a836ce4d35293f33e09bf5df14b691a2f1cc184f017d0ee76fa187e7f2839e1cc11dc6bb2c1fac5ed911f862cf451f827eb37a60b33617771fa13b3f762b1fda769aa55ae38c51dc237cf6658075285781cf4a791f5930686bddf08b1b3a48b8e68e2af398c68981b1c3092e40d29f3fdf29424076ee4e4799e448873213d2e60f122da1483fe4d5a2688d57210217c7163f6a5b948fb819e2ab040d1a3517056a91c6ca497086b55acfa2a742b8a4038cff9fd460a24f882282e299ef3761835784fa7500f5068c4f512193f0bb9f86fa540a072c57975e367c1fb7c2ce485497f0474bb2159c53a3c168af15a4e2dca43e3ac375d9ad4f4189056451bc46e651412b4936077edf2909967b0b1e203e151ef236999d29db19dc9279e4458944964e63eb9c9b71b0794232c58b864a5dcb248e7d84b7da1845eb2f59e3f2b54a283a9b3addc07d48a61ef39ccd4793142bc6491adf0e7f689403808120124343ed0f19012976995729e947be7269bed9706449188696bc3f564b35d4b9c8da9d201e573db95535262b0eee37cf1a114dc52ef794a9192981a340fb6cbe0e93d955bb619710b8acf6306e326dd53dd8a2006dd1c6956ce46b48839c7f9b6edf17d94dcb8627ed452b73e4102624cd704118679a8adfd5e01120445f47d7434a4103ff27e09325f422d73d82f0458870dcf648630dcf846cb0a38babcf33ca658858bdfd6172b80f3eaaaeef771f85a3db1e5c948b51cb3fd18d11d0e7298811f329b72c71b0be515b919bd5eea2e22505a01f5320655ff011cd08330b1df89f57ef1d06050b833d4ac93acb571e397d77785b1f9bcf4f85830bdd2288850d904b5aea038e440e42500499d29547c1b5351ff55e1a7e386df908b1c14a4210767ff7472f653822f595415eae0529c95b49409a7f0a73d0cc44d7563e6452dee487e86a89eb110af54cfe99a67be1e6562598a02480f0412108d430e94da81de6bf303b617a8d2eee962e41a1ed423aaebe311b8e32646624df1fbc7b524a07b38f633618e2bac4bb8289ad9b8059ef1a60807e4abc704b3fe6cdeb4aad256c9deb7ecd02ac7e4639b7804632fe77e7ddf287f8825e03b24031c19d38cebe8118fb5018d1958068478f32beb5d1a2b90f0c5723be58d9481c87d7a14398bceb46bd05e75b054601a393d325a758bff0d5439629e07beea8c27ec3ce9f2d13652fceb8a3a445a34e1ebe8ca2483d96a54ba55a4d109d2b7de95c2ca703b6eac1064b8373d0faa5efe8d74b4b774cc08c6e319485b4b42d023b3b7070a891f7df037383ebc54ccaf1196263daf30babf5f3105e218558f9807389408f2ad69e252a4334a1a15e0789984af22bef6bb756f767137953e811395e44d164265ba62cd7cecc98594787a99c4fddfdf43a6c5b4578ae5acab20bd4566ec3850a498eedb8702bf2155b751d417054f0591fdb0e0e9e595083980962a1724b2cb5de6d56ffa740438eaa3b48edb415e1c36d9c3ec22162fa93a17b607977c381f68d24ed0a12fb7f14417edd6af3c56a9199112dc84d0578f52a89a2b2472f8ef4eb2315893df1838b5333ede77d1db345bea2b7304e2b5d2f0610d31fabd06d8961b5b898655c86cec15b8cd97af80285b6a90fd6a65ad694464aa601b5ef7e4695456fe45d5e9a8ab0375a5cf4764bd7b6cb75568bde9387949c5074254f865378194c414dfa51bfd9673be0782313246298535a3a3882cc2f866582a10cc366217c3dd6eeae32de8c1b06deaf937f794024f17628594b92cd1853fe63a61c52471950e32de32845ebccf11144f879f0ec3fe51351104073059c962615a14e4df12dc1bd3ed9bacb10c6f7f8dfc3ed0a08190c0530c2de75f3106027fd7081340d754fbe35577bdd4e7636e2f3155f02406c3f5d8a91463b849cbec438ef0007c705af19470a08257360c35a429d628d6cc2f108112683d18f15841fa90a5682043fcbb29056fcf2bf6e6862525a864f2c2ac4c4ff990aefa8196814b11c4bab4291efccec9db5dbda57ee39e4eb96c6f6961aa37a773f166968f9c910c31568eb1bfb340f3f72e92ad2ab1f00d787b3fa1d54e19b9b1aeeeb4740980d1f36ca0f33ae9eddae197d721f7f4ccdec740036adea7f7b6462e6fb9e56425f104c11712f3874fa042e986dbe31c6523ea9280e4d0c61315f78713f6c308a51d423509f015a284802c1ae7a9f34e1184190a9f5581528d0b82da2dc5a153cca43ea48b024e0dad1c92c160d9cacb"}) 08:15:19 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x7000000, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) 08:15:19 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 08:15:19 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x3}, 0x0) [ 2615.845226][ T3069] binder: 3060:3069 ioctl 400c620e 200000c0 returned -22 [ 2615.883061][ T3071] binder: 3060:3071 ioctl 400c620e 200000c0 returned -22 08:15:19 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0xffffffff00000000}, 0x0) 08:15:19 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x7f6583d4, @remote, 0x8001}, 0x1c) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) 08:15:19 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x4}, 0x0) 08:15:19 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) [ 2616.033474][ T3083] binder: 3081:3083 ioctl 400c620e 200000c0 returned -22 [ 2616.067391][ T3083] binder: 3081:3083 ioctl 400c620e 200000c0 returned -22 08:15:20 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x100000000000000}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:20 executing program 3: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x34, 0x0, &(0x7f0000000180)="90201f5a27cd1d7cbbae78f52ebf6e2bf902ca7a6520600c31329af604a1cbf0d2c588c181f0c1dce03d31ed82a84f3c676b695d"}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r4, r3) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7, 0xfd, 0x2, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x1, @perf_config_ext={0x7, 0x4}, 0x186, 0x8, 0xcd, 0x5, 0x3, 0x3, 0x1, 0x0, 0xfffff001, 0x0, 0x9b3}, r2, 0x4, r0, 0x1) 08:15:20 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x5}, 0x0) 08:15:20 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x0) 08:15:20 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xffffffff00000000}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:20 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x100000000000000, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) [ 2616.853721][ T3109] binder: 3101:3109 ioctl 400c620e 200000c0 returned -22 08:15:20 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) 08:15:20 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x6}, 0x0) [ 2616.934011][ T3115] binder: 3101:3115 unknown command 0 [ 2616.942002][ T3115] binder: 3101:3115 ioctl c0306201 20000200 returned -22 [ 2616.955091][ T3115] binder: 3101:3115 unknown command 0 [ 2616.970406][ T3115] binder: 3101:3115 ioctl c0306201 20000200 returned -22 08:15:20 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x3}, 0x0) 08:15:20 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 08:15:20 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x7}, 0x0) 08:15:20 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) [ 2617.663603][ T3115] binder: 3101:3115 unknown command 0 [ 2617.669676][ T3115] binder: 3101:3115 ioctl c0306201 20000200 returned -22 [ 2617.679266][ T3115] binder: 3101:3115 unknown command 0 [ 2617.687662][ T3115] binder: 3101:3115 ioctl c0306201 20000200 returned -22 08:15:21 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x200000000000000}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:21 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x8}, 0x0) 08:15:21 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x6}, 0x0) 08:15:21 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x200000000000000, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) 08:15:21 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0xffffffffffff7fff) syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000003c0)=[@increfs={0x40046304, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77622a85, 0x100, 0x3}, @fda={0x66646185, 0x9, 0x2, 0x24}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0xfa, 0x0, &(0x7f0000000440)="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"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x70, 0x0, &(0x7f0000000140)=[@enter_looper, @dead_binder_done, @increfs={0x40046304, 0x2}, @acquire_done={0x40106309, 0x2}, @increfs={0x40046304, 0x1}, @acquire_done={0x40106309, 0x3}, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x2}, @exit_looper], 0xd2, 0x0, &(0x7f0000000240)="264772529b9e5c166140834efb35a5b53db8d8fe516e0536c67f36bafe2c4f3f9e4e15c6e9ac32575a6f0e8b4f9b5b12ff9250bc6efc14446b6ad5dc8169158cb7ae893514db6620834cc856ed67d6ae72b60eba272c03202a7ccbf0c3d49f690329e49bfab0c1549434d5982f07530d966d534ac903034a3bb1fa715f40ccd82f07e66eaf8226529ea7dc05d8511631141182431d663cf82376345c8f3bf4ac117da444474a232f1f79fe99574b512e8d84a73ea4414800bfdeaae474cf792997e2f8ff0a454249433460082aefe5d89a0a"}) 08:15:21 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x9}, 0x0) 08:15:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x7}, 0x0) 08:15:21 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0xa}, 0x0) 08:15:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000002600), 0x0, 0x6) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r2, r1) r3 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x1f) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002940)={0xb8, 0x0, &(0x7f00000027c0)=[@clear_death={0x400c630f, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002640)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f00000025c0)=""/44, 0x2c, 0x0, 0x3b}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000026c0)={0x0, 0x18, 0x40}}}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000002700)={@flat=@binder={0x73622a85, 0x100a, 0x3}, @flat=@handle={0x73682a85, 0x1, 0x3}, @fda={0x66646185, 0x0, 0x0, 0x15}}, &(0x7f0000002780)={0x0, 0x18, 0x30}}}, @dead_binder_done, @increfs={0x40046304, 0x2}, @free_buffer={0x40086303, r3}], 0x96, 0x0, &(0x7f0000002880)="d71e79f1fabce4ec0564f7525607ddda56c21411d42aca20cb7747a08a167179730d98cf728675d6f1a481e554d582143cd33799e8300d913b6e6d1ae515dd743a9402a9bfbc6b025a11a2bd8098043275987a90778a84d87f38042cc74088a831e5a85615042616fd2d9d22bae62ee4bcc43701e90f6f91e23cafc981502bdc0539d6bdd25f8506679560c23eb61553c1c94b07d862"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x4, &(0x7f0000000300)=[{&(0x7f0000000200)="ca9bdd9c32015d8a396a40a8192a4886b19de2f5b958704394912de0bb6e0e554803701a3e1cc09a6f820745b721dc18f3b2fa43d1a80ca87407b29987437627fd4841f999401e84c4a6f86b7feb387b44d176fc5236d0140c1451243d7380aa82b138398ecec27855d2421dbabbece310e133e2c00ee9d1e2592b27534deb3fbf44d950cbf2c04bcbe6dc933b68b4e37aabf3a410950e36d8979a888e9c1b51fd523b060fe2c7d447b61f3beec037bbda22c086bf8edbfa4dd5bd687a116daf9e09f089f7d156b9b97a9f6dcd5389ad60b85e5f0fb1674abb8157464e9a4adc6d4d9558f8698aca", 0xe8, 0x7f}, {&(0x7f0000000080)="1c073433dd2e9aa7ae582a87801717c4889446160069abf00ef9eb370e244cb10b36d9a49bc990", 0x27, 0x2}, {&(0x7f0000000100)="37bdb5924b5158fdda5a03d9596fc278814d248224c81325e5d8d7", 0x1b, 0x6}, {&(0x7f0000000140)="5f3965c37a83567d025501f5544573fa7347bc978337f70a66c5e890dd037a3cba57064f0c1a7dd4abb3872d7e7dbeb9372d07ecfb758bde857a3cc42958b1b403dcb764c00614c6de42", 0x4a, 0x2}], 0x0, &(0x7f0000000380)={[{@sunit={'sunit', 0x3d, 0x8}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/binder#\x00'}}, {@obj_type={'obj_type', 0x3d, '/dev/binder#\x00'}}, {@fowner_lt={'fowner<', 0xee00}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}]}) r5 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)="aa"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000001a80)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r6}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002580)={0x6c, 0x0, &(0x7f0000001500)=[@exit_looper, @free_buffer={0x40086303, r6}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001440)={@flat=@weak_handle={0x77682a85, 0x100, 0x2}, @fda={0x66646185, 0x0, 0x0, 0x3}, @fda={0x66646185, 0x3, 0x0, 0x2c}}, &(0x7f00000014c0)={0x0, 0x18, 0x38}}}, @dead_binder_done, @exit_looper], 0x1000, 0x0, &(0x7f0000001580)="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"}) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000000440)={{r4}, "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"}) 08:15:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x0) 08:15:21 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0xe}, 0x0) [ 2618.263402][ T3180] binder: 3177:3180 ioctl 400c620e 200000c0 returned -22 [ 2618.275887][ T3180] binder: 3177:3180 unknown command 0 [ 2618.283857][ T3180] binder: 3177:3180 ioctl c0306201 20000200 returned -22 [ 2618.306875][ T3180] xfs: Unknown parameter 'smackfsfloor' [ 2618.401146][ T3192] binder: 3177:3192 ioctl 5000940a 20000440 returned -22 08:15:22 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x300000000000000}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:22 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0xf}, 0x0) 08:15:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x9}, 0x0) 08:15:22 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:22 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x300000000000000, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) 08:15:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xa}, 0x0) 08:15:22 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x48}, 0x0) 08:15:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xe}, 0x0) 08:15:22 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x4c}, 0x0) [ 2619.086697][ T3180] binder: 3177:3180 ioctl 400c620e 200000c0 returned -22 [ 2619.094712][ T3192] binder: BINDER_SET_CONTEXT_MGR already set [ 2619.107842][ T3192] binder: 3177:3192 ioctl 40046207 0 returned -16 [ 2619.115310][ T3180] binder: 3177:3180 unknown command 0 [ 2619.128787][ T3180] binder: 3177:3180 ioctl c0306201 20000200 returned -22 [ 2619.142395][ T3224] xfs: Unknown parameter 'smackfsfloor' [ 2619.148418][ T3192] binder: 3177:3192 ioctl c0306201 20000380 returned -14 [ 2619.234130][ T3192] binder: BINDER_SET_CONTEXT_MGR already set [ 2619.242973][ T3192] binder: 3177:3192 ioctl 40046207 0 returned -16 08:15:22 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) 08:15:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xf}, 0x0) 08:15:22 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x60}, 0x0) [ 2619.505597][ T3247] binder: 3243:3247 ioctl 400c620e 200000c0 returned -22 08:15:23 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x400000000000000}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:23 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:23 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x68}, 0x0) 08:15:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x48}, 0x0) 08:15:23 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6e, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) 08:15:23 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x400000000000000, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) 08:15:23 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x6c}, 0x0) [ 2619.875917][ T3264] binder: 3256:3264 ioctl 400c620e 200000c0 returned -22 08:15:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c}, 0x0) [ 2619.937162][ T3268] binder: 3256:3268 ioctl 400c620e 200000c0 returned -22 08:15:23 executing program 3: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x30) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0xff, 0x5, 0xe0, 0x4, 0x0, 0x80000001, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x52, 0x2, @perf_bp={&(0x7f0000000480), 0x8}, 0xa02, 0x7, 0x401, 0x3, 0x6, 0x8, 0x7f, 0x0, 0x7, 0x0, 0x2}, r1, 0xb, r0, 0x9) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x400c620e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000540), 0x10) tkill(0x0, 0x30) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, 0x0, 0x1, 0x2) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)=[{{&(0x7f0000000580), 0x6e, &(0x7f0000002d80)=[{&(0x7f0000000600)=""/246, 0xf6}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/158, 0x1a}, {&(0x7f00000017c0)=""/36, 0xffffffffffffffda}, {&(0x7f0000002d00)=""/124, 0x7c}], 0x5, &(0x7f0000001840)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000001900)=@abs, 0x6e, &(0x7f0000002b40)=[{&(0x7f0000002ec0)=""/206, 0xce}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/156, 0x9c}], 0x3, &(0x7f0000002b80), 0x70}}], 0x2, 0x40010000, &(0x7f0000002c80)={0x77359400}) fcntl$lock(r3, 0x5, &(0x7f0000002cc0)={0x0, 0x0, 0x1, 0x100000000}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) r5 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x0, 0x5, 0x3, 0x6, 0x0, 0x1000000000080, 0x4, 0x5, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x200, 0x4, @perf_config_ext={0x1, 0x1}, 0x108, 0x81, 0x7, 0x7, 0x25, 0x7, 0x7, 0x0, 0x3, 0x0, 0x3ff}, r4, 0x8, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x58, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/185, 0xb9, 0x1, 0x31}, @fd={0x66642a85, 0x0, r5}, @flat=@binder={0x73622a85, 0x10a, 0x2}}, &(0x7f00000002c0)={0x0, 0x28, 0x40}}}, @dead_binder_done, @decrefs={0x40046307, 0x3}], 0x92, 0x0, &(0x7f0000000380)="645d0368e44663cd306e97a2661c6565a27e6d78dbc6c0e3b0e0b9a673ff6e62073c9404cb57a41d8eb109ec619be06e6ce85b503053195877549a5cee8efc5a628eaedd3c6ba63b9572a894d34a92ffa0ed003d1ee4345296928c739e23f02a7bda86e0af4f8e78757c07fcddd9f07fd248ce979bda2717d6fdfac1cfb09d10c7e8efd9e3e9020e11b170a7308bae177e6c"}) ptrace$cont(0x20, 0x0, 0x80, 0x38c1) 08:15:23 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x74}, 0x0) 08:15:23 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x7a}, 0x0) 08:15:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x60}, 0x0) 08:15:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x68}, 0x0) 08:15:24 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x580b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) 08:15:24 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0xf0}, 0x0) 08:15:24 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x5}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:24 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x500000000000000}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:24 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x500000000000000, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) [ 2620.876278][ T3302] binder: 3296:3302 ioctl 400c620e 200000c0 returned -22 [ 2620.922460][ T3309] binder: 3296:3309 ioctl 400c620e 200000c0 returned -22 08:15:24 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x300}, 0x0) 08:15:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x6c}, 0x0) 08:15:24 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x1, 0x6, 0x5, 0x0, 0x4, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000040), 0x4}, 0x14104, 0x94f, 0x81, 0x4, 0x8, 0x1, 0x7, 0x0, 0x400}, 0x0, 0xc, 0xffffffffffffffff, 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='autogroup\x00') 08:15:24 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x500}, 0x0) [ 2621.109382][ T3320] binder: 3318:3320 ioctl 400c620e 200000c0 returned -22 08:15:24 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x600}, 0x0) 08:15:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x74}, 0x0) [ 2621.153902][ T3323] binder: 3318:3323 ioctl 400c620e 200000c0 returned -22 08:15:24 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) 08:15:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x7a}, 0x0) 08:15:24 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x700}, 0x0) 08:15:24 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x6}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) [ 2621.395353][ T3340] binder: 3336:3340 ioctl 400c620e 200000c0 returned -22 [ 2621.419167][ T3341] binder: 3336:3341 ioctl 400c620e 200000c0 returned -22 08:15:25 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x600000000000000}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:25 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) getsockopt$rose(0xffffffffffffffff, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 08:15:25 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x900}, 0x0) 08:15:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 08:15:25 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x7}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:25 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x600000000000000, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) [ 2621.897169][ T3358] binder: 3356:3358 ioctl 400c620e 200000c0 returned -22 08:15:25 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0xa00}, 0x0) 08:15:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x300}, 0x0) [ 2621.946969][ T3368] binder: 3356:3368 ioctl 400c620e 200000c0 returned -22 08:15:25 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0xe00}, 0x0) 08:15:25 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x30) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) syz_open_procfs(r1, &(0x7f0000000000)='personality\x00') 08:15:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x500}, 0x0) 08:15:25 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0xf00}, 0x0) [ 2622.185350][ T3386] binder: 3384:3386 ioctl 400c620e 200000c0 returned -22 08:15:26 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x700000000000000}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x600}, 0x0) 08:15:26 executing program 3: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000006, 0x20010, r0, 0x38405000) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_service_time\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000100)={0x3, 0x80, 0x2, 0x7f, 0x9, 0x80, 0x0, 0x8, 0x89, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x6}, 0x0, 0x8, 0xbd6, 0x1, 0x8000, 0x1, 0x4, 0x0, 0x737ec16f, 0x0, 0x2}) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x8) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ppoll(&(0x7f0000000300)=[{r0, 0x8100}], 0x1, &(0x7f0000000380)={r3, r4+10000000}, &(0x7f00000003c0)={[0x5]}, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000240)='highspeed\x00', 0xa) r5 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x6, 0x0, 0x2, 0x6, 0x0, 0x4, 0x400, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x5, 0x81}, 0x2690, 0x1, 0x9a, 0x4, 0x2, 0x3, 0x93b, 0x0, 0xff, 0x0, 0x73d}, 0x0, 0xc, r0, 0x0) 08:15:26 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x1f00}, 0x0) 08:15:26 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:26 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x700000000000000, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) 08:15:26 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x2000}, 0x0) [ 2622.963680][ T3405] binder: 3402:3405 ioctl 400c620e 200000c0 returned -22 08:15:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x700}, 0x0) [ 2623.022635][ T3416] binder: 3402:3416 ioctl 400c620e 200000c0 returned -22 08:15:26 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x40400, 0x1) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) 08:15:26 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x3f00}, 0x0) 08:15:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x900}, 0x0) 08:15:26 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x4800}, 0x0) [ 2623.239159][ T3429] binder: 3426:3429 ioctl 400c620e 200000c0 returned -22 08:15:27 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x800000000000000}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:27 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) getpeername$llc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) 08:15:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xa00}, 0x0) 08:15:27 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x4c00}, 0x0) 08:15:27 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x9}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:27 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x1000000, &(0x7f0000000040)="aa"}) [ 2623.955338][ T3454] binder: 3446:3454 ioctl 400c620e 200000c0 returned -22 08:15:27 executing program 3: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x2, 0x10001}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x8000, 0x10, 0x5, 0x5}, &(0x7f0000000040)=0x18) r1 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf56c, 0x4}, 0x0, 0x3bdc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x1000000000000, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r4, r3) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x30, 0x0, &(0x7f0000000140)=[@release={0x40046306, 0x1}, @increfs={0x40046304, 0x2}, @increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x3}, @decrefs={0x40046307, 0x3}, @increfs], 0xbf, 0x0, &(0x7f0000000340)="836171add929a5e50216a0e5fbcdeb53ed0d62e6e43bd1992aa3b7e7d05ebcb132b2b2802bcd6c2ffee6a7b3e477eb224cbdef3ad445a4aa4f9125950f2eb28fd1ebc219f189e7657f610178ece9dc3954bd6402e22488c11b7eea068bf5eb7f6fa00cee6b7efc64ac8d25ac6f9187fa25de70c4b2dc2ff936244b07089c7317f72e556324f3caa4d413c20a0623116da81401e5f7cbe561ca903d7dc4614f0a36c4ba2d61612916e642ce20a7c714ee40bc7a0674bd4e8d7d0783615e2e32"}) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000240)="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") 08:15:27 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x6000}, 0x0) 08:15:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xe00}, 0x0) 08:15:27 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x6800}, 0x0) [ 2624.127141][ T3466] binder: 3464:3466 ioctl 400c620e 200000c0 returned -22 [ 2624.155221][ T3466] binder: 3464:3466 unknown command 0 [ 2624.174176][ T3466] binder: 3464:3466 ioctl c0306201 20000200 returned -22 [ 2624.215856][ T3466] binder: 3464:3466 unknown command 0 08:15:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xf00}, 0x0) [ 2624.252424][ T3466] binder: 3464:3466 ioctl c0306201 20000200 returned -22 08:15:27 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x6c00}, 0x0) [ 2624.294305][ T3479] binder: 3464:3479 unknown command 0 [ 2624.302946][ T3479] binder: 3464:3479 ioctl c0306201 20000200 returned -22 08:15:28 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x900000000000000}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:28 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000040)=[@acquire={0x40046305, 0x3}, @register_looper, @increfs={0x40046304, 0x2}, @dead_binder_done, @exit_looper, @free_buffer, @acquire={0x40046305, 0x2}, @increfs_done={0x40106308, 0x3}, @increfs={0x40046304, 0x1}], 0x5b, 0x0, &(0x7f0000000100)="9647fde3ac2bf58c5935762adef1b828d3a091f7632c3c47318b9ba54d2b6d740b2ccfb6e307be920c529af8e9b17355190abe31054b6b8c608bba055b91866c15c33669a720ec6a8aa368fa9795681b4e344ec38368c45765c340"}) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) 08:15:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000}, 0x0) 08:15:28 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x7400}, 0x0) 08:15:28 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0xa}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:28 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x1000000, &(0x7f0000000040)="aa"}) [ 2624.991933][ T3505] binder: 3493:3505 ioctl 400c620e 200000c0 returned -22 08:15:28 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x7a00}, 0x0) 08:15:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x3f00}, 0x0) 08:15:28 executing program 3: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x5) tkill(r2, 0x30) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x74, 0x1, 0x73, 0x85, 0x0, 0x7f, 0x44, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x0, @perf_config_ext={0x9, 0x1}, 0x4210, 0x7ff, 0xff, 0x4, 0x10000, 0x1, 0x7ff, 0x0, 0x2, 0x0, 0xfffffffffffffffa}, r2, 0x5, r0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) 08:15:28 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0xf000}, 0x0) 08:15:28 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x4, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) 08:15:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) [ 2625.458596][ T3529] binder: 3527:3529 ioctl 400c620e 200000c0 returned -22 [ 2625.504376][ T3534] binder: 3527:3534 ioctl 400c620e 200000c0 returned -22 08:15:29 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xa00000000000000}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:29 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x30000}, 0x0) 08:15:29 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x400080, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0xd9, 0x4, 0x2, 0x0, 0xbae5, 0x10000, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x793, 0x7}, 0x10, 0x4, 0x0, 0x3, 0x0, 0x1d0a757e, 0x800, 0x0, 0x8, 0x0, 0x5}, 0xffffffffffffffff, 0x5, r0, 0x11) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) 08:15:29 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c00}, 0x0) 08:15:29 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0xb}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:29 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xc, 0x1000000, &(0x7f0000000040)="aa"}) 08:15:29 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x34000}, 0x0) [ 2625.955383][ T3542] binder: 3537:3542 ioctl 400c620e 200000c0 returned -22 [ 2625.990947][ T3546] binder: 3537:3546 ioctl 400c620e 200000c0 returned -22 08:15:29 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x6000}, 0x0) 08:15:29 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x400300}, 0x0) 08:15:29 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x6800}, 0x0) 08:15:29 executing program 3: mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0c6300001cba058ecc99306705d2aa3be7426f214053883fbef44339a1bd7898e58b9b8c5c65d14d8a5e48b2d498a70995d432610b6d0e9fd19ac462bc40ce331d0800f1f147b3fbd9c1fd5a467884f7ba6d35f9a7d92a403c86289173fba3a6aa137ed61adf4dd178ad45b1cb7752b27117ce"], 0x1, 0x1000000, &(0x7f0000000040)="aa"}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000042c0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000580)="47dea2676b26c50ecaeaef642fff043276d8f8612c8b55dc61034468985692c5c729ae47b5329a8f16c2", 0x2a}, {&(0x7f00000005c0)}, {&(0x7f0000000600)="8180d7d4187ba7d04331109de760ef52023791cc7be623e9fd773c3c00ec2bf9e709d20db4400a645763c6f825ec9a85c1b3e938b89f9a37794213cdf6a0102eb2dd51558a721b8e217fbe350e689bdf86dd98c3b2fe8008dc7eb006420be2c189473aa722660bd9be78fa59c6208f79cf70d043854529fbafa0adbd7cf86ba567518da7fff28c3cf9e00a07a775ebe6150bbdc8961be84ca116de585d5dbe84f377fb", 0xa3}], 0x3, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x60, 0x20000000}}, {{&(0x7f0000000a80)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000b00)="89eefa6551efa6a9cf79e1181fb35b1e8e681304b3b5b2b39e096c71abc10e8dc5ee5a4850", 0x25}, {&(0x7f0000000b40)="e31d8d27993f4b547fc5561f06f8f06a9bfbcad5fdee0498aaa32447136a454222ca490d2470fdc68e1cb8d26dedac486f5d3b1403436df8a0450ff1d4c506b9f3577d35", 0x44}, {&(0x7f0000000bc0)="fe95600c71fab606237a8aeb6fdd275f0dbd71038626b1f1f1723664641dfa52ee8ff1ff351a91932963894e6ef67d49f5b65607c26abdf3951c4ecb999f71694ea272b97ab735ffd719cddd073ad2615c19746830889e683b7ddcd372ba5c41c5b35c11f0bde87cf953311786428e8ee09111c3154f69abf6f1eee63746ad2ce15022af961fc8538795b918394b6fa6077b0dc4b2f6e7320b70dfaa3e4bdf47a50aaed9eabcf96d5d96dc1a4027c822fc159e33a55dfe147071c76e79c9c20ca9", 0xc1}, {&(0x7f0000000cc0)="16c3fb2fc9e1cac6e2d7a24a59d8b8dbf12bce09c45c6fb864519e53356e3ad8078a5418dcf7031222f126f4bd71faf8cde4ca68c682124a03c3abfa05d1e8dea459c97197898f6dc7d35ebd0a0c998504681392be27b31ecbfe5c0f63f8080e1f762903022d784194f9ef087964cf18a7ced0b852093fbefcbff1dfefb3bc65cd3cb36499b37a7de8183a06838e5bdb0b958f597145938e6d9207e55756eef4f79f16d305dc7033324ed6f826bbe8e361fab7ccfe32c8f130485d1a7df69b50d9e2653b6241c17a63ce3f8a4bea51246ba932a98427115a27f8a729ce2a666b", 0xe0}, {&(0x7f0000000dc0)="db872e528f7deb10daadc0e5c22e8ffe31", 0x11}, {&(0x7f0000000e00)="bdcc2b9cef81784cb6964a8be2e47beb0ff616c25941bc766d929916fddb8cb11c6df8ca9053dc7ed5faf2b405c939afd9cbfca5c3dc2369a029f731fde856d81c31d64c45822585feac83977d06cfee84f5c5d239c0f42b312f07b30e55b416b607061eb33dcf63b88cfd587e2ebaf2881cba03f5ba061c50218abb6c26cc76856505f7b696961da185947a1928b04453c23f2de98035c3ae3992426c57f131afd925d9399ce39bccd6c19cb2d4fc30036c95f115a3c859751ba89007463c41d4512da0c58817bb1efef28de02f888137e7ae9253d1d3fe5eba97d6fb58b10c5a1ad4378e2cbea3", 0xe8}], 0x6, &(0x7f0000001580)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58, 0x11}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001600)}, {&(0x7f0000001640)="8ae6f7c5f7474d208be8829cf2e8a398779c113737ca790e4e75ab797d8c", 0x1e}, {&(0x7f0000001680)="8652514b9646acd58ce076392635470192ecef8a2b9e61c0f5f62f5d008fed1eeb81dcc1efda236ec2bb602b62bc94b5445e91f70c60245678", 0x39}, {&(0x7f00000016c0)="12b721bbc189fa8bded265", 0xb}, {&(0x7f0000001700)="3feef282", 0x4}], 0x5, &(0x7f0000001800)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28, 0xc845}}, {{&(0x7f0000001840)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001940)=[{&(0x7f00000018c0)="d26dc59fa92eec0441f74ee2912bbf2b0735b35a408da4549d81cad20d0c6ce746f85abd622ad512204ca2fee15d791f341780244212fa101539c83eae9bf85f80c8f9aa366194c92e8dcf0d09f9db100a1e24eb8232b3e9", 0x58}], 0x1, &(0x7f0000002340)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}], 0x128, 0xd8}}, {{&(0x7f0000002480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000035c0)=[{&(0x7f0000002500)="c61b06c88d869147981f9a002525c671195da615714be6e0d4cd799cd1d8797c67bae75d5d8e916bff663975857af4acab353b3df15a92bd6dd3defb2b650656cd2d61a411a2526a381eade33869a1786547c725997b0e316fbf3e3fc3c56147a06afc9ddf2b02d996bd0700d95cf83326777a557700da419aef0efd33180d2457a363575b60fcd1e5363b63ae00aaf4bc1687792936d98456296d5412c7ce82f2a389fd9f305298423ad361bf33c7c1143617b87cd401f55d4ef1244a5f338f4fc4f5c717ed856185397c6d000409a47c0b5e0ff5d6aa4e9e108b1dcb23ad1d1244c1965c17808962186d1aeedb3499b16bad53813904153788c85ef5767b435b197d4daaa392e20ba37b7588e65225ef740c347333c02db07dc658bbea8d7b0c056854d48e0850eafdd550122a417b6296b064eec41a83f55db1e1014f891ee2947fd11d0365701270ec2272baa28c6950942fe371ff45d602c71313af93f4f8094fb77adf7f7535366753dec6cccfdda48269edad545e3fda3f345cfca9f53f1e5a57a4deb701cbed5984766d710230b0db83e6c98dbe35aa9fdcd306815116fe7bac762bcf11a7a977fc8702efde909c9c2464fc7d32b3cf6e2a733575f636a63bbf4ed45d70448a8f876c023e02d6ea1a32e705d03ead64557537439b586335e4cc858a2c15fb23fa426774781f4b90c21f4f6de3d9c2aa2797d4bb7585cfeb6e039c9789558cb5ac147dffa4aa758cd437b8bed4c2137f8692c942e1b6327d34d3cbcfbfd560560e36b0b59a8385cefa7716344d86f476a44dc0d5675b9766e4edcf8a43ded95d61c38f5328b9d88dae083f6eadd85ccd8a1af22f6c69a8701921b575b998657102ed39da21ac529f1fc10260bf5342aed3382c57433389c402dff87f1953c5784fc4ae51a9552b7a5c4bb1369b24d5a9e984ea7dc33e309255ed253934c6dce38ed846747fe798dd231527845d3ed0e5e93ac1e8498f498d3a7b4f66d513f0bbd048866c699b6eb0fcb2bf2815f85f5288c3a0792796a639427592e3d6b674e8c80475e237586eeaae0e035e0e823f68780d0935f66bc3d48e624fa1052614960ce6ca9b7d8abce7a3ebd89e8ce7a37edaf774b18ff36f6a53ec253d2059fb90ec8697d2e75dc2908d29a9751d5ee5ec74d9595dd3adc74764578e96beaf9e62909328f46f19c745b96626d3a07a66a2bb57390a9783d255da58abd151b87cd843130044555bdeb5a58c5576a269152cc9bdd8c7552eb2baf3f4500bb1aa5117fee5636dd3a5c93929f0a412020eb1775a511438708ce9aa4c794f17a6ae95c2cc5b3e8d0a2d8fc4c1385f257f0ac8a4f7a188d96878f0e8949df4a7f993743739c7018db82734cbf72729a3c414ed30ef2c452f61a8bac808a091762ae0e6b9d7fe31117c584682bd293f20a20c6014c49b0bf7334d56ea96253ad270b52cb664ff0ff81487075ff8f25ecdd3b9f583c07f1b4092b431f8a6f2c0350ed072320546fab2b365de899d3af2f57bcebd510523c9322b4a92a75d12b3d68b1981e02edb4dd27d1e3e8a66b3c47270815ac5f9644e9e7a3e04364856fdaf282c3013b73856ddb50c0fa78c921680936437026a0c55e2fa87d91388705c144b02c024627973724adbfcac320a289d91a520f565bfbacac96a0bae27f87be8f1dc6b123ae9a43cf1481a97b28ce8fcf0037b20dcbe8baaf7b39ea9e677ad18bde47bcb92307ca985bb1710aa96feb4fa3c414870651f45c141ec36abefa742f78a8c3df59e7eef848c231614bad62d9bff8acf3dc27cf550adea9b6fe26273e67eefefec0b0f8bdecc2a7affbea99811409b15f126e859885d1442db485834e1c474c5cb46eb84db00642dab651ad52e6e23faf6a5c022495a9f20fe2f1dc8abf0b686557b05018a9a3541b56171c258ca82faed3711443d41f2ccedb655ca98841767abc400cc293725a82120f48a97ccab0a0b2be9e5d024776394b2cf37d98ff4238902df3c3fbd18663d32e67a7331ee34febbd7462012226103c0a0e74d3008b1898eb32ae490afc5144dcc1b62587f266973f43cc0c49ef4f05e5e39b56cdbbf33dd03e006d56843353bed5081d31145896af7d2d738750b04faa2b05e4b53402dd3d3f3ea8b7b15275002a951a801e78e09d6ee7c6e37709064d17ddb30c1562b7c4f8623e072abd4cf08e27daf23e79175e47803cfb5bf18f465a32b8678d4ddf2b4a080bc280b6a04eb1d48cff464f210754d2d95c96dce3cdb44b61427faf927b73d7a8fdc5c4a3d4fbfd50c047b216172394fe184cc66f034e1778580e6f9fc3025cb45a1ebbf4b8329838e07d7e7c70492805a2fcb9be156035b09feb05006de9d4bafad149d86a74b0597e0f94752350a87d1647679f0087293f4121d0f4c8e55655e9c8915c8331168a8f50216d82c2e68e9c6f81b12fcf548936c365fc051a949cf6b2b8606def19ded6f46cb89bffe68dfe9f0b39150395341f873befcdd42add4e4a7152d9834557e41b9ffe89e9d5df63aa20ea238f385bdba3bd13345c7379606eafd7860c28157509d15b6274639c189582282e7c6c7f97ab5170d1e6a331be0605617a960df6dcee93afd3776e16cf3d4fb1147e2a7d50cea027100fada51acde27a569764441e465bd751d08ea642b4c3fadb1353ec5fbf18630ec5106795b848a10884522129b710de155b882e0887c33187f65edf854d31dd34ce092e587da31b5b784717e03f556112827f7ead0ac44bb4f533cbc1e36754d54bfa4bc1319d8ebb2613c15efff542090cc96572b893f6a93cb957f0fa1c616a455658e92e819109c94c1f39e776249a622cec132ffdd563eb8819211f849aac6febb814626239a0cc36b4176f62f9643fd54d035e868b615e6645e2fcb47b312822e0dbb4eefdabd9b4b05e424afc56f058cd58af6495bb2162f5d16847b18972d1ca104bf9410d2699ad83e031f0fdff6a2a926e55bf8c708ac33adfbbc0df022015d821a24fdbb988ba9bc9bf3d95f7c6811c13c42f92345a706980fe10cfc40e85c10001b478f2fe462ac8d666ba9ef21bc397379f0b4b3cc9ae67864c281d675abecf2811f36c834e25c47e3932079765b5255170dfa6e989979fd1d0d4ea2b7d4461aea937b246040373f98e787a3a12988790a0ccc2ae6bdfce8fb84455b123742ead5c393175a9d56f669cba825af945a2dca6f13f89dc0a3ef7e41e7f1d17cd5d08584a24350628b584b7eb54dd01ff7bf172b0c9fb87d5f8542bdeba85cf1594bb19bc77e8e5a6045a374e17b6cf505d661eccf052eb83b43e5006fb9d5f70011fd274d4f039ea4e20e3a17ff0d0692b851e54925aa924bfd00fc518dca87503c12f32c1c86eeedade45bab4e183bff90bd5df0415546e48dcf38a196126ffcbeb5a3bba49cf8a4adc60853350171b53382020e57285f17c49a85d5dd0b011c8f8a225094209a8421769c386343697fe704c802de9d41cc5fb8e48dfacb23397afb81833fb07cfe36723a153806e32085c79cc9b9ea5c32be7084398d1dfcad138a9252ef3c812f0ac9513dc83b9ab4760355288110ae7074c9b5ac3b0a376f8be382f48576a1b5f900a669dfdca1291a8bd4d8de006e9900a59f3e5a0ae339cfaaca8d49b5a77cb3a5d3898100877a99b545675dfd9dfc275c48ca470afedd1ee7fe8091f8cc2f9e8d8c223e7a08f6dd683be0cee11497ed8cd538d280532cb5535da8b56720897b9443faa55e0070b9f328d9917bb6b93460f6ded95bd38aef6b7bf83c46396b94533f3e2d6c9d65451967b9eb02b37d1fc65e3670d706304a43546ba82f676337d37a7c778631e67787512afdc7ce96402f67bf39c0c584a4e4bf618d875adcbf381860f60c8c607c741ec62b45488ce0436e7bfe9517e33ccd57cbad1b96e9992919745a4a567026043e461e8923fa94cc4b27b273288d3595391d5c646df65407ea2f23965d8d8698def08c1ff09ed2074e4821b322bc14ad06f9391f37ad31e82c42df83935d43dc77f47307b1907838eb2f9bb94372505c495dc1fb549465f3046d7adc642ca88efaf61e519cbcaddf747ef4ba4fd87c620a7f30306d6de36b422209f2781343e15ffc6132c6a6cc387fec5697b84b2154baa668ebdbfc5ca842724ace61aaecdc3b8026f4827d5094c2f813246dae636d66b7bc89a6958b59de5d44766abf812f8d7a163b7b656334240847ffd76ef96bb46eb1ebb47b7a9bdab5d775c0564101d500b6d36ce7abf8d9af7266094b151f30c26323e9f653e996a47d6f4a4a663edbaef40d335b841ffef67f5c67e5fb4854d267b80d44713104ae6a1bf20f91fe9717bb9e30ccae3895e4fa46d0d888071c1da0091e26110d1d874f04d4a884b076c0e39551f61db522ba60db31a7e7d62e6631f536bb5aca75b36b366db975a685ca6d706bc95d1b9f4078b14bf00f2a82806dbf0696bc5449535a96e46a64513be87f9ec96e1282a99c2ded2b48be0d6ea8b108ae7a4c9fc201ecdd12510167bc18a305e70259a572897c48ac7f91ea5dcc79f324200addb700721c1b4a169f4d3599d12194226092b0de97a32012dfd842e137c4f6f9a72eca66476f9061214545e968a4e9dc7179b311ab00afc1bcf91146f03e003bea37061b0fcb4e657dd81bc516a109bdb11f077c84a0948ebaaa84de5b706a2efe9b767db142df6c4d73529a354f4e74d8f03e6f30a097f3505f249f157af005c6998cf187a64c4ca6ce4863e996fe6980881b1c66e81076db7b24dc7a7feb1f372a7c05b64c57ab261c4cf055f0cb87a5f1282793c3a34eafc4e22eda66c0d1474bc2d7d53fd289ed1b0f9f5d5ed99e0b9c6a077d52f8176b4b7407b74cfa573fc58820c04b6f243502e2af639827b238cf5dbb2f5062ae4ac47e13f8994df55e12ec66e074550e8be07b1d16b0d2007f5bacbbc2f598ad211e7d65063e04ff64839ca257abe60272db3975a8dd902f799384611f9391e51bc7ad31c56501921ee3c4827255ec8cfc3d2006c86d8f95fee24b2a88be2fbbcc3495a56bab2c629b0f637ee64322c41b35c0bf59c1d39e5307e275541f3c4a21bb243d4fb0c9ea4e8ec8b42f86e198c85015f80bfd26e9de750bf2fbd3bc6c7c69316c4ddfe9e70024058b67b14e4f518a6f3210d5030a1e2ea9d86c9b47a000f98305fe9a61fc8c545c441aa254a1e6c77f805fa715f9662c4509a8aec7daa60bbc19bd836fe6bb92ec6fdc26d6a88e2c2f0a59ad6ab079fa266451683345529c33d7e61ff2f127ec3a9428e8c508331531ef7fc2f769959e8a9eb1d1847f900c4e3b23ad6c264ad2b5429f2c59e9e90a9e1c2f755187a901b089ce9f69f4701b8d4123222a30f17a7f62747194f8a2346bb318c7bea605a85f0d2ff2e6d7e9c8b7142be9786c4dfe546746d3d5ce0901cd66c6ffce8cf54cedfb210756019c5e17f88350ba7bcd1e6e2ae4e5805d9066a58de2388d3b64029f73b4df489e91da9706370b391120e4911bbe49383944982e480d569d9a0707a1892cfb3f09f9d568cba27b0402a594ab5a1b4c0894135293b9544d0e3aedcac48de4b196a5000a6695fb50acdc92f21ecdaff4fa6ea9ef6fa5afbcedef6fd7af5257ec9cb223b208a98a45cda2daf600dcb1a81359629f8d88c8b2a798e35013cd57cb3775cd16430c563f933fb4587560de845a729ba0abab99fd4b78c3b4da33959743c5355e12566929cd914d322171d43dc39ff652cbf1da4bd562ff4e35aeb2d61fdfbc2047644c66bd1cb9f20e408184", 0x1000}, {&(0x7f0000003500)="65e5cec4feeaf7c7f9ba165cde80f6ed8667d4a4cbff321091ee45a70709c8ddd5d3bfd6137f330e51808dbe75cb9c253d976af2e4cbab1e288511c8a16b44dcb2e16073c6a137f46b0f19d9ed05046ed93d9af439b938aa6b8588cd4ebf5b3eba94c28c76195709880a007957972950388fe36a1e385cc8b57ff314c5495ff61603719321398a519ee519a06c6177d7da5bbc8599a4ed1475621604a63ced3c93e4197f8e4febd083ce6d77f8491353e5a48b2229af33ec", 0xb8}], 0x2, &(0x7f0000004240)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}], 0x78, 0x4}}], 0x5, 0x4080) r1 = socket(0x11, 0x800000003, 0x8) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) getsockopt$inet6_buf(r1, 0x29, 0x32, &(0x7f0000000040)=""/108, &(0x7f0000000100)=0x6c) r2 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r5, r4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x2c, 0x0, &(0x7f0000000240)=[@decrefs={0x40046307, 0x3}, @exit_looper, @exit_looper, @clear_death={0x400c630f, 0x2}, @exit_looper, @increfs={0x40046304, 0x3}], 0xdf, 0x0, &(0x7f00000003c0)="a95d389eb67b08168a67a7d85dae4b6b1904dc4e5378d90da5626275318ba56cc53dda7828131b9fda11418f4aaf238816a03bedcd87c89057e6eeddf7aacc64c3c5fb85216cdd3e6717fb0ac2ea991b2ac739aa2e16470ade000fa480106579c13b999f18c313562f71475ffe4cf0db90364617cc061ede1efe9f509ce70b968da1be362d9bc61807e18016c15daea05c2b8943145c5d8092576179f71ffb4294c5b2b23a5f12af9e3ef8de6e198ad2b0ab5c095ffe03ab2f5dedad16a70c724d762e1a36ffe51b8c32e7d96856c1af1bc5207480ebf68092958b1842ab9e"}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xe0, 0x6, 0x3, 0x7, 0x0, 0xf609, 0xe85f0, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x52, 0x1, @perf_config_ext={0x96, 0x4}, 0x1000, 0x6, 0x9, 0x0, 0x1f, 0x1ff, 0x1, 0x0, 0x401, 0x0, 0x5737215d}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x1) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="7f76753d8a3a3eecd88ac09ddac57b6642719858432ab2f81a6936bbe9a1412451353cbf10b6dba8d23f57144380053355cb71a7466c9cc3aad303c41047ebce2230e4e8a9d13daa348dea9e3f0d6ad1eecd65f8f996196c6606de24b05b2ae3b0a67ad8c75566a367715df7e81470f2ce9187e5e7f9d52569cd97e93be89b48473373522243e4", 0x87, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000000)=0xdd) ioctl$BINDER_WRITE_READ(r3, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) [ 2626.294788][ T3567] binder: 3563:3567 unknown command 0 [ 2626.313022][ T3567] binder: 3563:3567 ioctl c0306201 20000200 returned -22 08:15:29 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0xf0ffff}, 0x0) [ 2626.348814][ T3567] binder: 3563:3567 ioctl 400c620e 200000c0 returned -22 [ 2626.416819][ T3572] binder: 3563:3572 ioctl 40082404 20000000 returned -22 [ 2626.431707][ T3567] binder: 3563:3567 ioctl 400c620e 200000c0 returned -22 08:15:30 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xb00000000000000}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:30 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x6c00}, 0x0) 08:15:30 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x30) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) syz_open_procfs(r1, &(0x7f0000000000)='io\x00') 08:15:30 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x1000000}, 0x0) 08:15:30 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0xd}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:30 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000002, &(0x7f0000000040)="aa"}) [ 2627.012038][ T3593] binder: 3588:3593 ioctl 400c620e 200000c0 returned -22 08:15:30 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x2000000}, 0x0) 08:15:30 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x7400}, 0x0) 08:15:30 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0xbc4}, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) 08:15:30 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x7a00}, 0x0) 08:15:30 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x3000000}, 0x0) [ 2627.261776][ T3611] binder: 3609:3611 ioctl 400c620e 200000c0 returned -22 [ 2627.284904][ T3613] binder: 3609:3613 ioctl 400c620e 200000c0 returned -22 08:15:30 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x4000000}, 0x0) 08:15:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xf000}, 0x0) 08:15:31 executing program 3: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) r1 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x8, 0x7, 0x40, 0x40, 0x0, 0x3, 0xd800, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f00000003c0), 0x5}, 0x1000, 0x7, 0xffffffff, 0x1, 0x800, 0x8, 0x1562, 0x0, 0x6a08, 0x0, 0xcd}, 0x0, 0x8, 0xffffffffffffffff, 0x8) r2 = syz_mount_image$reiserfs(&(0x7f0000000a00), &(0x7f00000004c0)='./file0\x00', 0x1000, 0x4, &(0x7f0000000940)=[{&(0x7f0000000500)="67ba17596b6e7108a0828fd7671fb6a70ec15f59d86ffbf6f24a1e06ce5596f9bda1c752c23cac0d8dddb16c7c173d9a22fe391af11b15238d3aa8a83efa79f1366b86e21681c8cef9063f88171beb222e06814b05223c7b363696dcd133d4db34bca10b44fff2262f9ab3f2611a77c6dc932f22814131572ada1fd6c8ce73649de4eb303bc4592bab97cb358b1c53db1a7763b1c52186c5b9890802f5d20b287d143b33bc4be814a94ef6a6e5ebc9d336680ff060c3fdb0de06facdfc2336aa57efb1a7f93fd23af3f889f71ec15049257aaabe2d3861bbccaf60f1706f14113c2b385b9930a9087e66a861cc1fa6d707946f2b182f5d6989", 0xf9, 0x5}, {&(0x7f0000000680)="184614b6a1eb7d74513eef092b2f498d515f4a0f46cad024703c9bff3a21de05a9ba18868a1154e19694e81f577953931adb9910f02821d2bc171d16d1a17c597be05760202c4bdfed6641ba587aac1c3bc26fa9dfaa91f4e965f6c98f4f5a16b09f0ce47c56aeca99a4283d7e58cc3ac481aebb47ef5f24f394c4a05294f48f313878276a985b7bc7c0fb08f639a261b4baf4fceffedbe86b248f4625cf16dd53fa87ae989e8d6f7ec31121ef3931a207d1cbb26e342e65289a61f32b62f51e409b2d59fbb765315918e0f1f7d15373ab5827e838776d9a5d05dc2a388690c25fef9cba4b27fe", 0xe7, 0x6067}, {&(0x7f0000000780)="6b6d2e98aada39517cc99a3484f50d056b39904cd079170df92813cd1f7882c89afb74afa766f749e9405bf9bac313f53d1e10113ecba8bf215897bca6c04d3f66c7468b393c12c2d6f7a33f96db16d4f7976acd563bd3060e148147d469083826f11891bf207679aa27a9757414d7531bda1750b23176793d5de946f668d70ff9e453784ca115b8abf692145289db8bd371f7f3fced02a40141b88f2e168e6a526a427fbbe8b56f693903702bd9cd3b9c0b7eb8ccd4efaaaca76211f144e3d5468cd0d41ac3a6149fe255c414655ea9dd0fb2615a5effdc8cc30ea328d1b26fbeaf9a", 0xe3, 0xfffffffffffffffe}, {&(0x7f0000000880)="6b35f157978863ac91a21832293b68478c61ab39c2a061dcd2edb7997338f24fd6a40db7781727b817ac53282ff862b46307ba5d1cf6ccfc8dfdae8011daf54c497876673370943a46e99b5f81410701ac42df3dbdb36a5671cd0a7a08b192c7abcee3eb869a00f7ef94b7a2bb24a31649179e6f860010c6c736e051bc4175f43b2eecaf1defc8dc9605115f6583d657f302c573226362a4e875236d1279777fc74b9f23f09683f6a859e335fed7036fe6a76c65759cc39a19c6b8041fbbd2e3", 0xc0}], 0x200010, &(0x7f0000000d00)=ANY=[@ANYBLOB="6e6f7461696c2c636f6d6d69743d3078303030303030303030303030303030322c686173683d7465612c646f6e745f61707072616973652c6673757569a3fa8adef7643d30660031646a33372d623631622d373200352d306237652d37613962313d2f6465762f62691f0c735023002c7065726d69745f646972656374696f2c646f6e745f68eab8a14545cfecde688aeb28f5881443ba4b08f99098a76898c618405898b09060cc5f324feb56955d631e86c23230262d1e555df7a09d5a72d1918787bd1011a71a293298"]) dup3(r1, r2, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000080)={0xd, 0x7fff}) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000640)) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x50, 0x140e, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40001) r4 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x18, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f630cf4993d2e00000000000000dcda03346ada9a500000b05c93caa7e224311d89af2be97e8e304ebfd593fa07"], 0xcc, 0x0, &(0x7f0000000240)="59dfd65921044bd7f77d498e718f7d049a072807b9f854ffb5efea404aed74b77fa8e3f23795283081abbe877f31cf9bbc845c31cfa26608c425e6af882d2f598847a162dc77dba11158cc0caf6083cc930edce13b094f12f4c5f924d1136f628c78e9dc4b37d475633ee38d30e1c8fb682b9d0a35a10df5d4c86590a6865cc63f467e1b5f480d0dc0b1435ad770ab652f01232c56ad0dd299c0999d7dd0529d683fd05a0778d5cef6cd85235f138cd235db4785569decf22c28babbbc41d0b1acdcb9e7543e6217c6618138"}) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000640)) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000040), &(0x7f0000000080)) setresuid(0x0, r6, 0x0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000040), &(0x7f0000000080)) setresuid(0x0, r7, 0x0) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f00000009c0), 0x0, &(0x7f0000000b00)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xe00}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1600}}, {@allow_other}, {@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x1}}], [{@fsuuid={'fsuuid', 0x3d, {[0x64, 0x65, 0x35, 0x0, 0x32, 0x33, 0x35, 0x38], 0x2d, [0x30, 0x1c, 0x64, 0x35], 0x2d, [0x52, 0x36, 0x33, 0x61], 0x2d, [0x64, 0x37, 0x36, 0x63], 0x2d, [0x36, 0x65, 0x30, 0x36, 0x39, 0x31, 0x61, 0x61]}}}, {@fsname={'fsname', 0x3d, 'commit'}}, {@euid_lt={'euid<', r7}}, {@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, '-{!:!}'}}, {@smackfsroot={'smackfsroot', 0x3d, 'dont_appraise'}}, {@fsname={'fsname', 0x3d, 'fsname'}}]}}) 08:15:31 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xb00020000000000}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:31 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x5000000}, 0x0) 08:15:31 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0xe}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:31 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000003, &(0x7f0000000040)="aa"}) [ 2628.049361][ T3638] loop3: detected capacity change from 0 to 16383 08:15:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x30000}, 0x0) 08:15:31 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x6000000}, 0x0) [ 2628.124470][ T3638] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "hash=tea" [ 2628.161462][ T3649] binder: 3629:3649 ioctl 400c620e 200000c0 returned -22 [ 2628.210916][ T3649] fuse: Bad value for 'fd' 08:15:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x34000}, 0x0) [ 2628.257829][ T3649] binder: 3629:3649 ioctl 400c620e 200000c0 returned -22 08:15:31 executing program 3: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) r2 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r3, r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r0, r2) 08:15:31 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x7000000}, 0x0) 08:15:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xa0000}, 0x0) [ 2628.482427][ T3666] binder: 3665:3666 ioctl 400c620e 200000c0 returned -22 08:15:32 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x8000000}, 0x0) [ 2628.533860][ T3666] binder: 3665:3666 unknown command 0 [ 2628.557081][ T3666] binder: 3665:3666 ioctl c0306201 20000200 returned -22 [ 2628.568948][ T3666] binder: 3665:3666 unknown command 0 [ 2628.575020][ T3666] binder: 3665:3666 ioctl c0306201 20000200 returned -22 [ 2628.586518][ T3671] binder: 3665:3671 ioctl 400c620e 200000c0 returned -22 [ 2628.597470][ T3671] binder: 3665:3671 unknown command 0 [ 2628.605343][ T3671] binder: 3665:3671 ioctl c0306201 20000200 returned -22 [ 2628.621542][ T3671] binder: 3665:3671 unknown command 0 08:15:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x400300}, 0x0) [ 2628.645573][ T3671] binder: 3665:3671 ioctl c0306201 20000200 returned -22 08:15:32 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xc00000000000000}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:32 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x9000000}, 0x0) 08:15:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) open_by_handle_at(r1, &(0x7f0000000000)=@FILEID_INO32_GEN={0x8, 0x1, {0xcdc5, 0xfffffffa}}, 0x640601) r2 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) ioctl$BINDER_WRITE_READ(r3, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) 08:15:32 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 08:15:32 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000004, &(0x7f0000000040)="aa"}) 08:15:32 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0xa000000}, 0x0) [ 2629.077075][ T3701] binder: 3690:3701 unknown command 0 [ 2629.097553][ T3701] binder: 3690:3701 ioctl c0306201 20000200 returned -22 [ 2629.115350][ T3701] binder: 3690:3701 ioctl 400c620e 200000c0 returned -22 08:15:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 08:15:32 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x2}, 0x430, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x3, r1, 0x2) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0xa, 0x5a, 0x2, 0x0, 0x6, 0x4004, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8001, 0x2, @perf_config_ext={0x10000, 0x6}, 0x8048, 0x1c, 0x4, 0x6, 0x0, 0x4, 0xff7b, 0x0, 0xc455, 0x0, 0x24}, 0x0, 0xe, r1, 0x8) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x1, 0x8, 0x0, 0xc2, 0x0, 0x9, 0x1aa10, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000000), 0x5}, 0x2000, 0x400, 0x5, 0x6, 0x80, 0x400, 0x9, 0x0, 0x1f, 0x0, 0x9}, 0x0, 0xe, r1, 0x1) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/228, 0xe4}], 0x1, &(0x7f00000003c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000440)='!\\\\,\\:\x00') [ 2629.136481][ T3701] binder: 3690:3701 unknown command 0 [ 2629.144864][ T3701] binder: 3690:3701 ioctl c0306201 20000200 returned -22 08:15:32 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0xe000000}, 0x0) [ 2629.288753][ T3715] binder: 3711:3715 ioctl 400c620e 200000c0 returned -22 08:15:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) [ 2629.332096][ T3717] binder: 3711:3717 ioctl 400c620e 200000c0 returned -22 08:15:32 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x418440, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x5) tkill(r2, 0x30) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x3f, 0x3f, 0x5, 0x0, 0x4, 0x1200, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x7f, 0x7fffffff}, 0x40, 0x9, 0x101, 0x3, 0x4, 0xfffffff7, 0xd3e, 0x0, 0x7, 0x0, 0x8}, r2, 0xe, r1, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000480)=0x2, 0x4) r3 = perf_event_open$cgroup(&(0x7f0000000240)={0x2, 0x80, 0x8, 0x80, 0xff, 0x2, 0x0, 0x200, 0x0, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x40, 0x2, @perf_config_ext={0x6, 0x20}, 0x64, 0x80000001, 0x7f, 0x0, 0x6, 0x19, 0x401, 0x0, 0x10001, 0x0, 0x5}, r1, 0x10, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0x7f, 0x0, 0xff, 0x0, 0x7, 0x300, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x81, 0x0, @perf_config_ext={0x8, 0x2}, 0x4d040, 0x5, 0xea, 0x0, 0x7fff, 0x6, 0x7ff, 0x0, 0x2, 0x0, 0x9}, r2, 0x4, r3, 0x8) [ 2629.536649][ T3730] binder: 3729:3730 ioctl 400c620e 200000c0 returned -22 08:15:33 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xd00000000000000}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:33 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0xf000000}, 0x0) 08:15:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 08:15:33 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) 08:15:33 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x10}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:33 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000005, &(0x7f0000000040)="aa"}) [ 2630.099538][ T3743] binder: 3739:3743 ioctl 400c620e 200000c0 returned -22 08:15:33 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x14a3a1d5}, 0x0) 08:15:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 2630.150051][ T3753] binder: 3739:3753 ioctl 400c620e 200000c0 returned -22 08:15:33 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e04da0500000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\b\x00', "006cf200"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, '\t\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, &(0x7f0000000240)={0x20, 0x21, 0x88, {0x88, 0xa, "0dad69b86d3201a84afaefee8ea4824ad2054d742d75cd3aca0e1e8d589a534ae1fd7cc2ab9d5ad7f48d8bd91613b73c0da6dc319ac15270bad8970855d9c4a6e568a8543df901de3c44fe07e182d708e5e7933a1f2e1ff0580b4aef0e4a8f2b3c643c4b6ab80e39c6a20bec445c22ff77e8fd2d8cf14bdb1ee8fc33e5183ab91de21df946b6"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42c}}, &(0x7f0000000180)={0x0, 0x22, 0xb, {[@main=@item_4={0x3, 0x0, 0xa, "463434eb"}, @local=@item_4={0x3, 0x2, 0x2, "d1cc7272"}, @global=@item_012={0x0, 0x1, 0x8}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x653, 0x3, 0x1, {0x22, 0xe8d}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000380)={0x40, 0x15, 0x3a, "298ee4938030c7255282c9f4e9f36e291cb58475e1bc417d14a803b9290e0b51c8fad7ed3dd58163052644e6609571fd77f9766dab9dbef25ee9"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f0000000440)={0x20, 0x1, 0xb4, "cc28bfa9a8c2a08a7d22b551d59c0992925414dfccfa963bb7a06f80e06e04e2441f1efb424bb75aeb423330ffa3d782d6908883c1107c891f2c0be262bac0326a722553ad13d7c84318079a5c3399cdbb26a13b24dcfcf88ea19330e705df5e92d82a9a16f8b0b1cfe48a5e3f604be8cdc7afba0093e9569c1b41898712639bce10b20de60688b15ccc84e337e998ae725db602c70bc9caf2f1c1eee2ba69a5aea064d22c6a55f1af83d7b59475b1869e37d647"}, &(0x7f0000000500)={0x20, 0x3, 0x1}}) r1 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)) read$FUSE(0xffffffffffffffff, &(0x7f0000000dc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x42, 0x30, 0x8, 0x0, 0x0, 0x100000001, 0x80019, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xd796, 0x5, @perf_bp={&(0x7f0000000000), 0x1}, 0x3048, 0x0, 0x7, 0x8, 0xa7d, 0x6, 0x6, 0x0, 0x9, 0x0, 0x1ff}, r3, 0xd, r1, 0x8) ioctl$BINDER_WRITE_READ(r2, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) 08:15:33 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x1f000000}, 0x0) 08:15:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) 08:15:33 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x20000000}, 0x0) [ 2630.527809][T13328] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 2630.767683][T13328] usb 4-1: Using ep0 maxpacket: 16 [ 2630.888506][T13328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2630.899984][T13328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2630.910194][T13328] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2630.923425][T13328] usb 4-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 08:15:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) 08:15:34 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x3f000000}, 0x0) 08:15:34 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x11}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:34 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x1000000000000000}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:34 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000006, &(0x7f0000000040)="aa"}) [ 2630.932767][T13328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2630.944865][T13328] usb 4-1: config 0 descriptor?? [ 2631.000627][T13328] hub 4-1:0.0: USB hub found 08:15:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 08:15:34 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x48000000}, 0x0) [ 2631.217966][T13328] hub 4-1:0.0: 1 port detected 08:15:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) [ 2631.867887][T13328] hub 4-1:0.0: activate --> -90 [ 2632.509355][ T3758] binder: 3757:3758 ioctl 400c620e 200000c0 returned -22 [ 2632.527777][ T9110] usb 4-1: USB disconnect, device number 20 [ 2632.547716][T13328] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 2632.554917][T13328] usb 4-1-port1: connect-debounce failed [ 2633.287820][T13328] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 2633.527700][T13328] usb 4-1: Using ep0 maxpacket: 16 [ 2633.652273][T13328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2633.663583][T13328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2633.677515][T13328] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2633.690588][T13328] usb 4-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 2633.699775][T13328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2633.709251][T13328] usb 4-1: config 0 descriptor?? [ 2633.748560][T13328] hub 4-1:0.0: USB hub found 08:15:37 executing program 3: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x800000}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c4d0001"], 0x1, 0x1000000, &(0x7f0000000040)="aa"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000240)) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) 08:15:37 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x4c000000}, 0x0) 08:15:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) 08:15:37 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x12}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:37 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000007, &(0x7f0000000040)="aa"}) 08:15:37 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x1100000000000000}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) [ 2633.887852][T13328] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) 08:15:37 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x60000000}, 0x0) 08:15:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xa000000}, 0x0) [ 2633.993824][ T3846] binder: 3837:3846 unknown command 16796940 [ 2634.008647][T13328] usbhid 4-1:0.0: can't add hid device: -71 [ 2634.012449][ T3846] binder: 3837:3846 ioctl c0306201 200000c0 returned -22 [ 2634.026610][T13328] usbhid: probe of 4-1:0.0 failed with error -71 [ 2634.047555][ T3846] binder: 3837:3846 ioctl 81f8943c 20000240 returned -22 [ 2634.073974][ T3846] binder: 3837:3846 ioctl 400c620e 200000c0 returned -22 [ 2634.101442][T13328] usb 4-1: USB disconnect, device number 21 [ 2634.104137][ T3851] binder: BINDER_SET_CONTEXT_MGR already set [ 2634.132762][ T3851] binder: 3837:3851 ioctl 40046207 0 returned -16 [ 2634.156103][ T3859] binder: 3837:3859 unknown command 16796940 [ 2634.170527][ T3859] binder: 3837:3859 ioctl c0306201 200000c0 returned -22 [ 2634.198198][ T3846] binder: 3837:3846 ioctl 81f8943c 20000240 returned -22 08:15:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xe000000}, 0x0) 08:15:37 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x68000000}, 0x0) 08:15:37 executing program 3: r0 = perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x4, @perf_bp={0x0}, 0x1006, 0x10000, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0xc4a2, 0x0, 0x7fff}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='/dev/binder#\x00') ioctl$BINDER_WRITE_READ(r1, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0xe4000, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) splice(r2, &(0x7f0000000080), r3, &(0x7f0000000100), 0xe8e5, 0x0) [ 2634.398552][ T3869] binder: 3867:3869 ioctl 400c620e 200000c0 returned -22 [ 2634.436182][ T3869] binder: 3867:3869 ioctl 400c620e 200000c0 returned -22 08:15:38 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x6c000000}, 0x0) 08:15:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 08:15:38 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x15}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:38 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r3 = dup3(r2, r0, 0x80000) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="70010000", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fcdbdf251800000008000700400001006400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002d2535a5528e77e6b0800010039bcf03fa66af7134eccecad1c75a7ecc1eedac388b2f26797d1dd43a0ac34abfab1fe7a64091808e9f20a6c80040809afdd9c38c9d5c2f06d8c8d03ce5a14100bec0331e66de2190d28164fcd975a6846c39b4fafeae7e3e062fd22528ede11d001660b8c853d51775a4193814efc041a0bdf08a356b2a1f92ad678a702f7a8e4a4fd353e02d469165e147868622d8f2d26299e10231d8a49240256ed9e7f00000000000000a37f10ce8c1740b5ea5620", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x1f, 0x40, 0xb2, 0x5c, 0x0, 0x2000, 0x200, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xffffff81, 0x2, @perf_config_ext={0xfffffffffffffffa, 0x7}, 0x288, 0x1, 0x6ae, 0x9, 0x0, 0x5, 0x5, 0x0, 0x7, 0x0, 0x2}, r1, 0x5, r2, 0x9) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) 08:15:38 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x74000000}, 0x0) [ 2634.681044][ T3890] binder: 3884:3890 ioctl 400c620e 200000c0 returned -22 08:15:38 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000300, &(0x7f0000000040)="aa"}) 08:15:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 08:15:38 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x7a000000}, 0x0) 08:15:38 executing program 3: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000040)={0x1, 0x28, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x100) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x8}, 0x8) 08:15:38 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x1300000000000000}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x3f000000}, 0x0) [ 2634.944584][ T3907] binder: 3898:3907 ioctl 400c620e 200000c0 returned -22 08:15:38 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x1d}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:38 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x9effffff}, 0x0) 08:15:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000000}, 0x0) 08:15:38 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x24, 0x0, &(0x7f0000000000)=[@acquire_done={0x40106309, 0x3}, @request_death={0x400c630e, 0x2}], 0xa1, 0x0, &(0x7f0000000100)="79bc0e3e1ee3157c257109e34d8678083e9180df5908aa588ccb0e350981aaef70079b1af60595e25c23ece2538e13eb980e195c7f5fecfd1cfc855129d5459432bdd40ef2efee4e25acbd74f0b5f9d7498613359759c1cf8b42fe2f793013adbdc23be98112284077854f8e1d96a8a082813232b334917ad08388834b164db9a43ee0b44734a49cf17bd89199d19913e15ae4d21893b9d2cbfdd5438778032716"}) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000080)=0x800) 08:15:38 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0xd5a1a314}, 0x0) [ 2635.175139][ T3928] binder: 3924:3928 ioctl 400c620e 200000c0 returned -22 08:15:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a069fb7}, 0x0) [ 2635.226752][ T3928] binder: 3924:3928 ioctl 400c620e 200000c0 returned -22 08:15:39 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000500, &(0x7f0000000040)="aa"}) 08:15:39 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0xf0ffffff}, 0x0) 08:15:39 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) 08:15:39 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000000}, 0x0) [ 2635.775764][ T3914] binder: BINDER_SET_CONTEXT_MGR already set [ 2635.782718][ T3914] binder: 3901:3914 ioctl 40046207 0 returned -16 08:15:39 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x1400000000000000}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:39 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x64}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:39 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0xfffff000}, 0x0) [ 2635.853513][ T3948] binder: 3946:3948 ioctl 400c620e 200000c0 returned -22 [ 2635.882560][ T3951] binder: 3946:3951 ioctl 400c620e 200000c0 returned -22 08:15:39 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) 08:15:39 executing program 3: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x94, 0x4, 0x1, 0xec, 0x0, 0x1, 0x40, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xc2, 0xad17}, 0x2000, 0x7d, 0x1, 0x2, 0x8, 0x3ff, 0x1, 0x0, 0x3, 0x0, 0x8}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x4f44, &(0x7f0000000280)={0x0, 0x23d6, 0x2, 0x1, 0x177}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000380)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x3, 0x4, 0x0, 0x1, 0x0, 0x1, {0x0, r5}}, 0x2) ioctl$BINDER_WRITE_READ(r1, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="5e26408c3d77a7484deb30189fce6dcd82d258c23fe078bf767d5df3ab25df72ba2f7c4f4f4aed2765ceb5debc973da387b82ca750ed6a808f7322aa3a4d82f545867516862d0fa5c659a1a96d062daab15dd5e131282cf7dbc060fda931290f9affc83600ac87e8dce432525494eed9c8f1d50af08ee4bb4f73fb08f63818b62af5f4bd028627224cff6c1cb1", 0x8d}], 0x1, 0x3966, 0x1ff) io_uring_enter(0xffffffffffffffff, 0x1f55, 0xf6c3, 0x2, &(0x7f0000000240)={[0x5]}, 0x8) 08:15:39 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0xffffff7f}, 0x0) 08:15:39 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x68000000}, 0x0) [ 2636.173384][ T3973] binder: 3967:3973 ioctl 400c620e 200000c0 returned -22 08:15:39 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0xffffff9e}, 0x0) [ 2636.218723][ T3977] binder: 3967:3977 ioctl 400c620e 200000c0 returned -22 08:15:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x6c000000}, 0x0) 08:15:40 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000600, &(0x7f0000000040)="aa"}) 08:15:40 executing program 3: mq_timedsend(0xffffffffffffffff, &(0x7f0000000000)="e0cc3b066be1d951f47db56e9f3bc45d25eba4358169a5241887d401cafa6d0f096392550c8ef5f2b22672925cbbc67ccd7ee7a9e8d5", 0x36, 0x7, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0xf) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="09e7be06feff000000010000747290d81e78fe4f0b630200575f7b2c0e6c60e9631ef8a7916e41eb09c94c1751fc514076407172acbf8bea8523cb0ed380d99bce832e82346a6568dcc5fc7b7cc1d79459b6f11ba192db908cb26164c22630688a805796821e01b6ed982ae2770fe56f6e846b983b846e0cbc1229663efef77ef7f59d7f17606c5546d011ae52c33f030d33486de52223a12b1a1f"], 0xb9, 0x0, &(0x7f0000000100)="b2f739a7dd21186c1fa89afbc3ab5034c64b860e806d70935ee19f444416798cc1ee30f0f2aa51c0fa6edb704d164c30883969aba2c12a605fa90d722527ede935590dd30b47f81d5a39ac6f22e7a4d4daa85e844155b219a151b58caed3e043bc290e1dffd2935b26eb967451276094848db27fe57207e7c4dc0f2456bfcb6f293f304ac73fa9a68f7072b9295300be6d374d7a4510ee6030a6d05c4a3e1ee65e65fd46749fb018117e0018491b99715d877e48063f62c75d"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000840)={0xa4, 0x0, &(0x7f0000000680)=[@enter_looper, @clear_death={0x400c630f, 0x1}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x78, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/245, 0xf5, 0x0, 0x1e}, @ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/61, 0x3d, 0x0, 0x32}, @ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/5, 0x5, 0x2, 0x30}}, &(0x7f0000000440)={0x0, 0x28, 0x50}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/127, 0x7f, 0x1, 0x2c}, @ptr={0x70742a85, 0x0, &(0x7f0000000500)=""/189, 0xbd, 0x1, 0x25}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000640)={0x0, 0x28, 0x50}}, 0x400}], 0xca, 0x0, &(0x7f0000000740)="4d3b4994d30929bd1ef32ac8ed3f7158254c65954869d590e54c856cf9226d8dee12f61d84cb9c88b202d9a8bf102e5652d33a7744f19b720455bb1b6dc6fe60ee0929fccdb1f8c06da2ad40d80f3e1a1919f8b596b7ff2f51abf6e773c1eae667d91d62c852c17c55ab75be8d9e5f77ba83cfb43e5b351b652dbd0f4eae0ef942e5544862d3d23a77a631bd36d76a7c09efcc2b220e60c48fe0141208f435ba18a28d478b3c475ee2fbd2b84a705fdbbe94e0720edadc25bf97bb1fba8db6de1961298c60240c267830"}) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) 08:15:40 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0xfffffff0}, 0x0) [ 2636.896229][ T4002] binder: 3994:4002 unknown command 113174281 08:15:40 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x1500000000000000}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:40 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x14d}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x74000000}, 0x0) 08:15:40 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x1000000000000}, 0x0) [ 2636.936609][ T4002] binder: 3994:4002 ioctl c0306201 20000080 returned -22 [ 2636.953861][ T4004] binder: 3994:4004 ioctl 400c620e 200000c0 returned -22 08:15:40 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x3000000000000}, 0x0) 08:15:40 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1, 0x1, 0x7, 0x1, 0x0, 0x7, 0x40000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_config_ext={0x6000000, 0x5}, 0x800, 0x10006, 0x5d, 0x2, 0xfffffffffffffffe, 0x5, 0x32a, 0x0, 0x3, 0x0, 0x6}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xd) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x3f, 0x40000) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$audion(&(0x7f00000002c0), 0x2000000040, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x80000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x1000000, &(0x7f0000000040)="aa"}) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x1) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f0000000340)=0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000800), 0x0, 0x0, 0x0}) dup2(r1, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000000)={0x0, 0x1, 0x7fffffff}) 08:15:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 08:15:40 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x40030000000000}, 0x0) [ 2637.194017][ T4022] binder: 4016:4022 ioctl 400c620e 200000c0 returned -22 08:15:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x97ffffff}, 0x0) 08:15:40 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 08:15:41 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000700, &(0x7f0000000040)="aa"}) 08:15:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 08:15:41 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x1f00000000000000}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:41 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x100000000000000}, 0x0) 08:15:41 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x29a}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xb4f9d5f4}, 0x0) [ 2638.025921][ T4022] binder: 4016:4022 ioctl 400c620e 200000c0 returned -22 08:15:41 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x200000000000000}, 0x0) 08:15:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) fcntl$setflags(r1, 0x2, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d53ee348ab98c10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x1000000, &(0x7f0000000040)}) 08:15:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xb79f064a}, 0x0) 08:15:41 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x300000000000000}, 0x0) [ 2638.240764][ T4073] binder: 4069:4073 unknown command 0 08:15:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) [ 2638.283195][ T4073] binder: 4069:4073 ioctl c0306201 20000200 returned -22 [ 2638.299241][ T4080] binder: 4069:4080 ioctl 400c620e 200000c0 returned -22 [ 2638.353376][ T4073] binder: 4069:4073 unknown command 0 [ 2638.361659][ T4073] binder: 4069:4073 ioctl c0306201 20000200 returned -22 08:15:41 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x7}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) [ 2638.472743][ T4089] binder: 4087:4089 ioctl 400c620e 200000c0 returned -22 [ 2638.500720][ T4091] binder: 4087:4091 ioctl 400c620e 200000c0 returned -22 08:15:42 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x3000000, &(0x7f0000000040)="aa"}) 08:15:42 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x400000000000000}, 0x0) 08:15:42 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x2000000000000000}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xf4d5f9b4}, 0x0) 08:15:42 executing program 3: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, r0, 0x0, 0xd, &(0x7f0000000000)='/dev/binder#\x00'}, 0x30) ioctl$BINDER_WRITE_READ(r1, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) 08:15:42 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x300}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:42 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x500000000000000}, 0x0) [ 2639.038818][ T4108] binder: 4104:4108 ioctl 400c620e 200000c0 returned -22 08:15:42 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x600000000000000}, 0x0) 08:15:42 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x600080, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3, 0x8, 0x8f, 0x0, 0x0, 0x81, 0x1, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xff, 0x64e683a5a2aeef29, @perf_bp={&(0x7f0000000000), 0x3}, 0x4880, 0x2, 0x70, 0x6, 0x4cf, 0x6, 0x1000, 0x0, 0x8001, 0x0, 0xffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000900)) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r4, r3) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000480)={0xffffffffffffffff}, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000008c0)={0x10c, 0x0, &(0x7f0000000700)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/254, 0xfe, 0x1, 0x23}, @fda={0x66646185, 0x6, 0x2, 0x40}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000540)={0x0, 0x28, 0x48}}}, @increfs_done={0x40106308, 0x3}, @increfs_done={0x40106308, 0x3}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000580)={@flat=@binder={0x73622a85, 0x0, 0x1}, @flat=@binder={0x73622a85, 0xa, 0x3}, @flat=@weak_binder={0x77622a85, 0x0, 0x3}}, &(0x7f0000000600)={0x0, 0x18, 0x30}}, 0x1000}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000640)={@flat=@binder={0x73622a85, 0x1103}, @flat=@weak_binder={0x77622a85, 0x2000}, @fda={0x66646185, 0x7, 0x2, 0x39}}, &(0x7f00000006c0)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x2}, @register_looper, @enter_looper], 0x4d, 0x0, &(0x7f0000000840)="b0ef8293f75db9eb6981d422cd91fb223e5e0aec575a73c5ad013de89ed268210017935f4052318df3abf49eab6b3147fc4956a3efae62200655d3120b2b7b3e19dfe4cd445c1e7e6f713dc49a"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000180)=[@enter_looper], 0xc6, 0x0, &(0x7f0000000240)="6ea3ffd3d67cbc5b5041aab4a5e32c63a11dcb910c40b6e2219cff0de590512f48faababeb130d7c54129457c3f10b56462ff26481212bb1259fae77f88a7d3422f55b38f3d6ebc4d7c602c8dc620218ff47a551fc963a0a4dcdf65f5ee8ef36b9eb1458c7721f28d01f4ac17e7dbd9975dfafea8aa751b83f1d4d1b262984a96de81e06ba1beb0a5b4bed0ae3528f9c766dfe4ce6e67b24e6ffe527931f79c36782ad79aedfe48407cc50712ea6f364afed74ab4d8701220bb2f1ff10a3f13901f35db23f51"}) 08:15:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xfdffffff}, 0x0) 08:15:42 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x700000000000000}, 0x0) [ 2639.246992][ T4125] binder: 4121:4125 ioctl 400c620e 200000c0 returned -22 [ 2639.280569][ T4125] binder: BINDER_SET_CONTEXT_MGR already set 08:15:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) [ 2639.296143][ T4125] binder: 4121:4125 ioctl 40046207 0 returned -16 [ 2639.304141][ T4125] binder: 4121:4125 unknown command 0 [ 2639.316540][ T4125] binder: 4121:4125 ioctl c0306201 20000200 returned -22 [ 2639.326427][ T4125] binder: 4121:4125 ioctl c0306201 20000340 returned -11 [ 2639.355798][ T4133] binder: 4121:4133 ioctl 400c620e 200000c0 returned -22 [ 2639.396090][ T4133] binder: BINDER_SET_CONTEXT_MGR already set [ 2639.425325][ T4133] binder: 4121:4133 ioctl 40046207 0 returned -16 [ 2639.449991][ T4137] binder: 4121:4137 unknown command 0 [ 2639.457562][ T4137] binder: 4121:4137 ioctl c0306201 20000200 returned -22 08:15:43 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x5000000, &(0x7f0000000040)="aa"}) 08:15:43 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x800000000000000}, 0x0) 08:15:43 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x4000000000000000}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:43 executing program 3: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x50, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0xb, 0x3}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @exit_looper], 0x0, 0x0, &(0x7f0000000180)}) r2 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r4, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x0, 0x0) r6 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000340)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000600)={0x70, 0x0, &(0x7f0000000480)=[@dead_binder_done, @enter_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r6}, @flat=@weak_handle={0x77682a85, 0x1001, 0x2}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}, 0x40}, @enter_looper, @decrefs={0x40046307, 0x2}, @release], 0xc7, 0x0, &(0x7f0000000500)="8e291e610c767698e442b0a8a696291fd6b231046711e3a077de6f670ecfa5b7a4dccc07e688acef89291b92b015404c3cee88f8a5ce8335d435c58119981aa47413b53795ca0ac6d9d6f46d57492384e484cf587557e6330b313870d829f2050108b7f1bf57fd7c2542f6c25e093b8ff27cdf912444328701fb983f46d676b9ce294d3b39dd5641cc120a364306415fb8ab56820da69838c1f5964405026a3bfb9913b39b32a3acd0485769907d16453ee1082d7a49dd93595431da5cdd09fb4e01624d5b8e3b"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r7 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5201) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000180)=0x4) ioctl$BINDER_WRITE_READ(r1, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) 08:15:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 08:15:43 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x900000000000000}, 0x0) 08:15:43 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x4cf}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) [ 2640.042555][ T4158] binder: 4150:4158 unknown command 0 [ 2640.077908][ T4158] binder: 4150:4158 ioctl c0306201 20000200 returned -22 08:15:43 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0xa00000000000000}, 0x0) [ 2640.099968][ T4164] binder: 4150:4164 unknown command 0 [ 2640.111638][ T4164] binder: 4150:4164 ioctl c0306201 20000200 returned -22 [ 2640.137190][ T4158] binder: 4150:4158 ioctl 5201 0 returned -22 08:15:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xffffff97}, 0x0) [ 2640.151099][ T4158] binder: 4150:4158 ioctl 400c620e 200000c0 returned -22 [ 2640.167505][ T4167] binder: 4150:4167 unknown command 0 [ 2640.174149][ T4167] binder: 4150:4167 ioctl c0306201 20000200 returned -22 [ 2640.182776][ T4164] binder: 4150:4164 unknown command 0 [ 2640.189754][ T4164] binder: 4150:4164 ioctl c0306201 20000200 returned -22 [ 2640.204374][ T4158] binder: 4150:4158 ioctl 5201 0 returned -22 08:15:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 08:15:43 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x80) perf_event_open(0xfffffffffffffffd, 0xffffffffffffffff, 0x5, r0, 0x8) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) 08:15:43 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0xe00000000000000}, 0x0) [ 2640.371439][ T4177] binder: 4176:4177 ioctl 400c620e 200000c0 returned -22 [ 2640.401049][ T4180] binder: 4176:4180 ioctl 400c620e 200000c0 returned -22 08:15:44 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xc000000, &(0x7f0000000040)="aa"}) 08:15:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 08:15:44 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x401f000000000000}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:44 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) 08:15:44 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0xf00000000000000}, 0x0) 08:15:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xfffffffd}, 0x0) 08:15:44 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x500}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:44 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x14a3a1d500000000}, 0x0) [ 2641.049722][ T4204] binder: 4201:4204 ioctl 400c620e 200000c0 returned -22 [ 2641.076864][ T4209] binder: 4201:4209 ioctl 400c620e 200000c0 returned -22 08:15:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 08:15:44 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000000)) recvfrom$rxrpc(r3, &(0x7f0000000040)=""/28, 0x1c, 0x40012171, &(0x7f0000000080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x24) 08:15:44 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x1f00000000000000}, 0x0) [ 2641.225410][ T4219] binder: 4217:4219 ioctl 400c620e 200000c0 returned -22 [ 2641.244558][ T4219] binder: 4217:4219 unknown command 0 [ 2641.262948][ T4219] binder: 4217:4219 ioctl c0306201 20000200 returned -22 08:15:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x2) [ 2641.293274][ T4219] binder: 4217:4219 ioctl 8040942d 20000000 returned -22 [ 2641.323148][ T4226] binder: 4217:4226 ioctl 400c620e 200000c0 returned -22 [ 2641.353774][ T4226] binder: 4217:4226 unknown command 0 [ 2641.389286][ T4226] binder: 4217:4226 ioctl c0306201 20000200 returned -22 [ 2641.407789][ T4219] binder: 4217:4219 ioctl 8040942d 20000000 returned -22 08:15:45 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xffffff7f, &(0x7f0000000040)="aa"}) 08:15:45 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x2000000000000000}, 0x0) 08:15:45 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x4d01000000000000}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:45 executing program 3: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x100000000) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000000)) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, {&(0x7f0000000100)=""/91, 0x5b, &(0x7f0000000240)=""/213, 0x0, 0x4}}, 0x48) 08:15:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x3) 08:15:45 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x3f00000000000000}, 0x0) 08:15:45 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x600}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) [ 2642.002096][ T4248] binder: 4244:4248 ioctl 400c620e 200000c0 returned -22 [ 2642.040267][ T4254] binder: 4244:4254 ioctl 400c620e 200000c0 returned -22 08:15:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x4) 08:15:45 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x18041, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xc0, 0x2, 0xd6, 0x8, 0x0, 0x404, 0x4, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27f, 0x2, @perf_config_ext={0x5}, 0x80002, 0x4, 0xd97c, 0x3, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6162}, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) 08:15:45 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x4800000000000000}, 0x0) 08:15:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x5) [ 2642.167258][ T4261] binder: 4257:4261 ioctl 400c620e 200000c0 returned -22 [ 2642.201050][ T4266] binder: 4257:4266 ioctl 400c620e 200000c0 returned -22 08:15:45 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x4c00000000000000}, 0x0) 08:15:45 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = accept4$unix(r0, 0x0, &(0x7f0000000240), 0x80400) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f00000002c0)={0x0, 0x79b, [0x1, 0x6de, 0x7f, 0x1, 0xb38, 0x9]}) sendmsg$netlink(r0, &(0x7f0000000280)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)=[{&(0x7f0000000100)={0xc0, 0x2a, 0x4, 0x70bd28, 0x25dfdbfc, "", [@generic="7a90993d4c46ef07802327a20517f4e2f8a51e71e1ff3f9bd1d420e3f387ff93eac912d0f55e63bd8765e08cedc6219588b05ec7928000b8bac10ddc7bf997ba89dc5289e05de02b5c147cd19279de4532bca3416bcf1f4052985cb2cf90bc0d8498e8fc86de854b5a6a75913a157f964c1bfd884ee9760fc6e5f56dd8c647830720943e0a2dd89f55c8ea5eed", @nested={0x20, 0x61, 0x0, 0x1, [@typed={0x8, 0x7e, 0x0, 0x0, @u32=0x9}, @typed={0x14, 0x5c, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}]}]}, 0xc0}], 0x1, &(0x7f0000000240), 0x0, 0x84}, 0x10040000) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) 08:15:45 executing program 3: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x50, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0xb, 0x3}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @exit_looper], 0x0, 0x0, &(0x7f0000000180)}) r2 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r4, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x0, 0x0) r6 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000340)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000600)={0x70, 0x0, &(0x7f0000000480)=[@dead_binder_done, @enter_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r6}, @flat=@weak_handle={0x77682a85, 0x1001, 0x2}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}, 0x40}, @enter_looper, @decrefs={0x40046307, 0x2}, @release], 0xc7, 0x0, &(0x7f0000000500)="8e291e610c767698e442b0a8a696291fd6b231046711e3a077de6f670ecfa5b7a4dccc07e688acef89291b92b015404c3cee88f8a5ce8335d435c58119981aa47413b53795ca0ac6d9d6f46d57492384e484cf587557e6330b313870d829f2050108b7f1bf57fd7c2542f6c25e093b8ff27cdf912444328701fb983f46d676b9ce294d3b39dd5641cc120a364306415fb8ab56820da69838c1f5964405026a3bfb9913b39b32a3acd0485769907d16453ee1082d7a49dd93595431da5cdd09fb4e01624d5b8e3b"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r7 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5201) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000180)=0x4) ioctl$BINDER_WRITE_READ(r1, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) [ 2642.493133][ T4279] binder: 4278:4279 unknown command 0 [ 2642.499283][ T4279] binder: 4278:4279 ioctl c0306201 20000200 returned -22 [ 2642.510234][ T4279] binder: 4278:4279 unknown command 0 [ 2642.516337][ T4279] binder: 4278:4279 ioctl c0306201 20000200 returned -22 [ 2642.529599][ T4279] binder: 4278:4279 ioctl 5201 0 returned -22 [ 2642.542311][ T4279] binder: 4278:4279 ioctl 400c620e 200000c0 returned -22 08:15:46 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x5704000000000000}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:46 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x6000000000000000}, 0x0) 08:15:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x6) 08:15:46 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x24, 0x0, &(0x7f0000000000)=[@acquire_done={0x40106309, 0x3}, @request_death={0x400c630e, 0x2}], 0xa1, 0x0, &(0x7f0000000100)="79bc0e3e1ee3157c257109e34d8678083e9180df5908aa588ccb0e350981aaef70079b1af60595e25c23ece2538e13eb980e195c7f5fecfd1cfc855129d5459432bdd40ef2efee4e25acbd74f0b5f9d7498613359759c1cf8b42fe2f793013adbdc23be98112284077854f8e1d96a8a082813232b334917ad08388834b164db9a43ee0b44734a49cf17bd89199d19913e15ae4d21893b9d2cbfdd5438778032716"}) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000080)=0x800) 08:15:46 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x700}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) [ 2643.003850][ T4294] binder: 4290:4294 ioctl 400c620e 200000c0 returned -22 08:15:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x7) 08:15:46 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x6800000000000000}, 0x0) 08:15:46 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x24, 0x0, &(0x7f0000000000)=[@acquire_done={0x40106309, 0x3}, @request_death={0x400c630e, 0x2}], 0xa1, 0x0, &(0x7f0000000100)="79bc0e3e1ee3157c257109e34d8678083e9180df5908aa588ccb0e350981aaef70079b1af60595e25c23ece2538e13eb980e195c7f5fecfd1cfc855129d5459432bdd40ef2efee4e25acbd74f0b5f9d7498613359759c1cf8b42fe2f793013adbdc23be98112284077854f8e1d96a8a082813232b334917ad08388834b164db9a43ee0b44734a49cf17bd89199d19913e15ae4d21893b9d2cbfdd5438778032716"}) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000080)=0x800) 08:15:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x8) 08:15:46 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x6c00000000000000}, 0x0) [ 2643.180726][ T4309] binder: 4307:4309 ioctl 400c620e 200000c0 returned -22 08:15:46 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_names\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000080)={0x0, 0x4}) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000240)) 08:15:46 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x24, 0x0, &(0x7f0000000000)=[@acquire_done={0x40106309, 0x3}, @request_death={0x400c630e, 0x2}], 0xa1, 0x0, &(0x7f0000000100)="79bc0e3e1ee3157c257109e34d8678083e9180df5908aa588ccb0e350981aaef70079b1af60595e25c23ece2538e13eb980e195c7f5fecfd1cfc855129d5459432bdd40ef2efee4e25acbd74f0b5f9d7498613359759c1cf8b42fe2f793013adbdc23be98112284077854f8e1d96a8a082813232b334917ad08388834b164db9a43ee0b44734a49cf17bd89199d19913e15ae4d21893b9d2cbfdd5438778032716"}) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000080)=0x800) [ 2643.438298][ T4320] binder: 4319:4320 ioctl 400c620e 200000c0 returned -22 [ 2643.486353][ T4324] binder: 4321:4324 ioctl 81f8943c 20000240 returned -22 08:15:47 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x6400000000000000}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x9) 08:15:47 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x7400000000000000}, 0x0) 08:15:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xf000}, 0x0) 08:15:47 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x900}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0xa) 08:15:47 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x5704000000000000}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:47 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x7a00000000000000}, 0x0) 08:15:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0xe) [ 2644.252795][ T4324] binder: 4321:4324 ioctl 81f8943c 20000240 returned -22 08:15:47 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 08:15:47 executing program 1: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xbca, 0x5}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='\xf0\x8b \xbe6\x86\xa8\xbe/dev/binr#\x00\x00\x00D\x183\x81\xba\xfdz \xb7\x88\\\xb8\x1f\x89\xec\xd3s\xd2\xdc\xee\xcd\x89\x96,iq;*?\"\xe1\x18\xc8\xff\x99R\xb2\xb2M\xfc3m\x8a\xbelCw\x1d\x8c\xed\x13\x8f\xf5a\")6\x8d<=Mh4\xc5D&F\xc0\x17,\xac\x00\xa2&6\xec2\xbf\x8d\xf2b\xff\xb1M/\xbb<5\xcc\rP\xd5\xf0\x81\x96\b\xc2Z\x14\x1e\xc6\x00\xaa\r,v\xec\xc0\t\x997\x91\xd86') ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) 08:15:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0xf) 08:15:48 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x7c15000000000000}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:48 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 08:15:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x48) 08:15:48 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0xa00}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:48 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 08:15:48 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x6c}, 0x0) 08:15:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x4c) 08:15:48 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0xffffffff00000000}, 0x0) 08:15:48 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scmi_xfer_end\x00', r0}, 0x10) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x1000000, &(0x7f0000000040)="aa"}) close(r1) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000640)) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x68, 0x0, 0x4, 0x81, 0x0, 0x80, 0x40008, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x1, 0x1}, 0x8061, 0xca06, 0x4, 0x0, 0x1, 0x1, 0x401, 0x0, 0x6, 0x0, 0x5}, 0x0, 0xd, r3, 0x2) ioctl$BINDER_WRITE_READ(r2, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) 08:15:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x60) 08:15:48 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x430}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r1, 0xa) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0xa, 0x5a, 0x2, 0x0, 0x6, 0x4004, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8001, 0x2, @perf_config_ext={0x10000, 0x6}, 0x8048, 0x1c, 0x4, 0x6, 0x0, 0x4, 0xff7b, 0x0, 0xc455, 0x0, 0x24}, 0x0, 0xe, r1, 0x8) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xff, 0x7, 0xe5, 0x7f, 0x0, 0x1, 0x10, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x4}, 0x10, 0x80000000, 0x1f, 0x3, 0x6, 0x8, 0x1, 0x0, 0x3, 0x0, 0x1}, 0xffffffffffffffff, 0xd, r1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) 08:15:48 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) [ 2645.375561][ T4400] binder: 4395:4400 ioctl 400c620e 200000c0 returned -22 08:15:49 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x8000000000000000}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:49 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x300000000000000}, 0x0) 08:15:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x68) 08:15:49 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x0) 08:15:49 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0xb00}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) [ 2646.023568][ T4420] __nla_validate_parse: 5 callbacks suppressed [ 2646.023586][ T4420] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2646.058171][ T4420] validate_nla: 5 callbacks suppressed [ 2646.058187][ T4420] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 08:15:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x6c) [ 2646.079401][ T4420] nbd: error processing sock list [ 2646.086259][ T4424] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2646.101161][ T4424] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2646.116073][ T4424] nbd: error processing sock list 08:15:49 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x2}, 0x0) 08:15:49 executing program 3: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r2, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) clock_gettime(0x0, &(0x7f0000006b80)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000006bc0)={0x3f5, 0x2, 0x4, 0x4000, 0x42f84447, {r4, r5/1000+60000}, {0x3, 0x8, 0x6, 0x2, 0x0, 0x7, "4da58898"}, 0x4, 0x4, @fd=0xffffffffffffffff, 0x2400}) r7 = syz_open_pts(0xffffffffffffffff, 0x3ed001) r8 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) r9 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r9, r8) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000006c40)=[r2, r3, r6, r0, r0, r7, r9], 0x7) r10 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0x400c620e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)}) 08:15:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x74) [ 2646.261724][ T4438] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2646.288858][ T4438] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2646.297582][ T4438] nbd: error processing sock list 08:15:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x7a) 08:15:49 executing program 1: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x300, 0xffe, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffefffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x5) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x80, 0xff, 0x3, 0x3, 0x1, 0x0, 0x4, 0x12342697d3374e17, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x800, 0x9, 0x0, 0x3, 0x962f, 0x3, 0x9, 0x0, 0xffffffe1, 0x0, 0x7}, 0xffffffffffffffff, 0xd, r0, 0x1) 08:15:49 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x3}, 0x0) [ 2646.352063][ T4446] binder: 4441:4446 unknown command 0 [ 2646.374093][ T4446] binder: 4441:4446 ioctl c0306201 20000200 returned -22 [ 2646.421297][ T4446] binder: 4441:4446 unknown command 0 [ 2646.427782][ T4446] binder: 4441:4446 ioctl c0306201 20000200 returned -22 [ 2646.455793][ T4446] binder: 4441:4446 ioctl 400c620e 200000c0 returned -22 [ 2646.469154][ T4453] binder: 4449:4453 ioctl c0306201 200000c0 returned -11 [ 2646.519934][ T4455] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2646.572984][ T4455] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2646.594281][ T4455] nbd: error processing sock list 08:15:50 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x9a02000000000000}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:50 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0xf0ffffff}, 0x0) 08:15:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0xf0) 08:15:50 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xe77bb04dbdd8d52c, 0x20) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendfile(r1, r2, &(0x7f0000000080)=0xdb5, 0x71f3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) r3 = socket(0x11, 0x800000003, 0x8) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x1f, @mcast2, 0x7f}}}, 0x84) 08:15:50 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0xd00}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:50 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x0) 08:15:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x300) [ 2647.032467][ T4476] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2647.046776][ T4476] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2647.056511][ T4476] nbd: error processing sock list [ 2647.070030][ T4477] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 08:15:50 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00800000a2b70021d1d28396b20fd58500"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) r2 = fork() write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x10) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}}, 0xfea6) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f0000000280)=""/65, 0x41}], 0x2, 0x1f, 0x9) rt_sigqueueinfo(r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) r3 = dup(r1) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x6f, 0x1, 0x2, 0x0, 0x0, 0x100, 0x20000, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x5, 0x8}, 0x40000, 0x9, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, r2, 0xa, r3, 0x0) pipe2$9p(&(0x7f0000000080), 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2010, r0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)) syz_open_pts(r1, 0x4080) syz_open_pts(r1, 0x0) 08:15:50 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x5}, 0x0) [ 2647.080535][ T4477] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2647.103009][ T4477] nbd: error processing sock list 08:15:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x500) [ 2647.271653][ T4491] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2647.324923][ T4491] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2647.381463][ T4491] nbd: error processing sock list 08:15:51 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x6}, 0x0) 08:15:51 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x600) [ 2647.578398][ T4507] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2647.601315][ T4507] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2647.626919][ T4507] nbd: error processing sock list [ 2647.662850][ T4507] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2647.677027][ T4507] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2647.686079][ T4507] nbd: error processing sock list 08:15:51 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xa00f000000000000}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:51 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00800000a2b70021d1d28396b20fd58500"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) r2 = fork() write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x10) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}}, 0xfea6) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f0000000280)=""/65, 0x41}], 0x2, 0x1f, 0x9) rt_sigqueueinfo(r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) r3 = dup(r1) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x6f, 0x1, 0x2, 0x0, 0x0, 0x100, 0x20000, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x5, 0x8}, 0x40000, 0x9, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, r2, 0xa, r3, 0x0) pipe2$9p(&(0x7f0000000080), 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2010, r0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)) syz_open_pts(r1, 0x4080) syz_open_pts(r1, 0x0) 08:15:51 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x700) 08:15:51 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0xe00}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:51 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x7}, 0x0) 08:15:51 executing program 1: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x1000000, 0x10, 0x0, 0x93, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xffbfffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) fcntl$dupfd(r0, 0x406, r0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x200800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3f, 0x1000000, &(0x7f00000000c0)="74358e484276682f2d71681f4a2215d60c0ea621c66f58a6e8356651a0c27c01d6d6eeef7e12d416e47b058094dbfcf27af3aa4acb59d2ced4ac4e21fe5a99"}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f00000001c0)={@multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x8) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044ab4ea6f7ae49d88fecf9141a7511bf746bec66ba", 0x7ff2, 0x20c49a, 0x0, 0x27) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="e6c05f1ef4e8d2ca38eacefa9186b3b3", 0x10) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xa4, 0x0, &(0x7f0000000240)=[@increfs_done={0x40106308, 0x3}, @request_death, @free_buffer, @release={0x40046306, 0x2}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r4}, @flat=@handle={0x73682a85, 0x0, 0x3}, @fda={0x66646185, 0x0, 0x2, 0x34}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @acquire_done={0x40106309, 0x3}, @increfs_done={0x40106308, 0x3}], 0x6a, 0x0, &(0x7f0000000300)="4fdcb4e9f7a99b97ae5d10a0d822313e56125d5c2add7d0ea920d014b88149e3f8c6333e9c9cffade5150f5c4e5cf1f23fb3f5baefbbcd1c92c4f85f7badf005e0c33e1dcb70db501519bf57180618e405fa831dc0e182c61425c1ccbbd4e8264d2e1495a5ead8af631f"}) [ 2648.064110][ T4526] binder: BINDER_SET_CONTEXT_MGR already set [ 2648.070743][ T4522] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2648.083041][ T4526] binder: 4515:4526 ioctl 40046207 0 returned -16 [ 2648.106791][ T4522] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 08:15:51 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r2, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r4, r3) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001500)={0xf8, 0x0, &(0x7f0000001340)=[@acquire={0x40046305, 0x1}, @increfs, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x3, 0x2, 0xe}, @fda={0x66646185, 0xa, 0x0, 0x2e}}, &(0x7f0000000000)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @decrefs={0x40046307, 0x3}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@binder={0x73622a85, 0x100, 0x1}, @flat=@weak_handle={0x77682a85, 0x0, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}, 0x400}, @enter_looper, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000012c0)={@flat=@weak_binder={0x77622a85, 0x310a}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/4096, 0x1000, 0x1, 0x18}, @fda={0x66646185, 0x4, 0x0, 0x13}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}}], 0x93, 0x0, &(0x7f0000001440)="b2d897d63772a4049a74051f304339691a35bd2a9dc0cf416baa891c3edd08a920e00bc5abaa0ad92a2c9b318bb1e01f96fd74b3f4fb4be5d9490e4b5ff518cc6af129a0333049740cfb64ee4c0552b6d015162d257faa57d6a13912d8e4dd78ea435b9a66ad6507282079f6a21cdce4ad397654ebf74c9fbb72928c6cd66f490e44bd194c8e52a7fbb240667fa846560f1891"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) [ 2648.147446][ T4522] nbd: error processing sock list 08:15:51 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x900) 08:15:51 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x8}, 0x0) [ 2648.239446][ T4534] binder: BINDER_SET_CONTEXT_MGR already set [ 2648.245942][ T4534] binder: 4533:4534 ioctl 40046207 0 returned -16 [ 2648.260536][ T4534] binder: 4533:4534 unknown command 0 [ 2648.266359][ T4534] binder: 4533:4534 ioctl c0306201 20000200 returned -22 [ 2648.282275][ T4534] binder: BINDER_SET_CONTEXT_MGR already set 08:15:51 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00800000a2b70021d1d28396b20fd58500"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) r2 = fork() write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x10) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}}, 0xfea6) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f0000000280)=""/65, 0x41}], 0x2, 0x1f, 0x9) rt_sigqueueinfo(r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) r3 = dup(r1) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x6f, 0x1, 0x2, 0x0, 0x0, 0x100, 0x20000, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x5, 0x8}, 0x40000, 0x9, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, r2, 0xa, r3, 0x0) pipe2$9p(&(0x7f0000000080), 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2010, r0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)) syz_open_pts(r1, 0x4080) syz_open_pts(r1, 0x0) [ 2648.305032][ T4534] binder: 4533:4534 ioctl 40046207 0 returned -16 [ 2648.317987][ T4534] binder: 4533:4534 unknown command 0 [ 2648.344526][ T4534] binder: 4533:4534 ioctl c0306201 20000200 returned -22 [ 2648.367886][ T4534] binder: 4533:4534 unknown command 0 [ 2648.402279][ T4534] binder: 4533:4534 ioctl c0306201 20000200 returned -22 08:15:51 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0xa00) [ 2648.414359][ T4542] nbd: error processing sock list [ 2648.469063][ T4546] binder: 4533:4546 unknown command 0 [ 2648.482317][ T4546] binder: 4533:4546 ioctl c0306201 20000200 returned -22 08:15:52 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x9}, 0x0) [ 2648.652993][ T4554] nbd: error processing sock list 08:15:52 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xf11180a002010000}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:52 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffff, r0, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) 08:15:52 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0xe00) 08:15:52 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0xf00}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:52 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0xa}, 0x0) 08:15:52 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00800000a2b70021d1d28396b20fd58500"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) r2 = fork() write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x10) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}}, 0xfea6) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f0000000280)=""/65, 0x41}], 0x2, 0x1f, 0x9) rt_sigqueueinfo(r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) r3 = dup(r1) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x6f, 0x1, 0x2, 0x0, 0x0, 0x100, 0x20000, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x5, 0x8}, 0x40000, 0x9, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, r2, 0xa, r3, 0x0) pipe2$9p(&(0x7f0000000080), 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2010, r0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)) syz_open_pts(r1, 0x4080) [ 2649.048257][ T4567] nbd: error processing sock list 08:15:52 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0xe}, 0x0) 08:15:52 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0xf00) 08:15:52 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x2000) [ 2649.319937][ T4586] nbd: error processing sock list 08:15:52 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0xf}, 0x0) 08:15:52 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00800000a2b70021d1d28396b20fd58500"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) r2 = fork() write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x10) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}}, 0xfea6) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f0000000280)=""/65, 0x41}], 0x2, 0x1f, 0x9) rt_sigqueueinfo(r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) r3 = dup(r1) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x6f, 0x1, 0x2, 0x0, 0x0, 0x100, 0x20000, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x5, 0x8}, 0x40000, 0x9, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, r2, 0xa, r3, 0x0) pipe2$9p(&(0x7f0000000080), 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2010, r0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)) 08:15:53 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x3f00) [ 2649.544091][ T4595] nbd: error processing sock list 08:15:53 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x48}, 0x0) 08:15:53 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x1100}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:53 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x4800) 08:15:53 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xfefdffff00000000}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:53 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) 08:15:53 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00800000a2b70021d1d28396b20fd58500"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) r2 = fork() write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x10) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}}, 0xfea6) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f0000000280)=""/65, 0x41}], 0x2, 0x1f, 0x9) rt_sigqueueinfo(r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) r3 = dup(r1) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x6f, 0x1, 0x2, 0x0, 0x0, 0x100, 0x20000, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x5, 0x8}, 0x40000, 0x9, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, r2, 0xa, r3, 0x0) pipe2$9p(&(0x7f0000000080), 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2010, r0, 0x0) [ 2650.033209][ T4617] nbd: error processing sock list 08:15:53 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x4c00) 08:15:53 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x4c}, 0x0) 08:15:53 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x6000) [ 2650.354513][ T4636] nbd: error processing sock list 08:15:54 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00800000a2b70021d1d28396b20fd58500"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) r2 = fork() write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x10) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}}, 0xfea6) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f0000000280)=""/65, 0x41}], 0x2, 0x1f, 0x9) rt_sigqueueinfo(r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) r3 = dup(r1) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x6f, 0x1, 0x2, 0x0, 0x0, 0x100, 0x20000, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x5, 0x8}, 0x40000, 0x9, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, r2, 0xa, r3, 0x0) pipe2$9p(&(0x7f0000000080), 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2010, r0, 0x0) 08:15:54 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x60}, 0x0) 08:15:54 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x6800) [ 2650.626438][ T4645] nbd: error processing sock list 08:15:54 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x68}, 0x0) 08:15:54 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x1200}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:54 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00800000a2b70021d1d28396b20fd58500"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) r2 = fork() write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x10) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}}, 0xfea6) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f0000000280)=""/65, 0x41}], 0x2, 0x1f, 0x9) rt_sigqueueinfo(r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) r3 = dup(r1) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x6f, 0x1, 0x2, 0x0, 0x0, 0x100, 0x20000, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x5, 0x8}, 0x40000, 0x9, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, r2, 0xa, r3, 0x0) pipe2$9p(&(0x7f0000000080), 0x0) [ 2650.865842][ T4658] nbd: error processing sock list 08:15:54 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xfeffffff00000000}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:54 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x6c00) 08:15:54 executing program 1: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) 08:15:54 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x6c}, 0x0) [ 2651.079553][ T1357] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.086025][ T1357] ieee802154 phy1 wpan1: encryption failed: -22 08:15:54 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00800000a2b70021d1d28396b20fd58500"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) r2 = fork() write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x10) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}}, 0xfea6) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f0000000280)=""/65, 0x41}], 0x2, 0x1f, 0x9) rt_sigqueueinfo(r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) r3 = dup(r1) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x6f, 0x1, 0x2, 0x0, 0x0, 0x100, 0x20000, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x5, 0x8}, 0x40000, 0x9, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, r2, 0xa, r3, 0x0) [ 2651.175632][ T4676] __nla_validate_parse: 9 callbacks suppressed [ 2651.175649][ T4676] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2651.220882][ T4676] validate_nla: 9 callbacks suppressed [ 2651.220898][ T4676] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2651.313285][ T4676] nbd: error processing sock list 08:15:55 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x1500}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:55 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x7400) 08:15:55 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x74}, 0x0) 08:15:55 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00800000a2b70021d1d28396b20fd58500"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) r2 = fork() write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x10) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}}, 0xfea6) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f0000000280)=""/65, 0x41}], 0x2, 0x1f, 0x9) rt_sigqueueinfo(r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) r3 = dup(r1) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x6f, 0x1, 0x2, 0x0, 0x0, 0x100, 0x20000, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x5, 0x8}, 0x40000, 0x9, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, r2, 0xa, r3, 0x0) [ 2651.728965][ T4692] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2651.749144][ T4692] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2651.759758][ T4692] nbd: error processing sock list 08:15:55 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x7a00) 08:15:55 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x7a}, 0x0) 08:15:55 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x157c}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) [ 2651.960440][ T4705] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2652.019391][ T4705] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2652.052738][ T4705] nbd: error processing sock list 08:15:55 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0xf000) 08:15:55 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00800000a2b70021d1d28396b20fd58500"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) r2 = fork() write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x10) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}}, 0xfea6) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f0000000280)=""/65, 0x41}], 0x2, 0x1f, 0x9) rt_sigqueueinfo(r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) dup(r1) 08:15:55 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xffffff7f00000000}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:55 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000001240)={0x0, 0x0, 'client0\x00', 0x3, "475c3626d841a807", "00eef5b64b4d3621d692e586b6de95a0d728c2cf07596c89e89a8da3d5e64c5a", 0x100, 0x8}) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) lseek(r3, 0x9, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/sr9800', 0x50080, 0x80) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="106308400000000000000002163bc2b1f08e2ae6bc82e7ba3146faea00000040010000210000000000000000"], 0x1000, 0x0, &(0x7f0000000240)="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"}) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x1000000, &(0x7f0000000040)="aa"}) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001300), 0x200, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xcc, 0x1000000, &(0x7f0000001380)="00303ae5ff21b35d3a4ee175ad35051069d3b8f14b8355678d4910afbb64b83e7e7c8432b2aa5c70d1523641f99dc708d0b341fe06d7396c910cf42b787860094bc67d18da5d1854ebc65bf91eda489b373bc7b25fb57ddfd7f860461c529715d59e76f1356eb1009057486751bda164bf2857ce1984f30dc933035cd08fe0b334f8fef21ad4517ff4405ddd3c9defd663b9201a00caf2577fac52d96c0321dc37241488a6f18f7e6ed4faa02223a8092074065bf890a5c306101182cc3bc03e2c35c5acdd984745841ce4c2"}) r6 = syz_open_dev$mouse(&(0x7f0000001340), 0x0, 0xe0000) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) 08:15:55 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0xf0}, 0x0) [ 2652.220201][ T4718] binder: BINDER_SET_CONTEXT_MGR already set [ 2652.249764][ T4718] binder: 4715:4718 ioctl 40046207 0 returned -16 08:15:55 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x30000) [ 2652.341795][ T4726] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2652.408861][ T4726] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2652.450406][ T4726] nbd: error processing sock list 08:15:56 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x300}, 0x0) 08:15:56 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00800000a2b70021d1d28396b20fd58500"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) r2 = fork() write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x10) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}}, 0xfea6) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f0000000280)=""/65, 0x41}], 0x2, 0x1f, 0x9) rt_sigqueueinfo(r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) dup(r1) 08:15:56 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x34000) [ 2652.693703][ T4736] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2652.756124][ T4736] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2652.816197][ T4736] nbd: error processing sock list 08:15:56 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x1d00}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:56 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0xa0000) [ 2652.917136][ T4736] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2652.961945][ T4736] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2653.016816][ T4736] nbd: error processing sock list [ 2653.022756][ T4724] binder: BINDER_SET_CONTEXT_MGR already set [ 2653.034109][ T4724] binder: 4715:4724 ioctl 40046207 0 returned -16 08:15:56 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00800000a2b70021d1d28396b20fd58500"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) r2 = fork() write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x10) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}}, 0xfea6) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f0000000280)=""/65, 0x41}], 0x2, 0x1f, 0x9) rt_sigqueueinfo(r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) 08:15:56 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x500}, 0x0) [ 2653.139310][ T4725] binder: BINDER_SET_CONTEXT_MGR already set [ 2653.147029][ T4725] binder: 4720:4725 ioctl 40046207 0 returned -16 08:15:56 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xffffffff00000000}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:56 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x400300) [ 2653.257260][ T4758] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2653.309297][ T4758] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2653.346548][ T4758] nbd: error processing sock list 08:15:57 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x600}, 0x0) 08:15:57 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0xf0ffff) 08:15:57 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x1f00}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:57 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)="aa"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001a80)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x1000000, &(0x7f0000000040)="aa"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0xb8, 0x0, &(0x7f0000000580)=[@free_buffer={0x40086303, r1}, @enter_looper, @decrefs={0x40046307, 0x3}, @reply={0x40406301, {0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000480)={@ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/147, 0x93, 0x1, 0xb}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/93, 0x5d, 0x0, 0x27}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000080)={0x0, 0x28, 0x50}}}, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@fda={0x66646185, 0x6, 0x2, 0x32}, @fda={0x66646185, 0x7, 0x1, 0x11}, @fda={0x66646185, 0x5, 0x0, 0x36}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}, 0x1000}], 0xe3, 0x0, &(0x7f0000000640)="ddea4785392faa2a478fc6f54d51e2feaf14b6db878f0ea2a478833ddcb73f587e826af0128572d1353a4090d438cedcb1f3a2384ea584d7b7b51d807fb743c5f2a65e890bb832eec8b387316c8f476f55358f17e98ba1c6688de469fb2375d6f2dc75cb46ffb6fec5fecd9a7c73e9239a6c15e01e2ecf74cfb0b222fe117e123945ee9399d1c68e142bf6c21f0f09dc7bb89e02ec354c1fd9b13bd75961001b61d0d2fc0b4ee765e16bf9e538ac7b0e8f10cffbec6b3aa7026a42becff9e5fb66742fa478d26a7ab9aaf126bc99dfd3fb1d47412fa90c813686cd83e84dd88b5d6944"}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r4, r3) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) 08:15:57 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00800000a2b70021d1d28396b20fd58500"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) r2 = fork() write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x10) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}}, 0xfea6) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f0000000280)=""/65, 0x41}], 0x2, 0x1f, 0x9) rt_sigqueueinfo(r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) [ 2653.689094][ T4776] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2653.735713][ T4776] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2653.761186][ T4776] nbd: error processing sock list 08:15:57 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x1000000) 08:15:57 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x700}, 0x0) [ 2653.877230][ T4786] binder: BINDER_SET_CONTEXT_MGR already set [ 2653.889795][ T4786] binder: 4780:4786 ioctl 40046207 0 returned -16 [ 2653.904225][ T4786] binder: BINDER_SET_CONTEXT_MGR already set [ 2653.928389][ T4786] binder: 4780:4786 ioctl 40046207 0 returned -16 [ 2653.957421][ T4786] binder: 4780:4786 unknown command 0 08:15:57 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00800000a2b70021d1d28396b20fd58500"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) r2 = fork() write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x10) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}}, 0xfea6) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f0000000280)=""/65, 0x41}], 0x2, 0x1f, 0x9) rt_sigqueueinfo(r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) [ 2654.020407][ T4786] binder: 4780:4786 ioctl c0306201 20000200 returned -22 [ 2654.030252][ T4797] binder: 4780:4797 ioctl 80489439 20000100 returned -22 [ 2654.042166][ T4796] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 08:15:57 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x2000000) 08:15:57 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x1f40}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) [ 2654.125868][ T4796] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2654.193301][ T4796] nbd: error processing sock list [ 2654.258855][ T4768] binder: BINDER_SET_CONTEXT_MGR already set [ 2654.266513][ T4768] binder: 4763:4768 ioctl 40046207 0 returned -16 08:15:57 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x2}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:57 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00800000a2b70021d1d28396b20fd58500"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) r2 = fork() write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x10) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}}, 0xfea6) rt_sigqueueinfo(r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) 08:15:57 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x900}, 0x0) 08:15:57 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x3000000) [ 2654.469255][ T4818] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2654.497043][ T4818] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2654.513330][ T4818] nbd: error processing sock list [ 2654.628460][ T4784] binder: BINDER_SET_CONTEXT_MGR already set [ 2654.644198][ T4784] binder: 4780:4784 ioctl 40046207 0 returned -16 [ 2654.658376][ T4786] binder: BINDER_SET_CONTEXT_MGR already set [ 2654.665001][ T4797] binder: 4780:4797 unknown command 0 [ 2654.671447][ T4797] binder: 4780:4797 ioctl c0306201 20000200 returned -22 08:15:58 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 2654.686680][ T4786] binder: 4780:4786 ioctl 40046207 0 returned -16 [ 2654.712978][ T4830] binder: 4780:4830 ioctl 80489439 20000100 returned -22 [ 2654.844547][ T4833] nbd: error processing sock list 08:15:58 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x10000}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x1000000, &(0x7f0000000040)="aa"}) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000100)={{r0}, 0x1, &(0x7f0000000000)=[0x5], 0x4, 0x7, [0x5, 0x9, 0x2, 0x10000]}) 08:15:58 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x4000000) [ 2654.924578][ T4833] nbd: error processing sock list 08:15:58 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0xe00}, 0x0) 08:15:58 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00800000a2b70021d1d28396b20fd58500"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) r2 = fork() write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x10) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}}, 0xfea6) rt_sigqueueinfo(r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) 08:15:58 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x5000000) 08:15:58 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x2000}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) [ 2655.195286][ T4844] nbd: error processing sock list [ 2655.206317][ T4846] binder: BINDER_SET_CONTEXT_MGR already set [ 2655.272051][ T4850] binder: 4836:4850 ioctl 40489426 20000100 returned -22 [ 2655.272129][ T4846] binder: 4836:4846 ioctl 40046207 0 returned -16 08:15:58 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0xf00}, 0x0) [ 2655.318084][ T4820] binder: BINDER_SET_CONTEXT_MGR already set [ 2655.324856][ T4820] binder: 4816:4820 ioctl 40046207 0 returned -16 08:15:59 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x3}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:15:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x6000000) [ 2655.621082][ T4862] nbd: error processing sock list 08:15:59 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00800000a2b70021d1d28396b20fd58500"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) r2 = fork() write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x10) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}}, 0xfea6) rt_sigqueueinfo(r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) 08:15:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x7000000) 08:15:59 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x1f00}, 0x0) [ 2655.921904][ T4842] binder: 4836:4842 unknown command 5 [ 2655.928072][ T4846] binder: 4836:4846 ioctl 40489426 20000100 returned -22 [ 2655.935380][ T4842] binder: 4836:4842 ioctl c0306201 200000c0 returned -22 [ 2656.055210][ T4879] nbd: error processing sock list 08:15:59 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x45, 0xdf, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) 08:15:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x8000000) 08:15:59 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00800000a2b70021d1d28396b20fd58500"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) r2 = fork() write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x10) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) rt_sigqueueinfo(r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) 08:15:59 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x4000}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:15:59 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x2000}, 0x0) [ 2656.425883][ T4899] __nla_validate_parse: 5 callbacks suppressed [ 2656.425902][ T4899] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 08:16:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x9000000) 08:16:00 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00800000a2b70021d1d28396b20fd58500"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) r2 = fork() write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x10) rt_sigqueueinfo(r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) [ 2656.510442][ T4899] validate_nla: 5 callbacks suppressed [ 2656.510461][ T4899] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2656.528345][ T4899] nbd: error processing sock list 08:16:00 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:16:00 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x3f00}, 0x0) 08:16:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0xa000000) [ 2656.772334][ T4918] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2656.782056][ T4918] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 08:16:00 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00800000a2b70021d1d28396b20fd58500"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) r2 = fork() write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) rt_sigqueueinfo(r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) [ 2656.817218][ T4918] nbd: error processing sock list 08:16:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0xe000000) 08:16:00 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x800) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x100, 0x2}, @fda={0x66646185, 0x0, 0x0, 0x1c}, @fda={0x66646185, 0x5, 0x2, 0x7}}, &(0x7f0000000480)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) dup2(r2, r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x64, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/175, 0xaf, 0x1, 0x30}, @flat=@weak_binder={0x77622a85, 0x100a}, @flat=@handle={0x73682a85, 0x101, 0x3}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @register_looper, @acquire_done={0x40106309, 0x3}, @decrefs={0x40046307, 0x2}], 0x7, 0x0, &(0x7f0000000340)="adb0431a526f7f"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) 08:16:00 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 08:16:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0xf000000) 08:16:00 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00800000a2b70021d1d28396b20fd58500"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) r2 = fork() rt_sigqueueinfo(r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) 08:16:00 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x401f}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) [ 2657.217439][ T4944] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2657.243766][ T4946] binder: BINDER_SET_CONTEXT_MGR already set [ 2657.244270][ T4944] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2657.259685][ T4946] binder: 4942:4946 ioctl 40046207 0 returned -16 [ 2657.288610][ T4944] nbd: error processing sock list 08:16:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x20000000) 08:16:00 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x4c00}, 0x0) [ 2657.653706][ T4963] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2657.695405][ T4963] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 08:16:01 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x5}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:16:01 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x4d01}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) [ 2657.747308][ T4963] nbd: error processing sock list 08:16:01 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x3f000000) 08:16:01 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00800000a2b70021d1d28396b20fd58500"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) r2 = fork() rt_sigqueueinfo(r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) [ 2657.813815][ T4963] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2657.837298][ T4963] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2657.862841][ T4963] nbd: error processing sock list 08:16:01 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x6000}, 0x0) [ 2658.091357][ T4946] binder: BINDER_SET_CONTEXT_MGR already set [ 2658.099658][ T4980] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2658.110702][ T4946] binder: 4942:4946 ioctl 40046207 0 returned -16 [ 2658.207691][ T4980] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2658.261425][ T4980] nbd: error processing sock list 08:16:01 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x1000000, &(0x7f0000000040)="aa"}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000080)={0x1}) syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x800) 08:16:01 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x6400}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:16:01 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x48000000) 08:16:01 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00800000a2b70021d1d28396b20fd58500"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) r2 = fork() rt_sigqueueinfo(r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) 08:16:01 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x6800}, 0x0) 08:16:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x4a069fb7) 08:16:02 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00800000a2b70021d1d28396b20fd58500"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) [ 2658.533837][ T5006] binder: BINDER_SET_CONTEXT_MGR already set [ 2658.567582][ T5007] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2658.616221][ T5006] binder: 4992:5006 ioctl 40046207 0 returned -16 [ 2658.633186][ T5007] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2658.687783][ T5007] nbd: error processing sock list 08:16:02 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x6}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:16:02 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x7c15}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:16:02 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x6c00}, 0x0) 08:16:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x4c000000) 08:16:02 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00800000a2b70021d1d28396b20fd58500"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) [ 2659.000639][ T5022] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2659.056620][ T5022] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2659.096098][ T5022] nbd: error processing sock list [ 2659.161047][ T5022] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2659.193461][ T5022] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2659.213928][ T5022] nbd: error processing sock list 08:16:02 executing program 1: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x5, 0x80, 0x7, 0x7, 0x1, 0x6, 0x0, 0x200, 0x80002, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x4, @perf_bp={&(0x7f0000000600), 0xc}, 0x200, 0x4, 0x101, 0x0, 0x9924, 0x80, 0x3, 0x0, 0x5000, 0x0, 0xac6}, 0x0, 0x10, r0, 0xb) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x2, 0x1, 0x81, 0x3, 0x0, 0xfce1, 0x100, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3ff, 0x4, @perf_config_ext={0x8001, 0x325}, 0x40, 0x0, 0x54a8, 0x3, 0x9, 0x4, 0x40, 0x0, 0x4, 0x0, 0x23}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) r3 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f00000006c0)=[@request_death={0x400c630e, 0x2}], 0x1, 0x1000000, &(0x7f0000000040)="aa"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) 08:16:02 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x7400}, 0x0) 08:16:02 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00800000a2b70021d1d28396b20fd58500"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) 08:16:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x60000000) [ 2659.427646][ T5036] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2659.452169][ T5038] binder: BINDER_SET_CONTEXT_MGR already set [ 2659.476618][ T5038] binder: 5034:5038 ioctl 40046207 0 returned -16 08:16:03 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x9a02}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:16:03 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00800000a2b70021d1d28396b20fd58500"}) r2 = fork() rt_sigqueueinfo(r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) [ 2659.515788][ T5036] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2659.545074][ T5036] nbd: error processing sock list [ 2659.556500][ T5042] binder: BINDER_SET_CONTEXT_MGR already set [ 2659.577871][ T5042] binder: 5034:5042 ioctl 40046207 0 returned -16 08:16:03 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x7a00}, 0x0) 08:16:03 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x7}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:16:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x68000000) [ 2659.873460][ T5055] nbd: error processing sock list 08:16:03 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00800000a2b70021d1d28396b20fd58500"}) r2 = fork() rt_sigqueueinfo(r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) 08:16:03 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0xf000}, 0x0) 08:16:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x6c000000) [ 2660.202675][ T5071] nbd: error processing sock list [ 2660.260447][ T5038] binder: BINDER_SET_CONTEXT_MGR already set [ 2660.275693][ T5043] binder: BINDER_SET_CONTEXT_MGR already set [ 2660.283574][ T5038] binder: 5034:5038 ioctl 40046207 0 returned -16 [ 2660.290202][ T5043] binder: 5034:5043 ioctl 40046207 0 returned -16 08:16:03 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000030601e9513745578b79bb0007000007"], 0x14}, 0x1, 0x0, 0x0, 0x4011}, 0x40) 08:16:03 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0xcf04}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:16:03 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00800000a2b70021d1d28396b20fd58500"}) r2 = fork() rt_sigqueueinfo(r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) 08:16:03 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x30000}, 0x0) 08:16:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x74000000) [ 2660.557996][ T5086] nbd: error processing sock list 08:16:04 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x34000}, 0x0) 08:16:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x7a000000) [ 2660.860947][ T5101] nbd: error processing sock list 08:16:04 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x8}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:16:04 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x2000b}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:16:04 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) r1 = fork() rt_sigqueueinfo(r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) 08:16:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x97ffffff) 08:16:04 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x400300}, 0x0) [ 2661.150254][ T5117] nbd: error processing sock list 08:16:04 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) dup2(r3, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x18, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, &(0x7f0000000400)}) r4 = socket(0x11, 0x800000003, 0x8) bind(r4, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) sendmsg$AUDIT_GET(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3e8, 0x8, 0x70bd27, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x804) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="d79280a8"], 0x16, 0x0, &(0x7f0000000080)="3f59347c4bf8bb69c9e219b22fa12183ae241216622b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) 08:16:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x9effffff) 08:16:04 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = fork() rt_sigqueueinfo(r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) 08:16:04 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) [ 2661.496533][ T5132] __nla_validate_parse: 5 callbacks suppressed [ 2661.496553][ T5132] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2661.526964][ T5132] validate_nla: 5 callbacks suppressed [ 2661.526980][ T5132] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 08:16:05 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) [ 2661.542374][ T5132] nbd: error processing sock list [ 2661.563474][ T5134] binder: BINDER_SET_CONTEXT_MGR already set 08:16:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0xb4f9d5f4) [ 2661.627158][ T5134] binder: 5129:5134 ioctl 40046207 0 returned -16 [ 2661.627262][ T5138] binder: 5129:5138 unknown command 0 [ 2661.650180][ T5138] binder: 5129:5138 ioctl c0306201 20000200 returned -22 [ 2661.666072][ T5140] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2661.679024][ T5140] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2661.693375][ T5140] nbd: error processing sock list 08:16:05 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x34000}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:16:05 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x9}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:16:05 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 08:16:05 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = fork() rt_sigqueueinfo(r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) 08:16:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0xb79f064a) [ 2662.064121][ T5153] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2662.075500][ T5153] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2662.085387][ T5153] nbd: error processing sock list 08:16:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0xf0ffffff) 08:16:05 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = fork() rt_sigqueueinfo(r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) 08:16:05 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 08:16:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0xf4d5f9b4) 08:16:05 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x7d000}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:16:05 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x442800, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x1000000, &(0x7f0000000040)="aa"}) open(&(0x7f0000000080)='./file0\x00', 0x10000, 0x83) r2 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r3, r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x70, 0x1000000, &(0x7f0000000100)="bac9471b15b7f59bcf9de5e1b959251a3505c2cf388dc909d74655bfc71f5deb8e41f3424e80b0a5bc8431db3d4dfa96a0532eb10004000086d6e4da259cd6e02ac032486a460ecef8b3b74d4105f05ac6db57a513e9104b618b59ba89693c70402be23d8410d855b68fe2ddce2d1ed7"}) [ 2662.365694][ T5169] binder: 5129:5169 unknown command 0 [ 2662.371710][ T5169] binder: 5129:5169 ioctl c0306201 20000200 returned -22 [ 2662.383613][ T5138] binder: 5129:5138 unknown command -1467968809 [ 2662.390125][ T5138] binder: 5129:5138 ioctl c0306201 20000100 returned -22 [ 2662.496460][ T5178] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2662.522732][ T5178] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2662.538383][ T5180] binder: BINDER_SET_CONTEXT_MGR already set 08:16:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0xfdffffff) 08:16:06 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) r0 = fork() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) [ 2662.544979][ T5180] binder: 5176:5180 ioctl 40046207 0 returned -16 [ 2662.558231][ T5178] nbd: error processing sock list [ 2662.584184][ T5178] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2662.631981][ T5178] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2662.644452][ T5187] binder: BINDER_SET_CONTEXT_MGR already set [ 2662.671819][ T5187] binder: 5176:5187 ioctl 40046207 0 returned -16 [ 2662.683107][ T5178] nbd: error processing sock list [ 2662.701436][ T5191] binder: 5176:5191 unknown command 0 [ 2662.738585][ T5191] binder: 5176:5191 ioctl c0306201 20000200 returned -22 [ 2662.752188][ T5187] binder: 5176:5187 unknown command 0 [ 2662.759482][ T5187] binder: 5176:5187 ioctl c0306201 20000200 returned -22 08:16:06 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xa}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:16:06 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x100000}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:16:06 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) r0 = fork() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) 08:16:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0xfffff000) 08:16:06 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 08:16:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0xffffff7f) [ 2663.097036][ T5205] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2663.144633][ T5205] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2663.161261][ T5205] nbd: error processing sock list 08:16:06 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) 08:16:06 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) r0 = fork() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) 08:16:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0xffffff97) [ 2663.302466][ T5216] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2663.321037][ T5216] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2663.346844][ T5216] nbd: error processing sock list [ 2663.357455][ T5180] binder: BINDER_SET_CONTEXT_MGR already set [ 2663.367256][ T5191] binder: 5176:5191 unknown command 0 [ 2663.374135][ T5191] binder: 5176:5191 ioctl c0306201 20000200 returned -22 [ 2663.382109][ T5180] binder: 5176:5180 ioctl 40046207 0 returned -16 [ 2663.407847][ T9101] Bluetooth: hci2: command 0x0406 tx timeout 08:16:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0xffffff9e) 08:16:07 executing program 1: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = signalfd(r0, &(0x7f0000000000)={[0x8]}, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x1, 0x1e, 0x0, 0x3, 0x100, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x1, @perf_config_ext={0x8b2d, 0x8}, 0x5, 0x1, 0x0, 0x3, 0x0, 0x8, 0x1, 0x0, 0xfff, 0x0, 0x100}, 0xffffffffffffffff, 0x1, r2, 0xa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) 08:16:07 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) r0 = fork() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) 08:16:07 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xb}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:16:07 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) 08:16:07 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) r0 = fork() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) 08:16:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0xfffffff0) 08:16:07 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x200000}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:16:07 executing program 3: openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000000000a01, 0x0) r0 = fork() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) [ 2664.093647][ T5243] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2664.126019][ T5243] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2664.142106][ T5243] nbd: error processing sock list 08:16:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0xfffffffd) 08:16:07 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 08:16:07 executing program 3: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = fork() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) 08:16:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x1000000000000) [ 2664.358796][ T5260] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2664.392491][ T5260] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2664.419478][ T5260] nbd: error processing sock list 08:16:08 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 08:16:08 executing program 3: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) fork() rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) [ 2664.601745][ T5273] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2664.618589][ T5273] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2664.630620][ T5273] nbd: error processing sock list 08:16:08 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xc}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:16:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x3000000000000) 08:16:08 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) 08:16:08 executing program 1: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x100}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x4, 0xffff3a5e, {}, {0xffffffffffffffff}, 0x7, 0x9}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x60100, 0x0) dup(r0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x584b02, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r4 = gettid() r5 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x20010, r3, 0x1516e000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)="aa"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000001a80)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r6}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x84, 0x0, &(0x7f0000000500)=[@acquire_done={0x40106309, 0x2}, @increfs_done={0x40106308, 0x3}, @free_buffer={0x40086303, r6}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@binder={0x73622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/128, 0x80, 0x2, 0x30}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}, 0x400}, @enter_looper], 0xb7, 0x0, &(0x7f00000005c0)="746abc42ee10288ffbd80196e9b2a33cc1c36627b364bccaa38e5a171d0b3b6646c435669c207b2299ce4c2557d8a74bbfa7a16911823a6a1455c19958fab1bbb4e371930074fe071157b23ec1150fda3e4a24964036d23a0252689b088e9893341c46a409b4b775d158944e601b2e4813206b7b9a71b2f6c3bf3d29745aa77d20ae87b6c774cc709c8f4ccd4ff69a779da9634cb122ca88357b34bf64c3c4d349a2d1bb6cb88c0661000187a7a8afc71beb04f1b35a4b"}) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x400080, 0x0) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r2}, 0x8) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@RTM_NEWNSID={0x5c, 0x58, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NETNSA_NSID={0x8}, @NETNSA_PID={0x8, 0x2, r4}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_FD={0x8, 0x3, r7}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_NSID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_FD={0x8, 0x3, r8}, @NETNSA_FD={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44044}, 0x4085) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x22700, 0x38) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) 08:16:08 executing program 3: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) fork() rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) 08:16:08 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x3e8000}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) [ 2665.030100][ T5286] nbd: error processing sock list [ 2665.044806][ T5290] binder: BINDER_SET_CONTEXT_MGR already set 08:16:08 executing program 3: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) fork() rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) [ 2665.077804][ T5290] binder: 5283:5290 ioctl 40046207 0 returned -16 08:16:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0xa000000000000) 08:16:08 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0xa000000}, 0x0) [ 2665.130278][ T5290] binder: BINDER_SET_CONTEXT_MGR already set [ 2665.155960][ T5290] binder: 5283:5290 ioctl 40046207 0 returned -16 08:16:08 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x27d3}, 0x10000, 0x0, 0x3}, 0x0, 0x40000000ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) 08:16:08 executing program 3: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = fork() rt_sigqueueinfo(r0, 0x0, 0x0) [ 2665.311725][ T5309] nbd: error processing sock list 08:16:08 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0xe000000}, 0x0) [ 2665.485832][ T5320] nbd: error processing sock list 08:16:09 executing program 3: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = fork() rt_sigqueueinfo(r0, 0x0, 0x0) 08:16:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x40030000000000) 08:16:09 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 08:16:09 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xd}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:16:09 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x400000}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) [ 2665.979078][ T5329] nbd: error processing sock list 08:16:09 executing program 3: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = fork() rt_sigqueueinfo(r0, 0x0, 0x0) 08:16:09 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x14a3a1d5}, 0x0) 08:16:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0xf0ffffffffffff) [ 2666.154695][ T5341] nbd: error processing sock list [ 2666.205544][ T5341] nbd: error processing sock list 08:16:09 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x1f000000}, 0x0) 08:16:09 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x30) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000240)="efac7900c219bb3d35a99325162713b9752dc1678b1d2aea26d368cb6e729dc1c965d8c73c3b0f73b3bdd69ddb8a72a9c89a168124f42e807b1424657d858c92b880386a63aa0a9630dabfab44b8713b565b50654e9e581ad53683c52dd0b99a501210e99aca2f64") r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080), 0x10) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7, 0xbe, 0x69, 0x0, 0x0, 0x3, 0x80000, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x10b0c, 0xffffffffffffffff, 0x10000, 0x7, 0x1000, 0xe477, 0x6, 0x0, 0x5}, r1, 0xb, r2, 0x8) 08:16:09 executing program 3: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = fork() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000000)) 08:16:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x100000000000000) [ 2666.402751][ T5357] nbd: error processing sock list 08:16:10 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 08:16:10 executing program 3: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = fork() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000000)) 08:16:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x200000000000000) [ 2666.633995][ T5370] __nla_validate_parse: 7 callbacks suppressed [ 2666.634015][ T5370] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2666.710074][ T5370] validate_nla: 7 callbacks suppressed [ 2666.710093][ T5370] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2666.766270][ T5370] nbd: error processing sock list 08:16:10 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x10}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:16:10 executing program 3: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = fork() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000000)) 08:16:10 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x400300}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:16:10 executing program 1: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x30, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0b6300000e630c40010000000000000000000000106308db000000000000000006630440010000000463044001000000"], 0x54, 0x0, &(0x7f00000004c0)="98b47e84978b948725647da05e37c71969ee366341d62e7943e2b4ad157e137bfd9565460dacb1cf470ee233dcbbc16aeb8c568903e99c9419a3dd158978c1a39c3d22b47fc6d8fa3cf86f2cecdc95ab5fb0cc25"}) r2 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x11, r0, 0x81) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)="aa"}) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000a80)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r4, r3) syz_open_dev$binderN(&(0x7f0000000ac0), 0x0, 0x1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000a40)={0x98, 0x0, &(0x7f00000008c0)=[@enter_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000680)={@fda={0x66646185, 0x2, 0x1, 0x1c}, @fd={0x66642a85, 0x0, r1}, @fd}, &(0x7f0000000180)={0x0, 0x20, 0x38}}}, @enter_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000800)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000700)=""/203, 0xcb, 0x1, 0x22}}, &(0x7f0000000880)={0x0, 0x18, 0x30}}}], 0x95, 0x0, &(0x7f0000000980)="6d71c7cc138e82b6417040d3f2aff093f97b457707e82bd4528bc6e04e501f48159111c17e0b52f20970ea2cb3ecde43392f53b35a3b3a624a9189d100de3f1b41c965e9a383f8b6cc79b9fc8d0d547614489533c1b09e61a6115a5ea457a7f3ebea723cdea56ce62e8ddfbd2bafe5670df1e1aa530379cd4892eb4b4ca389ac5bb59e062dccdeba029e948f44fea98fb252113aed"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001000)={0xc4, 0x0, &(0x7f0000000e00)=[@acquire={0x40046305, 0x2}, @request_death={0x400c630e, 0x1}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b80)={@flat=@weak_binder={0x77622a85, 0x2}, @fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x5, 0x2, 0x14}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}, @free_buffer={0x40086303, r2}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000d40)={@ptr={0x70742a85, 0x0, &(0x7f0000000c40)=""/248, 0xf8, 0x0, 0xf}, @flat=@handle={0x73682a85, 0x100a}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000dc0)={0x0, 0x28, 0x40}}, 0x40}, @request_death], 0xe8, 0x0, &(0x7f0000000f00)="79b5beb967f365dce062bd58a98c9e96d596f80a49bc1b4b0a60b2388953a13afa1dbd4f46159a5a76ba70b51fb12763eefa84e36c283d993c1ae6218445c0fab74145392203630130063f9aff2215b1042092359783ba744ab92dd9445e8bd103b3c2f4d55fe6a6fa9a6fdaeed3d6449b8cbec3eac977a97baa0b9c1058438ffc395928980d814747436fcca4d2ea9361cbd235859cbb3b2f55369e21e4a1e0a69e5ab5509d0c866d728dca27daccf1c6fae2ff8dca472a1034dac4776bd89bcd57c83161fdec8d283817706c8c947b560affcd8026ff5620acabe05acc50205b2ea749e56fa8a4"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001a80)={0xc, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="5c8cf6e988764f1c957fade50cedcf8084d333bbb2fea461072f104cfa0597fa32582787a9059b36bd701e0438240a94133705680de73f51e3425f7137a599111879a164ceb885e9e94ca8794a6c2a6cb7404eb74cced07678816ee568b5cebc2956276169180c250faa2bbf51deba4f177daaa635c49d8c4e4cea15798b449d2522c473e5253fab3a63ae75f01c2b71958c3838fb867c301ac9b01bf77b844913eb8fcfaa415a8e7199546e1133328cdd752378b1a4b5a1cbc7cebb544fc032aaa767ff5ef14fa199345590b25f7121d5bdbc909723fee05b9e8c", @ANYRES64=r2], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x88, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0xebe0e88814142ba1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000b00)={@ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/243, 0xf3, 0x1, 0xa}, @flat=@weak_handle={0x77682a85, 0x1}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f0000000000)={0x0, 0x28, 0x40}}, 0x40}, @increfs={0x40046304, 0x2}, @clear_death={0x400c630f, 0x1}, @free_buffer={0x40086303, r2}, @request_death={0x400c630e, 0x2}, @increfs={0x40046304, 0x3}], 0x73, 0x0, &(0x7f0000000400)="c1ba6dc0d003603983c4ea85e9a27d12ad038da6f7f1feedd42e56daed6a0e0ca9b86091fe7267156ea65772f4dc21c2f8ebad1ed849b1567a684080f47237d2448c97e5426a6b97b6c3f8d02f7ce7945d31454d370e1aa044a59cc44bf619c342d94edf370b5b5e57380bceb801555cb76806"}) 08:16:10 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x3f000000}, 0x0) 08:16:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x300000000000000) 08:16:10 executing program 3: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x5, 0x80, 0x7, 0x7, 0x1, 0x6, 0x0, 0x200, 0x80002, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x4, @perf_bp={&(0x7f0000000600), 0xc}, 0x200, 0x4, 0x101, 0x0, 0x9924, 0x80, 0x3, 0x0, 0x5000, 0x0, 0xac6}, 0x0, 0x10, r0, 0xb) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x2, 0x1, 0x81, 0x3, 0x0, 0xfce1, 0x100, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3ff, 0x4, @perf_config_ext={0x8001, 0x325}, 0x40, 0x0, 0x54a8, 0x3, 0x9, 0x4, 0x40, 0x0, 0x4, 0x0, 0x23}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) r3 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f00000006c0)=[@request_death={0x400c630e, 0x2}], 0x1, 0x1000000, &(0x7f0000000040)="aa"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) [ 2667.061378][ T5391] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2667.085463][ T5396] binder: BINDER_SET_CONTEXT_MGR already set [ 2667.098721][ T5391] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2667.105768][ T5396] binder: 5386:5396 ioctl 40046207 0 returned -16 [ 2667.122667][ T5396] binder: 5386:5396 unknown command 0 [ 2667.125579][ T5391] nbd: error processing sock list [ 2667.133993][ T5396] binder: 5386:5396 ioctl c0306201 20000a80 returned -22 [ 2667.145369][ T5396] binder: 5386:5396 unknown command 0 [ 2667.151932][ T5396] binder: 5386:5396 ioctl c0306201 20000200 returned -22 08:16:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x400000000000000) [ 2667.188321][ T5401] binder: BINDER_SET_CONTEXT_MGR already set [ 2667.196060][ T5401] binder: 5398:5401 ioctl 40046207 0 returned -16 08:16:10 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x48000000}, 0x0) [ 2667.262435][ T5405] binder: BINDER_SET_CONTEXT_MGR already set [ 2667.281324][ T5405] binder: 5398:5405 ioctl 40046207 0 returned -16 08:16:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x500000000000000) [ 2667.346198][ T5413] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2667.368538][ T5413] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2667.376782][ T5413] nbd: error processing sock list 08:16:10 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x4c000000}, 0x0) 08:16:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x600000000000000) [ 2667.504896][ T5421] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2667.522657][ T5421] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2667.531593][ T5421] nbd: error processing sock list [ 2667.558408][ T5421] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2667.575163][ T5421] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2667.585094][ T5421] nbd: error processing sock list [ 2667.848291][ T5396] binder: BINDER_SET_CONTEXT_MGR already set [ 2667.854757][ T5396] binder: 5386:5396 ioctl 40046207 0 returned -16 [ 2667.862658][ T5396] binder: 5386:5396 unknown command 0 [ 2667.868469][ T5396] binder: 5386:5396 ioctl c0306201 20000a80 returned -22 [ 2667.876452][ T5389] binder: 5386:5389 unknown command 0 [ 2667.882148][ T5389] binder: 5386:5389 ioctl c0306201 20000200 returned -22 08:16:11 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x11}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:16:11 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) 08:16:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x700000000000000) 08:16:11 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x800000}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:16:11 executing program 1: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x5) tkill(r2, 0x30) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7a, 0x0, 0x8, 0x9, 0x0, 0x1, 0x8, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x3, @perf_config_ext={0x1, 0x2}, 0x40800, 0x9, 0x2, 0x1, 0x1f, 0x8, 0x6, 0x0, 0xc2, 0x0, 0x317ba2d7}, r2, 0x5, r0, 0x9) 08:16:11 executing program 3: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x5, 0x80, 0x7, 0x7, 0x1, 0x6, 0x0, 0x200, 0x80002, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x4, @perf_bp={&(0x7f0000000600), 0xc}, 0x200, 0x4, 0x101, 0x0, 0x9924, 0x80, 0x3, 0x0, 0x5000, 0x0, 0xac6}, 0x0, 0x10, r0, 0xb) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x2, 0x1, 0x81, 0x3, 0x0, 0xfce1, 0x100, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3ff, 0x4, @perf_config_ext={0x8001, 0x325}, 0x40, 0x0, 0x54a8, 0x3, 0x9, 0x4, 0x40, 0x0, 0x4, 0x0, 0x23}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) r3 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f00000006c0)=[@request_death={0x400c630e, 0x2}], 0x1, 0x1000000, &(0x7f0000000040)="aa"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) [ 2668.050054][ T5436] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2668.069732][ T5436] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2668.079835][ T5436] nbd: error processing sock list 08:16:11 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x68000000}, 0x0) 08:16:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x800000000000000) 08:16:11 executing program 1: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x2, 0xff, 0x40, 0x6, 0x0, 0x5262, 0x901, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x3, 0x5}, 0x2, 0x4, 0x5, 0x0, 0x7, 0x2, 0x18, 0x0, 0x100, 0x0, 0x1}, 0xffffffffffffffff, 0xd, r0, 0x0) [ 2668.184429][ T5446] binder: BINDER_SET_CONTEXT_MGR already set [ 2668.204842][ T5446] binder: 5443:5446 ioctl 40046207 0 returned -16 [ 2668.210855][ T5449] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2668.222990][ T5449] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2668.232218][ T5449] nbd: error processing sock list 08:16:11 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x6c000000}, 0x0) [ 2668.311941][ T5450] binder: BINDER_SET_CONTEXT_MGR already set [ 2668.331550][ T5450] binder: 5443:5450 ioctl 40046207 0 returned -16 08:16:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x900000000000000) [ 2668.427601][ T5465] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2668.450428][ T5465] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2668.471087][ T5465] nbd: error processing sock list [ 2668.522127][ T5465] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2668.559550][ T5465] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 08:16:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0xa00000000000000) [ 2668.587686][ T5465] nbd: error processing sock list 08:16:12 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x13}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:16:12 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x74000000}, 0x0) 08:16:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0xe00000000000000) 08:16:12 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x803e00}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) [ 2668.974008][ T5445] binder: BINDER_SET_CONTEXT_MGR already set [ 2668.982451][ T5445] binder: 5439:5445 ioctl 40046207 0 returned -16 08:16:12 executing program 3: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x5, 0x80, 0x7, 0x7, 0x1, 0x6, 0x0, 0x200, 0x80002, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x4, @perf_bp={&(0x7f0000000600), 0xc}, 0x200, 0x4, 0x101, 0x0, 0x9924, 0x80, 0x3, 0x0, 0x5000, 0x0, 0xac6}, 0x0, 0x10, r0, 0xb) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x2, 0x1, 0x81, 0x3, 0x0, 0xfce1, 0x100, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3ff, 0x4, @perf_config_ext={0x8001, 0x325}, 0x40, 0x0, 0x54a8, 0x3, 0x9, 0x4, 0x40, 0x0, 0x4, 0x0, 0x23}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) r3 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f00000006c0)=[@request_death={0x400c630e, 0x2}], 0x1, 0x1000000, &(0x7f0000000040)="aa"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) [ 2669.068800][ T5486] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 08:16:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0xf00000000000000) [ 2669.109459][ T5486] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2669.141080][ T5486] nbd: error processing sock list 08:16:12 executing program 1: r0 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) perf_event_open$cgroup(&(0x7f0000000240)={0x3, 0x80, 0x1, 0x80, 0x0, 0x9, 0x0, 0xfffffffffffffffe, 0x9245, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x6, 0x33e4}, 0x6000, 0x80, 0x10000, 0xb, 0x800, 0x7, 0x4, 0x0, 0xf3, 0x0, 0x800}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x4) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='/dev/hwrng\x00') r3 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r5, r4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r5, r0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) [ 2669.175358][ T5495] binder: BINDER_SET_CONTEXT_MGR already set [ 2669.186146][ T5495] binder: 5492:5495 ioctl 40046207 0 returned -16 08:16:12 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x7a000000}, 0x0) [ 2669.264444][ T5504] binder: BINDER_SET_CONTEXT_MGR already set 08:16:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x2000000000000000) [ 2669.305589][ T5504] binder: 5492:5504 ioctl 40046207 0 returned -16 [ 2669.311423][ T5506] binder: 5505:5506 unknown command 0 [ 2669.322392][ T5506] binder: 5505:5506 ioctl c0306201 20000200 returned -22 [ 2669.352885][ T5509] nbd: error processing sock list 08:16:12 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 08:16:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x3f00000000000000) [ 2669.488816][ T5517] nbd: error processing sock list 08:16:13 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0xd5a1a314}, 0x0) [ 2669.602145][ T5525] nbd: error processing sock list 08:16:13 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x14}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:16:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x4800000000000000) 08:16:13 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 08:16:13 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0xd00700}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:16:13 executing program 3: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x5, 0x80, 0x7, 0x7, 0x1, 0x6, 0x0, 0x200, 0x80002, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x4, @perf_bp={&(0x7f0000000600), 0xc}, 0x200, 0x4, 0x101, 0x0, 0x9924, 0x80, 0x3, 0x0, 0x5000, 0x0, 0xac6}, 0x0, 0x10, r0, 0xb) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x2, 0x1, 0x81, 0x3, 0x0, 0xfce1, 0x100, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3ff, 0x4, @perf_config_ext={0x8001, 0x325}, 0x40, 0x0, 0x54a8, 0x3, 0x9, 0x4, 0x40, 0x0, 0x4, 0x0, 0x23}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) r3 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f00000006c0)=[@request_death={0x400c630e, 0x2}], 0x1, 0x1000000, &(0x7f0000000040)="aa"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) [ 2670.072140][ T5535] binder: BINDER_SET_CONTEXT_MGR already set [ 2670.085962][ T5535] binder: 5533:5535 ioctl 40046207 0 returned -16 [ 2670.091510][ T5539] nbd: error processing sock list [ 2670.135390][ T5506] binder: 5505:5506 unknown command 0 [ 2670.141295][ T5506] binder: 5505:5506 ioctl c0306201 20000200 returned -22 [ 2670.153011][ T5547] binder: BINDER_SET_CONTEXT_MGR already set [ 2670.171881][ T5547] binder: 5533:5547 ioctl 40046207 0 returned -16 08:16:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x4a069fb700000000) 08:16:13 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) 08:16:13 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) [ 2670.303030][ T5552] nbd: error processing sock list 08:16:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x4c00000000000000) 08:16:13 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 08:16:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x6000000000000000) [ 2670.434869][ T5564] nbd: error processing sock list 08:16:14 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) [ 2670.552219][ T5569] nbd: error processing sock list [ 2670.592337][ T5569] nbd: error processing sock list 08:16:14 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x15}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:16:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x6800000000000000) 08:16:14 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 08:16:14 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:16:14 executing program 3: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x5, 0x80, 0x7, 0x7, 0x1, 0x6, 0x0, 0x200, 0x80002, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x4, @perf_bp={&(0x7f0000000600), 0xc}, 0x200, 0x4, 0x101, 0x0, 0x9924, 0x80, 0x3, 0x0, 0x5000, 0x0, 0xac6}, 0x0, 0x10, r0, 0xb) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x2, 0x1, 0x81, 0x3, 0x0, 0xfce1, 0x100, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3ff, 0x4, @perf_config_ext={0x8001, 0x325}, 0x40, 0x0, 0x54a8, 0x3, 0x9, 0x4, 0x40, 0x0, 0x4, 0x0, 0x23}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) r3 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f00000006c0)=[@request_death={0x400c630e, 0x2}], 0x1, 0x1000000, &(0x7f0000000040)="aa"}) [ 2671.064912][ T5585] nbd: error processing sock list [ 2671.066421][ T5586] binder: BINDER_SET_CONTEXT_MGR already set [ 2671.084923][ T5586] binder: 5583:5586 ioctl 40046207 0 returned -16 [ 2671.102933][ T5588] nbd: error processing sock list 08:16:14 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 08:16:14 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) 08:16:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x6c00000000000000) [ 2671.198853][ T5595] nbd: error processing sock list [ 2671.237360][ T5595] nbd: error processing sock list 08:16:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x7400000000000000) 08:16:14 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x2) 08:16:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x7a00000000000000) [ 2671.422733][ T5610] nbd: error processing sock list 08:16:15 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x3) 08:16:15 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x64}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:16:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x97ffffff00000000) 08:16:15 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x4) 08:16:15 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x2000000}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:16:15 executing program 3: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x5, 0x80, 0x7, 0x7, 0x1, 0x6, 0x0, 0x200, 0x80002, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x4, @perf_bp={&(0x7f0000000600), 0xc}, 0x200, 0x4, 0x101, 0x0, 0x9924, 0x80, 0x3, 0x0, 0x5000, 0x0, 0xac6}, 0x0, 0x10, r0, 0xb) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x2, 0x1, 0x81, 0x3, 0x0, 0xfce1, 0x100, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3ff, 0x4, @perf_config_ext={0x8001, 0x325}, 0x40, 0x0, 0x54a8, 0x3, 0x9, 0x4, 0x40, 0x0, 0x4, 0x0, 0x23}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) r3 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) [ 2671.993640][ T5628] __nla_validate_parse: 13 callbacks suppressed [ 2671.993659][ T5628] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2672.014897][ T5632] binder: BINDER_SET_CONTEXT_MGR already set [ 2672.021354][ T5632] binder: 5630:5632 ioctl 40046207 0 returned -16 [ 2672.028644][ T5628] validate_nla: 13 callbacks suppressed [ 2672.028658][ T5628] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2672.066799][ T5628] nbd: error processing sock list 08:16:15 executing program 3: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x5, 0x80, 0x7, 0x7, 0x1, 0x6, 0x0, 0x200, 0x80002, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x4, @perf_bp={&(0x7f0000000600), 0xc}, 0x200, 0x4, 0x101, 0x0, 0x9924, 0x80, 0x3, 0x0, 0x5000, 0x0, 0xac6}, 0x0, 0x10, r0, 0xb) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x2, 0x1, 0x81, 0x3, 0x0, 0xfce1, 0x100, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3ff, 0x4, @perf_config_ext={0x8001, 0x325}, 0x40, 0x0, 0x54a8, 0x3, 0x9, 0x4, 0x40, 0x0, 0x4, 0x0, 0x23}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) r3 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) 08:16:15 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="88012000", @ANYRES16=r0, @ANYBLOB="100028bd7000ffdbdf25090000000800028004000400ac0005802400028008e57820536afbc5020005000000080001001f000000080002000001000008000400010000000800010075647000340002800800020008000000080004000000480008000200ff7f00000800010007000000080004000700000008000400010000001ce502800800010020000000080002000000010008000300d40000000705000000620000070001006962000014000280080003000400100008000200ff0100000800010075647000640005800700010069620000080001007564700008000100657468003400028008000100050000000800040002000000080001000000000008000300030000000800030000000000080003000100000014000280080003000100000008000300010000005c0007800c0004002ecd194800000000080001001f0000000800010001000000080002000100000008000200020000000c0004000100000000000000080001000600000008000200f50b000008000200090000000800010000080000"], 0x188}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c800) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)={0x5c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40004}, 0x8001) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x7c, r2, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x1}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0xffffffff}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x4}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x1c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x1}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x3}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x5}]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1f}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xfff}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x5}]}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x800}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x404c010}, 0x1) r3 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) 08:16:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x9effffff00000000) [ 2672.132301][ T5628] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2672.179225][ T5628] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2672.209668][ T5628] nbd: error processing sock list [ 2672.219816][ T5642] binder: BINDER_SET_CONTEXT_MGR already set [ 2672.244227][ T5642] binder: 5640:5642 ioctl 40046207 0 returned -16 08:16:15 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x5) 08:16:15 executing program 3: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x5, 0x80, 0x7, 0x7, 0x1, 0x6, 0x0, 0x200, 0x80002, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x4, @perf_bp={&(0x7f0000000600), 0xc}, 0x200, 0x4, 0x101, 0x0, 0x9924, 0x80, 0x3, 0x0, 0x5000, 0x0, 0xac6}, 0x0, 0x10, r0, 0xb) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x2, 0x1, 0x81, 0x3, 0x0, 0xfce1, 0x100, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3ff, 0x4, @perf_config_ext={0x8001, 0x325}, 0x40, 0x0, 0x54a8, 0x3, 0x9, 0x4, 0x40, 0x0, 0x4, 0x0, 0x23}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) 08:16:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0xb4f9d5f400000000) 08:16:15 executing program 3: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x5, 0x80, 0x7, 0x7, 0x1, 0x6, 0x0, 0x200, 0x80002, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x4, @perf_bp={&(0x7f0000000600), 0xc}, 0x200, 0x4, 0x101, 0x0, 0x9924, 0x80, 0x3, 0x0, 0x5000, 0x0, 0xac6}, 0x0, 0x10, r0, 0xb) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x2, 0x1, 0x81, 0x3, 0x0, 0xfce1, 0x100, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3ff, 0x4, @perf_config_ext={0x8001, 0x325}, 0x40, 0x0, 0x54a8, 0x3, 0x9, 0x4, 0x40, 0x0, 0x4, 0x0, 0x23}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) 08:16:16 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x14d}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:16:16 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x6) 08:16:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0xf0ffffff00000000) 08:16:16 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x3000000}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:16:16 executing program 3: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) perf_event_open(&(0x7f0000000640)={0x5, 0x80, 0x7, 0x7, 0x1, 0x6, 0x0, 0x200, 0x80002, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x4, @perf_bp={&(0x7f0000000600), 0xc}, 0x200, 0x4, 0x101, 0x0, 0x9924, 0x80, 0x3, 0x0, 0x5000, 0x0, 0xac6}, 0x0, 0x10, r0, 0xb) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) 08:16:16 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) [ 2672.984905][ T5674] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2673.008540][ T5674] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2673.031857][ T5674] nbd: error processing sock list 08:16:16 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0xfffffffc, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdd7, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r2, r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x70, 0x0, &(0x7f0000000400)=[@clear_death={0x400c630f, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@fda={0x66646185, 0x7, 0x2, 0x2b}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/132, 0x84, 0x1, 0x2}, @flat=@weak_binder={0x77622a85, 0x100a, 0x2}}, &(0x7f00000003c0)={0x0, 0x20, 0x48}}}, @request_death={0x400c630e, 0x3}, @exit_looper, @release={0x40046306, 0x9}], 0x5e, 0x0, &(0x7f0000000480)="45e1fa61088869b9894b577eeb77bf39a832b11ba44939023a71910dddcba9078dc275af62b3b0e0fab7c60b88fe33912303601ae749bd40c209bab0d75d079139c161a850d7e835a34a52e7d8d3d219a28c0f1180fba6e5e1a0bf23769d"}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r4, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000700)={0x58, 0x0, &(0x7f0000000640)=[@exit_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r2, @ANYBLOB="000000000000000000000000852a62770a000000020000000000003ea09c6e06c1b5ae000000000000000000856164660000000003000000000000000200000000000000"], &(0x7f0000000600)={0x0, 0x18, 0x30}}, 0x400}, @acquire={0x40046305, 0x2}], 0x16, 0x0, &(0x7f00000006c0)="b610b8b1faa17ad35c4937c261859b4cdf6baa749730"}) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=[&(0x7f0000000080)='/dev/binder#\x00'], &(0x7f0000000240)=[&(0x7f0000000140)='/dev/binder#\x00', &(0x7f0000000180)='{+\x00'], 0x100) 08:16:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0xfdffffff00000000) 08:16:16 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) 08:16:16 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x7) 08:16:16 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) 08:16:16 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x8) [ 2673.390611][ T5701] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2673.404070][ T5702] binder: BINDER_SET_CONTEXT_MGR already set [ 2673.409556][ T5701] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2673.432114][ T5702] binder: 5691:5702 ioctl 40046207 0 returned -16 [ 2673.436907][ T5701] nbd: error processing sock list [ 2673.469453][ T5705] binder: 5691:5705 unknown command 0 [ 2673.488099][ T5705] binder: 5691:5705 ioctl c0306201 20000200 returned -22 [ 2673.515550][ T5702] binder: 5691:5702 unknown command 0 [ 2673.522405][ T5702] binder: 5691:5702 ioctl c0306201 20000200 returned -22 [ 2673.541837][ T5702] binder: 5691:5702 unknown command 0 [ 2673.559399][ T5702] binder: 5691:5702 ioctl c0306201 20000200 returned -22 08:16:17 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x29a}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:16:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0xffffff7f00000000) 08:16:17 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) 08:16:17 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x4000000}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:16:17 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x9) 08:16:17 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0xa) [ 2674.079881][ T5726] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2674.109022][ T5726] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2674.117136][ T5726] nbd: error processing sock list [ 2674.154850][ T5702] binder: BINDER_SET_CONTEXT_MGR already set [ 2674.183828][ T5702] binder: 5691:5702 ioctl 40046207 0 returned -16 [ 2674.206121][ T5698] binder: 5691:5698 unknown command 0 [ 2674.206605][ T5705] binder: 5691:5705 unknown command 0 [ 2674.212061][ T5698] binder: 5691:5698 ioctl c0306201 20000200 returned -22 [ 2674.217538][ T5705] binder: 5691:5705 ioctl c0306201 20000200 returned -22 [ 2674.240764][ T5698] binder: 5691:5698 unknown command 0 [ 2674.246548][ T5698] binder: 5691:5698 ioctl c0306201 20000200 returned -22 08:16:17 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaee, 0x2, @perf_config_ext={0x3, 0x9}, 0x4000, 0x0, 0x2, 0x99ea40af47d9b692, 0x0, 0x4}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) 08:16:17 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) 08:16:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0xffffffff00000000) 08:16:17 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0xe) 08:16:17 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) [ 2674.340212][ T5737] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2674.363944][ T5737] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2674.380868][ T5737] nbd: error processing sock list 08:16:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0xfffffffffffff000) 08:16:18 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x300}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:16:18 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0xf) 08:16:18 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x5000000}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:16:18 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) 08:16:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) 08:16:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) [ 2674.892861][ T5758] nbd: must specify at least one socket 08:16:18 executing program 1: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x40, 0x5, 0x9, 0x0, 0x8c, 0x208, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x10683, 0x7, 0x1, 0x4, 0x7fff, 0x3, 0x1e7, 0x0, 0xea98, 0x0, 0x90f}, r2, 0xe, r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000002300)={0x0, @aes128}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r3 = getpid() r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x6100, 0x0) perf_event_open(&(0x7f0000002280)={0x2, 0x80, 0x3, 0x7f, 0xfd, 0x9, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0xd1, 0x4, 0x5, 0x5, 0x5, 0xc7c6, 0x5, 0x0, 0x5, 0x0, 0x100000001}, r3, 0x4, r4, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) 08:16:18 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf252100000009001f0070687932000000000c000500000300000000000005002000000000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000009001f0070687930000000000a0001007770616e340000000a00010090e537d67f77"], 0x70}}, 0x0) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r4, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c000200000a00000000000004000780d8cf23ffc31c70dad3200fe6a08e15e183f49152e810ec78e7c701ede896de"], 0x24}}, 0x0) 08:16:18 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x48) 08:16:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) 08:16:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) [ 2675.221552][ T5775] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2675.244291][ T5775] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2675.256134][ T5779] binder: 5776:5779 ioctl 400c6615 20002300 returned -22 [ 2675.259819][ T5775] nbd: error processing sock list 08:16:18 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x4c) [ 2675.430761][ T5788] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2675.440445][ T5788] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2675.449762][ T5788] nbd: error processing sock list 08:16:19 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x457}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:16:19 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x6000000}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:16:19 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x7c, r1, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '$%(}\\.\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x5}, 0x4002) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r5) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r5, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008085}, 0x4000044) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000c000200000a0000000000000c0006000000000000000000"], 0x2c}}, 0x0) 08:16:19 executing program 3: perf_event_open(0x0, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) 08:16:19 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x60) 08:16:19 executing program 3: perf_event_open(0x0, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) [ 2675.889681][ T5803] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2675.902370][ T5803] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2675.914703][ T5803] nbd: error processing sock list 08:16:19 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x58093d6ed9d8ad0a, 0x0, 0x2}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) 08:16:19 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x68) 08:16:19 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r4) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x100, r3, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0xec, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0xdc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x401}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xfffc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) 08:16:19 executing program 3: perf_event_open(0x0, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) [ 2676.091617][ T5812] binder: 5776:5812 ioctl 400c6615 20002300 returned -22 08:16:19 executing program 3: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) [ 2676.177367][ T5817] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2676.193148][ T5817] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2676.203372][ T5817] nbd: error processing sock list 08:16:19 executing program 3: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) 08:16:20 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x500}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:16:20 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x6c) 08:16:20 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x7000000}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:16:20 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r3) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000640)) r6 = socket(0x1, 0x2, 0x7f) recvmsg$unix(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/65, 0x41}, {&(0x7f00000003c0)=""/198, 0xc6}, {&(0x7f00000004c0)=""/252, 0xfc}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000001a40)=""/4096, 0x1000}], 0x5, &(0x7f0000000100)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}, 0x12002) r8 = openat$incfs(0xffffffffffffffff, &(0x7f00000018c0)='.pending_reads\x00', 0x101000, 0x8) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0x88, r4, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffff001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x602}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8f9}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x68084}, 0x40890) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x0) 08:16:20 executing program 3: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) [ 2676.814741][ T5841] nbd: error processing sock list 08:16:20 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) [ 2676.859384][ T5841] nbd: error processing sock list 08:16:20 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x8dc37bc4456a24db, 0x2}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) 08:16:20 executing program 0: sendmsg$sock(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000000)="3d6b5cb6a35a06ca5f80eef5579ae9a3c5329ac5462d07b48ae763511f43854f018676779c834903b36949d4bd753e311cdc630210789f0e24835ba4212f289e9754e281889ecb70f224078a49fcea58d34786", 0x53}, {&(0x7f0000000100)="da84b5e2c37ef6cf2593743db152a00e0422197273946ed1df6e23f84cbcc8d7560575a6ebdcabc77a0ed125b1094fa0402efaed3f6a2470396edc3aede4dfc9af0d92fa33bdff711d44268b31f2e41709ea5e72ff51b33011bd71bfcde5e32c5663ec017b5b0650f282659b7e7d3d97a1ec", 0x72}, {&(0x7f0000000180)="56a7aaf837867516086cea5a8c02b14440522417895691ebf4108aa60b6e2c6dd5a8549566df6cf46e4aa5f2c34b11efd586dea748cea6d3690b18111186c6364f05fa47d76e3a6b03ccb19bdb4cbb27f651ed59ffefc28496e7d32b31325e9b4ab813bca91f9ea5f3ee642601bcb225d3f904c7bf612078b8f1cbd0c7a07121058939c00462531023ac6db18a6820a1a651e41c11013d0740f3ff", 0x9b}, {&(0x7f0000000080)="31749c75365c856737bdec395c7d5aee7fb88ca48bd60dd3a1695f3cdddcfb71eed3312b7885fc057e1cbce6450154a4dbb6b9797f", 0x35}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="2a87f80ac2d8c06b80808ea4f0c40d618bb0afca196f8a8f51a1308a5a980b46b4b7f049dcdf34de32cf2eeca50a4acc29094b39b1e7c61a86d38fe6b5d84c11f81fe4119a657b2d68520416cab7ba6f1881261febf09782d8a3e0f0553ef1344a06efed19ff2c2cf36a2aefd8ec64e5e087b3e076d38f6f5029d3891a83651e8f4646fac2f912232605d94b919f665829b483e271cd3def6ba07210dcddbe1bea1d50a0", 0xa4}, {&(0x7f0000000300)="4cd0d1bb31ffbaf70d87a8f9cdd0d2e9a689de5590128c748d99dcb3ef0d07595fa88e77c088733da33f30a6bce40cff6323fd522aec4ea4bbfea1d2e956caf83e69372426", 0x45}, {&(0x7f0000000240)}], 0x8}, 0x800) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x0) 08:16:20 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x74) 08:16:20 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) [ 2677.126392][ T5860] __nla_validate_parse: 2 callbacks suppressed [ 2677.126410][ T5860] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2677.147591][ T5860] validate_nla: 2 callbacks suppressed [ 2677.147606][ T5860] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2677.164980][ T5860] nbd: error processing sock list 08:16:20 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) 08:16:20 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c000200040000000000fff804000780"], 0x24}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 2677.244917][ T5860] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2677.278555][ T5860] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2677.307216][ T5860] nbd: error processing sock list 08:16:21 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x600}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:16:21 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) 08:16:21 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:16:21 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x7a) 08:16:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x70bd29, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c8}, 0x40000) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0xb00, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)={0x48, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x2c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "5df7441c7321934b7737cc493a95f02f"}, @NL802154_KEY_ATTR_ID={0xc, 0x4, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x48}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000be00000000000017000000080003", @ANYRES32=r7, @ANYBLOB="2c0025800500020000000000140004005df7441c7321934b7737cc493a95f02f0c0004800800010000000000"], 0x48}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000640)={0x78, r10, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x54, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8efa9be969e34cd2dfae82a2e4e1be9b9d42fc91f5611d124752d7074ab13abc"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "1cfa10b49764bfa6d72b5169f2c170b551bbf298555f629aed2e99b309b38c3c"}]}]}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="00004002", @ANYRES16=0x0, @ANYBLOB="08002abd7000010000001f0000000a0001007770616e3000000008000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=r7, @ANYBLOB="0a0001007770616e330000000a603c000070616e3300000008000200", @ANYRES32=r11, @ANYBLOB="0a0001007770616e3000000008000200", @ANYRES32=r12, @ANYBLOB="0a0001007770616e31000000"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="04010000", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fedbdf25010000000800010003000000e8000c8014000b800800090096dffa5208000a00b7ab00000c000b8008000900bae9d7040c000b8008000a00a25e00000c000b8008000a008730000024000b8008000a007bb400000800e231aa90000008000900d4e6110708000a0036d600000c000b8008000a00fe8c000024000b8010000a003250000008000a00b0b6000008000a00d24e000008000a00d61b000014000b8008000900af0c226308000a00fb00000044000b8008000900df44bb3908000a0091cb0000080009002b08e65808000900bd47321608000a00fafd0000080009001054126308000a002704000008000a0081230000"], 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x0) 08:16:21 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) [ 2677.754972][ T5887] nbd: must specify at least one socket [ 2677.772171][ T5888] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2677.786367][ T5888] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2677.796881][ T5888] nbd: error processing sock list [ 2677.843830][ T5888] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2677.868093][ T5888] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2677.876239][ T5888] nbd: error processing sock list [ 2677.928376][ T5887] nbd: must specify at least one socket 08:16:21 executing program 1: r0 = syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000003c0)='./file0\x00', 0x3, 0xa, &(0x7f0000002900)=[{&(0x7f0000000400)="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", 0x1000, 0x8}, {&(0x7f0000001400)="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", 0x1000, 0x3}, {&(0x7f0000002400)="f86b3c64892237e9615c5d4eb774fc56814abf21042095d816fb60d2d18509da47f91f64be7befb0c802abd8c2772d228929293a4219b8453a206f5cd2c34bba7968ae6b20ac05c1b1e2d7a828ca630f9c1c4f14ceae2fd09a0c54e5d1cbcc88b1cc3931fee65344299e4b13a8aed700bda12047dffa4938014b4f054773444743383c5cb42cb6abf16c629104ba138ae7abcb0cc2f8553a8effcc8a192eddaaadaaf300de78a4d85005702c25786f02c3a007a7f4c5577782b6eca91423a977aae17ba21eea", 0xc6, 0x4}, {&(0x7f0000002500)="384dc933de5fc52eed5a878d3a351b89c5285af5d73d21be65727b10c61f9b9bbf6e282a5d52a0f4fff4a154a5f38b622996b2d7fa9e378f843101deb9fb9f52d152a7b2670dafd1807a57704dbc25af1d9486", 0x53, 0x8}, {&(0x7f0000002580)="0c746f21d5215da8c0a09662734b270c0c7805b66649b6ff2379c2dae134a2c007bac8c4cacd0385a5fdcc8a423ddaefbd9dc7400e57b76d22721a65c6776a52bc2f36b7040b22c868e1014b1219ae4a4ca95263867d7ca65f9f89bf3ef452a452050b5360340d85ba9fc048975eec599a2b594ef0ff111ada3f6dc5f54cb145204eeb5e8547f89b1edf08f8031275aa1bd92903f4005402855d0d010378c2e8d024f978d6257f12b85c3ade6a047608deb5ba124fb74e4c", 0xb8, 0x80}, {&(0x7f0000002640)="34881c092282a92a145b26a7c9ec04b2334e1b6ae2275db09067975607d31ab08206cc18a1344dc9e96c57cba32734de425039ab80076844dae24b443a1909a5d856a683877fc3b92ba58b0f36428ec4b1f1d625c86320e0e639bd5ad284e8e888a0d7864027d3ced9bb706d", 0x6c, 0x8}, {&(0x7f00000026c0)="4de2e5c97e103a31146475c45019fb16f882530eef6d323b6ae60d4368b89009888915fc10620165098e085e134e552a26fdab9e3088c9c30258ad98de73756725247fc8fe234e2b684464ae0a7c030176ba6220b6f78f8293a47c82df2ca3d12f5014804deb1839f7e966b9d3ba243caca3d854bf277d55e0fdc1fae91b74ffbf4a69c656f198969396bb21fa4b184b160acbd9338056f6abb389c3296c01133637002d57d5075b041f6dc454b7a37b41e3522a2150980f8c1c5e4a9c666eb0e03c4aabf8ab640f76b5fb754ec9d1a98de3cdd09b223aa8793195a096df0e722f48b0d9b99168c64974a9bd", 0xec, 0x4}, {&(0x7f00000027c0)="8c4b3d38dab159c6253d8e7c2b3ab0d7d9aac978f3fff2d07c1072e8bd3f1f348c7be51ee90294dfcc359dd620c51617d9e496f7be60", 0x36, 0x7}, {&(0x7f0000002800)="2ae632d59da6c474b1319a15d71905bb74ddfdce17f262abf8a418b452a737403429a925c5cbae90684333224bd1bd11582e288593d15c55f9fef739b216e3a7dd52197c624e362b53a533b262251dabba284a38f449e7bc4a33a11400f46fd434cdcf246616", 0x66}, {&(0x7f0000002880)="5399084b2824a519a1454c435df8a91215ca865b2ed31e0d60cd0b6e7ac9899e7dbb977c95e5d8872f529b884f042f6f96de45d55f4f03083289ce13ecbed92b08dc2161dc30a25b860bf5dc03", 0x4d, 0x5}], 0x1200002, &(0x7f0000002a00)={[{'/dev/binder#\x00'}, {'/dev/binder#\x00'}, {'\\+'}, {'/dev/binder#\x00'}, {'}(\xc2\'('}, {'/dev/binder#\x00'}, {'*)/'}, {'/dev/binder#\x00'}, {}], [{@appraise}, {@uid_gt={'uid>', 0xffffffffffffffff}}]}) open(&(0x7f0000002b80)='./file0\x00', 0x402, 0x4) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000002a80)={0x1, 0x1562}) r1 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000002c80)=[{&(0x7f0000002bc0)=""/77, 0x4d}, {&(0x7f0000002c40)=""/16, 0x10}], 0x2, 0x180, 0xd42) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) r3 = gettid() perf_event_open(&(0x7f0000002b00)={0x4, 0x80, 0x40, 0x2, 0x7, 0x0, 0x0, 0x6, 0x1210, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000002ac0), 0xf}, 0xb02, 0x5, 0x1, 0x1, 0x10000, 0xeb, 0x7, 0x0, 0x3, 0x0, 0x3}, r3, 0xb, 0xffffffffffffffff, 0x9) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x80, 0x0, &(0x7f0000000240)=[@acquire_done={0x40106309, 0x3}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@flat=@handle={0x73682a85, 0xa, 0x1}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x4, 0x0, 0x2f}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}, @increfs_done={0x40106308, 0x1}, @increfs={0x40046304, 0x2}, @exit_looper], 0xf8, 0x0, &(0x7f00000002c0)="4bf3602e9bb207c3bafbe0c1861ded69bfb1e315bb6a966917e047656d3bc098ff077e35702c4f1311883c233fd2687443f95c0d32afdfe95ab4410275b5675312e0e238b970936548f3bb60811246b0be4889ba38d89decfd04fe528952ad8dfe68b84a098868461ba4e4b5e02f87efdd1a9947a038357abfcb52608fc63f3c0fe3b1657c69d663db09ff3b5875f31227c35f0f502922c0673d05865b01f4f7873f985c678631d4c2288637e31f4b73b91a6099532ff03c8590ed4e6206aae4966c95b3874c54aa6b55411d53adbf6c8e25337cedb99a1d16acd1ba0d5c6946ca3541c90e54d132e761c43b53282bab9e575edd4b60e518"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) 08:16:21 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) 08:16:21 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0xf0) 08:16:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000c010000000c020267000a00be000000000400073a"], 0x24}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0002000000000000000000040007800c000800000000000000000008000100000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r6, @ANYBLOB="05000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08011100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800010000000000"], 0x90}}, 0x0) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) r8 = socket(0x11, 0x800000003, 0x8) bind(r8, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) r9 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x70, r7, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4090}, 0x4000052) [ 2678.099732][ T5905] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 08:16:21 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) 08:16:21 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x9000000}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) [ 2678.143882][ T5905] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2678.155919][ T5905] nbd: error processing sock list [ 2678.190159][ T5912] loop1: detected capacity change from 0 to 8 [ 2678.194395][ T5906] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2678.218201][ T5906] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2678.230253][ T5912] squashfs: Unknown parameter '/dev/binder#' 08:16:22 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x700}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:16:22 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x300) 08:16:22 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) 08:16:22 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) [ 2678.738756][ T5929] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2678.773051][ T5929] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2678.806870][ T5929] nbd: error processing sock list [ 2678.857531][ T5929] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2678.874812][ T5929] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2678.902055][ T5929] nbd: error processing sock list 08:16:22 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x500) 08:16:22 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) [ 2679.013260][ T5940] loop1: detected capacity change from 0 to 8 [ 2679.034758][ T5940] squashfs: Unknown parameter '/dev/binder#' [ 2679.044047][ T5943] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2679.070357][ T5943] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2679.099586][ T5943] nbd: error processing sock list 08:16:22 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000640)) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=@bridge_getlink={0xfc, 0x12, 0x8, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x800, 0x1a}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xe800000}, @IFLA_WEIGHT={0x8, 0xf, 0x5}, @IFLA_GROUP={0x8, 0x1b, 0x6}, @IFLA_EVENT={0x8, 0x2c, 0x800}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6719}, @IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_BROADCAST={0xa, 0x2, @random="e695f339b78c"}, @IFLA_AF_SPEC={0x6c, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8, 0xf}, {0x8, 0xe, 0x0, 0x0, 0x4}, {0x8, 0x19, 0x0, 0x0, 0x80000001}, {0x8, 0xb, 0x0, 0x0, 0x1000}, {0x8, 0x8, 0x0, 0x0, 0x6}]}}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x5, 0x0, 0x0, 0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x11, 0x0, 0x0, 0x7f}, {0x8, 0x4, 0x0, 0x0, 0x8}]}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x5}, 0x20008004) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000640)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x76, 0x81, 0xfa, 0x0, 0x0, 0x1ff, 0x4020, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000000), 0xc}, 0x801, 0x3f, 0x4000000, 0x6, 0xdd2, 0x4, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0xa, r2, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) 08:16:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), r0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x400480, 0x0) socketpair(0xb, 0x0, 0x1, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0), 0x41, 0x0) r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_SIOCOUTQ(r8, 0x5411, &(0x7f0000000640)) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000000}, 0x24000880) r9 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x149040, 0x0) r10 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x30802, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000100)={r11}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000800)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000240)={r12, 0x0, 0x5}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000006c0)={r12, 0x0, r5, 0xff}) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000480)={&(0x7f0000000240), 0xc, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r2, @ANYBLOB="000127bd7000fddbdf25050000004400078008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="1400078008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c00080080000000000000003400078008000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES16=r5, @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="07080001", @ANYRES32=r7, @ANYBLOB="0c000200fffbffffffffffff"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0xfffffe1b, r3, 0x400, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x40854) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x2004080) 08:16:22 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0xa000000}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:16:22 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) [ 2679.150897][ T5943] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2679.185067][ T5943] nbd: error processing sock list 08:16:22 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x600) 08:16:22 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) [ 2679.391468][ T5965] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2679.446505][ T5965] nbd: error processing sock list 08:16:23 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x900}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:16:23 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/179, 0xb3, 0x1, 0xf}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/172, 0xac, 0x1}, @fda={0x66646185, 0x1, 0x2, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x50}}}, @request_death={0x400c630e, 0x1}], 0xfe, 0x0, &(0x7f0000000540)="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"}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000a00)={0xc, 0x0, &(0x7f0000000980)=[@enter_looper, @acquire={0x40046305, 0x2}], 0x15, 0x0, &(0x7f00000009c0)="ea7791114253b61bb498cc651106b5708136d9f518"}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x1000000, &(0x7f0000000040)="aa"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x98, 0x0, &(0x7f0000000880)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000a40)=ANY=[@ANYBLOB="a561646600000000040000000000000002000000000000001000000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="a03398fd03dc97bb175006e1291d50dbf50000000000000000000000008561646600"/44, @ANYRES16], &(0x7f00000006c0)={0x0, 0x20, 0x38}}}, @enter_looper, @enter_looper, @release={0x40046306, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000700)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0xa, 0x2, 0x1b}, @flat=@handle}, &(0x7f0000000780)={0x0, 0x18, 0x38}}}], 0x22, 0x0, &(0x7f00000007c0)="1f413806acaf7a86e0083331158ceab2d6a29b4c550c9dc60bca3d5306e9b2810a9b"}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x9) r3 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) dup2(r2, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) 08:16:23 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0xd8, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x0, 0x20}, @flat=@binder={0x73622a85, 0x100b, 0x1}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x1000}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) 08:16:23 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x700) 08:16:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="98000000", @ANYRES16=0x0, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c00020000000000000000000c00050023000000000000000c000800000000000000000008000100000000004400078008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="f651011d", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800010000000000"], 0x98}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000680)={0x68, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x200200d4) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x14, 0x0, 0x3c3b03643afbc737, 0x70bd28, 0x25dfdbfd}, 0x14}}, 0x40400c0) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r2) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x7c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x404c040}, 0x8000) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r9, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x900, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0xc6545b99de45985b) [ 2679.735906][ T5977] binder: 5972:5977 unknown command 0 [ 2679.752692][ T5977] binder: 5972:5977 ioctl c0306201 20000200 returned -22 [ 2679.763604][ T5980] nbd: error processing sock list [ 2679.770609][ T5977] binder: BINDER_SET_CONTEXT_MGR already set 08:16:23 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 2679.781417][ T5977] binder: 5972:5977 ioctl 40046207 0 returned -16 [ 2679.864761][ T5977] binder: 5972:5977 unknown command 0 [ 2679.870744][ T5977] binder: 5972:5977 ioctl c0306201 20000200 returned -22 08:16:23 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x900) [ 2679.911571][ T5977] binder: 5972:5977 ioctl 80087601 20000000 returned -22 [ 2679.949767][ T5977] binder: BINDER_SET_CONTEXT_MGR already set [ 2679.955951][ T5977] binder: 5972:5977 ioctl 40046207 0 returned -16 [ 2679.991513][ T5994] binder: 5991:5994 ioctl c0306201 0 returned -14 [ 2680.015087][ T5987] binder: BINDER_SET_CONTEXT_MGR already set [ 2680.024345][ T5987] binder: 5972:5987 ioctl 40046207 0 returned -16 [ 2680.025140][ T5995] nbd: error processing sock list 08:16:23 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 2680.059318][ T5987] binder: 5972:5987 unknown command 0 [ 2680.113798][ T5987] binder: 5972:5987 ioctl c0306201 20000200 returned -22 [ 2680.126184][ T6000] binder: BINDER_SET_CONTEXT_MGR already set 08:16:23 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0xb000000}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:16:23 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0xa00) 08:16:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r5}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x0) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_SIOCOUTQ(r6, 0x5411, &(0x7f0000000640)) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x44, r1, 0x20, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10a00}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r6}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040005}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r9, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r10}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r8) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r9, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x10) [ 2680.167245][ T6000] binder: 5972:6000 ioctl 40046207 0 returned -16 [ 2680.176017][ T5977] binder: 5972:5977 ioctl 80087601 20000000 returned -22 08:16:23 executing program 1: r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0xdf, 0x8, 0x4, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2c0, 0x0, 0x0, 0x0, 0x73}, 0x0, 0xffffffff, 0xffffffffffffffff, 0xb) r1 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x3, 0xd6, 0x0, 0x4, 0x0, 0x964, 0x80001, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000000), 0xd}, 0x4000, 0x8, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9}, r1, 0xe, r0, 0x0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) [ 2680.229857][ T6005] binder: 6001:6005 ioctl c0306201 0 returned -14 [ 2680.288276][ T6008] nbd: error processing sock list 08:16:24 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xa00}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:16:24 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 08:16:24 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0xe00) 08:16:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00530000d234673a5373c59b29faf9d19affdcadbe3ff63307191af3cae85117dfa5d63d36a3598f01680a343db4686f160c92ead5b9ef3df47a06bf575f2deca6440576816e1f5b976a7425b4579042e788d879b8870c6416c21174ef56aec76cb22b107ef081028466541e875db54fdaf8feb7d7dac87c19", @ANYRES16=r2, @ANYBLOB="0100000000100000200001dfffffb5fd0200000a00002000000004000780f0221d952bb2d15882119fd68bf8342e5f3a00118474b26430c33aaa377c737dfeffffffc11425a66c571038b5e8765964658f2af658f9ce44b11ae04d4f7453c9ea728fb1700f16388ed622161391a068f0c61d6342279e8cedfb9d2a1ab6590b9a8df81ce07296599252926d6e86634ba1e730cd7e5193c7f3e42f9d0c529eaf0b6e2d63107ab02b74541b"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x804) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 2680.720872][ T6022] binder: 6018:6022 ioctl c0306201 0 returned -14 [ 2680.738381][ T6024] nbd: error processing sock list 08:16:24 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) 08:16:24 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0xf00) 08:16:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x4048840}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x90, r10, 0x1, 0x70bd25, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r11}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="88010000", @ANYRES16=r10, @ANYBLOB="00012dbd7000fcdbdf25010000000c00060001000000000000000c00080003000000000000000c0003001c000000000000000c000600000000000000000008000100000000000c00030000000003000000000c00060001000000000000000c00050020010000000000000c00050020000000000000000c0006000200000000000000"], 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x8804) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x2c, r3, 0x300, 0x0, 0xffffffff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0x0, 0x3, 0xd4ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0x0, 0x8, 0x6}]}, 0xffffffffffffffa2}}, 0x0) [ 2680.944362][ T6036] nbd: error processing sock list 08:16:24 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x1f00) [ 2681.055933][ T6041] nbd: error processing sock list [ 2681.091821][ T6041] nbd: error processing sock list 08:16:24 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0xb000200}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:16:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000a0000000000000c0005000200000000000000a610e762bd857251762533ab88860d9762451b7333d04e00000000000000000000d09500000000"], 0x2c}}, 0x20008800) 08:16:24 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x2000) 08:16:24 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x1000000, &(0x7f0000000040)="aa"}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x6, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x3) [ 2681.242834][ T6050] nbd: error processing sock list [ 2681.380121][ T6057] binder: BINDER_SET_CONTEXT_MGR already set [ 2681.386257][ T6057] binder: 6055:6057 ioctl 40046207 0 returned -16 [ 2681.449076][ T6060] binder: 6055:6060 ioctl c0096616 20000000 returned -22 08:16:25 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xb00}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:16:25 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x3f00) 08:16:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r2, 0x1, 0x0, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa04}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x0) [ 2681.712421][ T6065] nbd: error processing sock list 08:16:25 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) 08:16:25 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x4800) 08:16:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYBLOB="ce30f9e0ab09833b2b89b1522c83c0c4a8d06bec843b2ea3869935f4c8efa1d2f77bf96d65c3b0252aeae9cecfdc75cbe9a1adf531072ed610dae3aa34250c72b5f83efcff821adbd23e22b31434de95a55889cbf4f7851e87fc1f326c8442b35d8583cf4da1dace16a31e27b2afb7436e275dc2fe2f2ab4a8705d30cdc150e46afad1f1a0dfd0e70c3fd849e1d8ff73850cab58137c51cfa181a5ff2ecb75ad0fb00b4285345ed6c39a6f636bf79f397ed561e7dd6a72ee1ac7a0aee6286815bcdb89", @ANYRESHEX=r1], 0x70}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, 0x0, 0x800, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000380), 0x10) listen(r3, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x700}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x70}}], 0x1, 0x0, 0x0) [ 2681.896858][ T6078] nbd: error processing sock list 08:16:25 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x4c00) 08:16:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r6}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x0) r7 = socket(0x11, 0x800000003, 0x8) bind(r7, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r5, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1f}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x11) [ 2682.059881][ T6086] nbd: error processing sock list [ 2682.085109][ T6085] nbd: nbd0 already in use 08:16:25 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0xd000000}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:16:25 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x6000) 08:16:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf2e71b5a1c39e250}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0x1a4, 0x0, 0x100, 0x200, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xc4, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c5516c8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x569bf36}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2465435}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x11349492}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfc}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32ed5a1c}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x68e85e0b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f0b63c2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6afbabf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a8900bb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed92ae5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a408a76}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x69}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ab21d5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6a}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xcc, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x193a6b85}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dc058ef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3799f519}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c94fca9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x658d4f0e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6838996b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c505570}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bbf9d6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x350e2128}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb2964a0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x27077fff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xeee4bbb}]}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4004084}, 0x20004000) [ 2682.160133][ T6057] binder: BINDER_SET_CONTEXT_MGR already set [ 2682.166686][ T6056] binder: 6055:6056 unknown command 6 [ 2682.174648][ T6060] binder: 6055:6060 ioctl c0096616 20000000 returned -22 [ 2682.214728][ T6057] binder: 6055:6057 ioctl 40046207 0 returned -16 [ 2682.221306][ T6056] binder: 6055:6056 ioctl c0306201 200000c0 returned -22 08:16:25 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x102001) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x1c, 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0x1000, 0x0, &(0x7f0000000240)="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"}) [ 2682.289727][ T6103] __nla_validate_parse: 53 callbacks suppressed [ 2682.289744][ T6103] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2682.306038][ T6103] validate_nla: 11 callbacks suppressed [ 2682.306052][ T6103] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2682.342836][ T6103] nbd: error processing sock list 08:16:26 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xc00}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:16:26 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x1040, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/71, 0x47}], 0x1, 0x6, 0x7ff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r1) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000640)) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r3, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1e8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x4000) 08:16:26 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x6800) 08:16:26 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) [ 2682.682885][ T6118] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2682.693804][ T6118] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2682.719550][ T6118] nbd: error processing sock list 08:16:26 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x6c00) 08:16:26 executing program 0: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000140)=""/228, &(0x7f0000000240)=0xe4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x80, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0x60, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e61524865fb0ad09d986a855f0aed1c16d764619fda6c0bdc01dd775d3090dc5"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f5d5d85248fa5c2bc5b174ee97a62b91"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x80}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r4, 0x10, 0x70bd28, 0x53, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4804) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r1) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 2682.894892][ T6132] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2682.917185][ T6132] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2682.964536][ T6132] nbd: error processing sock list 08:16:26 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x7400) 08:16:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="81000000a60000e6ff15fa040000eb5577e08af918495af6cce8f2a6221a"], 0x24}}, 0x0) 08:16:26 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0xe000000}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) [ 2683.154596][ T6144] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2683.164613][ T6144] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2683.174535][ T6144] nbd: error processing sock list 08:16:26 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x7a00) 08:16:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c000200000a00000000000004000780e2e4683eb8129744cd9b93e721881dc083bbacbf559656625baa67150f4e5d5432040031da162b816eb6275d93bf7325118eae1590a8ee75253acfb2ce3b9af122f08c94c21564e4a978f418425fe8081b0f1c3816aac26695820bcf01b7f804043ed34b55d0eb782d18f104c00e85a57a60f55fbce0db3f8e79699e5b4c59e88ae058f42b474c85d2cfb6114a5110c9c8d58424cc7e2cb4f12c01fff163ee2a4c3cc0aea533d32958caebbde78961823554a7"], 0x24}}, 0x0) 08:16:26 executing program 1: r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0xdf, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000640)) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0xfffffff, 0x1ff, 0x6, r0, 0x0, &(0x7f0000000080)={0x990aff, 0x0, '\x00', @p_u16=&(0x7f0000000000)=0x5ddd}}) [ 2683.265371][ T6153] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2683.327840][ T6153] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2683.340510][ T6153] nbd: error processing sock list [ 2683.390765][ T6153] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2683.413604][ T6153] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2683.431783][ T6153] nbd: error processing sock list 08:16:27 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xd00}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:16:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="6aa430db840000e2ff00010000000c000200000a00000000000004000780"], 0x24}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 08:16:27 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0xf000) 08:16:27 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x8c, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) [ 2683.650603][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2683.660744][ T6170] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2683.680542][ T6170] nbd: error processing sock list 08:16:27 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x30000) 08:16:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x180040}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xce}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x20}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4040) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r4) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x0) 08:16:27 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x48, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) 08:16:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB="e7db4293bf1bd94458531cfd07f50980248f842f6909d5747de26c01058925836502b253fb4afd98a5ffaa43c6d23cf1622be97a38c71a83a86ba40dc64da214670f06dba6da482a48c2d102631ae95681fb7f49fe554c3a6a60d6a90e67bf73060247eb312c7204ce1b3e785b66", @ANYBLOB="010000000000000000000100f803000000000000000000003d9b00000400"], 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) 08:16:27 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0xf000000}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) [ 2683.933855][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2683.967066][ T6187] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2683.998430][ T6187] nbd: error processing sock list 08:16:27 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x34000) 08:16:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1cff0000", @ANYRES16=0x0, @ANYBLOB="000429bd7000fbdbdf25030000000800020002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40046305, {0x0, 0x40046304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r7 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r7, r6) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="51beddc8", @ANYRES16=r6, @ANYRES16=r5], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 2684.098415][ T6197] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2684.108468][ T6197] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2684.117483][ T6197] nbd: error processing sock list 08:16:27 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) clone(0x2040900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6577206465b60b91397420757365723a73"], 0x2a, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r2 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "c323d4771e17c5158bd71d6412306738441689440b258794bf9f018237648a1bd937d346715dcd8895cd43e67b1ee74b40c82792f19f206c0cfb6fec9c7a0861", 0x3e}, 0x48, r1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) [ 2684.175238][ T6199] binder: 6198:6199 unknown command 0 [ 2684.203426][ T6199] binder: 6198:6199 ioctl c0306201 20000340 returned -22 [ 2684.215191][ T6199] binder: 6198:6199 unknown command 0 [ 2684.241939][ T6199] binder: 6198:6199 ioctl c0306201 20000200 returned -22 [ 2684.259615][ T6203] trusted_key: encrypted_key: master key parameter 'de¶ ‘9t' is invalid [ 2684.261393][ T6199] binder: 6198:6199 unknown command 0 [ 2684.289507][ T6199] binder: 6198:6199 ioctl c0306201 20000200 returned -22 [ 2684.311436][ T6207] binder: 6198:6207 unknown command 0 [ 2684.316930][ T6207] binder: 6198:6207 ioctl c0306201 20000340 returned -22 [ 2684.333574][ T6199] binder: 6198:6199 unknown command 0 [ 2684.341204][ T6199] binder: 6198:6199 ioctl c0306201 20000200 returned -22 [ 2684.351236][ T6207] binder: 6198:6207 unknown command 0 [ 2684.358450][ T6207] binder: 6198:6207 ioctl c0306201 20000200 returned -22 08:16:28 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xfa0}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:16:28 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x400300) 08:16:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa00}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x0) [ 2684.599268][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2684.610273][ T6213] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2684.622991][ T6213] nbd: error processing sock list 08:16:28 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0xf0ffff) 08:16:28 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x10000000}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:16:28 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x48, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) 08:16:28 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x1000000) [ 2685.025027][ T6240] nbd: error processing sock list 08:16:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r6}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r5, 0x8}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r8) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r8) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000ea72", @ANYRES16=r2, @ANYBLOB="000427bd7000fddbdf25050000000c0003000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x44) 08:16:28 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x2000000) [ 2685.075701][ T6242] trusted_key: encrypted_key: master key parameter 'de¶ ‘9t' is invalid 08:16:28 executing program 1: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/fscrypto', 0x400, 0x42) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000080)=[@acquire={0x40046305, 0x1}], 0x34, 0x0, &(0x7f0000000180)="34c6378a07e401f19558f5271dbd1136b125fbc393f6a825975958c3e1c8a2c54fe965cd4658436bbf42d31494e2a5b892daa70b"}) dup2(r3, r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) 08:16:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0b000000c541356d3a2a60c72d6eab6573e64ce372fee2dfb46f1e9ab5bfb85bb1b75384afd08a037afd54eec4c8849c941b6fc5a4383ac348527ce57bf40ed4f357bec645a6def81dbfb68dd016c67c5c10594ab00e4638635f2c5084862ba7387ffe5c8a9da9540a93d6a126e4a3f54c737e257f8c3b3079e9d3c80eee618cc85f188852700073e3bbef3983fc9dc186a3ad0dbf829f1623445590bd1d789b84549dc2600ffb05d9b5da72eec09b8cba52d50de0276b06b7024a5cd4dcce51ebc68abe471da4f320d5b55fa369170ce37d571eded9d370bc6b883b", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c000200000a00000000000004000780"], 0x24}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 2685.224961][ T6251] binder: BINDER_SET_CONTEXT_MGR already set [ 2685.246501][ T6251] binder: 6247:6251 ioctl 40046207 0 returned -16 [ 2685.261470][ T6252] nbd: error processing sock list [ 2685.289811][ T6251] binder: BINDER_SET_CONTEXT_MGR already set [ 2685.300361][ T6252] nbd: error processing sock list [ 2685.325668][ T6251] binder: 6247:6251 ioctl 40046207 0 returned -16 08:16:28 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x3000000) [ 2685.339367][ T6254] binder: 6247:6254 unknown command 0 [ 2685.346172][ T6254] binder: 6247:6254 ioctl c0306201 20000200 returned -22 [ 2685.392375][ T6251] binder: BINDER_SET_CONTEXT_MGR already set [ 2685.408918][ T6251] binder: 6247:6251 ioctl 40046207 0 returned -16 [ 2685.462451][ T6262] binder: BINDER_SET_CONTEXT_MGR already set [ 2685.490080][ T6262] binder: 6247:6262 ioctl 40046207 0 returned -16 [ 2685.506965][ T6254] binder: 6247:6254 unknown command 0 08:16:29 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x1100}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:16:29 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x11000000}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) [ 2685.512648][ T6254] binder: 6247:6254 ioctl c0306201 20000200 returned -22 [ 2685.532607][ T6263] nbd: error processing sock list [ 2685.559723][ T6262] binder: BINDER_SET_CONTEXT_MGR already set [ 2685.559736][ T6262] binder: 6247:6262 ioctl 40046207 0 returned -16 08:16:29 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000f5000000000012000100000004000200000a0000000000040007ca"], 0x24}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r7}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x0) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000082}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r6, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x601}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x10081) 08:16:29 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x90, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x38, 0x1, r3}, {0x5}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}}, 0x4000000) [ 2685.759146][ T6270] sysfs: cannot create duplicate filename '/dev/block/43:0' 08:16:29 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x48, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) [ 2685.799769][ T6270] CPU: 1 PID: 6270 Comm: syz-executor.0 Not tainted 5.15.0-rc6-syzkaller #0 [ 2685.808759][ T6270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2685.818826][ T6270] Call Trace: [ 2685.822110][ T6270] dump_stack_lvl+0xcd/0x134 [ 2685.826711][ T6270] sysfs_warn_dup.cold+0x1c/0x29 [ 2685.831661][ T6270] sysfs_do_create_link_sd+0x11e/0x140 [ 2685.837141][ T6270] sysfs_create_link+0x5f/0xc0 [ 2685.841916][ T6270] device_add+0x101c/0x1ee0 [ 2685.846441][ T6270] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 2685.852795][ T6270] device_add_disk+0x2ca/0xfc0 [ 2685.857586][ T6270] nbd_dev_add+0x83e/0xb90 [ 2685.862014][ T6270] nbd_genl_connect+0x11f3/0x1930 [ 2685.867136][ T6270] ? nbd_start_device+0xd90/0xd90 [ 2685.872168][ T6270] ? __nla_parse+0x3d/0x50 [ 2685.876591][ T6270] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2685.882912][ T6270] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2685.890281][ T6270] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2685.897575][ T6270] genl_family_rcv_msg_doit+0x228/0x320 [ 2685.903134][ T6270] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2685.910508][ T6270] ? mutex_lock_io_nested+0x1150/0x1150 [ 2685.916144][ T6270] ? genl_op_from_small+0x23/0x3c0 [ 2685.921250][ T6270] ? genl_get_cmd+0x3cf/0x480 [ 2685.925924][ T6270] genl_rcv_msg+0x328/0x580 [ 2685.930427][ T6270] ? genl_get_cmd+0x480/0x480 [ 2685.935101][ T6270] ? nbd_start_device+0xd90/0xd90 [ 2685.940428][ T6270] ? lock_release+0x720/0x720 [ 2685.945272][ T6270] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2685.950557][ T6270] netlink_rcv_skb+0x153/0x420 [ 2685.955316][ T6270] ? genl_get_cmd+0x480/0x480 [ 2685.959986][ T6270] ? netlink_ack+0xa60/0xa60 [ 2685.964579][ T6270] ? netlink_deliver_tap+0x1b1/0xc30 [ 2685.969867][ T6270] genl_rcv+0x24/0x40 [ 2685.973844][ T6270] netlink_unicast+0x533/0x7d0 [ 2685.978607][ T6270] ? netlink_attachskb+0x890/0x890 [ 2685.984495][ T6270] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2685.990735][ T6270] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2685.996972][ T6270] ? __phys_addr_symbol+0x2c/0x70 [ 2686.001991][ T6270] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2686.007708][ T6270] ? __check_object_size+0x16e/0x3f0 [ 2686.012998][ T6270] netlink_sendmsg+0x86d/0xdb0 [ 2686.017765][ T6270] ? netlink_unicast+0x7d0/0x7d0 [ 2686.022709][ T6270] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2686.028945][ T6270] ? netlink_unicast+0x7d0/0x7d0 [ 2686.033876][ T6270] sock_sendmsg+0xcf/0x120 [ 2686.038293][ T6270] ____sys_sendmsg+0x6e8/0x810 [ 2686.043053][ T6270] ? kernel_sendmsg+0x50/0x50 [ 2686.047810][ T6270] ? do_recvmmsg+0x6d0/0x6d0 [ 2686.052528][ T6270] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2686.058513][ T6270] ___sys_sendmsg+0xf3/0x170 [ 2686.063105][ T6270] ? sendmsg_copy_msghdr+0x160/0x160 [ 2686.068405][ T6270] ? __fget_files+0x21b/0x3e0 [ 2686.073076][ T6270] ? lock_downgrade+0x6e0/0x6e0 [ 2686.077934][ T6270] ? __fget_files+0x23d/0x3e0 [ 2686.082613][ T6270] ? __fget_light+0xea/0x280 [ 2686.087202][ T6270] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2686.093626][ T6270] __sys_sendmsg+0xe5/0x1b0 [ 2686.098138][ T6270] ? __sys_sendmsg_sock+0x30/0x30 [ 2686.103181][ T6270] ? syscall_enter_from_user_mode+0x21/0x70 [ 2686.109077][ T6270] do_syscall_64+0x35/0xb0 [ 2686.113493][ T6270] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2686.119472][ T6270] RIP: 0033:0x7fa3ad85ba39 [ 2686.123886][ T6270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2686.143489][ T6270] RSP: 002b:00007fa3aadd1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2686.151907][ T6270] RAX: ffffffffffffffda RBX: 00007fa3ad95ef60 RCX: 00007fa3ad85ba39 [ 2686.159957][ T6270] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000008 [ 2686.168092][ T6270] RBP: 00007fa3ad8b5c5f R08: 0000000000000000 R09: 0000000000000000 [ 2686.176147][ T6270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2686.184116][ T6270] R13: 00007ffd3ffbd9ff R14: 00007fa3aadd1300 R15: 0000000000022000 08:16:29 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x30) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x430}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0xff0f0000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="f575dee69d8b7f1db5628a061ef2f66c39310a3b823f378a11220bfc375b812dfc397b82bed530682a060be7eec083533c03b6f8a21a67eaecbed5d07d", 0x3d, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xcd, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, 0x0, &(0x7f00000000c0)=""/20, 0x14) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) add_key$user(&(0x7f0000000400), &(0x7f0000000740)={'syz', 0x1}, &(0x7f0000000780), 0x0, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000480)=""/225, 0xe1) add_key$keyring(&(0x7f0000000080), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) msgget(0x0, 0x0) 08:16:29 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x12000000}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:16:29 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000100)={{0x0, 0x7, 0xfd, 0x3, 0x7ff, 0xdb4, 0x8, 0x80000000, 0x7, 0x7fffffff, 0x8, 0x9, 0x3, 0x54, 0xfffffffffffffffc}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000400)=ANY=[@ANYRES64=r1, @ANYBLOB="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"]) 08:16:30 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000040)="aa"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x1300}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) [ 2686.470216][ T6289] binder: BINDER_SET_CONTEXT_MGR already set [ 2686.486606][ T6289] binder: 6287:6289 ioctl 40046207 0 returned -16 [ 2686.503291][ T6289] binder: 6287:6289 ioctl c018620c 20000000 returned -1 [ 2686.579851][ T6292] binder: 6287:6292 ioctl c0709411 20000100 returned -22 [ 2686.607314][ T6292] binder: 6287:6292 ioctl c0709411 20000400 returned -22 [ 2686.775054][ T6270] ------------[ cut here ]------------ [ 2686.781518][ T6270] WARNING: CPU: 0 PID: 6270 at block/genhd.c:538 device_add_disk+0x60b/0xfc0 [ 2686.798023][ T6270] Modules linked in: [ 2686.802740][ T6270] CPU: 0 PID: 6270 Comm: syz-executor.0 Not tainted 5.15.0-rc6-syzkaller #0 [ 2686.818262][ T6270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2686.834704][ T6270] RIP: 0010:device_add_disk+0x60b/0xfc0 [ 2686.843454][ T6270] Code: 8e ec 07 00 00 8b 5d 00 bf 03 01 00 00 89 de e8 eb 2a ad fd 81 fb 03 01 00 00 0f 85 69 fd ff ff e9 22 fd ff ff e8 95 23 ad fd <0f> 0b 41 bc 01 00 00 00 e9 6a fd ff ff e8 83 23 ad fd 0f 0b 41 bc [ 2686.869939][ T6270] RSP: 0018:ffffc900051c7458 EFLAGS: 00010246 [ 2686.876205][ T6270] RAX: 0000000000040000 RBX: 000000000000002b RCX: ffffc90003fb1000 [ 2686.887167][ T6270] RDX: 0000000000040000 RSI: ffffffff83c9b47b RDI: 0000000000000003 [ 2686.897197][ T6270] RBP: ffff88808e15c000 R08: 0000000000000103 R09: ffff8880b9c32a0b [ 2686.907610][ T6270] R10: ffffffff83c9b18c R11: 0000000000000000 R12: 00000000ffffffef [ 2686.916865][ T6270] R13: ffff88808e15c080 R14: ffff88808e15c008 R15: ffff888140485e40 [ 2686.926545][ T6270] FS: 00007fa3aadd1700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 2686.936396][ T6270] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2686.943777][ T6270] CR2: 00007f674d16a000 CR3: 000000003fdaa000 CR4: 0000000000350ef0 [ 2686.952329][ T6270] Call Trace: [ 2686.955664][ T6270] nbd_dev_add+0x83e/0xb90 [ 2686.961209][ T6270] nbd_genl_connect+0x11f3/0x1930 [ 2686.966338][ T6270] ? nbd_start_device+0xd90/0xd90 [ 2686.972190][ T6270] ? __nla_parse+0x3d/0x50 [ 2686.976665][ T6270] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2686.984386][ T6270] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2686.994048][ T6270] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2687.002094][ T6270] genl_family_rcv_msg_doit+0x228/0x320 [ 2687.008988][ T6270] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2687.016414][ T6270] ? mutex_lock_io_nested+0x1150/0x1150 [ 2687.023458][ T6270] ? genl_op_from_small+0x23/0x3c0 [ 2687.029455][ T6270] ? genl_get_cmd+0x3cf/0x480 [ 2687.034920][ T6270] genl_rcv_msg+0x328/0x580 [ 2687.040309][ T6270] ? genl_get_cmd+0x480/0x480 [ 2687.045060][ T6270] ? nbd_start_device+0xd90/0xd90 [ 2687.050929][ T6270] ? lock_release+0x720/0x720 [ 2687.055659][ T6270] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2687.061915][ T6270] netlink_rcv_skb+0x153/0x420 [ 2687.066830][ T6270] ? genl_get_cmd+0x480/0x480 [ 2687.072504][ T6270] ? netlink_ack+0xa60/0xa60 08:16:30 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x8c, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) [ 2687.077227][ T6270] ? netlink_deliver_tap+0x1b1/0xc30 [ 2687.083743][ T6270] genl_rcv+0x24/0x40 [ 2687.088968][ T6270] netlink_unicast+0x533/0x7d0 [ 2687.095350][ T6270] ? netlink_attachskb+0x890/0x890 [ 2687.101448][ T6270] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2687.108212][ T6270] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2687.114845][ T6270] ? __phys_addr_symbol+0x2c/0x70 [ 2687.122281][ T6270] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2687.129718][ T6270] ? __check_object_size+0x16e/0x3f0 [ 2687.135646][ T6270] netlink_sendmsg+0x86d/0xdb0 [ 2687.150169][ T6270] ? netlink_unicast+0x7d0/0x7d0 [ 2687.160875][ T6270] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2687.170204][ T6270] ? netlink_unicast+0x7d0/0x7d0 08:16:30 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x8c, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) [ 2687.175543][ T6270] sock_sendmsg+0xcf/0x120 [ 2687.193328][ T6270] ____sys_sendmsg+0x6e8/0x810 [ 2687.204330][ T6270] ? kernel_sendmsg+0x50/0x50 [ 2687.231573][ T6270] ? do_recvmmsg+0x6d0/0x6d0 [ 2687.236248][ T6270] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2687.275968][ T6270] ___sys_sendmsg+0xf3/0x170 [ 2687.282510][ T6270] ? sendmsg_copy_msghdr+0x160/0x160 [ 2687.289137][ T6270] ? __fget_files+0x21b/0x3e0 [ 2687.294160][ T6270] ? lock_downgrade+0x6e0/0x6e0 [ 2687.303098][ T6292] binder: BINDER_SET_CONTEXT_MGR already set [ 2687.309616][ T6292] binder: 6287:6292 ioctl 40046207 0 returned -16 08:16:30 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = epoll_create1(0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) tkill(0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x15000000}, &(0x7f0000000380)={0x0, r2+30000000}, 0x0) 08:16:30 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x8c, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) [ 2687.317606][ T6270] ? __fget_files+0x23d/0x3e0 [ 2687.350818][ T6270] ? __fget_light+0xea/0x280 [ 2687.356606][ T6289] binder: 6287:6289 ioctl c018620c 20000000 returned -1 [ 2687.376566][ T6270] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2687.400478][ T6270] __sys_sendmsg+0xe5/0x1b0 [ 2687.407209][ T6289] binder: 6287:6289 ioctl c0709411 20000100 returned -22 [ 2687.412530][ T6309] binder: 6287:6309 ioctl c0709411 20000400 returned -22 [ 2687.423929][ T6270] ? __sys_sendmsg_sock+0x30/0x30 [ 2687.441447][ T6270] ? syscall_enter_from_user_mode+0x21/0x70 [ 2687.456654][ T6270] do_syscall_64+0x35/0xb0 [ 2687.474708][ T6270] entry_SYSCALL_64_after_hwframe+0x44/0xae 08:16:31 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x8c, 0x0, &(0x7f0000000380)=[@request_death, @request_death={0x400c630e, 0x2}, @enter_looper, @dead_binder_done, @request_death, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/5, 0x5, 0x0, 0x1e}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/129, 0x81, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}], 0x90, 0x0, &(0x7f0000000480)="45c8bb86afb29b05817d28a33e84f2675a2ae61857d5c73a1579eabc62ca949959170bc48da8fc123b9f12c27b2fa25a35f172be84669e041e7f8229b7288733fc997c5fef05c3c2d772a56f1fa2f737e8f529bfd7ff1eee34306b87526dd99f460f25577d84e042d2ae23ed76405524ea79b1dd210d000e780f11fafa1a8d36f55e427511d9170e593cc30705c39778"}) [ 2687.512197][ T6270] RIP: 0033:0x7fa3ad85ba39 [ 2687.530886][ T6270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2687.581302][ T6270] RSP: 002b:00007fa3aadd1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2687.601784][ T6270] RAX: ffffffffffffffda RBX: 00007fa3ad95ef60 RCX: 00007fa3ad85ba39 [ 2687.619006][ T6270] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000008 [ 2687.638931][ T6270] RBP: 00007fa3ad8b5c5f R08: 0000000000000000 R09: 0000000000000000 [ 2687.647075][ T6270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2687.656355][ T6270] R13: 00007ffd3ffbd9ff R14: 00007fa3aadd1300 R15: 0000000000022000 [ 2687.666359][ T6270] Kernel panic - not syncing: panic_on_warn set ... [ 2687.672957][ T6270] CPU: 0 PID: 6270 Comm: syz-executor.0 Not tainted 5.15.0-rc6-syzkaller #0 [ 2687.681639][ T6270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2687.691699][ T6270] Call Trace: [ 2687.694986][ T6270] dump_stack_lvl+0xcd/0x134 [ 2687.699591][ T6270] panic+0x2b0/0x6dd [ 2687.703496][ T6270] ? __warn_printk+0xf3/0xf3 [ 2687.708103][ T6270] ? __warn.cold+0x1a/0x44 [ 2687.712538][ T6270] ? device_add_disk+0x60b/0xfc0 [ 2687.717494][ T6270] __warn.cold+0x35/0x44 [ 2687.721749][ T6270] ? device_add_disk+0x60b/0xfc0 [ 2687.726707][ T6270] report_bug+0x1bd/0x210 [ 2687.731056][ T6270] handle_bug+0x3c/0x60 [ 2687.735308][ T6270] exc_invalid_op+0x14/0x40 [ 2687.739908][ T6270] asm_exc_invalid_op+0x12/0x20 [ 2687.744857][ T6270] RIP: 0010:device_add_disk+0x60b/0xfc0 [ 2687.750418][ T6270] Code: 8e ec 07 00 00 8b 5d 00 bf 03 01 00 00 89 de e8 eb 2a ad fd 81 fb 03 01 00 00 0f 85 69 fd ff ff e9 22 fd ff ff e8 95 23 ad fd <0f> 0b 41 bc 01 00 00 00 e9 6a fd ff ff e8 83 23 ad fd 0f 0b 41 bc [ 2687.770270][ T6270] RSP: 0018:ffffc900051c7458 EFLAGS: 00010246 [ 2687.776329][ T6270] RAX: 0000000000040000 RBX: 000000000000002b RCX: ffffc90003fb1000 [ 2687.784412][ T6270] RDX: 0000000000040000 RSI: ffffffff83c9b47b RDI: 0000000000000003 [ 2687.792372][ T6270] RBP: ffff88808e15c000 R08: 0000000000000103 R09: ffff8880b9c32a0b [ 2687.800589][ T6270] R10: ffffffff83c9b18c R11: 0000000000000000 R12: 00000000ffffffef [ 2687.808809][ T6270] R13: ffff88808e15c080 R14: ffff88808e15c008 R15: ffff888140485e40 [ 2687.816777][ T6270] ? device_add_disk+0x31c/0xfc0 [ 2687.821903][ T6270] ? device_add_disk+0x60b/0xfc0 [ 2687.826842][ T6270] ? device_add_disk+0x60b/0xfc0 [ 2687.831972][ T6270] nbd_dev_add+0x83e/0xb90 [ 2687.836424][ T6270] nbd_genl_connect+0x11f3/0x1930 [ 2687.841896][ T6270] ? nbd_start_device+0xd90/0xd90 [ 2687.846911][ T6270] ? __nla_parse+0x3d/0x50 [ 2687.851775][ T6270] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2687.858017][ T6270] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 2687.865603][ T6270] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 2687.874100][ T6270] genl_family_rcv_msg_doit+0x228/0x320 [ 2687.879767][ T6270] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 2687.887649][ T6270] ? mutex_lock_io_nested+0x1150/0x1150 [ 2687.893211][ T6270] ? genl_op_from_small+0x23/0x3c0 [ 2687.898524][ T6270] ? genl_get_cmd+0x3cf/0x480 [ 2687.903201][ T6270] genl_rcv_msg+0x328/0x580 [ 2687.907874][ T6270] ? genl_get_cmd+0x480/0x480 [ 2687.912545][ T6270] ? nbd_start_device+0xd90/0xd90 [ 2687.917568][ T6270] ? lock_release+0x720/0x720 [ 2687.922236][ T6270] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2687.927699][ T6270] netlink_rcv_skb+0x153/0x420 [ 2687.932497][ T6270] ? genl_get_cmd+0x480/0x480 [ 2687.937170][ T6270] ? netlink_ack+0xa60/0xa60 [ 2687.941856][ T6270] ? netlink_deliver_tap+0x1b1/0xc30 [ 2687.947136][ T6270] genl_rcv+0x24/0x40 [ 2687.951200][ T6270] netlink_unicast+0x533/0x7d0 [ 2687.955961][ T6270] ? netlink_attachskb+0x890/0x890 [ 2687.961062][ T6270] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2687.967302][ T6270] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2687.973614][ T6270] ? __phys_addr_symbol+0x2c/0x70 [ 2687.978634][ T6270] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2687.984345][ T6270] ? __check_object_size+0x16e/0x3f0 [ 2687.989872][ T6270] netlink_sendmsg+0x86d/0xdb0 [ 2687.994905][ T6270] ? netlink_unicast+0x7d0/0x7d0 [ 2687.999930][ T6270] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2688.006508][ T6270] ? netlink_unicast+0x7d0/0x7d0 [ 2688.011946][ T6270] sock_sendmsg+0xcf/0x120 [ 2688.016361][ T6270] ____sys_sendmsg+0x6e8/0x810 [ 2688.021223][ T6270] ? kernel_sendmsg+0x50/0x50 [ 2688.025964][ T6270] ? do_recvmmsg+0x6d0/0x6d0 [ 2688.030551][ T6270] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2688.036528][ T6270] ___sys_sendmsg+0xf3/0x170 [ 2688.041112][ T6270] ? sendmsg_copy_msghdr+0x160/0x160 [ 2688.046422][ T6270] ? __fget_files+0x21b/0x3e0 [ 2688.051179][ T6270] ? lock_downgrade+0x6e0/0x6e0 [ 2688.056053][ T6270] ? __fget_files+0x23d/0x3e0 [ 2688.061114][ T6270] ? __fget_light+0xea/0x280 [ 2688.065690][ T6270] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2688.071924][ T6270] __sys_sendmsg+0xe5/0x1b0 [ 2688.076429][ T6270] ? __sys_sendmsg_sock+0x30/0x30 [ 2688.081468][ T6270] ? syscall_enter_from_user_mode+0x21/0x70 [ 2688.087355][ T6270] do_syscall_64+0x35/0xb0 [ 2688.091766][ T6270] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2688.097669][ T6270] RIP: 0033:0x7fa3ad85ba39 [ 2688.102083][ T6270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2688.121939][ T6270] RSP: 002b:00007fa3aadd1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2688.130388][ T6270] RAX: ffffffffffffffda RBX: 00007fa3ad95ef60 RCX: 00007fa3ad85ba39 [ 2688.138348][ T6270] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000008 [ 2688.146314][ T6270] RBP: 00007fa3ad8b5c5f R08: 0000000000000000 R09: 0000000000000000 [ 2688.154275][ T6270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2688.162435][ T6270] R13: 00007ffd3ffbd9ff R14: 00007fa3aadd1300 R15: 0000000000022000 [ 2688.171303][ T6270] Kernel Offset: disabled [ 2688.175959][ T6270] Rebooting in 86400 seconds..