et$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x38, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000000)={'vlan0\x00', {0x2, 0x4e20, @rand_addr=0x518}}) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r6, 0x0, 0x0) 14:44:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000fffffffffffff0000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a0108f0ffffff00000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000000010900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000034000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x600000000000000) 14:44:10 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5a, 0x10000}, 0x1018, 0x0, 0x4, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, r6, 0x0) vmsplice(r6, &(0x7f0000000140)=[{&(0x7f0000000240)="e5242e4f729f88e4233b831680f45bd58fe1653146c1f7f1f4e16709cf399d70d271fede928d7696e30338932aa8a3f9aa5415b690f84f289fbed6dc5088137e328c412140d8013d627cb0a53d513f7db8bac156dd4a598863da1546cb6abe13a76cfc98126f27a5669b6505b315e1ed56e58e0cad9773e892dc6c68ff6ec0715a750a19866741145296fe308f7e373a35d915f32385a1af3ae4d1a1d019ee2c5fc1c1b015098dd9c69ef5a399561fb979e0a86c052e33e2996a3b4c8af431e248f658d7fd33092cbd16d1", 0xcb}], 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e20, 0x80, @local, 0x3}, {0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, 0x5234, [0x38243578, 0x9, 0x4bd, 0x7f, 0x66, 0x0, 0xffffffe1, 0x9]}, 0x5c) 14:44:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000000020900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a0108fffffffffffff000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:10 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) 14:44:10 executing program 2: r0 = io_uring_setup(0xdbe, &(0x7f00000005c0)={0x0, 0x0, 0xb, 0xffffdffd, 0x20}) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x22eb40, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x9) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000300)={0x4, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) ustat(0x1ff, &(0x7f0000000100)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x1c8, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_IE={0x19d, 0x2a, "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"}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x40040c1}, 0x40) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="a910783e0a82fd6d5c7a4a8008", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fedbdf251b0000000600322393130000060021006200000005009200060000000400cc000500920005000000050092007f0040000400cc00080001000100000008009a0004000000"], 0x54}, 0x1, 0x0, 0x0, 0x24048810}, 0x4048815) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x38, 0x0) symlinkat(&(0x7f0000000140)='./file0\x00', r5, &(0x7f0000000180)='./file0\x00') 14:44:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000000030900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x700000000000000) 14:44:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000001000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:10 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x38, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000020805000000000000000000050000070600024088fb000009020100f0b6a4b894f6d3e534a9fe73797a31000000000900010073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) sendfile(r0, r3, 0x0, 0xfff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x12) write$uinput_user_dev(r5, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) write$uinput_user_dev(r5, &(0x7f0000000240)={'syz0\x00', {0x3, 0x2, 0x101, 0x3}, 0x29, [0x9, 0xfffffffd, 0x40, 0x10000, 0xffffb570, 0xff, 0x5, 0x0, 0x8001, 0x8001, 0x4, 0x400, 0x6, 0xeb19, 0x4, 0x9, 0x4, 0x1f, 0x8dd0, 0x7, 0x9, 0x4, 0x529, 0xfffffff7, 0x1f, 0x568, 0x7ff, 0x8bf, 0xeebe, 0x729f, 0x5, 0x9, 0x3, 0xff, 0x2, 0x1, 0x1000, 0x6, 0x0, 0x0, 0x5, 0x1f, 0x3, 0x3, 0xfff, 0x4, 0x3, 0x9, 0x9, 0x1, 0x5, 0x800, 0xfffffffa, 0x3f, 0x0, 0x5, 0x8, 0xffff, 0x2, 0xc6, 0xc0000000, 0x4, 0x0, 0x1], [0xffffffff, 0x7, 0x0, 0xce, 0x400, 0x7f, 0x0, 0x400, 0xff, 0x6, 0x1, 0x81, 0xfff, 0x7, 0x1, 0x200, 0x401, 0x81, 0x5, 0x9, 0x4, 0xfffffffe, 0x791, 0x3f, 0x2, 0x5836, 0x1, 0x2, 0xff, 0xffffffff, 0x20, 0x7, 0x101, 0x1, 0xffff, 0x1, 0x0, 0x0, 0xd8, 0x1, 0x7fffffff, 0x4, 0x3, 0x8, 0x5, 0x1ff, 0x1, 0x5, 0x1, 0x7fffffff, 0xfffeffff, 0x40, 0x62, 0xff, 0xffff8000, 0xfffffffc, 0x1, 0x8000, 0xff, 0x3, 0x10000, 0x200, 0x2], [0x0, 0x0, 0x1, 0x401, 0x35f, 0xffffffff, 0x7fffffff, 0x3, 0xfffff958, 0x1b6, 0xf11, 0x3, 0x1, 0x4, 0x0, 0x1, 0x200, 0x5, 0x8, 0xbd, 0x8, 0xfff, 0x55d0, 0x0, 0x0, 0x8001, 0x6, 0x6, 0x6, 0x5, 0x8001, 0x9, 0xffffffe1, 0x1, 0x20, 0x2, 0x4, 0x5, 0x48e, 0x4, 0x40, 0x9, 0xde, 0x8, 0x8, 0x5, 0x6, 0x9, 0x8001, 0x101, 0x3, 0x49, 0x84aa45a1, 0x4, 0x0, 0x1, 0x10000, 0x80, 0x20, 0x3, 0x3243, 0x3ae, 0x4], [0x3, 0x8, 0x20, 0x101, 0x3f, 0x10001, 0xffffff80, 0x9, 0x5, 0x5, 0x4, 0x3dd, 0x2, 0x4, 0x8f, 0x3, 0x101, 0x0, 0x8, 0x35deeee3, 0xffffffff, 0x2, 0x9, 0x6, 0x1, 0xfffffffb, 0x10001, 0x9, 0x6, 0x0, 0x7ff, 0x800, 0x140000, 0x9, 0x0, 0xd8, 0x6, 0x6, 0xa00000, 0x9, 0x24, 0x3986ead1, 0x7, 0x4, 0x200, 0xffffffff, 0xeea, 0x9, 0x2, 0x8, 0x9, 0x80000000, 0x8232, 0x3, 0x6e, 0x10001, 0x8, 0x1, 0x1, 0x80000, 0x7, 0x0, 0x2, 0x8]}, 0x45c) r6 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r7, 0x0, 0x0) 14:44:10 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x1, &(0x7f0000000100)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000002000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000000040900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1664.793980][T13251] input: syz0 as /devices/virtual/input/input150 14:44:11 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0xa00000000000000) 14:44:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000003000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x38, 0x0) ioctl$TCGETX(r5, 0x5432, &(0x7f0000000140)) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, 0x20) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000000c0)={r8, 0x5, 0x2, [0x7, 0x7]}, &(0x7f0000000100)=0xc) r9 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r10, 0x0, 0x0) 14:44:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000000050900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000004000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:11 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x1000000000000000) 14:44:11 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x800) 14:44:11 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x38, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000240)={0x0, @reserved}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) write$P9_RREAD(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x102) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r7, 0x0, 0x0) 14:44:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000000060900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000005000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f00000000c0)={0x81, 0xfffffffb, 0x80000000, 0x9f9d, 0x401, 0x12000}) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r5, 0x0, 0x0) 14:44:11 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x4800000000000000) 14:44:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000000080900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:11 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x38, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000000100)=""/103) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r2, 0x0, r5, 0x0, 0x38, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000340)={0x7e75, [[0xff, 0x7, 0x4, 0x6, 0x4, 0xffff, 0x1000, 0x1], [0xffff, 0x7fff, 0xaed8, 0xa9c, 0x5, 0xd0, 0x3, 0x8], [0xd1, 0x0, 0x5, 0xfff, 0x4faf9856, 0x7, 0x5, 0x100]], [], [{0xfffffff7, 0x100, 0x0, 0x0, 0x1}, {0x7ff, 0x2, 0x1}, {0x5, 0x80000001, 0x0, 0x0, 0x0, 0x1}, {0x7, 0x0, 0x1, 0x1}, {0x7, 0x3f, 0x0, 0x1, 0x0, 0x1}, {0x7, 0x2, 0x1, 0x0, 0x1, 0x1}, {0x80}, {0x4, 0x7ff, 0x1, 0x0, 0x1}, {0x5, 0x3, 0x0, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x40, 0x80000001, 0x0, 0x1, 0x0, 0x1}, {0x1, 0x5, 0x1, 0x1, 0x0, 0x1}], [], 0x284e}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r2, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05630440", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r3]], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40042409, 0x1) 14:44:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000000090900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000006000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:11 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x4c00000000000000) [ 1665.650874][T13660] binder: 13659:13660 unknown command 0 [ 1665.670309][T13660] binder: 13659:13660 ioctl c0306201 20000200 returned -22 14:44:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000008000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000000000000000000a0900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) select(0x40, &(0x7f0000000080)={0x3, 0x1, 0x0, 0x7, 0x470c2e7d, 0x4, 0x7fffffff, 0x100}, &(0x7f00000000c0)={0x400, 0x700000, 0x7fffffff, 0x81, 0x1, 0x8, 0xb63, 0x2}, &(0x7f0000000100)={0x5, 0xcbdf, 0x0, 0x2, 0x5, 0x1, 0x7}, &(0x7f0000000140)={0x0, 0x2710}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x88000, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r5, 0x5381) 14:44:11 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r2, 0x0) signalfd(r2, &(0x7f0000000100)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x6800000000000000) 14:44:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000000000000000000b0900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:12 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05504d16007c790c630440"], 0x0, 0x0, 0x0}) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x100) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0xc, 0x0, 0x6fa, 0x0, 0x4, 0x3, r5}, 0x49) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={r5, 0x8}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r8, 0x0, 0x0) 14:44:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000009000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1666.022339][T13786] binder: 13784:13786 unknown command 374165509 [ 1666.062114][T13786] binder: 13784:13786 ioctl c0306201 20000200 returned -22 14:44:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a0108000000000000000a000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000000000000000000e0900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:12 executing program 0: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xb6, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0xfffffffffffffefd, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000000)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x3b, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x38, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f0000000180), 0x3, r8, 0x1c, 0x1, @in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, [], 0x25}, 0x1e90}}}, 0xa0) 14:44:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x6c00000000000000) [ 1666.319908][T13900] binder: 13897:13900 unknown command 808464432 14:44:12 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0)='batadv\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r6}, 0x14) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000480)="a50ff3d534dc575355904344791d6f0461f4ce65555f6db4bf7f8c5a2437", 0x1e}, {&(0x7f0000000540)="e52f1e87b6791cd69ed3f41ff19824329a5cc80b7c2bda058a52470450c9c3d9106cbc47693338fd7dbb3867654edbd8049f7df6b93eade0db75d61bbae9c1d25293a1baa3aec50573d971022f7a188f8ec2fd01e38b940262d4bb857225ee769edf30465fc6a585d4b8aaf5ffbab8493eccb86d264f289aec8a514705cb9eba8369f1ff9e34c62d0f9d62d6080c492b9323bfa56a554dec9adba31e83c7bb7a103819caa5562d89aaadc7954cd5b363eb63f76d6225456cb1d378555b939f2ac70df5b3", 0xc4}, {&(0x7f0000000640)="9faf14c36b6687bd11d46936e55616474da50828989483232f8694fa1391ab99af8032694e07ded7b2cab516b14ba5386e255ffad8a55b4917609fc80547bbb15aa7d715", 0x44}, {&(0x7f00000006c0)="95c4e620cdbe21d293cce8372c5cc648c135fbb96dffed8b3fe3aca3bf45e420b72964fa086da749320f8c0940c1e479cdf6c9de980e631bd18b7cd5593cb4adc40db3744eed87755a9da50e623d0db744bc75e9289ebfd1fd7d8c8a2a4844974d9bd7613e0b78969e440c7f3aa8b73f397f31de5dc155caf4fddd34c124f9420d3747868f940cfe94519e093c2de2222ff03bff5bda3bc4cc2bbd1571b135227be5a9d7d156b9ce4774", 0xaa}, {&(0x7f0000000ac0)="0c7c85f1481b9e84394c0ba9e9357e29e0a1701ae6659c37f8b664aa66f4bb66ff349b461fe7d8cb7a615e0459a1ae5e954131dd8c73b8da6b86b5c6e2a2e924b075f2384fe205000000000000001bc9b2cd0514478dd8494524b27fbe9cbb71060009e258c07661914f", 0x6a}, {&(0x7f00000007c0)="d9fa5447b346d425cf73f1ac8fd7920ab719384debf56b7ba93068af13428206acd90e461219", 0x26}, {&(0x7f0000000800)="ce8726b633d397d76dba3fca8f1ff0857a64546e6e70830370102217fc1a12c7d634c8dffef2b85cd1e4a997e3adadbccde7385fd941056f86b6c9a703c5c71d392ee5c5fb9fc252d0835e31e9dac2c42f33f87c18db5018d7f991edbb72aa3dd1fb0567a34bf870992e53d631eade193df5a4ca9ad688d0d48e7b1208715e0793a8a83fb0931cff44e7a0f693173e1faed5160002aad073b34f7b0dbb155fcbe9403243d203072a0f0c6b", 0xab}, {&(0x7f00000008c0)="bdb339003f66d0c72fff799ae4d7249919c5d91e301c5e531b2db60219c635ce2f14d30caa8974a5967487c62fac402b9d4f579cd62d7d97a8c43bd05c53fc7168488f185c01dcc32ce55a37bb15a7707cb3c3fb0d0540cb2db3736e5b1bc57c105fa23ce94bfba0846b4fc215d26abae7fe7a2d3095b20e2098c7db76aad50eee7bfebb8ade264c98c08469782dbb123441b7e079e3f888c138d9d5bea77fb58f7d33eb7a8afe69c4224da829ba7a013b62", 0xb2}, {&(0x7f0000000980)="b32d7282282dcb893c838059ca0b901dd7fa7033309df5f49c9867e597863de2300a7d832b8f19739bca31d559100150f272bf20254006cb19c489e11db8bc3832d18d27a5cdf00429d1c8c8d41ad7c8a79d6fa8168c4d1923ecb727a7dbd8c010634d53b929c2df7b25bf707b04e596c7baa2609b685fba5800b5", 0x7b}], 0x9, &(0x7f0000000ac0)}, 0x800) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x9, {0x0, @dev}}]}]}, @IFLA_IFALIASn={0x4}]}, 0x54}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x2c, r2, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x2c}}, 0x4) r8 = io_uring_setup(0xa4, &(0x7f0000000080)) r9 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000000)=[r9], 0x1) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000400)={0x7, 0x7, 0x2}, &(0x7f0000000440)=0x28) fcntl$getownex(r9, 0x10, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r8, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r8, 0x3, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x22000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c00200002090104000000834e5fcfe8ff024008007a8680000000000500"], 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) 14:44:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000000100900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a0108000000000000000b000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1666.384836][T13900] binder: 13897:13900 ioctl c0306201 20000200 returned -22 [ 1666.412504][T13907] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. 14:44:12 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="85f2050000007463004083edba91941d733703d330c6820ddab3d4828d1df17f3d526ca597b12359c1d52bc6c4c832ca4b20d85c15f4a2dead1d3654c6870c0170400a3e83f2b894f0240fbbc3b61f0146a84b0dd7a4e1ea1577a76ff7d8547150de978d989c11aa5f4c14849d31aedf7df215ac0ab8c103223486a33701193e3186433869152960f6889ee530093facdf7d4bc3d49b458cd56b63824e91f52344cf63a7d2ce765160771f4f8f679cd3a056df172318ca03c7dd5e4012f1c3f5f1ff582b71f8b5204abeb5b2d1c4c716115042267c23"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) ioctl$RTC_WKALM_RD(r4, 0x80287010, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r5, 0x0, 0x0) 14:44:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a0108000000000000000e000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000000110900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1666.612811][T14021] binder: 14020:14021 unknown command 389765 [ 1666.629155][T13943] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. 14:44:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x7400000000000000) [ 1666.672611][T14021] binder: 14020:14021 ioctl c0306201 20000200 returned -22 14:44:12 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x38, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, &(0x7f00000000c0)=""/133) r7 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x9, 0x200081) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f00000001c0)=@req={0x800, 0xbf, 0x0, 0x9d0}, 0x10) 14:44:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000010000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000000120900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:13 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x38, 0x0) sendto$phonet(r2, &(0x7f0000000100)="e47f4101b8fb724bce1320bd1a072ee7524b966def9a5f9161587f7d2b3a8e533f65c3b326acc5d70c022837ceb755d39b2f81666c6b7e4c6f99888267e72eccbc407458f4cfa6c9a95809b96bd515308ab130b74b44fbef8c11579e9d0aa408e56c5c9e25e8c9760c01c171c289601be8db892acf6f40069ccf63ab4ee1bdb12a68939c43ce8f29a6e69dd30d190d3a5be4c66bcc3894328d14a30eda2ab298e02a4367bd12ae2d174036f82cb87624c2c212f1a7120bac7b879a9334c4c086e2b009a1cc58c5df9189d5f75b50574bec40472ed82c252f58", 0xd9, 0x20002800, &(0x7f0000000200)={0x23, 0x56, 0x1f}, 0x10) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) [ 1666.887325][T14120] binder: 14074:14120 unknown command 2043503365 14:44:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x7a00000000000000) 14:44:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000000130900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000011000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1666.985637][T14120] binder: 14074:14120 ioctl c0306201 20000200 returned -22 14:44:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000000140900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0510b08b"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) 14:44:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000012000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:13 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)}, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0xb601000000000000) 14:44:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000005220900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1667.308200][T14260] binder: 14258:14260 unknown command -1951395835 [ 1667.344827][T14260] binder: 14258:14260 ioctl c0306201 20000200 returned -22 14:44:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000013000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000000000000000004c0900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630cff"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) [ 1667.570296][T14371] binder: 14363:14371 unknown command -15965435 [ 1667.583588][T14371] binder: 14363:14371 ioctl c0306201 20000200 returned -22 14:44:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000014000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0xffffff7f00000000) 14:44:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000000600900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04460000"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000000c0)) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000000)=""/23, 0x17}], 0x1, 0xff) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000000180)="4d9661774df6401cae8124879413193336f94b99c2834884dd34770b572680f4b9603b8b9131ce433203538cc9a4") [ 1667.780212][T14387] binder: 14382:14387 unknown command 17924 14:44:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000000000000000006c0900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000019000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1667.822457][T14387] binder: 14382:14387 ioctl c0306201 20000200 returned -22 14:44:14 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2563e5346a1ee8c6dd391fb86f953b47791a"], 0x0, 0x0, 0x0}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) 14:44:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x38, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000000)=0x1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r6, 0x0, 0x0) 14:44:14 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0f000000000000000000110000000800030023c0f6d39fe120d7a51b2747b1f3022f41d93e53613536d2859a38655b37071563038c87c4ee042275aa6e007cb05038e912e6cb25a04fd9265f3578d7701f7fee54468c2d92938ab4a4b071adb618994d6821bb2141924b63109abc", @ANYRES32=r4, @ANYBLOB="0600280000000000"], 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x20000000000000c, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r7, &(0x7f0000000240)={0x11, 0x0, r9}, 0x14) getsockname$packet(r7, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000001000010800"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000300016802c0001802800090000000000aaaaaaaaaa00000000000000000000000000000000004000000000000000000004001400"], 0x54}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x5, 0x3, r10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c080}, 0x4000840) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a0108000000000000004c000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000ffffff9e0900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1668.065253][T14495] binder: 14494:14495 unknown command 887448357 [ 1668.071600][T14495] binder: 14494:14495 ioctl c0306201 20000200 returned -22 [ 1668.128529][T14498] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 14:44:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) 14:44:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000fffffff00900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000060000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:14 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="58e2fb98f389f605630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = dup2(r2, r0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f00000000c0)="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", &(0x7f0000000340)="201ea81490f81b5fcc3253660a893a5203b35cda6219781b56514d3a86d4f053ddef2685f199b4878ff2be6a4c36650b01ca18a543bd4c60fb5ce7f1c6d15bb8979e8d3600fba677172a768f3cbe250e862cb89bba2983f7e90ec4389d2d9ecbdecebb90d1a06e33e5f84ab142238776237bcb8b76f06d4baca923c1843ee218a63eab6bd145f78d8ec19dc1445bd1a62903fa42989fd7821f540919e8904b0002e4e90a381aabe0eb1fad42bc20eb17645396298885d561cb5515bb297fba93c6adca12a19f747e3549145e80930b2cf67b493a99e0807046ea5a5f6449695a0fc972", 0x4}, 0x20) [ 1668.337287][T14533] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1668.352037][T14613] binder: 14611:14613 unknown command 0 [ 1668.378612][T14613] binder: 14611:14613 ioctl c0306201 20000200 returned -22 14:44:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000fffffff50900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x2) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @broadcast, @multicast2}, 0xc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r5, 0x0, 0x0) [ 1668.451843][T14621] binder: 14620:14621 unknown command -1728322984 [ 1668.482864][T14621] binder: 14620:14621 ioctl c0306201 20000200 returned -22 14:44:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a0108000000000000006c000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:14 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r1, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x2) r2 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r2], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0xb, 0x201, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_NAME={0xe, 0x1, 'mime_type\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x6, 0x1, 'y\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000004000)=0x90) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a010800000000ffffff9e000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:14 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) 14:44:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000000000007fffffff0900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) 14:44:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a010800000000000017a1000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:15 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000f0ff000000000000"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) sendmsg$AUDIT_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10808}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0x100, 0x70bd28, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x8805) r3 = dup(r1) ioctl$SNDCTL_DSP_GETIPTR(r3, 0x800c5011, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) 14:44:15 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x38, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000140)={0xfb, 0xb, 0x4, 0x0, 0xf8000000, {}, {0x0, 0x2, 0x81, 0x3f, 0x80, 0xff, "064edbfc"}, 0x8, 0x3, @planes=&(0x7f0000000100)={0x3, 0x5, @mem_offset=0x170a7523, 0x6}, 0x6, 0x0, 0xffffffffffffffff}) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f00000001c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x38, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000200)=0x8) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000f0ffffffffffff0900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r1, r0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r2, 0x0, 0x0) 14:44:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a010800000000fffffff0000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000000)={0x10, 0x100, 0x4, {0x6, 0xffff, 0x7fffffff, 0x1}}) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r5, 0x0, 0x0) 14:44:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000000000300010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a0108000000007fffffff000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:15 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x38, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x38, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x38, 0x0) pipe(&(0x7f0000000080)) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) [ 1669.236421][T14970] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 14:44:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, &(0x7f0000000140)={0x5, 0x2, 0xaad, 0x40, &(0x7f00000000c0)=[{}, {}]}) 14:44:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x38, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r5, 0x800442d4, &(0x7f0000000000)=0x9941) read$fb(r4, 0x0, 0x0) 14:44:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000020000000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a010800f0ffffffffffff000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1669.396930][T14986] binder: 14980:14986 unknown command 0 [ 1669.403481][T14986] binder: 14980:14986 ioctl c0306201 20000200 returned -22 14:44:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) 14:44:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x38, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x0, 0xfffffff9}) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r6, 0x0, 0x0) 14:44:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080002000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000030000000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x154, r2, 0x20, 0x70bd29, 0x25dfdbfb, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}]}, 0x154}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r3, r0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f0000000000)=0x5, 0x8) 14:44:15 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080003000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000040000000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) 14:44:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080004000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000050000000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="25630440f0496bddc7c005b89a44b98a01b656d6b90749081927ec54fdd775ee3bf348c4f3c15641757c995565660f73ec64d391e8642f0be10d0efaea705588b02fcec5de3e9001a1d3fc55ac9f86701eee18d9a650cacca5b152e9f56ce4d79ed4784b68afb69422f24b95303529b83a2368c7750e91adf9643b4a2cc82a508f7aff57b45cff26ecaa6d138003caecb8a1dcd71f1ea2b8309ae8cca2465796b138044896c49f8111b5d1178947a4268608fa9af6c669b7603f35135a4265169744e7404cdfe6e83465a5b2898bcecf171d7097882091d10d247561b442e3e5f666cf98f7880704a3b01786564f4f1dc41c3c09dd2ad9592201b4d7ef3eaf230aae8256dfb6ba53d8f3d284bd6d81c22d1436866718"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x1) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$fb(r5, 0x0, 0x0) 14:44:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000060000000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:16 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x38, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x8000, 0x1, 0x0, r2}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000100)="4cbab3ab0f0a951cadd7d4f4a173126964f11d4a827624575f0b1b93d9711ecd4c3300077c49cf358179dd24b79bc7b483943c45e645f0e323396d87277170530fa4332ec0dc87930536c66d3f8993851608b202ee1965683accad3daf2783a4dc8ef049fafed9438fc432a6fe8bbe7d7b27d07836305c25e0b4b8af111599341037da9e62c9862f5a04141b53f4d0f82101eecba6c9359b5470fff3ff30fe1d72ac70c51da5ab7830f384d4a6f3", 0xae, r4}, 0x68) [ 1670.065543][T15223] binder: 15222:15223 unknown command 1074029349 [ 1670.098099][T15223] binder: 15222:15223 ioctl c0306201 20000200 returned -22 14:44:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080005000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x38, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000000)={0x3}) syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x38, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0xd1, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="04afd6cd0350729ef006c19c24fba5ace474b9fefd116df9f9d62dbf9514a71d21b9fef2f1f61e3164bff65739803a4c15bda9157b490692dff4c0ed1ee5642fc942926ddf10d92b5aa2f961ee97ba95f40c6a75811ff0412cb93436f5ca1debf05d30b242ec39aa9232a2eb7eec2747ee97437278b20698dd2bddcae63806a0132693afc4ee5a3f6b7b54a5456a82be3ad5b6683d05c38d2ce7f0d7b153019b9a7419269606e40d0c58e931752749cbc8995628e0f6a3c679c73ecd9164af1260cacc31344e898163a1b6171e7ecdfd20"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r7, 0x0, 0x0) 14:44:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000080000000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080006000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05410440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) 14:44:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000090000000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080008000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1670.478063][T15245] binder: 15244:15245 unknown command 1074020613 [ 1670.493314][T15245] binder: 15244:15245 ioctl c0306201 20000200 returned -22 14:44:16 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x38, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r5, &(0x7f0000000240)={0x11, 0x0, r7}, 0x14) getsockname$packet(r5, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x9, {0x0, @dev}}]}]}, @IFLA_IFALIASn={0x4}]}, 0x54}}, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000100)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, r8}, 0xc) 14:44:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000000a0000000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080009000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r2, 0x0) r3 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000140), &(0x7f0000000240)=""/142, 0x8e}) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRESHEX=r1]], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r6, 0x0, 0x0) [ 1670.698268][T15252] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. 14:44:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a0108000a000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000000b0000000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1670.802384][T15262] binder: 15261:15262 unknown command 536871104 [ 1670.829659][T15262] binder: 15261:15262 ioctl c0306201 20000200 returned -22 14:44:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="00000440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) [ 1670.951883][T15252] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1670.979131][T15273] binder: 15271:15273 unknown command 1074003968 14:44:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000000e0000000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a0108000b000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1670.998644][T15273] binder: 15271:15273 ioctl c0306201 20000200 returned -22 14:44:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05630440e243c75b2094c7f6514e0c0b6dcb3d153fb4891c4c21705c72bf520ab8a10ad3ec6d4526312371650d68cf8b6a3ce36d1ccc5d54654567bcc47df3e7c7b68890e4fae9f0284fc68b93b56095636b2b96d806eeddd210849dd3f5a73564e1"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x38, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)={&(0x7f0000000000)='./file0\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r6, 0x0, 0x0) 14:44:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a0108000e000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:17 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x38, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x5, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8005}, 0x84) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[r3], 0x1) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self\x00', 0x2000, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x1, "f974e607676cac6e"}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x400000, 0x0) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f00000003c0)) vmsplice(r5, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) write$FUSE_STATFS(r5, &(0x7f0000000180)={0x60, 0x24, 0x5, {{0xd73, 0x7fffffff, 0x0, 0xfffffffffffffff8, 0x10001, 0x3ff, 0x6, 0x80000001}}}, 0x60) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) 14:44:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000100000000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000110000000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x5, 0x8}, 0xc) 14:44:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080010000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000120000000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:17 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x100010, r0, 0x8000000) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x100, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000140)=r3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) mlockall(0x0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080011000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000180)=ANY=[@ANYBLOB="01190900000000c95e95f783"]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05670240"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x38, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000240)={0x89, 0x10}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r6, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) io_setup(0x1000, &(0x7f0000000080)=0x0) io_submit(r9, 0x2, &(0x7f0000000040)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0xffffffffffffffff, 0x58}]) io_cancel(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x7, r0, &(0x7f00000000c0)="2f1579230d158d6eefdc906a75e83efaa9729ece09c0210bb11d563d60fa4dd12e44160ca570cec9c6b96cbbfd8d5d19159ad1df3cdebd3a11165e08bb284cab8d0b3600ed577e880caee8b411a7730b4f2917b0d171b3ae876c64421b175df37dd1b9a8f564f0b55aa647d3db5df4a0159ef9a823b7289dc1af81aa707023", 0x7f, 0x4a46}, &(0x7f00000002c0)) 14:44:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000130000000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080012000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1671.666917][T15310] binder: 15308:15310 unknown command 1073899269 [ 1671.691539][T15310] binder: 15308:15310 ioctl c0306201 20000200 returned -22 14:44:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000140000000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x9, 0x200) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000000c0), 0x20) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000140)={0x0, 0xa72}, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="046304406195d2483a0566d10400892c5bc332a21410a99f64b37122d61fe3c1961c68df7335d1d910ab70d94bf559e34491656c74697504fb9c76efaf5f16936bdb0abdf6f03f35c7251c86029dcb3309e1550f4f955fc8610000"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000180)=0x7) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r6, 0x0, 0x0) 14:44:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080013000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000004c0000000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:18 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0452d3687d852f684402bd01714998c9e94af820f9d369cc06bf14b833878ea3a34d063d5f1c3b4b786cab1747c8fcb3ca221ed31b7c8617b19b1ac6346dfa3fc44e13154677c730e7dec2312c4ae2f1c1429e7c521449f9d2b98aa2f3d58ca71d081b315f20748600aecbe90c2de5965a71a2ceee2a409b7686a7774784a77f28a4b858cd8919c536e06234c8d57a92a802edc8a0fb5631"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r3 = dup(r2) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) 14:44:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000600000000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1672.068202][T15328] binder: 15327:15328 unknown command 1758679556 [ 1672.103822][T15328] binder: 15327:15328 ioctl c0306201 20000200 returned -22 14:44:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080014000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000006c0000000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080019000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000f00000000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a0108004c000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000300000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:18 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x38, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x200880, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x1c8, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_IE={0x19d, 0x2a, "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"}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4045}, 0x40) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r8, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r8, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x850}, 0x20000014) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r5, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x16}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x74}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xfff}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x6}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080060000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000500000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:18 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = msgget$private(0x0, 0x0) msgsnd(r5, &(0x7f0000000300)={0x1}, 0x8, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) msgctl$IPC_STAT(r5, 0x2, &(0x7f00000000c0)=""/69) read$fb(r4, 0x0, 0x0) 14:44:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a0108006c000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000220500000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="f500aa9ad799716df892"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) 14:44:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000600000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a010800f0000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:19 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/24, 0x18}], 0x1}, 0x40000000) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) setsockopt$inet_dccp_buf(r4, 0x21, 0xd, &(0x7f0000000240)="de33c93e8c93e0d854015283ab55d9c11c88c83d58a27b54b2f579fdf9dcc77a2c09ce55ce90ddad3c693aaa02fa37ee3f51c4ebff984e013e5872dc92633099b0bbf7f2668492b17dd5b3c3afc9bf7091a48038a03ac966aec4c8a21d87f3babc4cc9129b23f5614d7a79a424fad4c13418b724d6fa84c82d37c5ad44b300fbc2a5965ddb214ca96304d66c19149a11873707491cc5faf406b116c3f75c0b9f66", 0xa1) splice(r2, 0x0, r3, 0x0, 0x38, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, &(0x7f0000000200)=0x14) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x38, 0x0) ioctl$VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f0000000100)={0x3ad7, 0x8, 0x4, 0x4, 0x1, {0x0, 0x2710}, {0x3, 0x2, 0x8, 0x1f, 0x8, 0xb6, "f6ceebaa"}, 0x401, 0x3, @offset=0x85, 0x3, 0x0, r1}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, 0xffffffffffffffff, &(0x7f0000000180)={0x2}) [ 1673.056533][T15367] binder: 15366:15367 unknown command -1700134667 [ 1673.135656][T15367] binder: 15366:15367 ioctl c0306201 20000200 returned -22 14:44:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000900000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000030000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x12) write$uinput_user_dev(r3, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$uinput_user_dev(r3, &(0x7f0000000240)={'syz0\x00', {0x2, 0x9, 0x80, 0x1}, 0x8, [0xfffffffd, 0x3927d293, 0x2, 0x1, 0x7fffffff, 0x9d, 0x3, 0x7, 0x6, 0x6c1, 0x800, 0x10001, 0x6, 0x27b4, 0xfff, 0x9, 0x4, 0x5, 0x0, 0x5, 0x5, 0xfff, 0x9, 0x7, 0xf735, 0xa92, 0xfffffffa, 0x10001, 0xc000, 0x736, 0x1, 0x6, 0x9, 0x401, 0x2, 0x9aa, 0x5, 0x13b, 0x6, 0x1, 0x1, 0x3f, 0x277, 0x8, 0x8fb, 0x6, 0x10000, 0x5, 0x5, 0x3, 0x0, 0xd115, 0x2, 0x80, 0x31a, 0x8, 0x1, 0x1, 0xd764, 0x3, 0x7fffffff, 0x1, 0x40, 0x7], [0x9, 0x80, 0x2, 0x6, 0xb0, 0x9, 0x1, 0x2, 0x9, 0xcf10, 0x2, 0x0, 0x3, 0x1, 0x6, 0x1, 0x0, 0x3f, 0x3ff, 0x785f, 0x3, 0x8, 0x3, 0x800, 0x56, 0x1, 0x0, 0x7, 0x6, 0x5, 0x1, 0x2, 0x89e5, 0x3, 0x8, 0x8, 0x80000000, 0xa82, 0x7, 0x8, 0x8577, 0x8001, 0x3, 0xf7ef, 0x6, 0x3, 0x100, 0x3, 0x2, 0x100, 0x5, 0x7, 0x4, 0x0, 0x3, 0x400, 0x0, 0xffffffff, 0x24, 0x7, 0x9, 0x1ad, 0x100, 0x8000], [0x7, 0x4, 0x101, 0xa04000, 0x6, 0x81, 0x7a2, 0x800, 0x9, 0x3, 0x300000, 0x20, 0xe20f, 0x80, 0x5, 0x4, 0x101, 0x140, 0x9, 0x8, 0x1ff, 0x7, 0x3, 0x401, 0x200, 0x9, 0x1f, 0x6, 0x20, 0x8952, 0x7fff, 0x5, 0x82d1, 0xffff, 0x800, 0xfffffffb, 0x6, 0x2, 0x1, 0x8, 0x10001, 0xffffffff, 0x9, 0x0, 0x7e2, 0x8, 0x40, 0x6, 0x1, 0x90, 0x101, 0x8001, 0x9, 0x5, 0x101, 0x1, 0x3, 0x52, 0x4, 0x3, 0x5, 0x0, 0x1, 0x7], [0x7, 0x8, 0x80, 0x8, 0xfbd, 0x7fff, 0x20, 0x1, 0x9, 0x20, 0x5294a4fb, 0x9, 0x0, 0x8, 0x0, 0xc1, 0xfffffff8, 0x7, 0xff, 0x52, 0x347, 0x2, 0x40, 0x3, 0x5e30, 0x7ff, 0x80000000, 0xbbb, 0x4, 0x2, 0x0, 0x0, 0x6, 0x7, 0x4, 0x7a5, 0x1, 0x7, 0x20, 0x5, 0x6e97, 0x0, 0x8, 0x3, 0x101, 0x20, 0x7f, 0x800, 0x4, 0xdd, 0x2, 0x80000000, 0xe, 0x1, 0x1, 0x674, 0x8, 0xffffffff, 0x3, 0x0, 0x5, 0x40, 0x0, 0xff]}, 0x45c) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r5, 0x0, 0x0) 14:44:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000050000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000a00000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1673.376982][T15387] input: syz0 as /devices/virtual/input/input151 14:44:19 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x2, &(0x7f0000000100)=[r0, r0]}, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:19 executing program 0: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) 14:44:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000b00000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000060000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000e00000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x98, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x3, 0x2, 0xf}, @fda={0x66646185, 0x7, 0x0, 0x21}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000000)={0x0, 0x20, 0x40}}, 0x400}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fda={0x66646185, 0x2, 0x0, 0x29}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/63, 0x3f, 0x0, 0x26}, @flat=@binder={0x73622a85, 0x1100, 0x3}}, &(0x7f0000000300)={0x0, 0x20, 0x48}}}], 0xf3, 0x0, &(0x7f0000000400)="d0530b3786496a74f19ade512cf6b9fe643e58dfcf70dea1f8ff2b26d8faaba370322b8fd0ed34b880e35fbee03b8724cb6e9f7e555a9c295dc50820b8c1cf885576b151915ece0828e6af0e41043fcd2147e0e339227a62ffcb40fac5879a13bceca8205c814e7b9e07ff56e0c8bf4fdcc3532a475130c813eb84075dc54aa7bdc5bcecba959746471a41c626c6350def13dd550a41148cb0fdb16f1464f5a186c4e486dd0343e65ee7b071eef2ec9698abcc8ec81fde393ff2cc285cd4688dd31037ab89f171cf36e293c7ba56953373050d206a1a68b50a01e669878a0f187417dd978edd0e0c9b8c4150585dad9bfe4c99"}) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="fc5419cef394fafd3bee982e2ad221d3be654937d9ab34bfa043abe07120ae98a58294ee6dd0d42f134cddfe805ea2434cdbb431c863e3c4a677df35c8a9d16e5475f810f87b93cee937e22ea38f2c05e3da91a4bf9188b530cee0ca8696376a2f2ad32fb3fcd2754458410c2c7401d5d9202808774d63be32fa5a2f32f32e0ccc746fb5cc8e177227193d4ba0948267faec9fcd0be3a68e5e23f0e1e0cfec77c61b77eb8fbda8934d45405aa98c6079"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) 14:44:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000090000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1673.841656][T15413] binder: 15411:15413 unknown command -837200644 [ 1673.862300][T15413] binder: 15411:15413 ioctl c0306201 20000200 returned -22 14:44:20 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x38, 0x0) r2 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000180)={{0xa, 0x2, 0x4, 0x5, 'syz0\x00', 0x41941f7d}, 0x3, 0x2, 0x2, r2, 0x7, 0x7ff, 'syz1\x00', &(0x7f0000000100)=['eth0wlan0keyring\x00', 'vmnet1system\x00', 'vmnet0/\x00', 'ppp1-wlan1]lolo\x00', '-.\x9blo/\x00', '\x00', 'eth0selinuxeth1proc\x00'], 0x52, [], [0x400, 0x24e, 0x5, 0x9]}) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r4 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000000)=[r4], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) io_submit(r5, 0x1, &(0x7f0000001b80)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f00000003c0), &(0x7f0000000400)=0x4) io_cancel(0x0, 0x0, &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) 14:44:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000001100000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a010800000a0000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r2, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r3, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r4, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r5, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffdff, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRESHEX=r5, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRESHEX, @ANYRESOCT=r3, @ANYRESDEC, @ANYBLOB="a3247eb7fdc1877cf7d423efa2286dd50177177719bde4f17cf6fbed53f7af3af85927df680b267d4a2918304ba621bb0c19608b114fbf740eaac532a67f2c8920fc2618bdcdd9b775600bf9094284b46e9fea5bbb6e5206b38077204d6cd4d66e7cbf70a97a07b5e095", @ANYRESHEX=r4]], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r8, 0x0, 0x0) 14:44:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000001200000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="5e8735b7e6ffff0a01000000ac"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) 14:44:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a010800000b0000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1674.279258][T15438] binder: 15437:15438 unknown command -1221228706 [ 1674.290946][T15438] binder: 15437:15438 ioctl c0306201 20000200 returned -22 14:44:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000001300000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:20 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) getsockopt$inet_dccp_buf(r3, 0x21, 0xe, &(0x7f0000000100)=""/104, &(0x7f0000000180)=0x68) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f00000001c0)={'TPROXY\x00'}, &(0x7f0000000200)=0x1e) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r2, 0x0, 0x0) 14:44:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a010800000e0000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000001400000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000110000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000120000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000052200000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:21 executing program 2: r0 = io_uring_setup(0xe06, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1, 0x216}) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x38, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x2ec1b18b4ba25178, 0x0) close(r4) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000340)={"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"}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x80, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x37) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x38, 0x0) ioctl$SG_EMULATED_HOST(r6, 0x2203, &(0x7f0000000180)) 14:44:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000130000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000004c00000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:21 executing program 0: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="05633cf9290475a13e1165e292a7751e2466f6f74a2c1fb06a193bfad70900000000000000bdcac80a3054e3c937e18992e5a241efed6ad096e5ccddeb6626af21288dc5c66bbd2c98fe779c0d0220f33d6eb2e920fc9043b6eb03d91a1d75be"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r3, @ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x4045}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000540)={0x7, 0x9, 0x200, 0x5, [], [], [], 0x80000, 0x7fff, 0x8000, 0x3, "25a26c38ded57936d98310490f4cacf7"}) bind$packet(r5, &(0x7f0000000240)={0x11, 0x0, r7}, 0x14) getsockname$packet(r5, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="540000001000010800"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000300016802c0041802800090092cd0000aaaaaaaaaa0000000000000000000000000000140000000000000000000000000000000092d14e34a21ad175a3fdbd8ee51ea2d08d452416665616364d266c936346c516001117c2429711b0b5bc7bdc01a4a78fa255cf07c9b515376c195a03df65b36d2635418a79eb5e96c14bbb01900448feafbc89562b21151b60a33047904b64c9e3f450584484aa061d065d115a5dae57a6dc41acc19669c2350c9a36a2164d74ba2596e2aa031acfafa12d8d2cddb3b4c8266a092acd4ebb642492071cb05f82f9f3b79b"], 0x54}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ec020000221e397681d260a52ee9d3f7db8b701a19e1d7f838578217deeccb749b81655a5f3f26f2451206f3d8b2df13cb048c531be8c05100b49345ed854d48bbdcaef5bd86fa05fff789b84c5cfeb92d15130416ab01f1e5aa3b1fe399649c9ec3b981b4df492398c5b70e7dad33464b42d5d21564249433dcb514684868b84eee622b1710e826cfe6aba033a99c8c5c1cf22fb13152afd12454c49088c4bd025828d94ea27d92f16ab4bd6a87a84d7533c1ec714525e0bb4b28f815828f55b41d5125a2c77b5cca68f2edc641e3d5f42c7c332a2778bdf968df23f75bb2062b2d87090175a147816fb81e0c6785be0a6e8c4363f8a7d3dd5e69bd8b231a55bdd74aac4e09f745c59e36a1377a952b76cf8e1b707667628e9e3fc09f1163efeb9c966bf4ff56f9e2588b695bca83709984b2b8ee58067148b6668cbbba958dde941a248df483450122cfc4641b95523505f89d32d7a7006dfcd15ead2784578613420c31a2e1d06cb856feeff5d79d9d4b975acbf7a1dd5b0e1a1e5da5", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r8, @ANYPTR], 0x5}, 0x1, 0x0, 0x0, 0x20000834}, 0x48820) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r9, 0x0, 0x0) 14:44:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000006000000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:21 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) faccessat(r2, &(0x7f0000000100)='./file0\x00', 0x20, 0x200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000140000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1675.095727][T15472] binder: 15471:15472 unknown command -113483003 [ 1675.124637][T15472] binder: 15471:15472 ioctl c0306201 20000200 returned -22 [ 1675.174825][T15472] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 14:44:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000006c00000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a010800a1170000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000190000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:21 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x2, 0x0) write$vhost_msg(r2, &(0x7f0000000280)={0x1, {&(0x7f0000000140)=""/162, 0xa2, &(0x7f0000000200)=""/89, 0x2, 0x4}}, 0x48) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff00000000f000000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a010800004c0000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000004003000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000600000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000340000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:21 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[r1], 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r3, 0xc0385720, &(0x7f0000000100)={0x1}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x80000, 0x0) r3 = socket(0x2000000011, 0x4000000000080002, 0x0) sendmmsg(r3, &(0x7f0000000180)=[{{&(0x7f0000000040)=@l2, 0x80, 0x0}}, {{&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, 0x0}}], 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f00000001c0)={0x0, 'netdevsim0\x00', {0x9}, 0x3}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01012abd7000ffdbdf25020000000c000f0003000000000000000500210000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x44001) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r4, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x28004000}, 0x800) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="00000080", @ANYRES16=r4, @ANYBLOB="000326bd700001dcdf2503000000060001000800000005000500000000000c000f00010000800000000014002000000000000000000000000000000000000500070002000000050012001900000006001d0008000000"], 0xfffffffffffffd41}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x7c, r4, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_vlan\x00'}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000805}, 0x4000001) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r4, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfffd}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1\x00'}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8000}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x24040000}, 0x11) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5, 0x10f802) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r7, 0x0, 0x0) 14:44:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a010800006c0000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000fffff0000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080017a10000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304401df500005558b55721296d5eb85bdddb49b02899197b5098f2c8ee5dd85f6e8a12a1e7d02d957f934217f58d3d5325ecd8fa7030ec589a408b0ece7862b83f00dc36003e8bd6391676ac80714337bdb9f153e89a460e8434a48abb2ca534f872e0b3ec05ea66079bb21c4912dd000000"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) set_tid_address(&(0x7f0000000000)) splice(r3, 0x0, r4, 0x0, 0x38, 0x0) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r6, 0x0, 0x0) 14:44:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000010000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000f00000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000020000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05630440", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRES64=0x0]], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r6, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x8801) 14:44:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000400300000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1676.325215][T15538] binder: 15537:15538 unknown command 0 [ 1676.344846][T15538] binder: 15537:15538 ioctl c0306201 20000200 returned -22 14:44:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000030000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r5, 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x42d4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000340)={0x78, 0x0, &(0x7f0000000280)=[@decrefs={0x40046307, 0x1}, @clear_death={0x400c630f, 0x1}, @increfs={0x40046304, 0x2}, @exit_looper, @decrefs={0x40046307, 0x1}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/47, 0x2f, 0x0, 0x1c}, @fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/171, 0xab, 0x0, 0x1f}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x1000}], 0x31, 0x0, &(0x7f0000000300)="1503386cd253f7e2853841d0aa16f6b7fc1911e46abb4b2854215aeef937aeac76b4c8b7f542f1dc0bcc7fc09e55398d1d"}) read$fb(r4, 0x0, 0x0) 14:44:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000034000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000040000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) syz_extract_tcp_res(&(0x7f0000000000), 0x3f, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) 14:44:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a010800fffff000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000050000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) sendmsg$AUDIT_USER(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x3ed, 0x800, 0x70bd29, 0x25dfdbfc, "f7a58c72badfa81b67cc3819b8be082ce8e6595b9fcf3457c47dc11a5110683d3740eb403ebbf4d066b93c502c2129a995", ["", "", "", "", "", ""]}, 0x44}, 0x1, 0x0, 0x0, 0x4000005}, 0x24000811) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) prctl$PR_GET_DUMPABLE(0x3) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) ustat(0x0, &(0x7f00000001c0)) splice(r5, 0x0, r6, 0x0, 0x38, 0x0) ioctl$CAPI_INSTALLED(r5, 0x80024322) 14:44:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000001000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:23 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x9c0000, 0x9, 0xffffffe1, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98091b, 0x7, [], @p_u8=&(0x7f0000000000)=0x80}}) read$fb(r4, 0x0, 0x0) 14:44:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000060000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000002000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1677.061426][T15562] binder: 15559:15562 unknown command 0 [ 1677.077962][T15562] binder: 15559:15562 ioctl c0306201 20000200 returned -22 14:44:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000080000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000003000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000090000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000004000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:23 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x38, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r3], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r4) r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r6, 0x0, 0x0) 14:44:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000005000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000000000000a0000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000006000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:23 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) 14:44:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000000000000b0000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000008000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000000000000e0000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:24 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r3, 0x0) flock(r3, 0x0) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r5, 0x0, 0x0) 14:44:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000009000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000100000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a0108000000000a000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000110000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:24 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="07630440e0b9f70cd84632baae27a6ce0df9b2a3d283a7918f9f9ebd078622c3dcc5f655e9d214133bde0e71eb6517a8d4b269c67dc50c8458bae83b4341abd3187e3a587e2133ed4ca489e36a894cbacbf78be06f50c3ae1b6a16690cbc2ba6beda0bfcbf2e730a267bfafea802a9be0d2ffb3d4fac65adbb81d1e3d40c50f70746d55469d248fe809fc47589346bf313eb1a615b20ed43ee8f9aa700"/168], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000000)=0x40, 0x4) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r5, 0x0, 0x0) 14:44:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a0108000000000b000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000120000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:24 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) 14:44:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a0108000000000e000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000130000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:24 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000140)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f0000001640), 0x0, 0xe) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x2, 0x1, 0x48, &(0x7f0000ffb000/0x3000)=nil, 0xb5}) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x14, 0x0, &(0x7f00000002c0)=ANY=[@ANYPTR], 0x0, 0x0, 0x0}) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="130000f164ffff0300000006003964320000300f5f580470dcba5ccbc4f90cf4cdaa936e22e08924a0f181ff4bead83740aac81d216a756077f61cb7f8a0f5cf5576083b47e9619df6272513084324e81a124bcfbcd3457aeb9f704bc3a2c93452e8d7b36b3af800bb368b50758ddee81b95cc731967f257f5a87a0af596d50eb0ed38f6ea3674cfdc61120b5257a794e4516453169386c2db6433bddcc47af671fbd4d331"], 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r2) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x38, 0x0) listen(r3, 0xce) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x8, 0x6}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x4001fc) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f00000000c0)={0x5, &(0x7f0000000300)=[{0x0, 0xff, 0x1, 0x8}, {0x5, 0x8, 0x44, 0xfffdfffd}, {0x3, 0x0, 0x7e, 0xff}, {0x7, 0x5, 0xc9, 0x5f3}, {0x0, 0x1, 0x1, 0x2}]}) read$fb(r6, 0x0, 0x0) 14:44:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000010000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000140000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1678.778441][T15621] binder: 15618:15621 ioctl 1260 20000140 returned -22 [ 1678.810912][T15621] binder: 15618:15621 unknown command 0 [ 1678.831613][T15621] binder: 15618:15621 ioctl c0306201 20000200 returned -22 14:44:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000011000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000005220000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1678.930364][T15624] binder: 15618:15624 ioctl 1260 20000140 returned -22 [ 1678.962897][T15621] binder: 15618:15621 unknown command 0 [ 1678.986384][T15621] binder: 15618:15621 ioctl c0306201 20000200 returned -22 14:44:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000000000004c0000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000012000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:25 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) 14:44:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000013000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000600000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1679.185406][T15635] binder: 15634:15635 unknown command 25349 [ 1679.207034][T15635] binder: 15634:15635 ioctl c0306201 20000200 returned -22 14:44:25 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x38, 0x0) ioctl$VIDIOC_G_AUDIO(r3, 0x80345621, &(0x7f00000000c0)) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x4) read$fb(r6, 0x0, 0x0) 14:44:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000000000006c0000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000014000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:25 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xbc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05009bfcc2f51daa2727ae65e1b075e5b0e904ddaa8aa47ba72c75e7535eebe84666b11c29808b93510e41cb6da25583a8f1a1a1b1f7f8f6df3c31dd8fd21491d1e14f2222af3da9770992969759fe0074d37b6c9c04683d2736ec236b55849f25a511d8d5b892cfaee00000000000000000", @ANYBLOB="6aa75f6307a406967e33427411f9e289a0caaa3d4c81e25fdc493a02ac52e8be019cb19dad546ad5207b9f1104c64f6e683621d4c8c97ba64868a63305af7d0083d7031880343ae85c0e"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x38, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x38, 0x0) write$UHID_SET_REPORT_REPLY(r7, &(0x7f0000000240)={0xe, {0x1, 0xff, 0x1f, 0xec, "f3b0c59b14fdce6df559ed278457cb6cdb4bd4621ade299fe0c031e6ee787757074754037af00617d3adad31ffb92c6b13bfe6977962edf4442bf26c3806efc03c50e273dc6a1d6723da61bd119bd7182d655c6637162c16e1eaed8158214452cdfe8312b2ad990e39483ea055baca2123901ce781220bfe0bfac7dd169a0472ae6bdb24e6870b22e5b30e71e9b2526a8e0ce94b09c2df17d41bfbe053cc4c0de83a878b28aa5118b6386b6f0f3c16d28a5a38a0f594dc06545f65e33d83e1a2278108af9089fa1728128965080b97deaaa939d288390aaf74cdbcf13b24bd86e6b228ade87034e9128c9d87"}}, 0xf8) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000000)={0x60001010}) 14:44:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000ffffff9e0000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1679.568744][T15647] binder: 15646:15647 unknown command -56950779 [ 1679.603115][T15647] binder: 15646:15647 ioctl c0306201 20000200 returned -22 14:44:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000019000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000fffffff00000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:25 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000240)=@security={'security\x00', 0xe, 0x4, 0x2f8, 0x0, 0xc0, 0x0, 0x0, 0xc0, 0x260, 0x260, 0x260, 0x260, 0x260, 0x4, &(0x7f0000000000), {[{{@ip={@rand_addr=0x7f, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xff, 'syz_tun\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x21, 0x0, 0x1}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x3, 0xf9}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@multicast2, @multicast1, 0xff000000, 0xffffff00, 'ip6erspan0\x00', 'dummy0\x00', {}, {0xff}, 0x89, 0x2, 0x9}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'bond_slave_0\x00', {0x9}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xffffff00, 0x0, 'sit0\x00', 'dummy0\x00', {}, {0xff}, 0x8, 0x1, 0x2}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}, {0x801, 0x904}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x8, {0x1}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x358) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) sendto$packet(r5, &(0x7f00000000c0)="c4df60c88e452324994d9f1b678dfcc98c14a62961639d4961dc4f4b66a057be88aff7d6129f17ab45ef02218554adfeaec325af64cc06eb89f90c2b73d79aa1472b8f6892006e727085be6c812e672d2e521170c8301c781b66b04cd15e8ddf636622028f30799606d3aaa0c94ec2f77906259ec107aad681ef9b9d1f3f9763c5bd77cde7849c", 0x87, 0x8000, &(0x7f00000005c0)={0x11, 0x19, r6, 0x1, 0x0, 0x6, @dev={[], 0x2d}}, 0x14) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r7, 0x0, 0x0) 14:44:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a0108000000004c000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1679.801791][T15656] x_tables: duplicate underflow at hook 2 [ 1679.834703][T15656] x_tables: duplicate underflow at hook 2 14:44:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000fffffff50000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000060000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001400)={0xb0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="066304400300000001634040000000000000000000000000000000000000000011000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f00000014c0)=ANY=[@ANYBLOB="852a090000000000000000000000004000000000010000008561646600000000010000000000000000000000000000003300000000000000852a6466000000005b6cc795dd6c0a404b3777efa0e61a20cc28ca5f9a54b57b18f2a2d6e353d696252d54beae770f2e00febc29cd92cbe6c4995d28b7a76f19a38632a835fcfe9132bfba47e6f28b0327e857c4a3b44d327199cf8365030a912b1948f4b01a98473595cba5d87003cea089b39c88f213d176e2f6a09211b9fa26838cb612212a3b7f5dcf435727251c33fee1cd872e2dbe8a00efbac2e2b58d33d4", @ANYRES32, @ANYBLOB='\x00'/12], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB="01634040030000000000000000000000000000000000000011000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000001440)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB="0000000000000000010000000000000014000000000000008561646600000000040000000000000002000000000000001b000000000000008561646600000000000000000000000000000000000000001200000000000000"], @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="06630440000000000e630c400300000000000000000000000463044003000000"], 0x1000, 0x0, &(0x7f0000000400)="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"}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x38, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r8, 0x8983, &(0x7f0000000100)={0x1, 'veth0_to_hsr\x00', {}, 0x7}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x20) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000000)={r6, 0x3}, 0x8) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r9, 0x0, 0x0) 14:44:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff00000000f0ffff0000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a0108000000006c000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1680.039381][T15666] binder: 15665:15666 unknown command 0 [ 1680.059687][T15666] binder: 15665:15666 ioctl c0306201 20000200 returned -22 14:44:26 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x38, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) vmsplice(r4, &(0x7f0000000140), 0x0, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000000)="f4ba43416be2565ddcaa1009f304db41d9909e04", 0x14, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f00000000c0)={r6}) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x48c1, &(0x7f000005ffe4)={0xa, 0x4e23, 0xd6, @empty}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r2, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) close(r2) 14:44:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05594740786f47231fe7681dd4d00ea212e33e4f09a009bb703f861da761886675c6397cea45b8eeccc689147d7a711743b3ff8ee453aa0cf124776241e1debd4001d703bc6ad11b33176c95b7e90d1481e6c8385cf69e41bd59259dcf9da423497ff06fa46c2259c54839f3d94b97535173a5aa2871e5aad135d78de7825f164c7762b5503fc57c875da322d9b870e5a704b8f4014750d96d9154a91f35c2fef50c094835795ace70033b799f53b91d511d85ffbb6c8153206d102a9a18ac591e332d"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000480)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r6}}, 0x48) write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r6, 0x4, "bc7485", "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"}}, 0x110) 14:44:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000007fffffff0000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a010800ffffff9e000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1680.302812][T15674] binder: 15673:15674 unknown command 1078417669 [ 1680.309777][T15674] binder: 15673:15674 ioctl c0306201 20000200 returned -22 14:44:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7ff, @local}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x38) getrandom(&(0x7f0000000100)=""/43, 0x2b, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x38, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f00000000c0)={0x1, 0x8, 0x8d1eaeb, 0x8}) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x7, 0x101000) pipe(&(0x7f0000000080)={0xffffffffffffffff}) lsetxattr$security_ima(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='security.ima\x00', &(0x7f0000000340)=@md5={0x1, "22f993b0f92f2b37135f50f2786095bc"}, 0x11, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x38, 0x0) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x4e23, 0x3b23, @local, 0x1}, 0x1c) close(r0) 14:44:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000009effffff0000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000000)) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x4001fe) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r5, 0x0, 0x0) 14:44:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a010800000017a1000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x404) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0xb, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="f49926fa0befffff787e00"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) 14:44:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000f0ffffff0000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1680.684273][T15692] binder: 15691:15692 unknown command -98133516 14:44:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x38) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000140)="459e81cac63b2703938f4a21123973836821c64be75f27aab14be7c9b6e9dd1a9d3f515ca2b1a47206f9f9947726085fd4345b73eca4890eef9870bfc2a3c940949000000000000459c484cdbd8078d805cec330e2d9315c1427a80b4ab15eb711f624fb9b6ee0226c7a605378d0e78dd9202ee27b84f420f786b03c5c65a99dcdc501dbbdb62cf216d700bb369a3ff3c0b554d2d897ce31cfa90afa27055e92fc73c0acbbd6b8734dfc109d09dc133ffdb1fb793563ef3cd09afdcbe320b41562cf1f2f4a5ed9e67eb71a8b52441cee1bcb3c22686cd757855f6becdbee0babf4246e0d4edf98ee", 0xe8, 0x4040880, 0x0, 0xfffffcdc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r5, &(0x7f0000000240)={0x11, 0x0, r7}, 0x14) getsockname$packet(r5, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x9, {0x0, @dev}}]}]}, @IFLA_IFALIASn={0x4}]}, 0x54}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@empty, r8}, 0x14) close(r0) [ 1680.727907][T15692] binder: 15691:15692 ioctl c0306201 200000c0 returned -22 14:44:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a010800fffffff0000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1680.820123][T15698] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. 14:44:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000f5ffffff0000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:27 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x6, 'veth0_to_hsr\x00', {0x3}, 0x4}) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05851520"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) socketpair(0x25, 0x5, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r5, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e20, 0x8cc1, @ipv4={[], [], @rand_addr=0xdf16}, 0x1}, {0xa, 0x4e26, 0x3c76, @mcast1, 0x4}, 0x7d, [0xffff, 0xe1, 0x91, 0x1ff, 0x1, 0x8, 0x80, 0xa7ef]}, 0x5c) [ 1680.949306][T15704] binder: 15701:15704 unknown command 538281221 [ 1680.957730][T15698] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. 14:44:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000f0ffff000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1680.991421][T15704] binder: 15701:15704 ioctl c0306201 20000200 returned -22 14:44:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000000000c00010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:27 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0d230100"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) ioctl$FBIOGET_VSCREENINFO(r2, 0x4600, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x38, 0x0) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000000)=0x4, &(0x7f00000000c0)=0x1) r6 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r7, 0x0, 0x0) 14:44:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a0108007fffffff000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000000001400010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:27 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) close(r0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x38, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x38, 0x0) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f00000001c0)={0x2280000000000000, 0x0, 0x200, 0xa, 0x1c}) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f00000000c0)=""/232) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000040)={0x6}) setsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000000)=0x400, 0x4) [ 1681.206499][T15713] binder: 15712:15713 unknown command 74509 [ 1681.228580][T15713] binder: 15712:15713 ioctl c0306201 20000200 returned -22 14:44:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a0108009effffff000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1681.327362][T15719] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 14:44:27 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05634940"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) clock_getres(0x0, &(0x7f0000000000)) 14:44:27 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = dup(r0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) close(r0) 14:44:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000000002000010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a010800f0ffffff000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1681.506862][T15725] binder: 15724:15725 unknown command 1078551301 [ 1681.543555][T15725] binder: 15724:15725 ioctl c0306201 20000200 returned -22 [ 1681.564215][T15729] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 14:44:27 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f00000000c0)="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") 14:44:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000340000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:27 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) close(r0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0xfffffffe) 14:44:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000200000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a010800fffffffffffff0000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:28 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0xa0801) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xbe19) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\t\x00\x00\x00'], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f0000000100)={{0x1, @name="590d761b0c414e1b48c7b7066e048e0a3bd771d92f6c720ed04740c4b3e4e6ac"}, "2a3a72f9d62c5029d17a5a4775ae2e01013d015be7b805ac4c4f624b7608341c", 0x3}) r5 = dup(r3) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x38, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0xa, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xc}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000020}, 0x20000000) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x1) read$fb(r7, 0x0, 0x0) 14:44:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000300000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:28 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x1, &(0x7f000005ffe4)={0xa, 0x4e24, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) close(r0) 14:44:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000000010000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1682.019895][T15749] binder: 15744:15749 unknown command 9 [ 1682.054651][T15749] binder: 15744:15749 ioctl c0306201 20000200 returned -22 14:44:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000400000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:28 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000040)={0x4, 0x2, 0xf4, 0x6, 0x7}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x38, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) close(r0) 14:44:28 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="056304407696f452ca3a6b0b78cdf6df476506f80436e12579a4e45b1078e579a0a2e2e988cbb308b7e6569530c51ae1de6d82371879ca73095ba496eb0000fae9ce378c82dc4200d43cee29"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x1000, 0x51, 0x3, 0x401}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r6, 0x0, 0x0) ioctl$KVM_GET_MSRS(r6, 0xc008ae88, &(0x7f0000000140)={0x2, 0x0, [{}, {}]}) 14:44:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000000020000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000500000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:28 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) 14:44:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000600000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000000030000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:28 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = accept(r0, 0x0, &(0x7f0000000040)) sendto$inet6(r1, &(0x7f00000000c0)="be649997933d040b01124ffdfeaaf9b7107476e5331937ce77f1dc7d6541e7e4e452aa4f8f6d0135c9f0dac707e640c2149e24688feb1624c86940729feaba1b1e0ec361f70d99ea6177a7c8ea2badaddd76e6a3e1875991a53ac3fd6874b2b199f5515000e40fc2890207529ddd6082ea8f87c3ee0f142404b65f678366948fabeb749f251fe302f3c67d36f5a9716a746a8ffbb3d633c89470ff2590484022b76b362b1b5e3c5dede7367834d3b09953e4f432a83a40c93970f625696b3ae17260bbc0003a4bdb0fe69eea80a7fcd328c10066ea34db15c8745d3fdefe4ea64248e554c9c35a109eb627ec830d288d77403214630df8ce", 0xf8, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$caif_stream(0x25, 0x1, 0x3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x0, 0xffffffffffffffe1, 0x8}}, 0x30) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) close(r0) 14:44:28 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0040fa27c23693f72eb18927cbfe9fccfcc9177dfc73597cb6f111b814d42ca91d6fa91bd114d893bd1bde6ca1aa96426705fabbe092525edf13b55851ce0737609c278be8736aaf06a49439610aab0e4f1586f919c2f4810b359f5d6e89ef491ba4149ce5ae215db24a93d74f38012546dfd7e9d36b2a1875cab04ff72000367fc246da995ea171b0012ad6cc463433da1825268d4a42026aa14c2a7bb1a41f1135e35f7b66fc525c3fd6acf653087ddcf20dd9ea8587ef7fa3837efdfb2dc33ff7c58d09e125d57485c462da3d90659ed97ab113e06b15d3f9a37df7a6dd6381fa5d72d4a8"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) 14:44:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000800000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000000040000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:28 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/307], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) close(r0) [ 1682.627009][T15775] binder: 15774:15775 unknown command 670711808 [ 1682.645559][T15775] binder: 15774:15775 ioctl c0306201 20000200 returned -22 14:44:28 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e2fac331e21dc7d24cd24ecb134a86ea7f9aae4d62f893a407fef03523b1e1aeac213092e80c419e3371c63f127cc5b7a7ac9dc1d2076768f85ae813e6a346a775082c9e0556e65437f5ad1c390792c08f94e2913a08eeb0e98d692a1889b7969e071d4b15b80f4d10"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) 14:44:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000000050000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000900000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1682.809626][T15784] binder: 15782:15784 unknown command 834927330 [ 1682.843033][T15784] binder: 15782:15784 ioctl c0306201 20000200 returned -22 14:44:29 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000000)="4581123973836821c64be75f27aab14be4c9b6e9b81a9d3f515ca2b1a47206841cd39ed256999530f8947700"/57, 0x39, 0x200008d5, 0x0, 0x0) close(r0) 14:44:29 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) 14:44:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000000060000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000a00000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:29 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="400800000903ce13e6252791524754722e04003da87d70f248f336888331c22def8c81b7b92c3f66574fcdc686d3bbe7666f8afd1465763ac93ab8d57a3d9eb75189c247ccbe8564e668ce6df34f"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) getpeername(r5, &(0x7f00000000c0)=@caif=@dgm, &(0x7f0000000140)=0x80) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) close(r7) splice(r6, 0x0, r7, 0x0, 0x38, 0x0) ioctl$BLKPG(r6, 0x1269, &(0x7f0000000000)={0x4, 0xbf6a, 0x1000, &(0x7f0000000240)="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"}) read$fb(r4, 0x0, 0x0) 14:44:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000000080000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000b00000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:29 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000000)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) close(r0) [ 1683.223155][T15800] binder: 15799:15800 unknown command 2112 [ 1683.279310][T15800] binder: 15799:15800 ioctl c0306201 20000200 returned -22 14:44:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000000090000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000e00000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:29 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 14:44:29 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000280)=@srh={0x11, 0xc, 0x4, 0x6, 0x1f, 0x0, 0x401, [@mcast2, @loopback, @rand_addr="1d0650185a7809e74b36f426fc3a9459", @mcast1, @rand_addr="891ac29efeacc02f1860b79a99f31941", @local]}, 0x68) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x38) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x20000, 0x0) write$P9_RLOCK(r3, &(0x7f0000000300)={0x8, 0x35, 0x1}, 0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) recvfrom$inet(r3, &(0x7f0000000340)=""/37, 0x25, 0x42, &(0x7f0000000380)={0x2, 0x4e20, @empty}, 0x10) splice(r2, 0x0, r4, 0x0, 0x38, 0x0) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000000)={0x189, 0x14, &(0x7f00000003c0)="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"}) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) close(r0) 14:44:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0563044000"/18], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000580)={0x1, 0x5, 0x4, 0x1000, 0x1, {0x77359400}, {0x3, 0x2, 0x45, 0x1, 0x6, 0x9, "749135e6"}, 0x80, 0x4, @userptr=0x8, 0x8, 0x0, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x38, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000000600)={r7, 0x8001, 0xd9, "1d596328e298f456b487199660b9d9fdba2410a1f9317f49bfba71e5d29410433759b6b2a1723e92fdf30e2db1f1949c3051d2d3c265c098460a54132f3160a63818439252d848d362332c00b2b77081c4c24d660a253b2477d9e0fc974bdf7a62cc35703365cc10b68bf5ca87f2190324bc846fce8f4837bbfe76e84275b253ce6aaf8e2ef73b8a6dcbbb5b8ecb9c00b039c06d30bcbe4d12406118a09e482f41c54a3ee8fb093897c41deb538b5b560531e4935af25523669d7fb15d5478136bc750765c67abad0e0b6dd918278bde"}) r8 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r8, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0xfff, 0xb, 0x4, 0x40a0080, 0x1, {0x77359400}, {0x3, 0x2, 0x81, 0x20, 0x5, 0x80, "3cb37346"}, 0xe3b6, 0x1, @planes=&(0x7f0000000000)={0x80000001, 0x800, @mem_offset=0x5, 0xfdc}, 0xffffff10, 0x0, r8}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000500)={0xb8, 0x0, &(0x7f00000003c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x1, 0x2, 0x16}, @fda={0x66646185, 0x6, 0x1, 0x1c}, @fda={0x66646185, 0x2, 0x2, 0x1b}}, &(0x7f00000001c0)={0x0, 0x20, 0x40}}}, @exit_looper, @request_death={0x400c630e, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/110, 0x6e, 0x2, 0x22}, @fda={0x66646185, 0x6, 0x0, 0x2a}, @fda={0x66646185, 0x8, 0x1, 0x5}}, &(0x7f00000002c0)={0x0, 0x28, 0x48}}, 0x1000}, @increfs, @free_buffer], 0x6c, 0x0, &(0x7f0000000480)="ae05b190d24b406b5fef15b572c448d26a2496c1423239c4ed4a4f509ee9d23e028cc4939c8f1d6f842b9002d4f98a4608b4e031078179065439d285d1bdc632d071ede39337d9997f5ec9b9eca61c903a746fee8daaccb7537df97b14b2538c15ff13d1b6172c04818fe1b0"}) 14:44:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000001000000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a010800000000000000000a0000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:29 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x38, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000)=[{{0x1, 0x1, 0x1}, {0x3, 0x1}}, {{0x3, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x2}, {0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x20) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ad34cf3023d6e6e5b6774500b6c5cfe392a321f6ba572a2e43959a7a5c702e4e7c5b378f23754dc8a0effeda5faad2351562d456e1be22b39c12f90f3eef4e77623d17122105dd5605c3d6b71695ad6fdd6130dadbee9f300fcb226ad9af9a2514"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r6, 0x0, 0x0) 14:44:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000001100000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a010800000000000000000b0000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:29 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x38, 0x0) r2 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000180)={{0xa, 0x2, 0x4, 0x5, 'syz0\x00', 0x41941f7d}, 0x3, 0x2, 0x2, r2, 0x7, 0x7ff, 'syz1\x00', &(0x7f0000000100)=['eth0wlan0keyring\x00', 'vmnet1system\x00', 'vmnet0/\x00', 'ppp1-wlan1]lolo\x00', '-.\x9blo/\x00', '\x00', 'eth0selinuxeth1proc\x00'], 0x52, [], [0x400, 0x24e, 0x5, 0x9]}) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r4 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000000)=[r4], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) io_submit(r5, 0x1, &(0x7f0000001b80)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f00000003c0), &(0x7f0000000400)=0x4) io_cancel(0x0, 0x0, &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) [ 1683.746837][T15918] binder: 15899:15918 unknown command 818885805 [ 1683.785326][T15918] binder: 15899:15918 ioctl c0306201 20000200 returned -22 14:44:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="eb6241ae74f3ee2cc7a8239f4aa268d2329799ca30c0a6c5bbbdf16b2d3f33fa4d50649b1fac4975ea1c71e169e35063471b79ae61fa8c546332190d073f45de9140b26ee8d70e73fc85a69cb833fc98ff33b4f9ed4a6b96888a506accbbf891ce0bfd"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) 14:44:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000001200000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a010800000000000000000e0000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:30 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f00000000c0)={0xb, 0x103, 0x1, {0xaa, 0x2, 0x9, 0x9}}) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r5, 0x0, 0x0) [ 1683.959338][T15937] binder: 15936:15937 unknown command -1371446549 [ 1683.987239][T15937] binder: 15936:15937 ioctl c0306201 20000200 returned -22 14:44:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000001300000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000000100000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:30 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x38, 0x0) r2 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000180)={{0xa, 0x2, 0x4, 0x5, 'syz0\x00', 0x41941f7d}, 0x3, 0x2, 0x2, r2, 0x7, 0x7ff, 'syz1\x00', &(0x7f0000000100)=['eth0wlan0keyring\x00', 'vmnet1system\x00', 'vmnet0/\x00', 'ppp1-wlan1]lolo\x00', '-.\x9blo/\x00', '\x00', 'eth0selinuxeth1proc\x00'], 0x52, [], [0x400, 0x24e, 0x5, 0x9]}) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r4 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000000)=[r4], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) io_submit(r5, 0x1, &(0x7f0000001b80)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f00000003c0), &(0x7f0000000400)=0x4) io_cancel(0x0, 0x0, &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) 14:44:30 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r2, 0x0) sendfile(r1, r2, &(0x7f0000000080)=0xc4, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = dup(r3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) ioctl$KVM_GET_REG_LIST(r5, 0xc008aeb0, &(0x7f0000000140)={0x3, [0x9, 0x0, 0xfffffffffffffff7]}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r6, 0x0, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x220300) ioctl$EVIOCGRAB(r7, 0x40044590, &(0x7f00000000c0)=0x6) 14:44:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x12) 14:44:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000001400000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000000110000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:30 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'nr0\x00', 0x400}) 14:44:30 executing program 2: r0 = io_uring_setup(0xa6, &(0x7f0000000080)) inotify_init() pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x38, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x202c00, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r3, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r4, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r5, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240), 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x5158c0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r6, 0x806c4120, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) [ 1684.415826][T16071] binder: 16065:16071 unknown command 0 [ 1684.422046][T16071] binder: 16065:16071 ioctl c0306201 20000200 returned -22 14:44:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000004c00000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000000120000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000100)={&(0x7f0000000080)=[0x8000, 0x6, 0x537], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x1, 0xcccccccc}) dup2(r1, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) 14:44:30 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[r3], 0x1) r4 = socket$nl_crypto(0x10, 0x3, 0x15) r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r5, 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r6, 0x0) r7 = syz_open_pts(0xffffffffffffffff, 0x402) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000180)=[0xffffffffffffffff, r3, r4, r5, r4, r6, r6, r7]}, 0x8) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) 14:44:30 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x38, 0x0) r2 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000180)={{0xa, 0x2, 0x4, 0x5, 'syz0\x00', 0x41941f7d}, 0x3, 0x2, 0x2, r2, 0x7, 0x7ff, 'syz1\x00', &(0x7f0000000100)=['eth0wlan0keyring\x00', 'vmnet1system\x00', 'vmnet0/\x00', 'ppp1-wlan1]lolo\x00', '-.\x9blo/\x00', '\x00', 'eth0selinuxeth1proc\x00'], 0x52, [], [0x400, 0x24e, 0x5, 0x9]}) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r4 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000000)=[r4], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) io_submit(r5, 0x1, &(0x7f0000001b80)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f00000003c0), &(0x7f0000000400)=0x4) io_cancel(0x0, 0x0, &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) 14:44:30 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f00737636ad2f7edd00098f8801cccb2bbe406e6337e00a08dffaa32dcf48d19bb351575fb83f034876996d4d0e95a4a83d315788ecb0d0c25998fbcf22097c6115d9edb317573e46020de6543e09b8c6dc0bc381f3dd0a052fa6a8109b18f5a0971d4083c45658ec710ddf9eaf122e10c2463bb1a88ec46f9eac"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$BLKROGET(r3, 0x125e, &(0x7f00000000c0)) vmsplice(0xffffffffffffffff, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) accept$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs, &(0x7f0000000240)=0x6e) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) r6 = semget(0x0, 0x2, 0x40) semctl$GETVAL(r6, 0x2, 0xc, &(0x7f00000001c0)=""/7) read$fb(r4, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sync_file_range(r1, 0x2, 0x2, 0x1) vmsplice(r7, &(0x7f0000000180)=[{&(0x7f00000002c0)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e60900b4ebe9c71ca91341e58485d9296be333e3026d67de0af63c558c568217b80460615bd09c79692b58668ca13527e25a0000000000000001c247bc031126491e7380765f20ab8e981e9561d71ee8ba9f12a7a1ad2f77df98f66272a636b393629dd49e62d0e179ec028dcdc7e9d62b1854db3354af16f19f3e7822b9ad627e6a7d3c78ca821f2a3a0a38aa8bb2c1d4bf40d3548063894571eff389eae99de2799c5062bdaefeeb4659f8", 0xd0}], 0x1, 0x0) ioctl$BLKROSET(r7, 0x125d, &(0x7f0000000000)=0x3) 14:44:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000006000000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000000130000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000)='NLBL_CIPSOv4\x00') syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) 14:44:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000006c00000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1684.733454][T16279] binder: 16226:16279 unknown command 1987248255 [ 1684.769229][T16279] binder: 16226:16279 ioctl c0306201 20000200 returned -22 14:44:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000000140000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:30 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) read$fb(0xffffffffffffffff, 0x0, 0x0) 14:44:31 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:31 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x6, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_EPOCH_SET(r3, 0x4008700e, 0x6) close(r4) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x38, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x38, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="54bb06000014100025bd7000ffdbdf250900020073797a3100000000050054000100000008004400", @ANYRES32, @ANYRESOCT, @ANYRES32=r2, @ANYBLOB="00000000ff0308002700000002000000", @ANYRES32=r7, @ANYBLOB="1739bbfc0f07b485fdd6e0cc21d3e5a85e7dda0026202331a0bea36d259f8648e666b5abccdf5719813971b92b71f025643ce3adbfbcef1539482e563af3b4c270190e16bfc8083b5560b5bfbdb7400ea340847e3fb4ecffc054b363ea96b25512ed198798cfd2fa026ea452f84fd84f047486e9fc44e25d131bdc74734933d3557cea549608501fd9a779eee8084f0ee70377c67193cecb945735e6f5f98b8e70452c28bdfee3c8bfcd743a6f09a5f01e314c5a41bde07e98de62c98ccc7206d7a21100f2f942edfa319924f33a"], 0x7}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044814) splice(r2, 0x0, r4, 0x0, 0x38, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000100)) 14:44:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff00000000f000000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000000190000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a010800000000000000004c0000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="52630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) 14:44:31 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000003000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:31 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r2, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r5, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000100)={0xfff, 0x4, 0x4, 0x0, 0x0, [{{r3}, 0x8}, {{r1}, 0x80000000}, {{r4}, 0xfd9}, {{r5}, 0x6}]}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000000600000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1685.267037][T16418] binder: 16416:16418 unknown command 1074029394 [ 1685.291226][T16418] binder: 16416:16418 ioctl c0306201 20000200 returned -22 14:44:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000005000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:31 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x9, {0x0, @dev}}]}]}, @IFLA_IFALIASn={0x4}]}, 0x54}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r8, &(0x7f0000000240)={0x11, 0x0, r10}, 0x14) getsockname$packet(r8, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x9, {0x0, @dev}}]}]}, @IFLA_IFALIASn={0x4}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4202a61}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, 0x0, 0xb00, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @multicast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @local}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4}}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8081}, 0x81) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:31 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a010800000000000000006c0000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000002205000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000000)="f5af6f", 0x3, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r3, r5) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x38, 0x0) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f00000002c0)={0xa, &(0x7f0000000240)=[{0x7fff, 0x40, 0x4, 0x1}, {0x0, 0x81, 0x2}, {0x60, 0x6, 0x80, 0x3}, {0x81, 0xfd, 0x8, 0x6}, {0x0, 0x6, 0x1, 0x200}, {0x6, 0x81, 0xff, 0x4}, {0xde08, 0x54, 0x1, 0x10001}, {0x5, 0x3, 0x5f, 0x1}, {0x1, 0x2, 0x2e, 0x3f}, {0x40, 0x1f, 0x20}]}, 0x10) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r8, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r8, 0x0, 0x41, &(0x7f00000000c0)={'security\x00', 0x66, "d13d6b1a585df9e989ca45e62869dea8f1503d48ac64dd1aa48894648be450885d9d1a30c89e4f884d3ab6e3905dfefc90e8190b2ea7fe921e83024538b2396baacbbbebe8d679d6e2f0c26ac6627ba0cdcad24498ab863e4c9c076fd1202e0585e179743dde"}, &(0x7f0000000000)=0x8a) 14:44:31 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) [ 1685.538411][T16535] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. 14:44:31 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x5) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) setreuid(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f00000001c0)=0xe8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setreuid(0x0, r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setreuid(0x0, r6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000700)='system.posix_acl_default\x00', &(0x7f0000000b40)={{}, {}, [], {0x4, 0x2}, [{0x8, 0x0, r7}], {0x10, 0x1}}, 0x2c, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x7}, [{}, {0x2, 0x0, r2}, {0x2, 0x0, r4}, {0x2, 0x2}, {0x2, 0x7, r6}, {0x2, 0x4, 0xee01}], {0x4, 0x2}, [{0x8, 0x8, r7}], {0x10, 0x1}, {0x20, 0x5}}, 0x5c, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0562044041f56399b73d3aa54192fbaf819b1cef0fff537b10810efd800e2d1180d82b18e6873e1d7194e90be818e4363eeedb0ca21db7870f57c3455a2dfc7622fb792f8729aecbb472188b393794be449cd7b96c87fbdab1429c4bff811fc6b1dea99616aadc7562f282139bda6a46281836e2a462330bd64bd6eaeec05fefad6d4a5e7eb29bf77791ca6f59cd712eaed189deb74b6f0dbdfdeaf15b675ffe58f3b0b564f9b7b848d04db641ad96192d7cae1ec63338dad3fb003f61a0d9d9d3349c6e90a8d2d373474509ec7f43b306df0ad2b3058a27e13cf1bc9baec7e21f0f6ebce51e3ee4d538f86b0866b9598bdd10"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r8, 0x0, 0x0) 14:44:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000ffffff9e0000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1685.643589][T16535] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1685.668623][T16548] binder: 16545:16548 unknown command 1074029061 [ 1685.689977][T16548] binder: 16545:16548 ioctl c0306201 20000200 returned -22 14:44:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000006000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:31 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) [ 1685.731034][T16548] binder: 16545:16548 unknown command 1074029061 [ 1685.752069][T16548] binder: 16545:16548 ioctl c0306201 20000200 returned -22 14:44:31 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000140)=0x40) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000b54a92fb4c3eac5084c4402170d6604b8898f362629e53b5a7349806fc2098eff320200a6b73064a0c08d233470357b86d9633e1b7"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = dup(r3) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) fanotify_init(0x20, 0x40000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) read$fb(r5, 0x0, 0x0) 14:44:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000017a10000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1685.879839][T16663] binder: 16661:16663 unknown command 0 [ 1685.897375][T16547] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1685.925444][T16663] binder: 16661:16663 ioctl c0306201 20000200 returned -22 14:44:32 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) socket$inet6(0xa, 0x1, 0xfffffffc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r3, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r4, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000040)={0x7a, &(0x7f0000000180)}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) getsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="96e8143c421dbda596ad3c26200b21ff"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) 14:44:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000009000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:32 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) r4 = request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='\'procself\x00', 0x0) keyctl$get_keyring_id(0x0, r4, 0x3e4) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r5, 0x0, 0x0) 14:44:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000fffffff00000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a010800000000007fffffff0000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1686.167304][T16674] binder: 16672:16674 unknown command 1008003222 [ 1686.180949][T16676] binder: 16673:16676 unknown command 0 [ 1686.190095][T16674] binder: 16672:16674 ioctl c0306201 20000200 returned -22 [ 1686.206955][T16676] binder: 16673:16676 ioctl c0306201 20000200 returned -22 14:44:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff00000000000a000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:32 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r5 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0xffffff0f, 0xf0, 0xf000, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_VERSION={0x5, 0x6, 0x81}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0xce}]}}}]}, 0x50}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) r7 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r7, 0x0) r8 = dup2(r1, r7) io_uring_register$IORING_REGISTER_FILES_UPDATE(r8, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)}, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:32 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="e2620440"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x38, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r2, 0x3, 0x1, 0xea6d, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r6, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) ioctl$RTC_WKALM_SET(r7, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x16, 0x19, 0xe, 0x1b, 0x9, 0x6, 0x1, 0x50, 0x1}}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) ioctl$TIOCSWINSZ(r8, 0x5414, &(0x7f0000000140)={0x4, 0xd6, 0x4, 0x9b8}) 14:44:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000f0ffffffffffff0000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff00000000000b000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) 14:44:32 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) [ 1686.493505][T16802] binder: 16799:16802 unknown command 1074029282 [ 1686.522664][T16802] binder: 16799:16802 ioctl c0306201 20000200 returned -22 14:44:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000020000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1686.569394][T16794] device batadv0 entered promiscuous mode 14:44:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff00000000000e000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:32 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) [ 1686.633007][T16794] lo: Cannot use loopback or non-ethernet device as HSR slave. [ 1686.726788][T16794] device batadv0 left promiscuous mode 14:44:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3935e84f4d853e87bcfc99ccf8d00853414ee3a288f400ca62d1549b61a6055c05383ffaf0fc4387507201a87f47ce99f8a6d85f0ad91a5caed23ed69103c7bca6617dc9f53f80b8ed670b2308fa0c5459c15c57086882fa1b0702483810f6f25bcb18befdf55d4caada1506d3594b8542c65d9755aa897b42ae64efd4aad3c6c48c2dabf0f3cc29cb74465d3c8ee2ce7259dff9fadc916f1e9ae25203efad338347eaac36e5ee8593419ba00fab1884c3d270b8abbc36470000000000000000"], 0x0, 0x0, 0x0}) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x38, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000180)={0x0, @initdev, @empty}, &(0x7f00000001c0)=0xc) dup2(r2, r3) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x20) read$fb(r6, 0x0, 0x0) 14:44:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000011000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1686.877069][T16921] binder: 16919:16921 unknown command 1340618041 [ 1686.904089][T16921] binder: 16919:16921 ioctl c0306201 20000200 returned -22 14:44:33 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000), 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2, 0xffffffff, 0xe5ab, 0x7}, 0x1}, 0x20, 0x1, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000030000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:33 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000012000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="25e98df2cb95933240b4d3b811b62f115a67f82bb339eb77fd307677162af39b28e4bc9c7b92dc85b38f01a8d45f8bfd2fa19f1a183ddef2c9ea0b0eb7a08d125a1f55d2b5da1d0845b0018c22fbcc1aff2cc83a3cf2444cac1cc30f0507611c986bc3f867f84a70b6dc7b3a8606db653260f384d90d13c09bb53dfb1075ac0a62a41c89a26031b4ad81bf9e1f8b3e00d7b40b6c1f654d"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000180)) dup2(r2, r0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x4f) 14:44:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) ioprio_get$pid(0x0, r4) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r5, 0x0, 0x0) 14:44:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000040000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000013000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1687.271698][T17037] binder: 17030:17037 unknown command -225580763 [ 1687.304994][T17037] binder: 17030:17037 ioctl c0306201 20000200 returned -22 14:44:33 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x1c8, r3, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_IE={0x19d, 0x2a, "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"}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4045}, 0x40) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r3, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x48090) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r4, 0x0) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x36) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r7, 0x0, 0x0) 14:44:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000014000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000050000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000001740)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = dup2(r2, r0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/252, 0xfc}, {&(0x7f00000004c0)=""/163, 0xa3}, {&(0x7f0000000240)=""/48, 0x30}, {&(0x7f0000000580)=""/189, 0xbd}, {&(0x7f00000008c0)=""/71, 0x47}, {&(0x7f00000006c0)=""/132, 0x84}], 0x6, &(0x7f0000000800)=""/180, 0xb4}, 0x40000060) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) read$fb(r4, 0x0, 0x0) write$snddsp(r3, &(0x7f00000000c0)="63cd63030ddfa7e6c468d9b6dfeda99cba5e8a56dc3ec854646705dd043999167c6584f8473d32da3c411f35260eaafc39546b24313ecfe8bce262e342e9b718e9205e938ddaabc4ee6bab60b971e93dcf5f88cbf113a00cca4d9add3681bd0fca77e8383802ea6a3705e82e1a9fc611e5b7a052c150baeb77fedbeefd7ee57d891d6dcb39ae560b804d6612c8f9cb674b67611cb698b0c5cf27da4325ae31058b4be315c868a940a4ff37609d072d02800958d285c1b6c6b99bb9dc7e0a94074ec5219a27e3f4ac996cd00c2bae0d53ee98e355f7", 0xd5) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x38, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={r5, r6, 0xd, 0x4, r8}, 0x14) 14:44:33 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000522000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000060000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1687.739528][T17159] binder: 17158:17159 unknown command 3 [ 1687.757795][T17159] binder: 17158:17159 ioctl c0306201 20000200 returned -22 14:44:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff00000000004c000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:34 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000080000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:34 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, r0}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x9, {0x0, @dev}}]}]}, @IFLA_IFALIASn={0x4}]}, 0x54}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x9, {0x0, @dev}}]}]}, @IFLA_IFALIASn={0x4}]}, 0x54}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004a40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x20, @empty, 0x51c4}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="1696a864442b3cea057d251768d864b9e5ce825ea1d54d269246535be57d", 0x1e}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000000100)="eb24887024242e7cc4b4604817c8b4e49d18e634323688f0b6904250e5db242000f46658782b6b", 0x27}, {&(0x7f0000001340)="c11b8a069add808f13440aed7464b3ef0ef6226db26ca72fe7e4bd94a3a443b8489eebd1b41455cf7b861d4da601a5b93dc7a118307bbb9e9cdcaa1f88813277e9fa27ddab332c6b45dc5d0b7ce51eb9dfdd4a665cc5198de25376deda173f430445bea800c72b75bb40a98f50c3f9e235ba3e445c93e881a20064b836508cef474a8fa2b322394e698cc384208bd634edf49344ab2178d660611b8b99495a607f1e4438dfa7fe4565a8a292541579767ab502c8b25093309c567413e4cab52bdd92947db1cf777ae2b5c3732c5ba54657caee0b949c6cb794e507119c388fdc8f01b713c71fc91221d5f620642df29396a52895b77f17ac564766", 0xfb}, {&(0x7f0000001440)="e5e9835d178e62cd93e4f72db5d1da2081b90dfb4e05bb998d507cca0448f7358b88c53bea25c21bb0700f77692c422c7031d1519fa8fafd5431c091239af3373ef29b21012dc291e2adf93687f55e17910bc37acfd2e51c4bbe08291a1a72eb3ce771706c99930b43d5c4a7ae7c55e030eb2c1d174f9da927374df5967a9f2c221b6bbec84cd399ed02455535365ab91897c7a77e902e37d70dc7ded3c11618884ef450558044c7b721cea7ffce0edc2390ecbb6ad6aec39bf133c2f07933ac56042e126e8543920817e16895e8bec29c95d1bae2db36fedb021bca9614561b13da0c671d939f356e0f1e8ea80136b8608a21c2dbcfab5edbe7f3bd", 0xfc}, {&(0x7f0000000140)="23f81425a493f6eccfa51e0cd9964a463a4eb47c3aadd67cdf7f9eb4cd7c9d3c017e2e7298c628e98f02282f06b172d40693347d24552e4dad4039e0349b98a906e1d179e91a548c97163a65f2c8ac8baac7814380fc264ec38549057261f249da1352264d806ab066", 0x69}], 0x6}}, {{&(0x7f00000001c0)={0xa, 0x4e22, 0x0, @local, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000001540)="18efcb64f279a2be6b433d7b44e560e30dd7f8c88f3889def074beb88d310192ee8529c35aa21cea25e950a735d2682c3fb6b2465d5499754485dae64d2027d5ab646b9eda385632dd51413d2c8e8cbf6d57ca182c13aa174621cc384bb1e4e0605c96fd704d448fdf4fb6a02c4f01cfa0acc8b5180ccf703a1a414a9119dfa866fbbb77aaa3418f96", 0x89}, {&(0x7f0000001600)="e39a73ca276d464680ff417481ed7b15fb652c4710b85fa6f45961547740a9f9e147d5f960a35bc45546960e37184eaa63e3233635381c4e17c0610ed75400c59b997876a27ed1d3a4436d82cbff05a870934bde5a0e5ef3e2a77d76bb433c13ca94204d75533b033db72729065b0ec40aaea087c8b9a03ab6aa4aa223ad7d7e91ca6acb29c1eac8b8243934e2063675ba368081e43b9a8aab3c31bf66e6d3d64998f47c62c16b460f18ab4505405c3be31c43d898d949bd8932194123c1daba16384d45ecfa0115c611864cc857f06d", 0xd0}, {&(0x7f0000001780)="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", 0xfa}], 0x3, &(0x7f0000001880)=[@tclass={{0x14, 0x29, 0x43, 0x8}}, @hopopts={{0x20, 0x29, 0x36, {0xc, 0x0, [], [@enc_lim={0x4, 0x1, 0x9}, @enc_lim={0x4, 0x1, 0x1f}]}}}, @hopopts={{0xd0, 0x29, 0x36, {0x3a, 0x16, [], [@generic={0x7, 0x88, "b3e470f1693a0db3489ba090a88408d6664ee506af1ffc4bef763e96f7b1ff7edb84b76aceb455c14db080b3a636dc03c5ddecf9af27ccd7a2f7ef96729742c0e95fabc686547ba02cc3140d8bf4eae0a95b9d03d59f3ff882e021eb966be0cd7c8e1e6b8e4b6f4662a2bf307ae78950dfeba1ba38d133942b42a5236c203eebd78097d4d5d28b9c"}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x0, 0x2, 0x1f, 0xceeb, [0xffffffffffff8000]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xe2}, @enc_lim={0x4, 0x1, 0x2}]}}}, @dstopts={{0x1120, 0x29, 0x37, {0x0, 0x220, [], [@enc_lim={0x4, 0x1, 0xc0}, @ra={0x5, 0x2, 0xe33}, @ra={0x5, 0x2, 0x2c}, @generic={0x7f, 0x1000, "c39056f2952f42571048faf3743ebe5beb2620801718c79eb2f8c67b8e6bd4411043bc0b2df6ce4f743048e27ea1acced8287dcec2fd1b376e7b69ef2cb8e468415d5294f081fe47d3e1d70606ae8bdbe4ab0093a1963eb7970c462fadf97bfe2ef00768cb0c45f9fda4475df3da6823d088cc8ebeddc0e9eaf5e26f553f595fb014db701595777a45a96716f0012786a9a88a4c8f2af56f0f5bf3388a8a88b6b3933a292e838264423adfd2ddd4dc09960c2d4a59770c01c05e22615f1ed9a5095aa00096f677c12b5696312f81fe618865e2736f1ec3fcfdf491633ea3ddf4e47e3e58c9b516928f6b71422e26840da6069c1a71ee60d95e56679afef248c3fcd0d303d7146f48749b4a81b20a5d7c92ba97a46d85bbc096cb9f7f53d78213416974a25f0ba1f49b4189a7b8cae5d6be1bce1a1c21397270cd5ff6cc195feecba6994fc13118da94033bec065bb3ba1ff93cd68ca56e99c448c34b5a9670f0119c0bf5220a6630479ddf7b826d258321ae72c1055b1a8f6e09d950154650cf35593bb0feb046fbf69e3d7d10e5e8dd67877a2a551c4597779098dd5587f9d88628830f03faf9aac4d0a9a4b93d31be92b65917152832aa301addd6c17446744c56f68cf51ffe617c618ae6766daacd90ea04fc9d9acb160024d876521a176a4155e27092daac0e6c435734226f1dc47d355d29f983ede7c52397b4e75293a44b92de1cb146c43264fba8c91f65e5af206b33651574898d909ebfde7b2e80be7a8b00b6b34a821d94d54c929d2ab169e5f8ba6669ab81f61f9e788b1b40e4bae79b1a3b1faa8c375ace395939d6019285037748d9dac93bf5005c061dbe12764b75ebd105cefc7ee1bf3c388919f25c17311d230deaa819280d196ee757ae36c7debaa0b8d4aa8ebfb7ec57f1c11529f8b328feae1ae7b476608e6a35f44e293ab91b6bab546418784f969f8ce062dd8487bc24a541b190b60b00569d343c5faf9a1f24235b22304e7878d0b02a9717fc18e4b569b509e8565ed0df26cfcc5ae16b5a1a92151411c0683ac9787aa1c112cca2719b884abc6a607ce1beaa25d158b75e8cad7ce83022a4f57588c45c29b179dd3793be478490875d07e7f90bef0ac06bc95c8c35b4e326d0ee60798f08235cff6fd47747801225398b357a1e95e72451841c7f3d106291e0a6b19f4d8bc183b58c2a7f83eb8dc268374c8299fd6359074f5d49233ed640810e117a3aa431e21a5856c08f934a813e8f0f0c2c33c58bd47d2eafde445ab2b5d138cd2d6d5195f8d6c1f2461b5b1faeb87051b0e0cf9103e930c6f57bb8b24c94c6e8af6d227690a7101aed29613b9af135fdd1747a8f7cde2f0b72f82e968783c4c3b85d0e225c247f3deb913928c98d1701f9cd7037c9e365afb0008694dce1c50ead34e15c95b036d7ac8ca259459050715227e996dba66c94330f8d1304361fef69b888b1ce74b4e026194aff7bb7e9ce38a880a805d257911fc4e51b6dd47491c69bd90fbd096327a335d9bc9c230978e3d15e05cd914a8185b4c46a5a5cfa533f9cca454e4b0709670334fa46c8f84544991e9fa067d2eeb1e8e7368c889d3132b96996be1cc3e7d6b3dc961ffc3c9138b52f3199cea3d9de23689614dcbac075122c80f23d28b0a6fee2d23dd0111c8814086bd117814e29a1e99479e88f72e435e447dadcc4fa01ea7b14b86a53d85ffae30d4896760d98cfe89d73240a2859e8a597b289c8d7259a0647046fda73f97f3bc8c214f82acbab48267fbb4e2c2af180983677fd4d64276014ff12d51438e7eefdc841059aef24db39f8d170b34ed7aea6ba80e81d24ea1a8d6aa16b5c4e1952a7d6f2cfd6107592c3d02be181e534c1645d6e88617a7623b6fb94a341eca80734294f1e7839639d1386149daa39f69e01776819953df014414c18072024985429d1fbc7f03989a7296fce8c546ef512fbd734251973426f453e7481a8213c7ad55f1ba9f89cbad9ac847f76cc9a5c112fa16d45ea5af149a2214957d9565d367e040ebc66c10890c279ef705fa84998bef7fb96043ab76452ccc56a2870478eeb963825e738d82bfd23c9e48e7c90dcfe669f5606a0e250272d8330365b1f747a15e138a71c7f4cbb183d3d08e04a15349e84063f4626caf7dff00dfe0cf9838481663ef3c81cd9ada9c5fa84825a5e7ea4d85bf2c35060762a2ecf4228c8662b84ea8c5a165280a2102e6423ba5c3bafcb562fba674a9d5c50e72dda4e566c8a47c31d3961010aff97c0a25076cd059ce45f26cb04dbbde3a4d785f0d1238c79a7e3fc4ca4ca0318776b0870d8ac4a229d85dbee0a848923e1589dc4fcee9e17cd2fc645dd585ddd19b3064844fb4c37dec3434c2e757776cf8df75a9df961dec0ecefcb9f1e5ba3fe1c9d967521a284c90c172469f502d68a7134b4f8c6e93825caea47ed21eef0da69f79ce2d9de4d08591ffc9b146e4afa605b1d43acc176cc0a78352909796504e744a548889f66b73e92dea5fe52898c2959c51de9b6e64b1fd230e130bb43df6e63f134f1405e60456040de44319218fc9d5a7f6568a6141be6f4c2aceed49a3456282ace6019b44dc2b1f51d9a8511eaa25da3f625fec3c481fa65b0701d179e1357cccfeea20245108260c21609116cd5da3864cacddde9fa16f0e014b5b5148bd4c780c947fa90012137be586ebae3c8578a2b5420146d5cec639c47594fc2d982f9bd53fc86569040bb000e5871bdf5f2f14b2f7587fd3b7cb0cc88fe8b6d3831503bfad947da812cbcb35fa8bc053cc22fca4a738091fc51ae111f72a417c6a2aa0bc2c06d4ae35d895d672c655c1219d95dae3e68b252bbb775c1f3c9702cf67955db62e312f5d22673ab9aae5bc19a027f06a37574a453e736c0cb79fc89020fb5a7aee2e1240ce7458287094a97d339c3ddd796862d98180941545cfd8b1aea5c64cf456b2186d713d41b58ca6ab2489f4876faedf4de3141d8b2c24ef383a8b82ac382ca04c72130a8500d249d2050505370094138d99e3a70bfcf0cf1573596e36fa639dcbe6650563ee48456b39d2eab4e3187ea1874b760689d1f0782b4c6da20774428c43601f897417c9d28d965489abfa48ff241c600a619140e6bc0f6e814d5adc940586eaf2cd6115d0a55dcb5a2bd442725f7bfcbd714c476156f79ece7f95b8006d5373400cb41dbc291482390f03390c1b6e73a80e06ba5571425958d01acff80302eeb9180c1cacaf0db349c4ed2de94f18217a9b64cf237bba503cfb08d980e49ea0c4b3cadb181c9f8eecc78cd29112ed5365df100e67aad1710e530b682c8ad86533cb5b81acec7abd230d9bea04b905078d8039c70b33ae706ffb48ccb9adc83cb65dc1c13106c5f9f75e255fbe5f7dd7488be7116d11291aeb4b66a81161dcfcd88bc6c6670bd9e3cf88b8d2e9e6b5525f0733bac8181fe47609bf339df350e3d72533f7daa78d9c49ee4f83e8e75a71e103655d369f7c8084be0d026efb557cf1213eeee46cf8bc4c6fed0c3b9206d23644161e5258a1e24b032bf655ee34f2d86bbdc1b0040c39a01555648e3a31c9183c2a4c4d580e445aae681734bc2c53fac3dd55e96a2439b1c8b3d28b04cb92d77feb8f21b06eab57b77cfff9a47512ad3aef30f210105198361adde4620685cb16202505c8d8bb95b175c2bb36e96029bb90319bfd75c56799883713a3d6f791dace2ae9423a30eb543cf91c7be3beb2733c4367332418b7b7359e0b3d19d4f4461651f23c6140d82570762e32b7a657dd256444f94ef68453ae403991f5f242985488751cc216d8263ad1305b140707dbbddeef421c974424d90d26a210dc100c046c22563a29c4769e8c060be1df72c34d37524ba4b38128c18aac52a26179e1e044624dcb2fb6bffdb8f2a0977ab08e898158353366d55371dd7d91644b8caa5c25fd0c61be311457d1a7ee49bb4d30060cd9d3ac97f044e7573b511c36b59c04b401e8d8a5870c9547d801efbe603885cc347f7bb8d72bf9ef4f65a13293e9824087e9aeeed13dfe1b4b47d556927f33ec5e1a5b11ba98ea71ee19aa916e3075f5b2ee56de958259703a2682900fade77ac9e6f58405c882263824ad6e5a27326fbf11835113b090b67299ddde98bf113e7e81bb4e1864f801891b961d7567eb8d0f167a5d599fbbcacb120739bd9e1a0164efd9e52474004f8a4562a1874192c9128dc27c928cf192baeeeec729e1dd4572f8502187f9c65ceb83e33a5b69d4aa487b668ffef7c0d2fc895f7afd40b857503c219ab86f82e79fa7f2f681f43951a96819b97094970fc0ce854b60b0a226cd7a98bbac80a840b902603abea28d3c9c566431560d57465290de1d57f48af9210aa515156418d0d9eee416028646e814e661c6cc03125fdd8468899e41ab425494134ef426927c557d10fd92cccb71446c6ea5b022a02f3e0a7da5554b865f5fd71808975954e47505b96a0ffb3d092b28924d3b72c87bdabd474a994958347fcf732b972e8e8518892fa8f4c8e42707573d410f9e37b338727bbfd915a9878a84ebd1f6d1c6df6ea209a9048bb8f343af20b549616d1ccb7e041514c384f9fc36a68a33c81afccfc4c3d31d4033cf71d4393856f87fe48f932a3b0770ce19a39771fae39d380a74f28b920341c92d642242f9c0e330c332b3af0ac23fd318a3b60f6dde59a1bdb1e1aaa547752cc48cf7a46d224b0cae5caad1d2fe0be9ef783109f55a178803a8f4f2580f4848ed36fc3a5bc5031d0b71715994a49c079f1d584d371a4dd09ff141dff533ea67a84eb65254635c084a6aaf385e2d98c99554e0f46efa9779eb805a3133415a0f9848288caf153c913cf654c4299285c76188a6e16979356217e17befdb341b99d01e2eae44599549d9ccfddfb21828b542415268f7e9fa1015dce303e9f04f0b5c65e1537164404200f5f1420946ec0682ea4923268ddb87a54168dc5e4c5723441b8f97ba4ad48e9d96ada35c923e8eb2413d22519d5f09f90015b09fa2f30ddd301de4cb8a9f68031c7c2c49302d433e1d3e17777dc132cb08a565364c54f8e5a6763291eacffc5cac90b8d48714ba9fccdd292c56f897f8223fd53d4cd2b6326adec0f8ed1afa848cf87fefa8b79f99195896e2cb47fabca37467db98ddfdb1073701cddbb15da15e768d30a5d6113512d771fed50bacc14ccad9e700aad565fbc9124a6c51edcc8c6e779927cc4330a2ed4d92132e0d6b1bda7ac6afe97ddc47ea6dbd6c9b853f9c5a057e1cef6dee74317da27afc019f46ddeb728ee3a9f9aea008191a8a294e204a98592586ae6b338de9facab934b706bf5b420483f521bb7c866e995657525288b375a7948ba3138eab3ed8d959a726c6469815865596098e7e31efc502427b7bd599b55c7a88521befdb9d517ed6b5161530c4f92096ed4df360d8daedfe490cca79f9d15ef51c4cf0766a05cccc216063c624cae43c73f6058024c6dd279b4c7aecae0afc59c9dcc9a48625256f87188a733171e503cb6c5257d60c0b3d70527f2a1b6bf6a17706a4e0277d7f0f83091bc4b5d2aa9e3cc7349449e1aa096c2e9dd7f2fa8a4d96f5be6c61f45586c17ec676d160a98a2ced4912a530298eec657f1f62b7789b34952187fb4d2b76817c4f39688487aca4c685d10e73466c4e7f3c190b48890edaa31ef2b09465b9a8618dd9b3352ee693c02d0f276be62b0bcad8fdd7cbe57dd8ace60fa40b6e48de4253e791317499c1c1c2f4c422a31694f6886eb0cac896e862865"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @empty}, @generic={0xff, 0x9b, "59d542bdf6264d7f72f5c2ccb7c0ad01064713c50802f67256b06c12d256a74b3f73b4ae8a36369c4cd0604b37d2569a657a2df2ecfed3d5bec2ddfbbd82c77be985443fe3831dbb351caa084b00241d2d3d02908c713d2d598cb8f1441ad17b9a89fa013da1ba03beda2e97062677b65e39b8ce1d9dc39415bdaaab92ce52c67eeab875c88e28f316e6f3e6109c2e2b3c0045a9ffcdd03444107f"}, @calipso={0x7, 0x40, {0x3, 0xe, 0x8, 0x401, [0x50, 0x10001, 0x100000001, 0x400, 0x6, 0x80000001, 0x3]}}]}}}, @hopopts_2292={{0x188, 0x29, 0x36, {0x33, 0x2d, [], [@pad1, @generic={0x2, 0x84, "65a529b294b0a92e3c070c6ff2fe8cb3f643de0c5c1e9f4807907425ac47746e08b90e2554e0b29bde88b5c972bec6e53b0680d60966924334923e011fd3787667f0dc783b2d2b81a9b02ab4cc038e91fe2d004948fca29a06ce28c5a4986b3e7d83777e1614b5912e5a17a5a443a48679a35b5b2c4fd57e0e426b3c11b9d403543bcbb1"}, @generic={0x40, 0xe0, "96dea082002957cdffb8c13f2026dcdace66d70e618626a096518b42e09e59712f6c1f61c74c0acbc0ffb09b4afe12374c53f451ba61065cd6d3f727e5c63f401ef9677168a6ab848618318c362c7ba17f661b8bb0f3c86a4a0b1c4e069374e2e456a76696f7faa252260de86cc164f9092af1cf4077056c3b3777495f4305fe0dcd299ce459fc6afcc76e21d28f54e9bc4bf511072b1273200593099744fcb599f2a55e33c35580ee67ca7879bc07b7dbfac9b52d7c3f38ba233fd2110ffd59fc5d47d66230935dc91250bf22c442fe691faac14b6f2a7bb24c0b21f1dbd54f"}]}}}, @dstopts={{0xa8, 0x29, 0x37, {0x3b, 0x11, [], [@jumbo={0xc2, 0x4, 0x8001}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x80}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x85}, @enc_lim={0x4, 0x1, 0x4}, @generic={0x7f, 0xb, "fc2387e21e1436afb48e03"}, @jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @mcast2}, @generic={0x33, 0x4d, "20db5cdc38aa55a5a606308ee97b35cc455349125c6a8131544bed789a042c84dfd60b59119993f06c69e44d3f89d60bbbcd33a11835c555437f11652edf20daf9b1264335aad5911f0cbf88ca"}]}}}, @hopopts={{0x20, 0x29, 0x36, {0xe, 0x0, [], [@enc_lim={0x4, 0x1, 0x76}, @ra={0x5, 0x2, 0x1e}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hopopts={{0xf8, 0x29, 0x36, {0xa2, 0x1c, [], [@ra={0x5, 0x2, 0x7ff}, @ra={0x5, 0x2, 0x228f}, @generic={0x5, 0x86, "69802f80c2ec0014c44307f74e58cc91b6408b1c16eea057cb481afa539b9517871cc481274db2269756dea44a34a35658e1f9901a05db926ab814bc03dab2d12ef6753522cb28e03c01dfe88c08e4f6d8ffb218e04c1480f7b0319ea2d3b96510f61b6ee64fc9ba6987da069a6a65c67fa081be24f9010133806368897738816502e760bebc"}, @jumbo={0xc2, 0x4, 0x7fff}, @calipso={0x7, 0x30, {0x1, 0xa, 0x4, 0xf801, [0x8d, 0x1, 0x7, 0x27, 0x4]}}, @hao={0xc9, 0x10, @rand_addr="7be288f2ee8b1e541c8622531b464da5"}, @jumbo={0xc2, 0x4, 0x7f}]}}}], 0x1588}}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001700)="fe6dfd3b59e96aee6baa54ad89683e873c2a66c2e0928b49b8333aa9", 0x1c}], 0x1, &(0x7f0000002e80)=[@rthdr={{0x38, 0x29, 0x39, {0x2f, 0x4, 0x1, 0x1f, 0x0, [@mcast2, @local]}}}, @dstopts={{0x130, 0x29, 0x37, {0x3b, 0x23, [], [@calipso={0x7, 0x38, {0x2, 0xc, 0x20, 0x1, [0xa0a, 0x18537469, 0x80000001, 0x20, 0x5, 0x9]}}, @generic={0x86, 0xaf, "2b2b53bc0c84fcbc3d06132fa7afcd27f4411f5dd92bbc3ffba9fc3cbf94ae8eb52316af12e6923fe673f485f5275087f92a7f7f1ae0595284ad4fabdc5a865b7e24bdc3ab26bdcfb92242d15e1b30aad13e8356c65243ce523a7f0b9169639047d86ad4427f794f8e9513c80842dbd52f5b0005fbb2a40fb8c1fabe4828db3b00e788d54dda6d4193e151d1b87639596187011a531005e4693df7d44714b69d9083df1a02cde750ed6b09879dd944"}, @pad1, @calipso={0x7, 0x28, {0x2, 0x8, 0x0, 0xe2ff, [0x2, 0x4, 0x1, 0x6]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}], 0x180}}, {{&(0x7f0000003000)={0xa, 0x4e21, 0x800, @loopback, 0x4}, 0x1c, &(0x7f0000003140)=[{&(0x7f0000003040)="3ad1e7f3d8ba6b48f7241eef9e130ee34eecafff494bcb243667abef9c53305aab16a90c99c00044fd6187744083677f5e364b7983888816a450d755ab36ab79a53dfcc40c2a96c4173eb9987ea969f3bb9a84f673c30a986a52868f2cb551f359df8ed407f9d1980aceda431208aa835764a2dbd23b7e83d922df4bce7387624750230c39e3d7689bae326d095b75b01a24fefcb3d78f1c29843580aa403ee84747924adf29a00d852bf66624f0fb99391cae6ed43cc7703dc0cb79ac5e9f98732340de3707f8a5252b88162c67", 0xce}], 0x1, &(0x7f0000003180)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr="b21e6625519523b2268b17e6180c1981", r1}}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x62, 0x14, 0x1, 0xfd, 0x0, [@local, @remote, @mcast1, @loopback, @rand_addr="a5a437faf443400baf5b349e39217a58", @dev={0xfe, 0x80, [], 0x10}, @loopback, @loopback, @ipv4={[], [], @loopback}, @ipv4={[], [], @empty}]}}}, @dstopts_2292={{0x60, 0x29, 0x4, {0x6, 0x9, [], [@generic={0xf7, 0x46, "f59710198157507ce592184c3150ca3a0730b475f636292bb4d143679b9ba5d3d0a6aa1b29de0c694d498d458456eb16a50c681bc33e8415646c61b5d46e081b23e5b3bddc38"}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x3a, 0x0, [], [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r6}}}, @flowinfo={{0x14, 0x29, 0xb, 0x355}}, @hopopts={{0x48, 0x29, 0x36, {0x4, 0x5, [], [@ra={0x5, 0x2, 0x5}, @hao={0xc9, 0x10, @ipv4={[], [], @multicast1}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo, @jumbo={0xc2, 0x4, 0xffff7d0c}]}}}], 0x1e8}}, {{&(0x7f0000003380)={0xa, 0x4e23, 0x56, @local, 0x3}, 0x1c, &(0x7f0000004880)=[{&(0x7f00000033c0)="9d34388b76454991bc16fc5767c93746a8f9912457ece57e19ad8d849a529d0bf0f7bbedc96eb319f7286167a52684d54011bc8ec556dc257e6677bd990c5afee2cd2a1a8798efc74d3b9238abbae32cc57c62f2c343569b2888ddfb8a4f7e9905150678e41d63d720895c082525d8d8f8127b21b78e8c9b08e475dfc70af14144615ce3694aca9ce07652daa22094c0330a2b5a4ef48fe75bf571d3d60658c4e1650281e3e13aa4e5b8e3db108f1968a833fe6b977975", 0xb7}, {&(0x7f0000003480)="8c3388ab248b1ec1eb5a5cd61acf1f1b90d5bb3bfa88d00207b9a5af712a2595b087b167e537d77cc193381b2d1db31ab60f3385a9724cbc131475a00f2f6dd35f881311f590ede96d72fc54b75f5508619fba60", 0x54}, {&(0x7f0000003500)}, {&(0x7f0000003540)="26b8c61ae61373873b9becbf9e1605494746ebfab9749e56ecf719b7e5de725476c5aad8b56f1662d26ee004de72806996edb5bfaabd6b1045", 0x39}, {&(0x7f0000003580)="8c77d176f17c7800f67ff6fcf6bc22b328843c2c5136f1b8f337725d5e09f4045d0000f9838eee1c4eb6dea37cf9f6744d5bd7ad116fe5473b01cb575ada4552a37a583d8d7e5d3f61d3ff57ef685e38f987aed0c95aad8e2c69593bb85f5cc6940f31320c1f4db8e416f104e3860dfa76363e9990e0ce2c0943cd5371aa6228190b02d930ecbaee465a63cf1a0772223ed41c53ecdfc24a1c0c84666632c92f699816694fa34aa8aef651cbcb297b88c7d3fa31f0a010b4200d6f9003953b61ff20f291c6235f12ee01e5f5ab6603b3f87f328c37e9fb38e3bbb627711e22719e6650104e9a1677c8d1d866ba5475b496b30968eb4353b8bc83c8e4a06dfdf980d1b7ce12f107663689d5106427655a6dc50248bb3a0d3417f3d65dc62d03cbadb9a9941836b40b6581bb0daffc15e4fc18edca6836a8e544af1d83ca01ce37850aea9c04ed9463aeb2bf6564b5d82720ce95e0d67d46aa7af30caa12d39524b45c79711420f5d6160965e48a36f862dc9a8716506ff76d42411f1629bc5e060cf158f6281c7bd6107f23945d63eca68975ee6b24fb899a65993505efafc7a62d692e6a487cc71e408edf5a6cbef7ab956b19fa4b8a472f6092d1625ae49124bbc63f91ab651d5708ac40f73b27215a23eb7a4e68e1f27e2d7ed7a131a6eed3b50038d73ca91320ce9442688f5756f9ee5ffa882b7bb8c9927fe10ceb63c6c171a9c87e08fa73c18c1b0bdcf595feebe3ed44b323ca505c6e98288f71784329594cff28008254f3478b7a11f9b2eda2e1b303f0da03306e8003d7a704c8b3fac36e6d648f120f5d555b12eff2aa05ada905738089baac3f2119c3051321ee659ef145865c4e7e3c2a70f002673487bea8f088caa806d9e90d8967c4ed7e3b5662dc930ba43e8c452421e49b102030ab61e39f69650d64b6d8dcd77e6fa3b58f21e1b37cea813aea6e64f1256e4ee7c12ddb3af7c5f50af38799c998bac9848bbac79e261998422c465296b4e867df075bfa60d0717a91279bd500b2a29e503a6525c4ab3a23d039d9914df1a8a3c82da7d15425b6fff4302c52faa99b5986c09104c9492b752366c0e44bac3566ec8d956bdbb81f18af93cffbac0f7231f6fd0bd57f0ad782dc3f5e548ed4f6752b3ca88bd93711fcba38aefeb3ec301b248b0832c3528af17bf940596991fc7a7d4aaeccd758a8e3cbcbe11e3fb25df0a4857e60d486719020e3c8f629272d797b5b2ba13900c06982952f00ceb6306a0034785285a0015d113e6ac89617c00363376e50a7fb414d24d1f541a4af9cdf57b5b54c80a356fa70126998413b3348cbd55eb6c289fa312cb5de7a0f03f903729c1da74d4e18bbcc21fced7d53ceb22b602542ddee961106846d6568c071466eebf8b4f088edec50a2a6bf6a5e158e45d9af5491e8a6c4bd35d30f963da07049f697d63c9ca17d1d34bf0bad676792041c2cabfe14d373a584f89146a591c68ba854d4fc871d3c70b7400ff3e837938b19e88524e8ecca000abd35f5bf7ae549e13ce16316e0251c88ccf1674243871513ea02bbefce42bb0d79216555f5c23beff3764bdf531ba457e7edfa34475bdb8773c314f750c2ed8f7bf1869b9f70a2d5a82ac93a82145cca21aa12c8691d0ce1e87b4260a432cc914241709bdf74fe27a6dcb4360e51aa792c0831975aa28c01bb29cc0a5d0339912c2d9d555c21ad6ac7a33c1ed7786e5625ce7c773880c21b8da572f554f1a4d9ab64b16bd20a098d3db94d822d23572aa5520179e1a1f2d0cf971d559652a3297e7d3dd901ca1e66bb62d17c69e1ae2b99c434048c883277d1d1ce0192ac71a5cd88a36730ec1ebee3cad218ac15a0ecd68f462e0d70cde6a2b4a56e01af630c8d40c1958687cdf13fad305f0bbc03da9b0b269e634312f1b390071a15d45648dbc69a029bca47a617b34ce765f1a97bf2c4ce9abbe14fd15bcf2f6af802ae745293fc6c663e59e65df3ceec792d014be30ac57c10caac4b618162db363d4c0bc9d49642e48ea91514abcdcd511f2b0cebacd36c155dbeadf37d355c1ad91c8b976bba8e87fe270b6190b03e9b7ee601885654caced77dd90b00a4fc885a0e9e57f485ade238b53a6d1246735266300fa2417b716f354177dde4b58fcf51f44d6c4a019e583957a81c4f3b745007650dc1c0b87121cda07c1c7deccbad96968da6a9c82d08ff254f1e1f20e6bd5ece6e924bdc721a5b4d4400c0b8682ab39a0e523f50b7757b5cc69a923d925a52510acbf79ed724cb617d46d095d723c8f1d7e93248c70fac39a9c7ef2ca89832091554892e0195a0e6745216c71f5a0b76a20c386a60614789a4a558564ca769baef84457b3400f258426c81dbbab67a38bf80d9ca3f6159ace92dc497420052c619fc3116dacaf9a19318cf9a9b100c2da52e5001c82f514cb1233f5d8977bf30037892a002ea63869bce76870101880d62f20ef1f33b71ad2504d53b2711e5252f4869bcefcaee1a9db5b072eaa51ef8725013dd5be56d5ce854921bc3e07acb21559de25b40e43a12d2e85a99778999913a5f151593cf38671f599cc4431cedbc5c232000aeca1bb2f5911475d7613879d243b7ae7c23e98afd4d43e68b82de406054b83159684b2c5eb8e8d4e4fe7bd08709d1a0a142321cdf174dffb8d2f48a9b1e36d55041240b7b95f1bf5509d7d79ef7f05eeeb35eca3e242f7435fbf74d31536777d12f2d2b584bc657fc0b75472f45db02bbcde497ef9de0e676ba55d4caa7772d82734a5f7934dead17579ba1e09734b2a412a0b94764b6ff8db9871f69fcebbda97f22a88152a9568c2633839775ff0741434ae38e9c62012f03d4f06cb88a02bee8bd0ea766b071645ef0ee03dfaca07d73042f49837ec409d12be31f2480f3b8a31a506589ee359cfc05638d102b6a5a68f09ca28227f5175e8b21e78e2ae3ed11a84368c355241e52ba44b0e1d00239630489c53b0567db0870dbbb4db526e4be9bc76fb2dd123780cf4a8b62f2106ab010687c992d38db490b3d90407af36e41bf4f9acce2fa964f5f9a34634b3ed47591422a9c7baf1e237769237b690bba3bf85f8bf78d5a28cf09498d810bdcf32df5c8be96dd21aa4e15403fce1cffce1c4a2a67847404af67913e06136e87dabc1d124fa6dd77df216cef2b0e99c9528b86f2d00f83110a045b9458d35c4c043323c800d79f51bf4616b7c913a9fff99985b6656a56197c67c255c937f8eb5c6ad1ead23ea9b1c42b77ed1f1ab9769a1e071cfee31e8ed03776593321ecaf4405553e8fc31266f4cd007ef52d1315cde003be132a84287e24c07e2fd98265559a36ac18a3ea6709438102ae6dd09bf15401ba393826ab85d47ac1ef98a89a9441a7ef598a75bd8c02a124e76dbd32f5a5c3e351d632a5c274db469ca5550ec2a6a9dfa836902616830bbbbe5564f909ef2887d43e115310569d4aadda2ae62ea4c5f5adcedd19dc060f6a9d45b364443f5a5481a66ac21f251f9d4a106fbe4200392a42b5842dd6a3f22d5c3ce9bfc9fec799a741653280b7f80be61b6d877db155c417ff83b80c02518de8bf4b2d7b325e7b13c62f9c5c348e45fda41565ccdd3074534650ccd3d13b8dfc41657b5fa6ca4a1fb1ebc0085fcd578453cd5e883ad74f80b4e3ac485857e0551ede962e67add79139199f8d275198f3f535545918c3925a752cb32b52152d36b9db404e12a8dd13c9144fc5fa3285e15a0e4e0ff5834a3db7fc307cb1b79ae56f8b613eae920c7948c012ba92652e3513d7179be541656678cb4a034d95c3d4c789421f6bea11a2fe5bae78d1c8bc9c8e579e5d0d78edc3d9a5ed5b8132589762010ea5ca6b35a88ae11599ab509bcc90561e1455a7d6edaedf450c2b63afddc504de00024fd4f624af1a7c353e2691a87bbd345a41f23523f08356f8211b86502628c27511e1bba559ac87164cde0ff39b3f5b71fb1c11f1e7d9eb7275cd141aa4e482170898f9c84aff34641041a16bc83f377db919f1fc29cbe2754ef8661e1d20e90e2ca85e03c5eeb0a4edafb4b26ae3c9512fadae308bd9e5a3de1aab9df42eeddecf29fcb18ea81aeea7de642ea538ab1ffd7b1cbc7ad87a3ce751a09bd1a86d1611812d5c46cd67f30aeabbd21fd06794ec22d08cafb5e0ba105b5c4829a5f89ea45490eaa1496ec4cbc59c562ddedd561802b48d6564f2f9d376296d2a49f35ec8b225e9842bc1d64321f140fd95504cbac4c01d486e173bd038088ac34cc3d738f8ac2054a1bae771005533d3c684a9e1f70b874ac69d87f1fd7bf5a185ad5ce21531477701daf442cff5b03755cc886bbeaf99be36b29781ea24c258e07eb5c57cc37cb407ff0a0fbfde84d8e7e4bb414a4d7df521a326926d7e8a2a913eff16605a562fa982da813513d3a59ad23fd344a7e2bcd2f10231d56e00e0e61628cd4374decde70d74e9dbbfc102c10b1e53226f4d7d627a567ca320c9a904de756a1c2d087c833847946ca56df959e24565923611088e25bed460099a694d37146b7d5ce92b3cdc31520450919c82bdbc31ffcabc9ecd9c84f1017e78977bf186342bccc9dd2a5e247fb5d038bc393f76a8056a221900dc797129917da13b43e259340d803002007d69054ce0a25e32053d9e71786a57ef50aa46c7df76f3316fbb84f56635c29765448e8bd394ff93264aa5eed734d3820d4dda31f7bfdd2037bd134991ae58e103334d7a7be16d35268bb32ba3c1c03362b9ed85e263d9e93490386efd977157e24c2315fa485fec7ff14c844bda86a2a4f507863afb6810e3208fe9018e44e93de041c90a3f3c571145df355cb8b85a8341fef663a585d813b74cebba4cb2c78a971d0fe909e182988f5b1856d45ff88740fa8ac28de3680fedc495fc00b833136d8813747e329f67c219aee7c211e0bb4cfea245bf8a608ce52eb05965b8bb4363563023b0439bee0150e746a2576746761f50a1e0295051f8d662b1ef80f4e7632cfbb04e08cf300529c0bc3511bd11d9c64e75869afdd65ace8912c2d91bba15479df4be53494a7270115bcb28bc6bdc6efbb51c875d5bd9708f7202f6a9c52e3f1b2f8c1029dafc7d3091ffc694b23b3cd83ec7a4446e1f38d47f457ca7a4630f2158a9e883ca2b9bbfb9c435f948dfc819b77ff5bccf952393fb4cb57be573ebb8bd90c7f07ba2d028a83740db6a27050321ebbef11d8e095be963b8c26a432083ce4b89411a5e04c9e0dbf0d859f716a83a7b47e099f8eab24800563979bc54ce2f5d5f223b5394a652cff1ba65e8dc89f35a945b6cab36f87ccfd085c9970bbfa506cba8b3af557b2ebbdf0f37e7831fd9288fb9050a2f5964c9da9ffcb21b8c4afbc26eb5e32ee76a40153fc8476dc765fd861d3aae6113ecf8124210162a57ebf744562ed5248a27e05e5d0dbc93bf3570afda7d753e3aee862a4c3b20aca6b8ef5bfe05614392a873df6f1aeebfbdbd6bd0f3830e09fe6193ff44fdb7871c7a9cfaaa820d90b03fd734cc52eb2bee984bdb573e4e2102f57c5c9b3dd66b9badb6121c067484fac8cecec2c8c0a5e2789ab0ffae8eeb61d60119440fb8a280e58e20e47dd1baac1da9961b7c57c803e6a734bdd153cc02615132d2257c0c10f19968c7d2e57c358ccea2fb2f81428eca986e4343ca3d963496b82e9ba6b2e7c830b2a6a04ce192b1342954c7c88d6f652adfdf60009b0fc8e08369a655f66c29bbab27496123862dc3c261dff63cde1a2d63d25b7a792be7237328ad515be145989dede0545d", 0x1000}, {&(0x7f0000004580)="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", 0xfe}, {&(0x7f0000004680)="d81189db4e3cdaf30a99174dd918a684a2669ace5d76e31e0c8091d8b43aceefd3894483c6e0ff3211a80b28c04fb7e5e923dee7bb4a4a4ff59025c32d349668310e400e4f6d91e476af5ac0bcbe46b56127471bf1f5e76bc9a629dbbe84d07600ab7559bd8f5cc5129a07e94f03f86a74e824528a10143319cf3909ac6adc2f9383b0c498403f7b479a052a211060e1938308680a7d4334569c9567e5112666a326a97a116c8825694e0b6f0902223289501d89437aa3035cabe1f042475103124814feb29ad0913777d076cae7e6ba81dbf9228f63f36b9fa2ef55c574", 0xde}, {&(0x7f0000004780)="eb60ec3104efad3c4e0a662bcd1d8bdd596dceefca50396e2a9d69a03a297f2cbe60c28e04aabd936a62855561b308797ec370a37fee8193567aaafe0e42fa4b6af309338856c37e0d1ba0a094bd38962980b0ac818b267b72cc9155831119c5e060bd02e9ad1caa6f0950ab51a8bf1683692254", 0x74}, {&(0x7f0000004800)="c4ca0ca396ba97154470e0b733674db8a7262da8cb9e1f723664982cc9359bfaa1e1f78cc595f06a2dcf5a72d96b4fc129f5922d8bd5d3a302db6e20d05f7b3f74f469cb5f936171fe5789050b1f171439a73338d9fe0415473dafc927fd02aeef18ae883d263aeaa935233e42798e11f8d3afd8ed01bfe5f41a23e86d3b5e", 0x7f}], 0x9, &(0x7f0000004940)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x1d, 0x6, 0x1, 0x9, 0x0, [@initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast2, @mcast1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdrdstopts={{0x60, 0x29, 0x37, {0x32, 0x8, [], [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @rand_addr="e284b1ee47f860e2208d94a3a85d4953"}, @ra={0x5, 0x2, 0x8001}, @ra={0x5, 0x2, 0xfff9}, @hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0x3}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5}}], 0xd8}}], 0x5, 0x404c800) r7 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='Q'], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r9, r7) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r10, 0x0, 0x0) 14:44:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000060000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1688.077322][T17279] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. 14:44:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000090000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:34 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setreuid(0x0, r5) r6 = getgid() ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f00000000c0)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000700)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0800000001000000003c27b8420002000000000008000000", @ANYRES32=r8, @ANYBLOB="1001fcffff002000000000000000b7be7fa31018fe1217c9f3d515be6fd880569bbbb7e581ad67404833eb0ed09793ebe858163a252bc68c1d977aece4cf26c955905d7a320000"], 0x2c, 0x0) r9 = getpid() sched_setscheduler(r9, 0x5, &(0x7f0000000380)) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f0000000380)) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000100)={{0x1, r5, r6, r7, r8, 0x1, 0xc343}, 0x0, 0x0, 0x4, 0xb1db, 0x7, 0x8001, 0x100000000, 0xe7, 0x4, 0x7, r9, r10}) read$fb(r4, 0x0, 0x0) 14:44:34 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) [ 1688.191503][T17279] binder: 17275:17279 unknown command 81 [ 1688.221999][T17279] binder: 17275:17279 ioctl c0306201 20000200 returned -22 14:44:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff00000000006c000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a010800000a0000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000000000f0000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:34 executing program 3: close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x4) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = dup2(r2, r0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r4, 0x3b70, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x36d}) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000100)={0x1, 0x1, {0x0, 0x28, 0x6, 0xc, 0x10001, 0xff, 0x5, 0x35}}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r5, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x38, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) 14:44:34 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) [ 1688.520868][T17396] binder: 17395:17396 unknown command 0 [ 1688.548412][T17396] binder: 17395:17396 ioctl c0306201 20000200 returned -22 14:44:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a010800000b0000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000040030000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:34 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) read$fb(r4, 0x0, 0x0) 14:44:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a010800000e0000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:34 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x220000, 0x0) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r3, 0xc0305615, &(0x7f00000000c0)={0x0, {0xb6d2, 0x8000}}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100)=@int=0xffff, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x80, r6, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg2\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6_vti0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) 14:44:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000003400000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1688.887567][T17514] sctp: [Deprecated]: syz-executor.3 (pid 17514) Use of int in max_burst socket option deprecated. [ 1688.887567][T17514] Use struct sctp_assoc_value instead 14:44:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f00000000c0)={0x556, 0x10, 0x800, 0x30, 0x80000001, 0x9, 0x4, 0x1, {0x3, 0x2, 0x1}, {0x7, 0x3, 0x1}, {0x1, 0xffff}, {0x6, 0x3385, 0x1}, 0x3, 0x2, 0x10001, 0x20, 0x0, 0x3, 0xffffff4d, 0x6, 0x8000, 0x400, 0x5, 0x7c1, 0x21, 0x2, 0x3, 0x7}) 14:44:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000100000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff00000000fffff00000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:35 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000001780)={0x1230, 0x1, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7b14}, @NFQA_PAYLOAD={0x1004, 0xa, "8294e77bb530f1b31d2af6c93c2dc3ee262d112ada9b1e702254ecaa6b5b38b3b0906739fa10a88084e55d4090e7b005acbd94dcf6b9355f26b914c97b04472ed088ab552452291f90c3c3f18521b47296fd15ec3771f5cf8fcbe8189375dfdc0f158cb908d61f4e560f65a7356eaa914249cbcce70624c6b36551ee8e5314db3f44025907b303ce345f9088ecad08c5718354417b71b5aacbdac7d9ecb397c362f19ed3fc0f411d08f32f3ae8509afe27584e3a964b505284f6f0c029ceb3a7181df59daa4dd4ab96ef437d9b2961faa866de53f31ee3e819c3b5a9b04feebcd3b90c1ec145b1686308d0a06b1cf2c7c563a9798e6ff427d7b26674923fb32a2feb59512602144c8d78b860ac057c262c68d4f99373617b80dace669f1f8abe0a28a49f1a9c8f7d6db963bffc278ae46c3585b163ebcb07d9a1ef045f3483ee4da7daa34856512436f775068e158576d97fb3dacf543918b7106b051713e113e7f14108c4ed4074a32617c0bb97f2113a18a7418de7bd29b850659c894ab0c250044381f3ba15ced8f19ed137b4ed3d508242f06316fcaeee68973b918f8e961ea270ea4b7ebb22b8a85dac9b9d2a6f9a20340942061e70d501aa1dcb3a87f8f8629523d8e8ebf780a32b74630be954d0824cacd8351fc0cf8decdf04473459341fa00e9af5b424c3e283c16b469712b1f790669c9238181c5113fb6583c2e4e03eb2e7434ebe0f8a50cb554883056f97942c8570dc36cc138fdd1a39c3732b80880f1e27d9c851cfb0bd214444b8c38e05193d0ffdf35fd139a8a928f1be3711995f1a25f2a7247c0edc09e4191057a53efe1dc0543a6b058f170eb1fc59070ac0fa680bc0075642aedaa833da010841f81c1ca4e25d62c88fd0831cf44ba3a2a251a1513567420f1591f584394f5c7fe4e0393b28193c88ecba1ad57fe2bec5fcd867428c358c71b15a1c5d45022593348fa85c404d4aeea0c1f1217b793a8526d93de06155757f3ba9e08b75cbca42c42e7c2afcae9e5cd291bac877e72999d2dc5360db0454206016d88d0d0da5dc88601b7f4f9f7ffe8abb6f74030afa0350ca8d76ddb0410c4c8cfb4cff82ea3c2f79483293a042057b11f523fc2b1d8d8c31d7d34487cdbb570d79439abd1c925fdc023d0ac1e11584596e7032018b7c9b24da83c0655767a1d913c61bb9849aba12ee8a1a1a7fd7e2826f4997433f43ff90241fd4a1c7e3bdefc3142e238570deb98edc6d3b8831111479c8bd990c30e59836b83360cb1c2c4fcdaaa7d9b8d82754b58d1d3c41e3ff1af02a08289c045a8729908d4d4f34fdf349305af5bb3d79d7a7bb7ca5ed9cddb671303f59e917d43c53959cb5f17006617d89148cb4522d6766249d8b0dc5e4d8332a3b381ccf8546223640cb8690fba3c96eb5b438abdcc240695c8af2bcb89ca7681ca32b484d73ac993b7258285c37570c9f72a41a38590c94944e8543b7695735d4f87b4cd15251301d8b21e531ef74010c50fba0d939090df305575ba83612c177f3f13b326d77f8f12f85c39845c5b40844b2830d02c06dbcd982a87a9d3e9788ff99c24ca1553c4829a4cfa337cbf34e07dbd47085000056a1b457c1d72887875aa30e7ffde167a4be0a38ee3358be808127124a23a834ac933104c4d677be69deea5137417aa73542b94fc008fe093a5fcddb0277487dcaf952de4b0ca4458962007c38e2e267c3d3e89b7785ea4c31479ae133f1e136f3fe7e8141897e71d5b72e57a4cfb99c8ce09a2357da5c6d7a98b700afbf814a507c53734b15794851737a34834305cd9fe8fba316d5f9ed6a41365fd7f5cfede78561f8ea4d58d286d9f7cbf4753a6ee90acdc1ed97f5cd019f3a407b4e7c4edfbce8f377ebb8ece835eace7d2c99e5114725b87180c41fce1dd0799c4dedc797712e107e08b9c8bf0248024d9a789e1dfee6ce3476ea3e19723cc83b95d3e9dc8b2f20e0985ac71e6b94670647584588245c0b653a1ac344a3ec02eb823bec2986d48f925da38bbf0cfdc33624a7699903fbd3ded79c9278ed78a46426cb94c1b41a9bd12f51964d7aa3cd6c27971d1e92dd0fce0f21d2690fd3df35c6be4fa34c04f9b0f14da8e53d78807a6aa91597be1babd00e34254a8d9055ab595cd7d9cec49a3d47046495179c1288d84f0f989fb151669445d43d0cb0f40b2aff82738c85d95a8805384653580b9c2b8b6ba2d9f6675a68d76d5e3a2c24335a9ad8f9f7d0b19920c231051d6ec0869d84bd19664ce397405a6da120e1c691be95f56f0304dd5419e8e0c2fa661dec48e72839ef9a8a47d515593a631d805c5a2e0deca3419d378cabbe3695bf0d1a8cc6f074fe71600f559967181a0c6da110544b4bdf7f044277fc92b736df1e6f627a2c1bae496dd45712acd0718f0bc6f69263421cab75701d6e259211afc546ba6213be6684bdd39d229f9e284e13526c28eebed3e99ee6f796a82c0c1e52dc162e630eae84f32c08afcd290d50c2a3229f55a9c8c3df8247cd9d0335dfc89625019119921d84a23c513ec463f29f8ad1561908ea7efd5d0adace363e88e9d6ee92c2555b28fc5e45d43680e0348cfc7e627e6a215a38f1d8d9ac258c91d0f3edf726b8941a278bf58d3cc9bd1e1d7f08e8d4396cd998f81089abe01b54650a978b35de6ba61ab24e065221f95a3d12bc35cfae9be884d8a0a89b32322f11f596c91817b9652e342c59ad5d71d53b5b97dba6ad5df2e84cc741829d02e889993af566927098f1850696caaf87b07b6b5d29129e4abfc8758e1fd1af1874dda53e95af6128eae0ec5a5b8898ced9ea5b19a33f9fed8665562e64410b3290545babb2b0131bdf4ed901badb4c180f09d5170258e9e33d1750d0936eda27d186e74a8b3958a49ca1b71eda458a7cd944ee62bac346332eefb4f3d29fb867305fc621ee75ace5fa4d0c7edd43dd0a1dbeaf953e350e5a54d8edacedba74f960aef7a694f93d86cc2a4626fd243ab6e23d2a50c4d1f47c2e586e8f5a225365cfa7f6cf178074ebbd3f2d3ee4c7b89110608f0919fec2634401a3b7864da57a05f7689e27d8a8a40242edb00d06d65f57636c8f6ec30fe76bfe4ff75d5fcacb315cd8e054f40cfa408929a635e2a27fc97a472f306569964eec0b6de759c415a49cc45285630238d5069e8be75a35cc98d038d44c8153a3c5226c9819921d57dbf477210a183d104e96baf0967c5b17a03164b0f6fd90922022c6d59372112c367f6c50441e073350116e637c64e06a32977d79aecd55041a0cbe25446c5739411ffe50767829caf0028cd69370c7077b83cbee10ac499584e044a3270a50fb5cf9d5def84ce4934d80e19d7a17c8c4bc04d196fb3dc200654e7214c30059197e79622be2de631201d194c0ce1f85460559784de9206bf2e81b4a070c1b05417ae64f22cb6f5aea60a34678ee072dda060275ca1d92f902dcf41ac75c339367304b5163b627572a0ef7f4dc33271ce9e9b164c1b58e61e692399ab25215fef7e4d411d3650ed110b1013a12c008531e53b759f92233feebbdaea646271a8d65dd8e6701ed643bb8d2fa4ec6457603f393378c52c8b8762ff99a5efc72337f44a13a6c5a16896e2884a5295ca043f9c1a8a2dc9562e268c6fbc6a08e342c7c5548d8d6122910f640e406661aaddc3a30249c39a2901566b02f4730f1179fa3585cd62e7e9f23c828e45de2ff7e74235f053111d837e13021aa9e51750c543f994ba44f5ccf54e15ea11c6d4d5a4e7d335e6ddc1dee28119201b5c5675f8786b6a5cb7b66c395056540f49a274bea2522ff2a7b8d57dac9aec34e4f333263008e89fda809c45a18c62d231a18eb96e976a45a9b1535aba486837d874fff878dec90e0817c41297a1f26bf777f790aa70f5873dd2bd22771161154b8c15f65825915bb5681d1cad8012eaa5eb44dfd79e4c8491ed6c4fd4ba6b721f1ac250f4235506c18e146d4b2b7b9224193de15b349bee96a9cc08020bc158f1310b665599e5e6cf561f9651b3dcc9a5188e869f9152580ad23937db3bc62519e80adcb3416259bbe44bbcd26b446ea37c66e73b74389c186257b2fb5e84aaa3375718fa15ade718156f63e1480331801ced9ecbe7131c81dfd2a2458fb6a6042b1bab188be535cbe529518f302948e8c58d8278e023a71b98b130c2b89468497c2329be6821bd40974da3b6d172fa4ebc94bfa28bd925a93a447865b7e159f37de1945b068ef07867ef398bda557173d556e85ce9246082d6a9dad1c623a70c7849b7f4b22f6a795a99b2c12d2b958cda7c98d40895c8b867313cbcdb5f64871bae8e165aa2f19add5fd1c275a9dabfe25d341f82ce7b52dcd70a8bb44f053d593a9dd0c971dd0bccfaa9190d2bd50a1d3190a83ac55b7661795f850d8ec73e178a275ced6a48d829a87cf3585b6b117e3f7b1bfc74eb2ed86fc31fd1f4fa4e6a9faedb7587ef51b9dafe9583a8d7407d4b86b5149fcbb07e4385f041046d4a736fa5542064a07da470d20653d01d17bf08ef5e2ac5b8dff4e68fcc82349c47fa3f87b7fead868ef58afdb340fe72884163755fbebb42dac40550a5d18b6801af71e8a947361e2b663f828e4fc9b83ed922c96780ed5cb2575a6052bbe5a1d7f9cdcf53c735dc16ff000a2125d57d598126ec0a14b4d7234ed8365dad620098bff0aca1bc98605954ace2c92fad811615d51d2570905cb2fe280a1a3aad824fafeac602e890c68316ff7eac7e10468d24f9e51ec650bfbfc8ef71ca7a227761200399c639968ab3938e26df97e834a272f751c5a9720c2634697d375eda7a85e3cf339e60f336793345baee8b6429138c5beae377541e892dc1dcfa66dc9a084bd391209b0b6f11d004a549dd1ab975c909ff36b6787f72b6ec4c1ddc78e9f5228bbc20b07481ad1ba1b8eb00f0d808bed17afbf09ab5f8e6b8865c47fb91a9df6a6d8afda5d3683a37f6a8a9131b84ef3e4ddfcc53b7edfe08851234f5ddd35a743b555cc6b931ebb8d9a07bf4ce67657c46bf776e5174d83fd2b2c58e1ef97caae5543bd2056e60f29f17c0a7a0bd3d7fa3287ae231aa9dcd029aba79a10ef7aa3023a47118b49237b3d46fbc2157a69837af374923ad3ce1c144c0152cbec6dceea73e20ca1a497ba09ee61faf41ddb8e7925bf25ee1f4c03af23f0c7f5050f10dac689b0ce976063be2d1398a6cd317eec66cec4603504dc17f3d9091724e1a3cb455546feb73c6dada163be6a749ec8bdbe5f681c09b2f89b2d89448c10fe056eca0ff40991b23dfa479378a68249d97b895aba36a1ceec19ad00b3f42986dbce083dffc7fc3d55e19f51f3c1ee5661f722ab95641bbc03837ad165d8ee494926e446cd16c6ed01ed8e2421d8cdc39c2561b0596ae286b756bd5084cc8a6ed34356cfdfd570fc5f313b13806605ce20aa41f7eacd973b198709338b9403f1618ea5e890d97da204b526462b87a21c101c1010133601f028a6fca11842b2575ebfee5036012bd3712e71a4d6ebde5b2e6f35c154418e28fc95df0e6b86f328a5aa42acc5ba39ed7996aafc01295356e168e4cb54dfb118020669053893a47a92ac757336f6cf2ceea3f9f741dc67c33390305050428caf581550c8d9d06bad3a2b56270aa154eb20f219b0d36bbb851b6005ebd257502885b3e7ef3cd6e27683c08bbcc14e6afc7cd5cfef91ecb9e8341244492691a4190dfb4e68f2787f28686aa8d89db2656510a0552568c1688e3db48e6b3df8858aafdeb41dc473008985a82daaca"}, @NFQA_CT={0xd4, 0xb, 0x0, 0x1, [@CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffffa}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3f}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4000}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8000}, @CTA_NAT_DST={0x94, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}]}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xb3e8171d5547f3a, 0x1f}}, @NFQA_PAYLOAD={0x61, 0xa, "ed5a2d5865c66e970a16253d440cf0a3f6581baff6579d022d5549012c1bb2fc28f5852007ad0ac5ec413ba54bc22e4936ada6723df1f4da46b947774bbcf7abf92660eb7c152aee589a43e2e1a6d87bcc60e2eab6ba69b8b3e7b3c780"}, @NFQA_VLAN={0x1c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x6}]}, @NFQA_CT={0xa0, 0xb, 0x0, 0x1, [@CTA_TUPLE_REPLY={0x4}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x14, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x20}]}}, @CTA_NAT_SRC={0x70, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={[], [], @loopback}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8000}]}, 0x1230}, 0x1, 0x0, 0x0, 0x4}, 0x811) read$fb(r4, 0x0, 0x0) 14:44:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000110000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000100000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r7 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r7, 0x0) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000000c0)={0x401, 0x1, 0x4, 0x0, 0x900, {r5, r6/1000+10000}, {0x4, 0xc, 0x25, 0x0, 0x1f, 0x3, "d375cce5"}, 0x9, 0x2, @userptr=0xd3aa, 0x3, 0x0, r7}) ioctl$USBDEVFS_RESET(r8, 0x5514) read$fb(r3, 0x0, 0x0) 14:44:35 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x9d, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="feff3a9b76a9a8af691d926afccfd21fcd592d8d2c894cd5aef08878e43b05dd9999d703bc7dd4b1116179212ede0ace0cd9657c90582a1f00a527a75f21bbada71b466e9f63352f89373ab15fb764ffa0a12dc94033fb95d7803a5fbdb8b9adff9379dfe33ded7bb80d071f2928e0e8ba87927de695c0bab1d4c59746103eb8d5ab800c68ef363ccd347c2a05f25d96c031c6ae793f89f857ffea6568"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c) 14:44:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000120000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000200000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) wait4(r2, &(0x7f00000000c0), 0x2, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="87bda43aa02df5d5229d975de2b27e70cbf2a9c2921652ce03716367a5c813a825ba5c97d4d1efcd32c94110db616654ae6100d175d82dda66b203f2a43b79a7e17b54555dd83b677e5733a937913b0eaec8289bb523a5573964a702d61e14bf991fbfda9a76b57119344464d8f78fc07052fc996fe318575f0a65a271fb83550c55e7e8cc3d"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r3, r0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) 14:44:35 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) [ 1689.493353][T17752] binder: 17715:17752 unknown command -1690632194 14:44:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000130000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000300000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1689.546468][T17752] binder: 17715:17752 ioctl c0306201 20000200 returned -22 [ 1689.558412][T17755] binder: 17753:17755 unknown command 983874951 [ 1689.578287][T17755] binder: 17753:17755 ioctl c0306201 20000200 returned -22 14:44:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000140000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1689.612839][T17755] binder: 17753:17755 unknown command 983874951 [ 1689.627573][T17755] binder: 17753:17755 ioctl c0306201 20000200 returned -22 14:44:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000400000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) ptrace$setregs(0xd, r2, 0x6, &(0x7f0000000140)="f4f579e144bdab0269d2ac7f3bdb5a39ac92eefd54581fec3298bd239142030922243938b15a89bf0e3b44894cd33d71129c57e5e8f9eda31f8430d68401baa603f2e8f4904fe67475868e47584779adb566f8261a9ac21266017eb539a92b4b8eaecef0986deac9ecf7") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0563044021369defd84699fc4cfa21098106dccde05e83dda31f6f2bd2eccd7ed7615a96286cac00"/53], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r3, r0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x38, 0x0) ioctl$BLKALIGNOFF(r4, 0x127a, &(0x7f0000000000)) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x38, 0x0) ioctl$VIDIOC_S_CROP(r7, 0x4014563c, &(0x7f00000001c0)={0x3, {0xfffffc00, 0x6, 0x9, 0xfff}}) read$fb(r6, 0x0, 0x0) 14:44:35 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000190000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r1, 0xffffffffffffffff, 0x0, 0xd, &(0x7f00000000c0)='self/-cgroup\x00', 0xffffffffffffffff}, 0x30) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x38, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xb0, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20004080}, 0x4004800) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r9, 0x0, 0x0) 14:44:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000500000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:36 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:36 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x38, 0x0) ioctl$VFIO_SET_IOMMU(r2, 0x3b66, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0000a1fe"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r6, 0x0, 0x0) 14:44:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) inotify_init1(0x80800) 14:44:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a010800004c0000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000600000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1690.078243][T17887] binder: 17884:17887 unknown command -23003136 14:44:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="ccdc8d8405c6a5010000a2bc8af84f47355ccdd55abf7c3eb475a6227f3b51336968c91cd4b607c2fc15832eaa759475acf43d01aabe16cb25abddd27813cbe72ae316bb915f9080bb2275e460cef1c2bd324e45942ad0b6fd3e5e160c57b008ff10a289b3acb898fde22afe083aeb4665a4944fce9418f1b477c17e14704510f3ba3ec1107ab560996b7223fe8d0115bba2dc51f32aa479b8d2bcd7d9f9916eeb3b27"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x38, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, 0x20) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000000)={r8, 0x2}, 0x8) read$fb(r3, 0x0, 0x0) 14:44:36 executing program 1: r0 = inotify_init() io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[r0], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r0]}, 0x1) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) [ 1690.128759][T17887] binder: 17884:17887 ioctl c0306201 20000200 returned -22 14:44:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000600000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:36 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x9, {0x0, @dev}}]}]}, @IFLA_IFALIASn={0x4}]}, 0x54}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x38, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003480)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000003580)=0xe8) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r7, &(0x7f0000000240)={0x11, 0x0, r9}, 0x14) getsockname$packet(r7, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x9, {0x0, @dev}}]}]}, @IFLA_IFALIASn={0x4}]}, 0x54}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000043c0)={&(0x7f00000035c0)={0xdc4, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0x264, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xfffffff7}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xa2cb}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x4b2}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xff}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xfffffc01}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xe90}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xd1f1}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x7f}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xc0a}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x4742}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xbb}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}]}}, {{0x8}, {0x88, 0x2, 0x0, 0x1, [{0x84, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x54, 0x4, [{0x5, 0x0, 0x88}, {0x5, 0x8, 0x6, 0x2}, {0x20, 0x3, 0x6b, 0x4ca}, {0x9, 0x0, 0x7f, 0x2}, {0x1000, 0x4, 0x3, 0x2}, {0x8, 0x7f, 0xff, 0x4}, {0x5a4, 0x7a, 0xb8, 0xffff}, {0x8dc7, 0x2, 0x13, 0x3}, {0x4, 0xd8, 0x7, 0xdf}, {0x7a8, 0x3d, 0x2, 0x9}]}}}]}}, {{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xae2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1dc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x400}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x400}}}]}}]}, 0xdc4}, 0x1, 0x0, 0x0, 0x4}, 0x48080) 14:44:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000800000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:36 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="b5c5233f8a3ef1a550bb0ede588a44dd6e99f36e3eed6c8406589efd66c9acf24a966df9ea78a8d81235fe190647c16ee265698964c58c57731fee7f6af5082729ebfa0086dd905a76c0ed2c66ca509d170557db2f5b1c3fe9973eb3985992f85bab5657df33166070134e8e067f2863e6999b5117e8def18a8ae9791e11cb37de72e84712909f25782d52ceb03716e0c7480ddd1694a82333a1faba6c37b3d1cc3a541afcb8dc6e8652b3bf5257b8400e906745f27ddbd9e3d5a9c18185184696f9dce3a13faa081a52d3c0fdb3", @ANYRES32, @ANYRESHEX, @ANYBLOB="1136f316b2a38d4103bfeb213b029039f8177c360048f03f9efdf9862f20e16636cd7742ae9696982aab972df7bbdcb99a6cd9327675bec9f0e1f370c5a9d29e64119b7cc57634d8f15cb9279be94316ea4cfdd2029c9531fedc0422298a8d3dd101afdf0bb38ef4278ffdf7fd7257ac2fbc991f99521ac7158acce3a068c12f3c28b79fe1400636477ba461df5c4ceabbc06239e594f40bde9c67476c76c33d4e9632ecb64fe5a884177cf211e1cb", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="78c52da9c14be4fcbd43e797a1a3ba685e7c12e0621980643b6e1564b9d1467b36234920dceb00bdef7c6a2ffbffbd08b398debbb8fccf3f992aecdc825d79ebbd13bbfbcabd388bd2842f7f5003cb1dbf404c9941eb9c3cabd301f97f4cbea0b76b63c20446c89c1697238c6e7b4e27ab7bc4e6fc967a59e094d9e3e59352286e8a8d70b1e87c655646370d4d15ed98a9f4949384c3e8cdef9b1cc61693e79ec2b1334ea08143e8a3738497f3c826992287e2b6aa4ab965cba75a254780aa66d42b4288faf03c7600d1a89046c945998341ffbbfb94dafe1dd0b9b5"], @ANYRESOCT=r1]], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x38, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000480)=0x1, r9, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r9}}, 0x48) write$RDMA_USER_CM_CMD_DISCONNECT(r6, &(0x7f0000000000)={0xa, 0x4, 0xfa00, {r9}}, 0xc) read$fb(r5, 0x0, 0x0) [ 1690.253582][T17999] binder: 17998:17999 unknown command -2071077684 [ 1690.298193][T17999] binder: 17998:17999 ioctl c0306201 20000200 returned -22 14:44:36 executing program 1: r0 = inotify_init() io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[r0], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r0]}, 0x1) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) 14:44:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a010800006c0000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1690.388808][T18099] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1690.405445][T18077] binder: 18033:18077 unknown command 536872320 14:44:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000900000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) sched_setscheduler(r1, 0x0, &(0x7f0000000000)=0x81) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000040}, 0xc, &(0x7f0000000140)={&(0x7f0000001480)=ANY=[@ANYPTR, @ANYRESHEX, @ANYRES32, @ANYPTR=&(0x7f0000001400)=ANY=[@ANYRESDEC], @ANYPTR, @ANYPTR64=&(0x7f0000001440)=ANY=[@ANYRESHEX], @ANYRES64, @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC], 0xa}, 0x1, 0x0, 0x0, 0x24044804}, 0x9850) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40200000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="000425bd7000fddbdf25030000002400018074000280080005000b0d000050000280"], 0x104}, 0x1, 0x0, 0x0, 0x20002080}, 0x4000) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fddbdf25080000000800050004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x14084}, 0x800) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x58, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="7825940c"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r4 = eventfd2(0x3, 0x800) kcmp(r1, r1, 0x5, r2, r4) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) dup2(r3, r0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r5, 0x0, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x200000, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000100)={0x2, 'team_slave_0\x00', 0x3}, 0x18) [ 1690.448972][T18077] binder: 18033:18077 ioctl c0306201 20000200 returned -22 14:44:36 executing program 1: r0 = inotify_init() io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[r0], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r0]}, 0x1) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) 14:44:36 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) [ 1690.543744][T18121] binder: 18120:18121 unknown command 211035512 [ 1690.559364][T18121] binder: 18120:18121 ioctl c0306201 20000200 returned -22 14:44:36 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000a00000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000f00000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1690.645938][T18121] binder: 18120:18121 unknown command 211035512 [ 1690.684056][T18133] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1690.686164][T18121] binder: 18120:18121 ioctl c0306201 20000200 returned -22 14:44:36 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x27e}) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x1, {0x1000}}, 0x18) r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x3, 0x480800) getpeername$l2tp6(r3, &(0x7f0000000180), &(0x7f00000001c0)=0x20) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:36 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:36 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000b00000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000300000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:37 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) sysfs$3(0x3) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000001c0)={0x7fffffff, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xff}}}, 0x88) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) sendto(r3, &(0x7f0000000100)="2183cdac4f185075cbf019a5a2ab3a6d3ff2d99c72bebbf3c8d9846069ce78c9a909dbc1", 0x24, 0x200044d4, &(0x7f0000000140)=@in6={0xa, 0x4e21, 0x0, @local, 0xffff}, 0x80) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x38, 0x0) exit(0x1) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x80, @loopback, 0x2}, 0x1c) dup2(r2, r0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r5, 0x0, 0x0) 14:44:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000500000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:37 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000e00000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:37 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x38, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x20) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000100)={r6, @in6={{0xa, 0x4e21, 0x1, @mcast1, 0x80}}, 0x9, 0x5, 0xfffffffc, 0x80000000, 0x2}, &(0x7f00000001c0)=0x98) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, r8, 0xf, 0x0, 0x0, {0x11}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r8, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x20000001) 14:44:37 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:37 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) [ 1691.135445][T18270] binder: 18269:18270 unknown command 0 [ 1691.149947][T18270] binder: 18269:18270 ioctl c0306201 20000200 returned -22 14:44:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000001000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000600000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:37 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:37 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:37 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x38, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x218800, 0x0) dup2(r4, r0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r5, 0x0, 0x0) 14:44:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000900000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000001100000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:38 executing program 1: r0 = io_uring_setup(0xa4, 0x0) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:38 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:38 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) getdents(r3, &(0x7f00000001c0)=""/31, 0x1f) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$bt_hci(r4, 0x0, 0x0, &(0x7f0000000100)=""/87, &(0x7f0000000180)=0x57) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000200)=0x200) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:38 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:38 executing program 1: r0 = io_uring_setup(0xa4, 0x0) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000a00000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000001200000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:38 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000780)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000680)=@assoc_id=0x0, &(0x7f00000006c0)=0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000700)={r2, 0x3ff}, &(0x7f0000000740)=0x8) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000340)={0x6, "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"}) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x40480, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x38, 0x0) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000580)={0xa, @win={{0x80000001, 0x2, 0x100, 0x3}, 0x8, 0x228a, &(0x7f0000000200)={{0x5, 0x7fffffff, 0x7, 0x7}, &(0x7f00000001c0)={{0x1ff, 0xc26, 0xf16, 0x3}, &(0x7f0000000180)={{0x100, 0x0, 0x3, 0x1}}}}, 0x4, &(0x7f0000000240)="f586304eaa1c6fde2e93f3b382b96ecac6ec5d92d60db6187af6935333976f4ae5d77140fbdb87fc1254ec6d77a28a6f8c943c38a3face8af1a64964f5f136eaf9de76270d1aee71a54e244be4ea369d5b4feda35ae7a66dab7ef725165754e7537614c60a3daca2e5a33ebeb900eba3fa27f4ea66b19ce99ebbe4439878cc13968bba9858e691761f9c2cfdb72369cce5e5db0cb42c0c3bdf7aa8b115654d825646a87c7ab8c2423662878643860a", 0x6}}) splice(r3, 0x0, r4, 0x0, 0x38, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000140)={0x3}) 14:44:38 executing program 1: r0 = io_uring_setup(0xa4, 0x0) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000003c0)) vmsplice(r3, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) recvfrom$phonet(r3, &(0x7f00000000c0)=""/214, 0xd6, 0x40000021, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xb, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x53, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01630440", @ANYRESHEX=r0, @ANYRESOCT, @ANYRESHEX=r2, @ANYRESDEC=r4], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xad, 0x0, 0x0, 0x9, 0x0, 0x0, 0x21110, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x24e5}}, 0x0, 0x0, r5, 0x0) dup2(0xffffffffffffffff, r5) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x800) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f00000002c0)) r6 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x9, 0x400000) read$fb(r6, 0x0, 0x0) 14:44:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000001300000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000b00000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:38 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:38 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)={0x0, 0x0, 0xb}) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x38, 0x0) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) [ 1692.401535][T18526] binder: 18523:18526 ioctl 81009431 200003c0 returned -22 14:44:38 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000001400000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000e00000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) 14:44:38 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000052200000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:38 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)={0x0, 0x0, 0x2b4f7b6d9baaa527, 0x4000}) inotify_init() r1 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x7ff, 0x400) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) r3 = inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x1000024) inotify_rm_watch(r1, r3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) openat$cgroup(r4, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:38 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000001100000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:38 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:38 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) inotify_init() r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4200, r2, 0x5, 0x21) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r1, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x38, 0x0) r6 = accept4$tipc(r4, &(0x7f0000000100)=@id, &(0x7f0000000140)=0x10, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[r1, 0xffffffffffffffff, r3, r6], 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) ioctl$VIDIOC_ENUMINPUT(r7, 0xc050561a, &(0x7f00000001c0)={0x8, "9e247617abe01f5fe536c5e638ed5cce359d2f7e4de24689229f457bdb4d4669", 0x2, 0x3, 0x1, 0x800000, 0x1030000, 0x2}) 14:44:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000004c00000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:38 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) iopl(0xe7) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) 14:44:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000001200000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:39 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:39 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000006000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000001300000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:39 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:39 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x268, 0x0, 0x5, 0x103, 0x0, 0x0, {0x3, 0x0, 0x5}, [{{0x254, 0x1, {{0x0, 0x3ff}, 0x3, 0x7, 0x1000, 0x0, 0xa, 'syz0\x00', "307b1ce12617157b4a406c4950f6eb32383fcbe205f37400bcdcb18846806299", "226afbdd5978cda2be12a94f1cbb02e45de37528c9493120e88cff646b698ba9", [{0x925, 0x4, {0x1, 0x2}}, {0x40, 0x7, {0x3, 0xff}}, {0x6, 0x8, {0x0, 0x199}}, {0x2, 0x6, {0x1, 0x13}}, {0x6, 0x3, {0x3, 0x7}}, {0xfff, 0x6, {0x0, 0x1ff}}, {0xa51, 0x6, {0x1, 0x2}}, {0xdf5, 0x3f, {0x2, 0x6}}, {0x400, 0x400, {0x2, 0x99c5}}, {0xc2, 0x9, {0x2, 0x10001}}, {0x8, 0x4, {0x0, 0x31}}, {0x3, 0x6, {0x3}}, {0x0, 0xffc1, {0x3, 0x6}}, {0x1000, 0x81, {0x1, 0x5}}, {0x9, 0x0, {0x0, 0x9}}, {0x0, 0x9, {0x1, 0x1}}, {0xe5, 0x1, {0x3, 0x101}}, {0xecb7, 0x0, {0x3}}, {0x800, 0xe3, {0x0, 0x8001}}, {0x5, 0x6, {0x3, 0x3}}, {0x3, 0x100, {0x1, 0x2b}}, {0x6, 0xdd, {0x3, 0x2}}, {0x3, 0x4, {0x3, 0x3215}}, {0x4a1, 0x9, {0x1, 0x5}}, {0x1, 0x4, {0x2, 0x9}}, {0x9, 0x5, {0x2, 0x7}}, {0x5, 0x1, {0x1, 0x80}}, {0x3, 0x1f, {0x0, 0xc5}}, {0x9, 0x8c, {0x0, 0x3f47}}, {0x89, 0x5e9, {0x2, 0x2}}, {0x0, 0x200, {0x1, 0xfffffffd}}, {0xff8e, 0x7, {0x2}}, {0x4, 0xb9c, {0x0, 0xb7}}, {0x8000, 0x7fff, {0x1, 0x1}}, {0x3, 0x4e5, {0x1, 0x4}}, {0x3, 0x7ff, {0x2, 0x4}}, {0x5, 0x321a, {0x3, 0xcd}}, {0x0, 0xef1, {0x0, 0x9}}, {0x7, 0x3, {0x0, 0x2}}, {0x6, 0x20, {0x3, 0x7}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40044}, 0x4000) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) 14:44:39 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) r4 = pidfd_getfd(r3, r0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r4, 0xc04064aa, &(0x7f0000000280)={&(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x400, 0x0, [], 0x2, 0x7}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f00000002c0), 0x4) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000006c00000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:39 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000001400000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:39 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:39 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff00000000ffffff9e00000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000a11700000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:39 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000000)="f5af6f", 0x3, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r6 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r6, &(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, r7) keyctl$search(0xa, r4, &(0x7f0000000000)='.request_key_auth\x00', &(0x7f00000000c0)={'syz', 0x1}, r7) 14:44:39 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000), 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff00000000fffffff000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:39 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) r4 = accept4$unix(r3, 0x0, &(0x7f0000000100), 0x80800) sendmsg(r4, &(0x7f00000015c0)={&(0x7f0000000140)=@caif=@util={0x25, "42b43b85971b6009589fb8b769336d0d"}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)="331ea56afe693a61c199a7ac5021505cde88d3ab470e81e3577568573dea3bdefaf0bda030643f03788bd8a7a4518c53e862eee5bc3d41f4ee266e3baf8067adcf15cfe9262c0f2519ac8fc947bc13767932ab5280eae0aabe178be0043d39e6d57361a3b0aa899b4a6559268105d8377f689acfd9d8c11d5842782693349d389e3a53a9ef01a3eca82b92637e2b2459051d", 0x92}, {&(0x7f0000000340)="d3aca6bd95a06af6b05c422b1aa6dd0016819840c961fdae5c0410f583a9cd7701265d1c0a09168e3f680ee76bdde3cd462fd79d8d0d436a6b2015b4e2eb82e9aa32b85339890685d9cdbbac5c472edec5ba157fae848a3e1f887363b71462d19df929ca35c1349494eef2b4e78e0a50d7dbf8e33a4b3b867761b3cecd00a128bf6a259db147e2a7fa8833d97feda863ea0214200be4e56d5af0a862cef08efef9ab664cac8cab71f42c4d18bc4c5686855468080f41f053a109c5ab8948c9e36ad5194bf1e88979337345f1eeedbfbc2d1615b24e850dc1276557f5eaa51ade3c5097a5736bc65830e68913e67dab36", 0xf0}, {&(0x7f0000000440)="87da949967b6fa145c50ca953da9667e188c443542a3b7334ccfb4eb0f320f552e1f74c5c550edd3fa3f16ae89351b031b1fc9ad5704d6d6da434e94288b69701745610faf87116e9f5088a0f8e03ea4473ad163de22579815377274fad9664c802af627923331791fbdc3cee398a1101eab32efb5fb78c7674579c290db63d1a182e6f154628c6f645535833de662fb6a2b1a4a824267401d57508d891728282d1bb1242fa6aad38b0b83c2cc65a115499db0b28c407d53975f094de08b41791765ef41e6f68c47ae2115eb0f3def87d615c47f9915333ce451f447331ecc97b2f39d39aac98f52cec49935ce3d116d8b1aa6c3f7fc065f47b38ad67e1e3fc9227d1a0f18e583cfec02cc3ae878922ba8f616431ace64c92a2b39f1c24dce802aa7558cf2551a3165f72235d5efddce6dba007902ff37c2475ce2c65913d1666974454ab3303c563e7513276ceaa8c1b3906cf4444dc0b0a9f2f978a19ccde7cfd99e508e027b5cb5c0206247a68024e22194ecd8ee765d93c69ac3e46531e1da7fa9e14bb90c6e4a1013f0c3b73980dbab987531bc7073da423903c96cbeff88786e85b5a2571c2209da3a37bccf7c62b62136fdfc62572fd3396188877a21c4cd27eed114b3e10aabc1dbebdab40cafd99983d5d5e9402f3d2c65c2eb36d2c222504bf6fbc90109e4f21c069e436948fad6453433fd68d1bb6dfd1fd05231796f00131de8a5682d374189cf29848c76af298b0344329c8b385952bf3de09a3aeae669e523940f5372f51d5c98661a711231cec0669b0b1f52b6df63ec04901cf3c7c1a067562dadec76c103aaaa76d9d43b9e7b99b9503cbc2049c5a96c2f9c482ad4ab3e611c0074883621081ae673140fe0f34635c72c6aac2f9556fcae4356e75a3cc5c2709caa7524f900684d01a32c01e6228fe6b299a53c7b2c2751c63cba48fc432b0fc463e231e40811053a59db4ca70d3a6d54947dd5139d0950a658deb46a2e768114f3a11dfa299898ccf7bddcea4adb1a27846e52b64fab568e95caeee662444d9664c16a4c25e6a0fddc6cd28e5e3be6595a717c332fc67184fa1f05ebde068974557e3a62c1e69bcf29218c539b3c3cc83685221411a39cf165f110828f8ce1bda024688fafc5b7b0ff69807f185f796147ba283b282f190e0f4cdb984fb869d0b988851d745990abc2b6bfbda7c79de038c3f4df4274cdf4f4e35383ff68a65309f609c257d41525b28b44a30f088c483a654b84ef89448dc9a101360e779bbf4ea0811f7224696843cfea59748809cd7e70ce37ca67d1c147eee0312378cd5cc6c1122624eedae13331fe95bcf3d502bddc84cdb1f0e1dfd8a9694f2369f02e74f6c57c94c1eb723b44b6a2e18b0a48aeb786822b0b721876d80895f6b8262b3a743109f0d08701270afcab56d51f8fcf688ad60a256f186b612275e57a5df03494a83903ab2828a6311c024e36365caeb706c1dde2aa68f618f3a1077c47e88a1171fcc91d52758be9c6e56bd0bc1eea06e754c68187d9014b5f7b481a695d5463c0c67f927714e554800f96b88a253db6a7566fa6d3ffabd6d4a7630ff4d522c1921e64cfea7c1d7fe798b59bf4deac5bb646a2f20f000c1b7168381f5bfe3d58c1e3ea0afb57be976167d11997ed762e036d2402415c30047052afa136f643407478e24040a5fde56a79eb73b58a7c1086bb93538a220b07dc3df6d9f4498bf4fd8ce89863f6eeb99daf84eb955bdaa48c1b784304415a95817c655228b4bdd3b086ea780c154578be2b25dd6abfd176f05e314197c4bc6f063fd7669a8372014c93e8105fc9f4b8092fb053cef26e09a74642545280065a9c4b79d04a2afdcbb12f5975afa225d3023d7c22a3cb56dcc8c0a81face8407acf2829b96621df54520c3b677f6446d3d9bdb62f73c3cfd097ef8df0167233ea405f151f2ddfa37719693c0b75fc21382a6fe3a0d82a5b44d6a4c200c0506d2d0276259759950215eb650b5aa20e698c9a89c8b180a2b86594e91204180aa39a30b1203be95076fb4b77c7b4ad0313efc217194d826eb9381fb6ecaf353488506869e191c7be8186d2de90a9793cae50abec4582212eaed678ec152c262c97f0efab271faae4fb5bc3fe40e2ab471145eef5056f1fa7258b0a7bedbc3a540425a9e2a3f3393180e39d144d0b22caf5bb04c333ac69585ff6cffe83caef38725d072c99a08143e933863c072dc68dc5bcfd7dd78318f9e1844ddd3bcb8e257a2e68f9f6a24ddd4088e6b8913021d3f33c2526fe494836896a2b5c32aa80ebc66949bf38141fa857770a9b9bb619bda34fed8f954c7bdb96a939f64be7746b1415d931eb2b88623ccc419fc215754c3934126d47e1b5439be969b1e79334a359c908e3a3310ed506792c137b8a18fd5f24a9c66aaa6127071e51bb1d9ab459dae79725260d23a4304c578386d62b52b470e91e05d570731937cd74d09fa986571fb8e30ca1815e876fb963f71084e5c4f958c1c5be0d2012fec9e701813edc4c81979e973b6562e79903ecbc2e6138396e9e9556597db641079e3068d72e2ed2d2f8fb9c27f6f54c5c82b796e7c0def1100d8c172ffb5be7754fff7f0c6f2123463963cfff37d5cc910b385548e1d49d395a8dd761621e5430e717fa28f4de42f97cfd8c98ccbb37d6fd136c917374a3cf99f91206068eb2ffbe4cefed371f18409b665fdf7679a748d9926cfa899a3e175355538ef6df3f058deabf6efdb6c6095c3c27ad039497edf6a41866f77a773287bf1217f4dda69d69b90492fc4be8a083bfe5978a049f21878ec79397d69104567bc6ff387ee806f019844627997fb7e60eb55e6a7388059dd9cf73ae1313f2a980948d443ac31b59cc670f1b277ff4aa78fcae0f841b5e76919caf8552cc0e98b1eb19aa1f9a0750f09cf163ea88a2d880271d18fe3c13e52fdae213dd7f7ebf3e7dbd56a5cbc54998e4bc1457cfe0bc35abc114f7b7aa7490e12a548066123c3ed2eea75d61d70df8f5909ce5f9471bfe801192e202f24534231cf3ea9947bdafaaf6f02bb106d481dd5ccae6d2aafb329a934af0c1383bc67ab67bfcdc15bd72ea78d957fdf525155dfb2004c8a71149f8a16c366725be1e1ae042f0f3ec2f5b8570e38cfec24a284f9951bde4c0f2bfd332bf4c55b03805701d50a09bd62f190c607321aed817d2753bffaceb6a3641a64e61754a2aa5b22ffa9261cd92252ef06ba2065df2b6856c031608dd1bd64db2a3624ab4f02ed556800c7a4c29bb15235dd517a26d1a942b500960396334bfbf0ebeda6bf18ad6c6c743185a72c1dd56979032360a88b5ce83686bfd3861cbe0ff1bdd15852940a968a1d95127a281f3b9e227f5819276112007a002feb0d37937518ef664c4c92757c8d55498dd7257fec7d3eaa023ae0b514bc6bd92425ad7a0eb3d8834bd6b699d3bbbf7df36136296ef31651137bad2ead79e4215788d72214ea5e9082d7b5d3fcfbe3e2235e8aa5ac0c1664e3cb8470ebf85ea6fe9bcf4522b1b63fcd6b7bac20df58c7dba04c6dac0714b13fc28f2a73d68e0373d8ff982da1a69886a84cdffd53ec43ec089d09c2da17ad81464212cb0596a2acf4cdcf3ff39f35497cfeb647d8e3b64dae964a68108e81eaa336852ccf51ad0e9a0acae62743829fbe127c3279a648fdffabef88da7e05b0b0e1dee61c3cf4181773cc00b1937d4e357287d977b5ea6b9f658243adff86e51914fc49021cefba09f30033efd856b122e259772d3ae9aaf9ced2456ec95465460ba8a4151782d19048f6ffd04e6cfd0fd901f2fca447cd0c0172d46b703d1cca2287df50a9cb315e2d4768da6dcd9a118e5266b3db17f534b7c197faf7df601230bf925c8055a20b6f93c3dc2b3ac835fd53bf958cca81f94b3e57edc21387eb31384a9df9f88b0549810ca82aa87d977de6ea4197e9eaa2707d2dad70f8e9dc87fed049ee6d588b82b3dd395c639f72f45631da3459a8655bcc080fefc3e7ce6683d21624f2d24ad1b24f3d6b821231a51b8f368cb4ae9f5011fcf114c50fc711c266f12059bd18549206dd8d1860e3a08b04f2f56f47071e2dec6680ced594f5a3f85749735f36b9abb6feed02744a7115c3fdc4b8911c4fc051ae06ba0ff3e7f2ff8ab36e35a6eababfec2dd201d1b28fea39cc4390b6f9c20a2340e6e849f81f98b2c03a648b1c0330b5b3d2d12750aca5746323e34089cb69d82276e4fb338ecc66d3b6153cd82cea8751341c0287ad4ce7961e2cc78b5c0102763d65a8fb12001b6ea0f02f6359f230610dfa4e8514f40a0bfd69b12ea87422f93e142ac61b60de62ef72c1c495578c4e03d09fa074fab42c01bbd3213ebff3ae403f13e3d04e808132f577aa7e7dbe4fbd2f537a87632aedf0931eb88dc963feab54916c28e20d39f08d9e278db3a3899b7d5c970f2643351c525a22276c1e8b0e6ea2f67b909b95925404c65e218babda3bd45b3d8cdc0d9711e58111bc3570d7a5aacfadd515aac342abe725f7a530a66822702a6c95c3b15dd19663852de1de92f3a0989c272de45b1472fa73ad908f1c5ad1c1875ead2bc9da1d5fa1303c98ebe613a9aec2542d3dd640cdab423ee3a9d754aabc07508ebfe40f1d9ba3ebc68a27ab3bb2647a77ae75be8b2c5f7f633d4ebaee1eb4532bbcf1a247b5726d8dd81cc664759dd53d4b97089782d1e0934fa27d2cdf3be668242a936c804f6bbe16015f42c18b19de1d2b66f50aeb2e66763c67a365db5b133c30a5f25c4fd1c7a8609bc5255d2378f5ec9fc525e40c6c42c278466a79f724930e0b552b349c7377f55b675904a09da7d50e0f50c8821a7153092855d4f54df7afd0ce6e115f939892682d53a1ceefe1f3a7c05f27c783094ac64ed451da495292bdd4170c7a406d79f4d71b9cef80d9b2639d41024652c2338ea58b918674eb69426f61046c7614120eca28d0c1fc627375c45e9e32a0e36cfbe797637ae5397da6a27bb1fc4ed781da44257f758625aaaecf09b985ed984ca795658ea80b2e9837c8ae6d4657bd255e53a0deeeb7b6d8f4d2fd69454ea538c97bd8d8b1c88dd552726fa558d58e73314993a2f20b94fc477de3d18387b0adae9c3a67994695a87778078128941f615e77bed48c4b329f8aa822cd5ddc062d858fcf215a9d2a249513e82f22209708edd924dd6969f667a362e179386d03287a462b85166c60c903cdf2ff08c13e653357b8e707eab5a22e5e7cadde8ee71329cb5841a261fe9a8171344dc31c247563a85c1e5267d78a207177a0a7e79d04891b2a50b931dafbd9dfbbdc10a4f5b8bf1f412123da79a1c773fb1cdea84a7f5f8ba62677e3e1f3952209cf65d85ba31ac10d4236cd9110a3ae57ac58646157ac36e9f920c367bc1e23fcfb9818d138e543bc9372f32fa192bb663efc52b29ef6e5a25e0aa891c428a6033a023124c8d2683e2d05ef9ede930db4ae98f2ace32ded40f431b1ef9419e311cfa81daf6be96100a4df47bc542393d776e455d2ca5f6d2c1200393cd4e7401a905b35e8dc81fb2d946e962432bc17e5c8b261c30435bd150b358d8489c423b24d275e7e626b4bc135532387d7ce1eb921557efd9608a92303fa342b6b948aae4e6586ff82d84f288bba984e9e6fa75530aa05ee9ccbde224342e565e2df5ba614142fece86be21fdaee5116e90b2aa84df682080ee104e4466f2b8a5a7025855aa0774ab2acb33d750659e799c3e459c1526f2321f1ff22d78b89604ef4babac1ecc5de562ec7d3d", 0x1000}], 0x3, &(0x7f0000001440)=[{0x110, 0x119, 0x5, "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"}, {0x68, 0xff, 0xd2, "b56e844130b7f3f92091d821033d60c109e7aff8fc44d0f463e683c60b13992469a2e3688b8e1bdbc0276a35000f3d8bb18154ec830be115c8d89f2136ab2601f34b09e793faabde262abdfaf72af7300fd708"}], 0x178}, 0x4) 14:44:39 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000001900000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:39 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff00000000fffffff500000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:39 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000), 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000004c00000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="07a20440e4ac254681de4d3fe8898d7ee3fa2ff5b06a72f425c40f9dc23eda9c6aec49077f7b9118f27e9e21c9216208c52cfe39d0525f1b4c15238aeb4c852f9b012cc0273bd7a81c965463f8ee658097bba7b082048f0d842f"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) 14:44:40 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000000000f0ffff00000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000006000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:40 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000), 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:40 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) close(r0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) ioctl$USBDEVFS_DISCARDURB(r3, 0x550b, &(0x7f0000000200)=0xffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000002c0)=r2, 0x4) splice(r2, 0x0, r4, 0x0, 0x38, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_int(r5, 0x0, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) mkdirat$cgroup(r6, &(0x7f0000000240)='syz1\x00', 0x1ff) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(twofish)\x00'}, 0x58) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) [ 1693.939201][T19155] binder: 19153:19155 unknown command 1074045447 [ 1693.959385][T19155] binder: 19153:19155 ioctl c0306201 20000200 returned -22 14:44:40 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000007fffffff00000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000006c00000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1f, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r2, @ANYRESOCT=r3], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r4, r0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x38, 0x0) accept(r5, &(0x7f0000000140)=@un=@abs, &(0x7f00000001c0)=0x80) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') read$fb(r7, 0x0, 0x0) 14:44:40 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:40 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f00000002c0)={0xa10000, 0x4, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x9b0952, 0x31, [], @value64=0xffffffffffff858b}}) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000400)=""/205) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r6, &(0x7f0000000240)={0x11, 0x0, r8}, 0x14) getsockname$packet(r6, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x9, {0x0, @dev}}]}]}, @IFLA_IFALIASn={0x4}]}, 0x54}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000100)={@loopback, @empty, @local, 0x80000000, 0x5, 0x8809, 0x100, 0x7, 0x840002a1, r9}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:40 executing program 0: r0 = inotify_init() io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[r0], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r0]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) [ 1694.260279][T19282] binder: 19281:19282 unknown command 5 [ 1694.263770][T19283] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1694.299452][T19282] binder: 19281:19282 ioctl c0306201 20000200 returned -22 14:44:40 executing program 0: r0 = inotify_init() io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[r0], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r0]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) 14:44:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a0108000017a100000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000009effffff00000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:40 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:40 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x38, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0x80184132, &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a0108000000f000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:40 executing program 0: r0 = inotify_init() io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[r0], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r0]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) 14:44:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = dup2(r2, r0) r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r4, 0x0) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f00000000c0)={0xfffffff8, 0xb, 0x4, 0x20200000, 0x14c, {0x0, 0x7530}, {0x1, 0x8, 0x8, 0x1, 0x3, 0x1, "b4659f83"}, 0x3, 0x1, @fd, 0x8, 0x0, r4}) ioctl$USBDEVFS_RELEASEINTERFACE(r5, 0x80045510, &(0x7f0000000000)=0x9) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r6, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r7, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f00000001c0)={0xa20000, 0x40, 0x516a, r7, 0x0, &(0x7f0000000180)={0x990905, 0x8bf6, [], @string=&(0x7f0000000140)}}) 14:44:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff00000000f0ffffff00000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:40 executing program 2: r0 = io_uring_setup(0xa2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x38, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x84) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x38, 0x0) pselect6(0x40, &(0x7f0000000140)={0x1, 0x2, 0x1, 0x1000, 0x5, 0x20, 0x6, 0x5}, &(0x7f0000000180)={0x5, 0x20, 0x700000000000000, 0x2, 0xfffffffffffffffb, 0x6, 0x0, 0x80000001}, &(0x7f00000001c0)={0x81, 0x800, 0x5838, 0x20, 0x1000, 0x8, 0x2, 0x2}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x5]}, 0x8}) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x20) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000100)={r7, 0x20, 0xf584}, 0x8) 14:44:40 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000004003000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:40 executing program 0: r0 = io_uring_setup(0x0, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff00000000f5ffffff00000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffee0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r1, r0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r2, 0x0, 0x0) 14:44:40 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000002000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000340000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:41 executing program 0: r0 = io_uring_setup(0x0, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:41 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:41 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000040)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='rdma.max\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) ioctl$PPPIOCSDEBUG(r4, 0x40047440, &(0x7f0000000180)=0x2) 14:44:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000fffff0000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000003000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:41 executing program 0: r0 = io_uring_setup(0x0, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = userfaultfd(0x80800) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)=0x0) getpgid(r5) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={{r3, r4/1000+30000}, {0x0, 0x2710}}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r6, 0x0, 0x0) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r7, 0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000100)='/dev/btrfs-control\x00', 0xffffffffffffffff}, 0x30) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)={0x2, r8}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x100c0, 0x0) [ 1695.115858][T19646] QAT: Invalid ioctl 14:44:41 executing program 0: r0 = io_uring_setup(0xa4, 0x0) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) [ 1695.211052][T19653] binder: 19652:19653 unknown command 0 14:44:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000004000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000010000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:41 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) [ 1695.280170][T19653] binder: 19652:19653 ioctl c0306201 20000200 returned -22 14:44:41 executing program 0: r0 = io_uring_setup(0xa4, 0x0) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:41 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, r4, 0x605, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x240, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xbba}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4b7}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffeff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'team0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x110f00}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x16d2e5d5, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @mcast1, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @ipv4={[], [], @rand_addr=0x1}, 0x5}}}}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffe8a2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000004) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000005000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000020000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:41 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:41 executing program 0: r0 = io_uring_setup(0xa4, 0x0) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05d90000"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) 14:44:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000006000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:41 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) accept$unix(r3, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)={&(0x7f0000000140)='./file0\x00', r2}, 0x10) vmsplice(r2, &(0x7f0000001640), 0x0, 0x0) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000100)={0x0, {0xb4, 0x9, 0x7fffffff, 0x1}}) 14:44:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000030000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:41 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:41 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000040000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1695.776095][T19785] binder: 19779:19785 unknown command 55557 14:44:42 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) [ 1695.841589][T19785] binder: 19779:19785 ioctl c0306201 20000200 returned -22 14:44:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000008000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000050000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:42 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:42 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="056304409cdb4296ca90cd0d1f02"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) 14:44:42 executing program 2: r0 = inotify_init() io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[r0], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x20000, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0xa0801) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x3) 14:44:42 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000009000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000060000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:42 executing program 2: r0 = io_uring_setup(0x40d3, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x2}) r1 = inotify_init() setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x80000000, @dev={0xfe, 0x80, [], 0x16}, 0x40000}, @in6={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}, 0x2e15}, @in={0x2, 0x4e22, @loopback}], 0x48) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:42 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:42 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff00000000000a000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000080000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:42 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) fadvise64(r2, 0x9, 0x7, 0x0) 14:44:42 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:42 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff00000000000b000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000090000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:42 executing program 2: splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x38, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000540)={0x0, 0x6, [{0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x1000}, {0xffffffffffffffff, 0x0, 0x0, 0x1000000000000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x4000, 0x10000}, {r0, 0x0, 0xfffffffff0000000, 0x1000}]}) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[r3], 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x1c8, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_IE={0x19d, 0x2a, "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"}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4045}, 0x40) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r4, @ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x20048004}, 0x24000000) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x38, 0x0) ioctl$VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f0000000140)={0x6, 0x5, 0x4, 0x1000000, 0x7a, {}, {0x1, 0x1, 0x31, 0x80, 0x9, 0x0, "5598096b"}, 0x9, 0x3, @offset=0xfe, 0x8001, 0x0, r2}) ioctl$sock_inet6_udp_SIOCINQ(r7, 0x541b, &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) 14:44:42 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff00000000000e000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a010800000000000a0000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:42 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:42 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r1, r0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5, 0x8000) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x38, 0x0) pipe(&(0x7f0000000080)) vmsplice(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb85500a5a27275e95907d782f4e6fc008f64d9f980b4ebe9c71c811341e58485d9296be333e3", 0x38}], 0x43, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x38, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read$fb(r6, 0x0, 0x0) 14:44:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000010000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:43 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x200, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x20) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000140)={r5, 0x8001}, 0x8) sync() pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) 14:44:43 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:43 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a010800000000000b0000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000011000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:43 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) ptrace$peek(0x3, r2, &(0x7f0000000140)) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r3], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r4, r0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r5, 0x0, 0x0) 14:44:43 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000), 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a010800000000000e0000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:43 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000012000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1697.233986][T20293] binder: 20291:20293 unknown command 808464432 [ 1697.263763][T20293] binder: 20291:20293 ioctl c0306201 20000200 returned -22 14:44:43 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000), 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) [ 1697.324671][T20293] binder: 20291:20293 unknown command 808464432 [ 1697.348176][T20293] binder: 20291:20293 ioctl c0306201 20000200 returned -22 14:44:43 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) getgid() io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000100000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:43 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:43 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRESDEC=r1]], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x38, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000480)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r6}}, 0x48) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x8000, @dev={0xfe, 0x80, [], 0x2a}, 0x9}, r6}}, 0x30) dup2(r2, r0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0), 0x20) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000001c0), 0x4) pipe(&(0x7f00000000c0)) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r7, 0x0, 0x0) 14:44:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000013000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000110000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1697.563432][T20321] binder: 20318:20321 unknown command 536871232 14:44:43 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:43 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000100)={0x1}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:43 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000), 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) [ 1697.610114][T20321] binder: 20318:20321 ioctl c0306201 20000100 returned -22 14:44:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000014000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000120000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:43 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:43 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) sendmmsg$unix(r2, &(0x7f0000001640)=[{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001580)=[{&(0x7f0000000000)="da2344e7f6ec5adce9d533274aea3e393d43ce0ea13de8e469fa3085537a87b5b01d8dd0acfab9f65a45ab7c2cf0dd", 0x2f}, {&(0x7f0000000140)="43684bb0bf3f8d964d282144d20656d3759594005a54fc90082846fafcbdb99847ea02abe4fe8c54c3bc0c9693583ffbce707c608482008712f7495f3534451fb4af3361c431d9c74e144d55c89079d6bf1356f585c3f0812fa05a74f8f99cba133a90aeb2e237cdd5b6ac4f2c2ae30f01fda46b0869386fa6d016785799a0a6df4f711074", 0x85}, {&(0x7f0000000240)="4ca32bcc2a2a1f1c39de126f0853ca36a43620f12037b48b5b9121df462c59a88923783649974c74c62ae80eddbd296498163b64a42188652c39799dbaf4675e9e6e3a559de5cb549b7e85b5d11bd85b0121af738c9b5ff303fc23482ee55f9e1b9bc037a14ba046afbc52a6c843ba167186cc18ea212385a34d694f9373cea7c063f343c284eb3ae6141209189971fe5c6e53cbc80f14271781056ae15ecb4ac391", 0xa2}, {&(0x7f0000000340)="a3ee90819e9e309da234677518440d05a17220f216ad37342454fe9b8430f0f805240f5089f5d8342af47f4ef481c07763fe6b76cdc39ddadbeeaef5050aa4880d95ca4c29ebc603f9b36dc138059b747061fe28efa1f679717e7a4082155a0b66ce9221fa2e8a5719d2bcb8d2cefc08cd0ff17cb5f10556ed75688e441c3b89ef9579642779f32874743d0a5e059556d17538fcd289a83fdb9d4c271a2f880ab9228f384f5a6e75fabb53", 0xab}, {&(0x7f0000000400)="2dfa23c71eb15b40afaeeb0aa5a778ae6cb468dae1c360721853358ce0bf4bac62e11e322739ca2e6ee0ca11d3f6af46ec7d4678643a0428f3fdfa51091b4c4bc8becd3998aa0ebb1048e338abff83e4dffba332590f0d6e6047cb34fe720e7b14e4e8e6bc9e22dc871406", 0x6b}, {&(0x7f0000000480)="c993cbc3b5bffff19e10662d8e6aff7ac7740eebad8a67779b39b517c2c142a7703854c6cd3674000acd1df1d66cf7d73b00076241a5dcb44ed5d0c5904e772acdcf99f3b46b306fa54f25797af991718ae14a8e50858341555bf2bc30e120d10527968c82a4ce05d2aa77c8466ea409e8b9143425aaa9b4f5d62cd55f414af3b6ad31bf39e07635a13e9211774a431d3d938721ab6001deaa5fceed579c07f7aedd95571a3f01fcc4cb48027921aedcc869cea368f33673e43fb845addd15043882f5fa2e92f85222d90b2b092fa9e93213eb0e05aba59db4a1e2e86458ef7855a2e8ae8921d51730c48c2c", 0xec}, {&(0x7f0000000580)="cdaef6717a5a96355633569d45a669509933461c60842e9679f1c9a4cbce1c0eebb8e27dede63b634c5beea3dafc352a626e0b3792d6e8707c89a5524e89c11db0fa3b0163dbf54df50575ae7cbd212f88ace6abaa50d1277b537e7272f9f7c38f6edbd43b65d45d461cdd834acd789416a27ad94fb35fd50c372d901db0af301552c69ef98bed1a9bc8708452b7f464aa138c4122c9eff6d2a0bcd92689cd0382f95122a220380966d697b70390f18bc632979eedf03d82fb0d35b6e8c01455dac5aae662670cbcb6eec9213678e2b0f3f803f2be39e2575decd7672cb9eae87409ced8c770668fcadbca18e7c95656c418ba1ea43095e3f4f72316dca3b7dc00e3829c0c76a7d33057df727836c7e6b17b1babd9553b5995c84ca9d2d187299b4696273b92ac6860a75fa96fdca213be32a55fc3664a7667744eeb9d2b065076ae36c904cc6f927e379aee358635c0a195da37a49534045b6465bc7ab1bb933d04c1cb93900d704a57da9378105fe48d223a9e8afa65c5fc56830b11b4cdf25c8bb06587da1ad77146ec4552def357a14ea68c6b3000ee2568e6625bbfafcb9fab1aef83c8a5a444a770816a7400f8d0519245d60d50a8afb5fc1132fd216315a77c26ef73737fd75700f1e6c9e1e55b015c37680735118f61659267a41deb99ac0d371868e2964d3419adc76e03de9f223b8d12a7e79c30096edc8f320d7394579fdcca0532748e53c6106e79abae8ade79dab74c78a497fca0e1ec9ae5a3ae1b4abf13cc8bae3ed5809156b0e68b621e3b9055ce8afe8a3ab38bb39f868b45d21db3656e0be82a0857374ff61b7ea61896e55326a186c343c4c61074c0036f980754913acb8b37b201ab62e30155c683212150c126876113fca562951e4a9c6fa02884c65db120eaf95d0747de306067c2433b6f4a966116983bcf14fca451dd4f0968607ef5f49a17631f7cee37788656c43f55ef21f7c319e37b61379066ab26cdabab6b96c58c3847dfaa9137058f81ccd94f4980b705e71ea195f9f63721a056c25621d0daffe6b84a5c08c8fe26ed2f00075eb437090e3f36957186d7f144ddad4bb14d72c8c0726c81bdd3a62cf68dcd08872d82c309aed082cf857435c4db42c3082f92611dd65ace4ad99cb10e08f8f624e89b163dad4b41985a9430f60301bb5e55da55539b5409f54aa300f0c2e3fa5200e04e1f34da07d21c6129b5a25cfafad2dea2b63cfdd75b727f8a43e0a9cd946153835bd37ce90d9d9b5caa5db4fc2a872fc1bd6c8204a8dc7d41cf638ecf3cc5266fd697890d9855de9731c70faa02c9cefb05cec104d59d3a2b14f49e9c65da5a59569114da0f2c3c3a52ea544cc53978d25692f3da46c5b3a14ab1c8107168ed48974afbac9deec2b5f508a6f426bbc6a44a3afc95ed9b45ddae0c86c3444639c0614177f928a873191571f8a6aba35ca78a78b3378d42d86a361bebfef360026fdaf36f8ee4d37a2353e50040875e8582b4f077b1672b87d06d2de277d59890f8f4857b77b9e485a9e92670da8c711cb4c3051c4e1f387dd0bd09abe8578e5e4831e3cd617d8aa243ddbac7156fe153a65e8dae86b55dfbda046deed49f92cf7e84a2d7e27b098dc94a57ad347bd237d415b28363756fbbd7ed002b3ffbb4c1e24c700b088feeae9af434d29ab867cd7da6258ea58b3e6d747d84edb131c50c92c21543810844364180a52f6a289c8c5b04b9751530d6b05d5ba2ac7bd3274d7577b8281225e23453c9cf7726c29153e7a69e91dadcfe5585f83078f18b88d25edf194ef8393e7895e6166d04b838e1502380be6530a12fc9de54c6e8c7a366768a06daebc7f3eeff38e2c75795b9ed3bb6b99e00c6e963fcef2d344ac13f636ca0568671a89e4c282630830448af9777b03ee1843fb80a73d9ea2ecf8fc47a2af4fa9a8ed5f729c1ae6b545c35ca571fbb9e648a3423b698d0aac34e43f1a45d552f107d0b2993bfb64630f70332f4ec55df7022bb17bb9cd2424dd21d17e8748260f31cbe0aa0b2daeebc8995d60a147da07a005333ee9f5cd82f249a99b5ecb2812d61c1ed682317d97fe8840f68c2cfbfed9ef387cf7a222973c3cb7b20e72e81a282b2cc335bba109fd60203e80be1fabdd0eea22404b7589fb3ebe801297f2fab2a30bb96874c08db7abb5a84d72ca01e2396736a8c8985b3d2de139237e1375bcd926ddb81b433a18c214075bc097ee120b07b9438b101f238bf82028485b2663bef889e580596215b0587e3aea69deb730ced7cfb34acf3c84b816ff9b927370a2db3d21fe4d190da72ec6b05a3a83127d0ad6260dd996a48bd383932122a2c485eaf47097ed1eb4aadc973594ecde077a893fa00ec99bd068f942ae872d0562a0641c1a4c2431dda4439ccac7a9eaf13543bda5dbb85d71318f31f3cf84b01f78bf577cc5a23ee9f05ee3f137a6007e3bebdc76c9006ad1f7a538eed65a6a268a781511ad1d05dee960250359ab2e417f26ea3205be64f9a8bc4e5347cec024dbf9c3d193989f3571ab866a84f0dd537699d2f140b3ab90d40c8ec46ec6f222668cdb5ea32b9efdb6f6b6e97f1574d8ca442cb372460ae75b36fb5ed7531900602e5ce5e072827b5ca126aa823178d433a440e97897d87ade3d7e5c2c7f59625b285836212a2b1ac012cd1937a778d68ab5c7db073aab9587dd962f60c7d93f91bbfac9b42a4f0ff01aa73efecb02bf232c1ac3637b31cac8a113514b0d43f8816f5bb2030709e05b5270bdb26545496e310b49a8ef012ac9ebf64c0a6152c840a7efd88c910e20cde7013dada5cd6361b418e47771d723290aa4c94428ade130c527c7eb2c1feb1516f40e3ccd6c85d80631d235c1fa27a067f77d2968dcea22193207e0f1770e47195d963d5f6ed5581ae3c9af269ad8ef0d0a518297c6e9724d1c147ee8b223d1ca98bbb05d90d16ad3847d714a57cba5790529d1893daff58d79d8647c336b0789c7a96e733027fa927ea85b6a6dc129ecb3be9d8cf42bdfed1cc5a9f64f8430767af1263e6182d991d110ce8c57590bf9364b3cbd6451fd586de31e31537db99f3966c75ed9d4474b0f75e9c35ddb082032ff9a152ec1a7bd019b1cc580f21336dbfdcb29c484c7692f1f0cd2338e9872521c5025d5e814ab52f996b1fcb85990ac40768d83dfd326ddeda223359a04517a2260407a434e6624b0d1963681ffb04049a62230287a6075269176fc78e457c57b2b32301cf9f4107e06779fae6b4d22bf17145a023ddfcf0dc04e62b88d890d1d1afd7ee784bf87a96bee008b37c30e32079305f2d54ec3d514d9caa9d91aa96f062a742b597ff5219a7729413bda7c6ec4ffcabcc6efcf8f86c975ec1745ed1f683e980c11ce641230ea9fef7cb04748af6ad06ab5b2ee6d7945872390bf4ae9b82850c81fa4e0843c6d7a1e4fb2d2a550a1863e961a0bd0291918aeb4a4ee00b9d05f4a02a420eff86c4eaa7c2ecac52102e95275e8968a22e5406f2f9192f87d149c1fbd1f9f503927ecf391659b89c3d8fc50adec766a3432578485ffb00d184fcd158bcdf08217f13335a4bb9078ed72ffad6f6929982c0350ff2303019b46fa1ac187d622782d9b5757db651577d0708bae4df53db96d07a2699a51993d2079ecaaba1da85baece7f309f9ec6aab2d850d0abad940f1b33012985ec9c526ab57436c7fd06af0134c4dfb0cd18e63c62a05c219b523af394aec9a92347a5c7a1e9fcd5f8e7b0710dc7bcf564ec2a6ed703f016f5880338cbc37eec7711d9d0765442b7d1c75d463b6968ee296afb375909bbab942251ce94392f8754eca43e9e418bcc1ff2605c6c8420287c5e5c73fa0849dc714c8c5a563d68972fed6842252ec94f92be3070726970e5aa82c926dea765a18e206ddc9080f8ecd7b0d837282af9b90bcf84ab87b00113cf56776be21414509b43da4565cc3b65e7ab2a9e1c44975a70f4365dbcf57435ff00dcb50b7ed23ab6e52f4a5129ffda2d7165adb6689049a0fec47b69c00bfa36a21fcaa449bfd1880b5a7ee468738209c136fb3d2b9f36d05e659541c500e9c62632749addfea73d13a8260dada927863844186c8f9a40421958a293331a16dbe26eba21a427cca506b80ed3b655460281f717ddce88afaeaee3f139570b41fab9297ce66929817ba6dc3700d5327397987115bb84633ba0c5bcd8e7e564f9f3b3b1a3f95b186b8b9f7939c2589b76159bc68b1bf61a0840838d76fa45ba28de689cc3128fe47c2df037860795fa2020844ae187a6c71a82126ccb56aec0abbf8d1189cd56c103c4ebf8adb43664b601c01057bb2c16b8818b3c468410386a20acdc2d777eca8ff0fb271bae2c2515d8f77df1411b3be1ca072e573754cb6565b7354e9a07068cb01b2306c2fe45fbba43ca6f87c9d58dc20a135ba21a0d3f2272aea9eada8af850688a78f640e803fb517d3c8f6c65c4c9a541338d55790e3cfe18b4940add9f8dfb766044fccd6bb01902d896dc5e3574f0b5867e1445e41cad34cf68be7a2643adca26f262dcf7de4d23def12d2126882aa800fbd0960f9c7dc4e3c617b5fe8ddbb94177b19e8841a98b538de63111534c0077018f4e0052300a9d8f1c1d1f9053bc494a7922314ab84903275547b6337b3662ef6084239b2bcba3eb43426b3ce3d100f48636259863bbafcb4912e0f625486521e46ed1045e440a5004f898051dd59283fca7684798ff015c30be5d3e316ba9851f01df98921e4c98b6ccba1237e3bed8303193163dfe6d6983c0124c34b6bab6c402154231afac83ac1a60c1ac5f8927ed7ff4ea4d00cafe82350bfc86c6476e7a86e714c81678bb51971ca9f8ffa26d8d3fa68fa29bcf2d34447e8e4266e02040f6f41dcfd3b71256add640cf7f99eef1a65fa5439861eb07f54a84a9431bebf34ca31e10b1bebcefc46e4a3040a5be94f81c37d09631636057f807e67e4c8481d86a7aa053bd07a5b2d6280b4ae43d56d550824947e86c17cbbbbe7444f59055bb2cfa64352f7c50d6b36d1fb2373821e42bbc0c3187284e7ef320f9ccc8e6698029e95a07b50ae3b4ae707f6f0abdcd6a747ccae96ff07a1d492b8284cfd84e2585d0e45c019130bcdc4d65b7633f7f4f3263e373a5f35fc15ecc7ef34a6da8ebf11027b7bbb43a97850e44e27ae11b8a13d552996ad8aa54abebfde2d3a96047a0a1b67a8839b902260723a2746393805fde82b96793e7335123c84036f728e2a55db4e135d623b10499b15939de763cb147e82f6b70e7d47fe0542b11b3ec20c8d253fd834c760045b31f22395cc40738049b4d411b12a49e038b73de0b37a3351a50953a4c30ffd5f38e46c34941fd88838d78fa8965eb27d6dd81c8f8733ae20dc718a096d64e0f5988ab37687d4d996a1e33265c9d776ede0520ae17ce3170a980e0079eee3d0cceea4b348a74f1c1d364ad959b3c0507fa80f6609a0bddbca47768787c1d89ad9ce7cbcf390a7f604e29e78356d8e6e05783d8a6d3c3a2da5e3f875ee945bb0e42ad8ff7c093ce7464cbd78304d71b9dba46aa045f4ffc8e72296ce97fd13259b9c18076d040d89f3990c7c6c8e806406772cd2783756318f1fcdf521e609155990787186738bbf8e34c225ac996460d49406c1ffde08b8ee2e784a3079b48962c3fed430f23e10b05e31eec0571820cdc795690a3e3ab1c001b03f892a22f5e87032dd15b4ade22e7b61fb26e80bf8e285a7e670440461b5857349b51374c2bf7467760ba9ed2e025963903b88c10d2a89", 0x1000}], 0x7, &(0x7f0000001600)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x80}], 0x1, 0x4840) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r3, r0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) 14:44:43 executing program 2: ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000240)) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x38, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000280)) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000480)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r5}}, 0x48) r6 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0xe9, 0x454c00) write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f0000000340)={0x9, 0x108, 0xfa00, {r5, 0xff, "00ec25", "09eecd5c059fd489033b5eed9b1f8cfb594aa3363d0727ccdf487bcb207f0db1097aa9c30fd4d274ed3c66df6a266ea5e4bd47dd82ec0085a7c638ab5f6a72c02d5618a8323faee8272127fdc4ab5147ca9a199f114d2a7bb56caccefa0f05941c1132784e702fc20bf3fc438018cd276b6560b3362983a8f7e951e27fdee2b8b727b04d0a9559ff33264e8e2a39a9840e4044b283f8b57c2e86b1014ebf07a9aaa6027e97f94032859a39431374a85048e3c61d5b3542b66d48684f2b9741c86326c90f4b3f5ef931fe6e4a4872b76b86e5cfaf92f0460a10f6bfa284debe06fe30728e58b300"}}, 0xffffffffffffffba) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff00000000004c000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000130000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:44 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:44 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:44 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) 14:44:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000060000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000140000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:44 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:44 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) r2 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:44 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r2, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000100)="d4b76ab7d11d1a6e1cfed7eca5939bdbdd8a69e2506fe741d08497594dee24f2236ebb07f7fdca74e625d84370c3747f081aa9520e7c6b777d532f69", 0x3c}, {&(0x7f0000000140)="f1af9b739f7a5ae40ae6e1fe3af3969ff75f3c11ee5605633135da1fc26be6e88878a6875a60a57a7c5f23c5e340f0bf6e34ee92cb3790f241b78b4309362c5c61acc3054cb21f19b3f9656f06613c3e499afc49625dc97b04ede7a802232107ae0090be651bc2007a20f3939c47b93733a1e59420970b", 0x77}, {&(0x7f00000001c0)="8bf10abc46f30bb6e1d789986e35bb45adc4eb548097c9f458f81a577775d7be2fe5cfed1fde5f2805be05d2a08f33d6cc70ac7c7120f8cb6f9d8feba484727dfa4bc5ff2e1b7b8c0ac9c042e92ccfb725c89381e2dfc8c4876aebafb380aebb9b2968e969cbe98f87ebe8753e8bdbce8ab7c281e76fda086fa4c027786e1ea901b2896383", 0x85}, {&(0x7f0000000280)="aacf6433e352c73e0246a24c29713e7890f8350a8798942901978e111f9c75aeef497d1c84083927de7a6f2fdf8997463fd90c2bfa4d0bc9bffbb5117458c7120d829da5d63995b929a9cb635e64dc8ae141ea3129ec117bc0286e11d5f40669dfa71412374a51ad", 0x68}], 0x4, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000000)="f5af6f", 0x3, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000380)={r3, 0x5f, 0x62}, &(0x7f00000003c0)={'enc=', 'raw', ' hash=', {'rmd320\x00'}}, &(0x7f0000000440)="0cead0a707b573e07c577c72e2356dbe1bcbeabb8483721c83b70f3c8a755354526b567eb0d726349b061b50ac83955bf181cd89fdc20244dd506c5cefeb620654e0e0e2de705578824b99f11c7ba9cfac54ac2ef25b767e726d472c2f6432", &(0x7f00000004c0)=""/98) 14:44:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff00000000006c000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000190000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:44 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r2, 0x0) fdatasync(r2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:44 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x101001, 0x0) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x6, 0x6, 0x807, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}}, 0x20018000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$SNDCTL_DSP_POST(r2, 0x5008, 0x0) dup2(r3, r0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r6, 0x0) vmsplice(r6, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) getsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000000), 0x2) 14:44:44 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:44 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) r2 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000000000f0000000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a010800000000004c0000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:44 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:44 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) r2 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000030000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:44 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) 14:44:44 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000600000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:44 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x40080, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000140)={0x100, 0x5}) r2 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r2], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000050000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:44 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a010800000000006c0000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:44 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:45 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000ffffff9e0000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000022050000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:45 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:45 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000300)={0x1}, 0x8, 0x0) msgctl$MSG_INFO(r3, 0xc, &(0x7f00000000c0)=""/76) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=@random={'btrfs.', '\x00'}, &(0x7f0000000180)=""/71, 0x47) read$fb(r4, 0x0, 0x0) 14:44:45 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:45 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000200)=[r1, r0, r2], 0x3) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x38, 0x0) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000240)=0x1, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000100)) 14:44:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000017a10000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000060000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:45 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440b52963c5601cc3e86e0ad352258dc4e42aa77a76314be13bc1977475"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) 14:44:45 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:45 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) bind$can_raw(r2, &(0x7f0000000100), 0x10) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:45 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000fffffff00000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000090000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:45 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:45 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x38, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r7, &(0x7f0000000240)={0x11, 0x0, r9}, 0x14) getsockname$packet(r7, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="040000001000010800"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000300016802c0001802800090000000000aaaaaaaaaa00000000000000000000000000000000000000000000000000000004001400"], 0x54}, 0x1, 0x0, 0x0, 0x2400c054}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', r10}) 14:44:45 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x2, 0x0) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0xf7ba6) 14:44:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000000000000a0000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a0108000000f0ffff0000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:45 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, 0x0}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:45 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000000000000b0000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:45 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, 0x0}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a010800007fffffff0000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:45 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) 14:44:45 executing program 3: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x38, 0x0) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f00000001c0)=0xc) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="15ffffa3d88a4e4b79a1bbeab063ca0b5d479f4c196e67e4bd96d5b7a1381b852952f43efcabcfe139b412bde63df544de0c3cbcc657a7fd51344f39676335fb653da840b021b074404ae25c3829a80e200673ca523d2bc1f7ad94a3114d85e2775dc46957cad781e988a59196612ce7a0d4e14ba79493865b675f4507f3ae7cf329244b4d11039e68248ba8849ea0f5ccd0946471ba015fd62f9535b3b3b0b78609c7859fefe6804b39f126032463dae653b1929f2bb5912c4c56166a515865e4d92b38ccbc4fc7df25af5df747500788e47cede30041863c6012ce1f48eb2ef73e97dd09f67e0a6b757911479217981b5d4f739b7821"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r4, r0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r5, 0x0, 0x0) 14:44:45 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, 0x0}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a010800009effffff0000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:45 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) inotify_init() r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000001c0)={'ipvlan1\x00', 0x80}) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r2, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x1, 0x210000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/diskstats\x00', 0x0, 0x0) setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000200)=0x82, 0x1) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000140)=[r2, r3], 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) [ 1699.834935][T21311] binder: 21309:21311 unknown command -1543504107 [ 1699.841685][T21311] binder: 21309:21311 ioctl c0306201 20000200 returned -22 14:44:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000000000000e0000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:46 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000f0ffffff0000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:46 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) 14:44:46 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x38, 0x0) getdents64(r2, &(0x7f0000000100)=""/170, 0xaa) 14:44:46 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) ioctl$VFIO_GET_API_VERSION(r1, 0x3b64) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0e630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r3, r0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) 14:44:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000110000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000003400000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:46 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) 14:44:46 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r2, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r3, 0x0) dup2(0xffffffffffffffff, r1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) [ 1700.126430][T21434] binder: 21424:21434 unknown command 1074029326 [ 1700.157779][T21434] binder: 21424:21434 ioctl c0306201 20000200 returned -22 14:44:46 executing program 1: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x38, 0x0) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f00000001c0)=0xc) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="15ffffa3d88a4e4b79a1bbeab063ca0b5d479f4c196e67e4bd96d5b7a1381b852952f43efcabcfe139b412bde63df544de0c3cbcc657a7fd51344f39676335fb653da840b021b074404ae25c3829a80e200673ca523d2bc1f7ad94a3114d85e2775dc46957cad781e988a59196612ce7a0d4e14ba79493865b675f4507f3ae7cf329244b4d11039e68248ba8849ea0f5ccd0946471ba015fd62f9535b3b3b0b78609c7859fefe6804b39f126032463dae653b1929f2bb5912c4c56166a515865e4d92b38ccbc4fc7df25af5df747500788e47cede30041863c6012ce1f48eb2ef73e97dd09f67e0a6b757911479217981b5d4f739b7821"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r4, r0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r5, 0x0, 0x0) 14:44:46 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000fffffffffffff00000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000120000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:46 executing program 3: getsockopt(0xffffffffffffffff, 0x7, 0x9d, &(0x7f00000000c0)=""/113, &(0x7f0000000140)=0x71) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) [ 1700.375016][T21549] binder: 21540:21549 unknown command -1543504107 [ 1700.381664][T21549] binder: 21540:21549 ioctl c0306201 20000200 returned -22 14:44:46 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r5 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0xffffff0f, 0xf0, 0xf000, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_VERSION={0x5, 0x6, 0x81}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0xce}]}}}]}, 0x50}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) r7 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r7, 0x0) r8 = dup2(r1, r7) io_uring_register$IORING_REGISTER_FILES_UPDATE(r8, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)}, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:46 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000130000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000000000100000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:46 executing program 1: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x38, 0x0) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f00000001c0)=0xc) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="15ffffa3d88a4e4b79a1bbeab063ca0b5d479f4c196e67e4bd96d5b7a1381b852952f43efcabcfe139b412bde63df544de0c3cbcc657a7fd51344f39676335fb653da840b021b074404ae25c3829a80e200673ca523d2bc1f7ad94a3114d85e2775dc46957cad781e988a59196612ce7a0d4e14ba79493865b675f4507f3ae7cf329244b4d11039e68248ba8849ea0f5ccd0946471ba015fd62f9535b3b3b0b78609c7859fefe6804b39f126032463dae653b1929f2bb5912c4c56166a515865e4d92b38ccbc4fc7df25af5df747500788e47cede30041863c6012ce1f48eb2ef73e97dd09f67e0a6b757911479217981b5d4f739b7821"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r4, r0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r5, 0x0, 0x0) 14:44:46 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f00000000c0)={0x0, 0xc9, "b8ca6b470598a9eab28e89dc7fd7cf64b432928b3f31e4a7e6d6ccc09f28f2576730ba247550b54adaccc292481b2190780cbca75717a8e18b573fcd85176f165d8ffd4f8965536501461c592f40ff6baf8f40639276b87c0fd7d984087964c5e5a5113daf6c7e77115ba74e067e94e0e18eae070b5a2faa534a761bf46c5b47e6e4aa19d5423d330cf3cec09dcf8e94789c478fd86730cfac164fd3e3223a53b195a36392bfb2aa7edbdbd723ccf30f5286b9eadad036c217083cb75562573e7c143e0bd9657272a3"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) 14:44:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000140000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000000000200000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:46 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) [ 1700.680303][T21676] binder: 21675:21676 ioctl c0046686 200000c0 returned -22 [ 1700.700956][T21662] binder: 21631:21662 unknown command -1543504107 [ 1700.716931][T21662] binder: 21631:21662 ioctl c0306201 20000200 returned -22 14:44:46 executing program 1: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x38, 0x0) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f00000001c0)=0xc) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="15ffffa3d88a4e4b79a1bbeab063ca0b5d479f4c196e67e4bd96d5b7a1381b852952f43efcabcfe139b412bde63df544de0c3cbcc657a7fd51344f39676335fb653da840b021b074404ae25c3829a80e200673ca523d2bc1f7ad94a3114d85e2775dc46957cad781e988a59196612ce7a0d4e14ba79493865b675f4507f3ae7cf329244b4d11039e68248ba8849ea0f5ccd0946471ba015fd62f9535b3b3b0b78609c7859fefe6804b39f126032463dae653b1929f2bb5912c4c56166a515865e4d92b38ccbc4fc7df25af5df747500788e47cede30041863c6012ce1f48eb2ef73e97dd09f67e0a6b757911479217981b5d4f739b7821"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r4, r0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r5, 0x0, 0x0) 14:44:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000000)={{0x1, 0x0, @descriptor="2470fe6f73004bca"}}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x38, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, 0x20) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000000c0)={r8, 0x800, 0x1ff, 0x31d7b99a, 0x80000000, 0x2}, 0x14) [ 1700.846025][T21577] device batadv0 entered promiscuous mode [ 1700.922666][T21577] lo: Cannot use loopback or non-ethernet device as HSR slave. 14:44:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000000000300000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1701.010975][T21786] binder: 21780:21786 unknown command -1543504107 [ 1701.029329][T21786] binder: 21780:21786 ioctl c0306201 20000200 returned -22 [ 1701.046146][T21577] device batadv0 left promiscuous mode 14:44:47 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r5 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0xffffff0f, 0xf0, 0xf000, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_VERSION={0x5, 0x6, 0x81}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0xce}]}}}]}, 0x50}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) r7 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r7, 0x0) r8 = dup2(r1, r7) io_uring_register$IORING_REGISTER_FILES_UPDATE(r8, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)}, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000005220000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:47 executing program 1: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x38, 0x0) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f00000001c0)=0xc) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="15ffffa3d88a4e4b79a1bbeab063ca0b5d479f4c196e67e4bd96d5b7a1381b852952f43efcabcfe139b412bde63df544de0c3cbcc657a7fd51344f39676335fb653da840b021b074404ae25c3829a80e200673ca523d2bc1f7ad94a3114d85e2775dc46957cad781e988a59196612ce7a0d4e14ba79493865b675f4507f3ae7cf329244b4d11039e68248ba8849ea0f5ccd0946471ba015fd62f9535b3b3b0b78609c7859fefe6804b39f126032463dae653b1929f2bb5912c4c56166a515865e4d92b38ccbc4fc7df25af5df747500788e47cede30041863c6012ce1f48eb2ef73e97dd09f67e0a6b757911479217981b5d4f739b7821"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r4, r0) read$fb(0xffffffffffffffff, 0x0, 0x0) 14:44:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x12) write$uinput_user_dev(r4, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) ioctl$UI_BEGIN_FF_ERASE(r4, 0xc00c55ca, &(0x7f0000000000)={0xc, 0x101, 0x8001}) read$fb(r3, 0x0, 0x0) 14:44:47 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000000000400000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1701.452459][T21901] binder: 21896:21901 unknown command -1543504107 [ 1701.478210][T21901] binder: 21896:21901 ioctl c0306201 20000200 returned -22 [ 1701.480867][T21902] input: syz0 as /devices/virtual/input/input152 14:44:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000000000500000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000000000004c0000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:47 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000000000600000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:47 executing program 1: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x38, 0x0) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f00000001c0)=0xc) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="15ffffa3d88a4e4b79a1bbeab063ca0b5d479f4c196e67e4bd96d5b7a1381b852952f43efcabcfe139b412bde63df544de0c3cbcc657a7fd51344f39676335fb653da840b021b074404ae25c3829a80e200673ca523d2bc1f7ad94a3114d85e2775dc46957cad781e988a59196612ce7a0d4e14ba79493865b675f4507f3ae7cf329244b4d11039e68248ba8849ea0f5ccd0946471ba015fd62f9535b3b3b0b78609c7859fefe6804b39f126032463dae653b1929f2bb5912c4c56166a515865e4d92b38ccbc4fc7df25af5df747500788e47cede30041863c6012ce1f48eb2ef73e97dd09f67e0a6b757911479217981b5d4f739b7821"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r4, r0) read$fb(0xffffffffffffffff, 0x0, 0x0) 14:44:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000600000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1701.782860][T21910] device batadv0 entered promiscuous mode [ 1701.811576][T22022] binder: 22020:22022 unknown command -1543504107 [ 1701.821673][T22022] binder: 22020:22022 ioctl c0306201 20000200 returned -22 [ 1701.852000][T21910] lo: Cannot use loopback or non-ethernet device as HSR slave. [ 1701.985875][T21910] device batadv0 left promiscuous mode 14:44:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000000000800000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000083c0)=[{{&(0x7f00000000c0)=@ipx={0x4, 0x8001, 0xffffffff, "612664b5df70", 0x7}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)="4e003962d633ccc407dd9d8fb22e5cdc76419645cbe717c4c5a559c494804b7d71dd2663ba62ccf2abe6f7c11aea247bdf669eb019182e7ebe4ba716a41ca4f04c8cf86314a321b262893f14d4f4dda00e9129e51bfbc66a590b4d0379f39687b5e3b361b32c76a7e4366e7d24fa2a371563c459af8aa326b1e1714f500134b6ea0d6fbb9832b37ce2f355111c09b144487a368fc1fff5d945508aac61685b35830ddafde1ec67c050ab49c4f99a8f29ab9f84b517558203", 0xb8}], 0x1, &(0x7f0000000240)=[{0xb0, 0x6, 0x6, "dc3c9fdb8520e45a3133e1e8c0b94f3f404ce65ecd1a1720db270cc6630d1cc92357bb53378ef2372f589397a3f360f6829d979071e595398b525baadab899db51246b86c9b7c762903f3ca434374013680114d7f8b83d41294d464bebbca705aecb196aacb4e96bd69e02773eddd2e9bb5750e935c52f195639b744ab1f546d8a29d62c84dcdb159b573465d7a38eb2ba6f3378739789cb652af78d"}], 0xb0}}, {{&(0x7f0000000340)=@ipx={0x4, 0x82a, 0x1000, "110f747d3f2c", 0xc7}, 0x80, &(0x7f0000001600)=[{&(0x7f00000003c0)="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", 0x1000}, {&(0x7f0000001780)="667b8802a2ef9d6dfd8fae48ed574bfab2cf7563a3dc61f42aa17aca209b692a8f6b634da93360491faea8e77fd0a900074e1596795c92bf6692d489d9d76da202de42db77cdccbda3454ec47517a3613f1b9cf429e9bc8928f28becfee1e42acfc2c50d2e68cad86f2ff76a04796dc8ab02dfe6a42c21eefb1e4f28342bc93cc06afe01c3583b28f9fd8bc7ad3235cdf51eaeedfb317487d71c3622961b7c0c79b67c6d739e4a66790b7f8a8bb821369ed387256225b7b901eb0cef4502daafd89e74ee2e369e4e59f8da12eec25f7d6319a472565897cd85e8c1d122a2e7d412a28a5fed9505483370f32227c51f35f2d98f4ea3684b4c1f52e94b902ac12024976772d128ff4ae6a16d126442a9463ae34c293b3b7c0d0eb717b51b5f2ec7b113d5fc9380d09d3664c7212358a348a3fa325ca23111fe0e0e35f34b738edbb9c27a840f3af8df51494b151057339661de9d214eaa9fd6fe9c77061f194c0f4321c59364cab06e6993f1acf31c835e0d5ff4f22f5fd2be654ce1b291d4bbba90ee951243f945586bb4fd2d81eed3f2d9a3a1f6ad3a16da5c1651a34b89be4b9486843065ac1d7dd78f03ab422e95e80fd2f5bfbd770e75e2ec37e36a29711adb341c66a39bee6cd884d85289d4bef75c842885df08afe28d9d4260cb7aa2123b030a2cc69e36952390b61eb071c3f671211b91dbf47bb5c28d857b423bd47c00615a8203ff82404ff1cd80f60eac4d7e4d7cc77064c746035eed60d9f69cc398d02c7756b55283e0c7f72625b29f8b411271631c390d6150dc670d7cd7d105b1b3f57277e5da1cdbf67c58e084dfcc6bbf083e20c66aec276afdd91d6d599a11eae04011ec179c65ace4655e6b13fedfb9856970c5beda0fe35e11475d4712c971ac9d268fa8f16c0e3360823bd5c208a6840f6ed5b8acea3f3dd604ee91d5d11c7e18c47af8b920aadbc7bbeeeafd66307aae192136456f637c018c265964aad5df2428884f7ea4da573b5cd7f11c1cbb1bc192c489ea8a27ac0c7e52107f615b86ecde1b30a8e01864ef9301489730eaf0055d3a250db15ab24d392c7e3caded8f8f2f265af4c042181133637272508786bda8bbb8832b5ce11382d0bd84ebf33caafe0fb2213edd70db23397300dd3d4283d0ee82d86ca2991ac90d86b12ecc715ef9228241d144fe8fd29c0cc3df410198dac331fa6fc5420c82a2a40363d331d9662010508d957c621bc7b3937d5e131c7b8df925537d6200c58c33c511b4b519e94062f53fd7058169eba5eb0dfcce4fce388db600a2027ed411168e85822b934967b40af536544e2d3885f2b36f3ecdc26351f65597b0fae007fd2e1f2bc4de78ca909fd96110701d108566c39ec80f83fa46b5ca868ce9101891820bb2cd5fbad81cf49e88542efb5145ea2202523426f4f68dbe32bbaf78514cdc1db51a56b27bb8fd9db405f57cce158e0ea3ac4c063e9b3ce1f726823aa57d4da76ded2a589627900703af6ae741c71a0914781bb3adf23fbe803e3c56c54baf03e76a09210683a56822c0498c8c04f7d24a5d4c5274d744ce56c040caa6190d253ac305975d0381ec3d46391a2fef2351df9aa23d2d6613af7af65658b78b4c64aad56ad1ce11d9ec4ba487b3641875d78318d252f7a2b3d1a7e481593bf1579e036e4534a85469ad7cfae303b3dd814d8dc14c5ab354dc74f30f72bb87d297dd93af4fb9d9ffb6a33afd0e66f405dce7a49435a437a5a083387258cd64234fd8703cee9e2bebb3c3fee60f24e5db9a298fc13c3573840734dc5e591d8d261606a11a16ae1fad163799f9769e634eb20d97643478e9c0286019b6921bd533bf63edc7d4d555bc4016393382592bc19a09c22e80eee281b1b8b4102dbcf8c0297590005637e456d2572370d13d9e5d7c99f4ecc844471334ff1b70fa750bc8b1e561d98c72ac699787e767f4a43c196994acf76bc050e12fddcd50c80ad7b4db168d8a99b1ef4fa4f020551a8fccb76889a72da55853a67d7c85656d953915464148e111f4d53873f8d037b71e66fed0989f9c490966a2c42ff0887d85a8b741557f67276c6a04e172f1552a3a6f1a4ff5f0af2bddb3ff5334053bc29b9ab917919dbd7e76062ce47788b9dc43734f304ba6bf0a272ce2ec56c57dbb203b74601d54230ba4ea7d7a3e892b8c91a380da86446fdd79ff1503aee894da7d9b916eded276ddff08889a897189d4a2a03cf75e2cfd4ace1b0a86c6a322439bebaecc4cd722e9580bd720390ce30c7f02e2e32bc7c4274a2d71150413d2e9228a7a7a32b44a9f43fc44b0e90510ecc98a9ad65491aedfca0ee94b8fad69a299228ac0d781d64f02e7e0e9338c37380ad2f1bdf08fa93d47a32f0d252e5cabdfda7cba4ff4b04fabdbf80fa03ccff2f99931e8909e943486cb1a07c9b810025e3773240a5ba533a70de88e017529a3ac75cb0821ef22a454d27db45c6847aee1c6bb7ef9cb5b80faee8dec9ed98dee26b40f909aa96f107518bafe8c5c0a131734caee34baecf4b37c96906850a9806ffebcc2eddea17dbff8c6f26d4dfce613633a5d6e359328b779b6b83eabf7fbce8378791273071a14a4a80bd2fcc95738c5f015689a1a9b75bacfce84adb247297686d75c0d13575ddc130bfc98660199a619e88446de7346f843a8aefe8a714c713c881296e9c2880425a5ca9f972cc2fc4afec41b668334864eff84c230c3ce5bbc94830502c5328399989e43b9f430cbfb674df1e6e0219d76863096ff9a4a3d5716ae3cbcf496bf10f72b103745fdc24a164a692b07e0f063a1ee31acb53e77a107d001c76583883cc55c513e337a6050e295ab89d494a3776dd4b282d77a992f45252771b3d3a16b0972044622283cfa50d87cba63e6ad8bb2cfc31328791605628ed004f65b5640c580f0ce2e29263f124154050ee8c3da38e3c37837562eb3304d1d6170dcb7ccebbd7a6d9295889b0916d0f17d21418920948cd90dca88f63bbb28a542c858a625940268d2829dd6a32c8019b841db5651942725f7a419809f2df32357735cfcf19043d9070cdedf1b5b8873e8cb119eae1654733acdfef4a82ac166349f3f0d14a2a706cbae7c27096ba5ef5ad009a4d2a5814f39f712ae262f1118310d92b27b9a037f2224c5b789caf9dcfff0db70f9fd3bfd00cf97989fa8f949f515c93bf24e57d345d7c9377889a651ca4d64726f52938a48056c1e41723ee8d078c3b19d9c305e62b2f7537f39d6761d8fccb10c4641f640bb5a258bef6db0412f00b4556be0c57160ed3a10be3304ab0343e5413aa9937ba3f52e600163f95ae0657736a02b715afd11adacfca99e5b5f69a36ac44b699446a41835b385e16695db40157c9ea0f04194762bf6a81d58be5ee80e763d83d8d03f5fc482cefed8b007cdc49f910e385bdf76eed5c11cdbd02a153b9d873ea88b8557f28e62a2878c731d71abe0acac00bd135c43455ddcef6f0d92c154ee2f42345484177ffc4c36e414a06b0c83e8df10fb336d0d855f2a513b61792474cc94614dca1fb4bc650315813b999568bffd1a955dbb0e7c7d7c63c9c0b47e1aa1a0945ebb7e8b6b834ee6fd10b30b88ba1300d46c32581e0a6dee4ae1339ccba89f090d02bcf5ca0ddd9fc4dc1c7d86f30206716ff51a75913192a1a386179504e902f50b11869887334009419378dd0edcf4d8c40c8a388efe58d34be82303ecf32d57d3d46d5c72fdca73166f0b6d91d041f5f1b26ee8c714218e0fd990c7190747f704fbfa9e79aefe2368ff446cacfe1051a11988dce69b8a40b18718c864670e0fc40c3632f8929d15d3b50b1ad330268f6dc37fe0c4c91694b1fe84ed7635f7f9cf85e88725349695a2942a2770cc18d8810530373e278d36a9c8900427025fb028279065f8bc2743cca4532c81aa737ca852929c8776a1c4988f0dcf35bef1c3c01e21431cbd89786c67bb4ac91ec89ec9606de53c8df2b8a39202447fcdc227047e4b892c9c2069e4e5b2bff06d5792d8fb98f5bbe94d99c1181a7e568b9ba51a693e108a5b6d85effa5a5d6dce207b7eb16350e5eca5af5bd51dc1e27bfa364a02f45bb051b0f5707c4686b5e347ac91a94a8bec3eaed6b957654c28ecf6cde55e63af17c7c976f9ef9e0227074257b538ffa5a1bc93405d1293c010a12d71530512e2bd4c13c0e1ddf872c67615bb0b6daa9291623608da1e1f9f6078485c43f3a5e5769f092c104f9e752f0bac22ef77a24145831ca40be01702f8af2cdd5a4f0308e746f551d63bd7c95f06784e85e9446c3622d162e053e3fbb70601660a0bf51a29fb931370783bbad0f2d14e06057bfd338bcb1c3ac155ea8cfd724db5485dba1c21a19324af15eb2490c8f6941103aab47dd881e308597e5352bb21b28cb8fef8d16a88325680da7b7021f86028e6bc8cee252d3a6e15fbfe012cdbfa0a1de79ecbe9b662675dd8d5e3506768a321ffc89e9b91280c48ef25bef04968877358688b038af337de594e2e5d66c3ffd3f4e1aa696cfd1185a3eb2afc4d693cd087d9e1c6d4d4d6efa29c057af17dde3da0e1151f5fa904e0e466f3cee89079ca1d8f5bd54c77e58bb170a26e390eb1db6cf9972d1905a116b87c7602b11eea161bef44a785a4504cc4010901cdf6e22ceaa47286a7d8ee033c306e163c5abc1c3dfed338a418eb6eb62bde966f2a8aebb9e4408f4511f466b2efc7eca1d3ef8ca131c9216db064e9c6b7a4d6f352e6809be2a9574b5bb4b33ded8340f11d2577fb67dbc0a4263634da29c7cf637445293f749a9502183f26b5986c34e117816c027916679195f5b8de1ac7a0f63c68f0597490848c4865acdda5970b54e5b32d4e9ce8088076dbcb385c7d51c845017c2e41b624c4a20eb635e5ead477cf02105e504f2f5966576ff2710ca57affcc8cb6737f9121aaf297d21d973bc4f47239edf2910b8fdcf08b95c7ada06091db05b65c3d328fa4dd31b49d667053987161f334c20e2709a4a33ebfbeceb8e91d8fb8d88385049737115c652e7a54d209c5e936b8336884d161cab3452a22aa044ead9f34dc12c2378bcf2f733ad962cf6f6259ee6ca094af6995bd9ceadb187630d1244e6e2d4dc867e176e382304356ef67e1d7fb2d86327d124366d1c5db6191ad1e383da1f80932ece12b2eda6f6a60533a08ad057b54f9f6a86abb3be6927ea08e4432a152eadf44dc8c14553e99220c7b1623a93b5d51d06d6e8d9f66e85ee1cb746aec88d05a1f8b179f0355fdff74ffac3e571b22e831a606e235a0b5be9c4d757d69c77b536ef49ee8a0851cb42a825c35f48807cb6cb66dfea3681571018b8e23349c25dfb054b8f709e705336d425fc726c7823780e3fbcc33536b66439e9e2f0c398e478f69bb0c37f4baa5699a9e5759db87d9ad61e01ff7320faaa7fe5518dc6d64b5c7bd812eba9c7421dd09758153f84ee8fb719dad498a3e3c69fa87077141ab67e50cbf4d08c52f921f16cbd4127d9a8c68ea77b178136f4094da687ed31c8a6fae815aa32c82f79e908156dc568c66c05dca779a58645b244493ca4dbefae106e9be940b8f2a7233b069afb2e3063bb196e9b280673cbf3505b6d2617f5dee9a3e54ae5fabc5dde4c5bc8b189023bdaa83e65a7b13497e3d740f95af579641d8809edae8f9b60db738b3b506125e805a6d3594942408757628ba07e87d5a35e57004c1c1e35795630dea940e9a0f685d3b2ea6803d0b6434752466246a347db81c6ab7739c3563cab692cdf79563a881b99b0f360b04", 0x1000}, {&(0x7f00000013c0)="e82bc0014c7359f7449ca4136a6bfd9c390ae5f5ccf8fa7d", 0x18}, {&(0x7f0000001400)}, {&(0x7f0000001440)="2b7d1b3b0525312a028662e1f145bbec32712c08ae1116e5ea27a4da78372655e76ba39bd06c4a8ef6f29665cb8382d959764c0dd003a57d5422f4ab7c4d30d0a43ec55d699f8d1735efd10551fd27d4bd7d32006ae26e6376c385a97024055b4458ffd8dc00ac6d1d277a6be3c4bd2b2717dcb100e8b1db01dea525743a0c578b03fefa2c119a55aa8bae1434ea7da9d1787dbc9b2aab903880eb5915cf8c35ae", 0xa1}, {&(0x7f0000001500)="5659fd3ec436fa4aead3be2a82f23fdeb024dbab0553df926128ccb5762f825580976a6987e953cdaad53b0ad9342163be3f8d1caf5e234dec1451f400182b0f37bf11b717755783afbb28b8abf3751e20490917e0106442400c29db6d882b5c3e811aaba84f356c67c9c5c90f6ddde361cca868aae5812e1545b1222fd00f5b14e8a05d7453e2b0126cf1ccbf8109fbf5abf3243c58d2b65dfe932c8058cc65ea3d685a4412a3236618c252aeadb346b161ed7613a78d7e4fdc3b643eb7043a71ab8dd6498383d3b23653987b5b23d3eb5a9a38d6089e2be4f734fdbf01805b851c72218a82", 0xe6}], 0x6, &(0x7f0000002780)=[{0x1010, 0xff, 0x1ff, "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"}], 0x1010}}, {{&(0x7f0000001680)=@in6={0xa, 0x4e20, 0x8, @remote, 0x83}, 0x80, &(0x7f0000003c80)=[{&(0x7f00000037c0)="dfe062eadac19555fa629d3d8be033f5d77aea74782731822249d4c8c6fc694ccfd301a9d7edf495826a552f0a76ebf29afaab8af8910b7c700701f34d7886eec792eda58cd87c8482a2cab5f2c954da113a9280fc329be441b085ddc3a5c20e0429ba462515925a1cf826923c317883c7669e13a3add54f3dba6fc87efbccdc168378411fe72f81622a57f377e3a2161f769ffd770b2db492fe03554e067089", 0xa0}, {&(0x7f0000003880)="679b6e44fd6941f6b77d4332cf3990db97f77334a3f150cf0f30ae1a148954255d3b868a36c38b75abe2936f52c9f4be9356e6c4d973f6053b581e71ddf5169423ecfcb7289fd914fe3044d63550fc9be7419f952551c7f9fb396e97a42ef22c1067b735152525f6bf4e40bd1fc9d555bfb5addbdf8ee08591f7e32382c715efd40590", 0x83}, {&(0x7f0000003940)="dfa17c970b4713cfc7ad397731e042973fb76506b467b1e4d52189933ea213372e5e1372c5693a4b88bd72450bcba2da792bfb000fc37e5e00f4f566699af3b126d9e86fc6de357c248a78fe9d2c9a2a1b79927b2dea3579b3ae7567c5d0bdd01bf6c3c6f75694a3974fcdcd4c6c3acd3ca9a9e2e246647145b1676e7488713065f39d47d1671d1edca6c362f3e44d00e908eaa0011f4b34f74694966bfb3b67", 0xa0}, {&(0x7f0000001700)}, {&(0x7f0000003a00)="783dcba7e9db5120fb4ec5397085a9a2719c9a36086f206bf32052690122bce7daf010394d24de79d4d6c978effc9e1e1c1550af5d14543c6218451c3c459dcba57007a5b425146e028454a9", 0x4c}, {&(0x7f0000003a80)="76754c2c8771258187844c13e074d9ecfaefecdddff05191f30a5b40d6ace6447296dc8be70ef6e33bec2e16ef0e1a8dd1d14ad3570e867a5de6b68183a4a33d66481bad729833db61c60478b6b7db34059bf948746d1d97ecbd3c85eea0e5d913ad087ece6166f332af047f4a84096720842f253da707724140c4d10e443c4ce61e27913ddba64ad1eedd97f29c7337bd589e04c6ae9a0a59ca22b643b64209e06c46d922cbd8f54e0046267b441b1984e7b2d30be9416cbb", 0xb9}, {&(0x7f0000003b40)="b23084236463fbb60dc7d10ad28326a5b8b15328bfc2e83c97ad139dd4fdf124a7b80793451b7b7378d5bc68dbe316cc80f5322e6d58adf0e8a7d149f82eb3e8544dea5fb255fa9664e13ab04a318ef9ff8b70400c3f6a0ac0dd57e95afb7a514f39924bcaef068101cbed08b992e4703f07f0bd79c292787328ad8b098cb32812297cb13100c377e4bec6bc90830bac41d2e4615c2f1e706c27450fbaf0a78a0aae9affb7ccb0e81d7afe37f18d9cde0286ac2dece375b6b746924735caefbce550387019055a51aed0e6a985796e23e48109a58731a6", 0xd7}, {&(0x7f0000003c40)}], 0x8, &(0x7f0000003d00)=[{0x110, 0x119, 0x40, "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"}, {0x80, 0x10a, 0xe8, "27b1d2af65cd0018c404f13a90de9d848b90ce48db6032b8149bb494f86644c25e938a7e23d80950e5ef52ee5d6330d7c40ef9e09838262a25e52c2337b26cc3d351f22a36cd473d107a6532bba69c04f869dcf73d1bec0fd018a1fd024864d33a7c392d765bdcc6ebce057936cb"}], 0x190}}, {{&(0x7f0000003ec0)=@l2={0x1f, 0x401, @fixed={[], 0x10}, 0x0, 0x2}, 0x80, &(0x7f0000004180)=[{&(0x7f0000003f40)="9ff59c5b053a96a12e78158b8e864bf35ddc53926a1367877ffce9a6d17519a10a261e4fb7799e51396c4b66b91d664d0ed840fa53989a41b31c83397c03c90e5952c0912f6584f524ab5bc777c58327bd0d7a7aa744e15641e285733a335ae78df30847b1100a05dbbd7026f1dbc79be93bc4ace91a9f0c124b40c3461939df7c2ecd5a6dde7d82988247fe50b6918e18926549b1787344fe93a7c4ff4a65a451ddb77c327799e5cfd2a9effa6b68c01141e43a7d4c40a0c69cbb0d9c1291942ccaa518f9896d4bbd30fa5f720d", 0xce}, {&(0x7f0000004040)="5b59192537c56dc88f3c55146090bdbdbb3fd6d9897ad48ebfcd8bd7145a5965d244bfd18841951e2a097d8f90a5", 0x2e}, {&(0x7f0000004080)="4a0d583a26dc3389776fc1dcd723b461e425cbb69f8fc36553df2b4561181215fd4ae4e5b6b67b037afc7355d432077bd2f4869069bff4baad7dc265b65d15795d750d054174e1c64c81fc597e16f2acc4b60b551f8435f4d1052f5456df841c49208981d3f499176b035e29552cb7f14ccf9009b2126f06c7425bb0f09f50724e5007c0c3fcb2f4dde991da203c", 0x8e}, {&(0x7f0000004140)="68ef5c82271272f153ef92036000a27c3068", 0x12}], 0x4, &(0x7f00000085c0)=[{0x1020, 0x10f, 0x3, "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"}, {0xc0, 0x113, 0x0, "9841747bbb5bb00ef37f2c5391812864758b6c7b5812b20acb42a84952acf1cd3afe3a5917c21e50824ede98eaacf1ff6f3c52c08b1c7e9c06e58a85e837a443c9c00785c7bf9f93536e459d697613926a289a2912c11bc9c939842e0f654390fed66652fe74b904764494b4ed61e5b91a70e8bf960e5cd38423453446d5c00df1b9e62c77bf7a2b81a589309231dc9ad33116f0b2f1cf027cc76e6fe1b465632edb024cbdcbc9ab27e36582c1ac430b"}, {0xb8, 0x88, 0x401, "dab8535ea655b53a7e4050c050ea5a45f775892f172af769e19c2558b99f7e45697d7017ae7d014ef69bee27537261ff14e366271a3257e1934c6ff1b09cfe5d0ef8267a0e162a96845c31970c2ad53d39a53b2b293f5b5d017d1c0ebdfa7ededaee6c756adb8a3ea27fcaa9d14f59d9c393f81458eef886fc0220cb2e78d167d9804a6f1ad4b45c8ee70e2f71c9bb5ea2a1a69f9c2375a9cebac19f7f16042208"}, {0xf8, 0x10b, 0x81, "131b7db81e21ca32129413e5250e569ae0566a810193cf6a4fa62eb245cf20aef77593f6b4d2ceecdfc5e4516a4ef571a3604e60fcfbdff5b972a27e46465607200441c4016d7e10a0295aa06978b4819cc0dd4d390abe075d4580367dda39067f93ffe7073efa57f872e40fcd0d0ade6c7d387ad046058cca4077c49ac99ba263ca1f1ffc1067fde07e29a93fe77b68f77b80d0fbe1d09a12f2e86dc525eaa3b02e971112c039b9dc36057810625d7c4f973754cd991bc94f15faeaedd852a8a5e10e3d49349f612cff91e072a976c83b0fb111cb48aa26ff0f7688b2002834f54f5652"}], 0x1290}}, {{&(0x7f0000005440)=@phonet={0x23, 0x7f, 0x2, 0x4}, 0x80, &(0x7f0000005700)=[{&(0x7f00000054c0)="057fc9b41fab6995a431eff9b676c4d36a734f78a48d5d6d2aaaec5bc86d6babd5047691a4787940167300030bbd0f314b", 0x31}, {&(0x7f0000005500)="06387c5dcb9bf89b8ff3658ca3f1fda164b740cac4738f660790e28464991010908c4e14a708916c5476f327cf5a6deff91550ad3f32f3252eef1cdc8e92515f5d4bb3d9d4a71530b43e25eaa489f88eb0679c106a566b1936a3bbf369939c466311d3acd484603e43002c3bf573eb0f5ecd793c2d1407eec6129a5b37341a485e6051084f6471678f6e16b446c8d0b248d6948eaddefcb145c0b9f6960f4591f127ea4b8cae60e21c637af62dcf99fce92a3a239478f363dc7de0a3c3f7a3b0c532525d4e78dd251977885ddacbd856fcb4228205bc", 0xd6}, {&(0x7f0000005600)="3c6ea0af228d86ae9d8a438411a65ad441b56753351d21c8fd67210123be454ac1f368adf6cfa40a76df52c060e31bd8c0199d185960539fc1961eff723a94be059d344665907cb768da4955489f99af83e8a4c911fbf423ab0a0733c8d2c47fe88ad94dddb007d04f80d2afd2015d74d41ecf225db3ff56d2dfaa8ea676", 0x7e}, {&(0x7f0000005680)="227654f27f6a3210b6fc0c653661d2a8463a3aafeaa467685297ae410371df6c5acda56d276cab1fabc77638d20e4c0b93d0d9116d20c8f260380f8d5fc85f0153258153d3ae1fc60f0e5ff4e4897c86387d9060abe7f5bc4609489c165ec29b8d2336144a02f364aa0a1f76488d76cf664d68e9e24761f3c9", 0x79}], 0x4, &(0x7f0000005740)=[{0x100, 0x10f, 0x1, "77509fd8a1cb9436588d8874362c90acc88cb9b00886d4d296d9fcabe55dd7ae78ec4acde4445a377c1aae1f039a59cc32b4d7632f0db13eb3df632b4038e72017cb51b11ba55d37a2b31019b02821fe7f7b454155107456531719899f82801934b21f249b31ea9360ddc36f5580498f9646afd60c1a830569010334b937d330aa45864206f57505c6675194e32173da7b709bcc3ef1b52daad34ac07b30b67df9a03fae57e8d3942927135c2082fccceaf9695d00fe69e821622a71ca6c7bcc34e024be130684ecf7af7ae28316bbd77965cb0d1a2c3879a1112da70ef8c8681b8ea8db595eefd782972123"}, {0xb0, 0x102, 0x3, "102a9e82833241a7b2fb19c9e17640051904c3c93eef722b39229a564d511d62848acd67d219655d17dc3876ed9ccd6b00cb006673f9951098fa43f0dfadaa6224fdfb73be5fe435edb71baa91fc7da6950f187fb8b928f45a6a26d3a3cd305713fde6c44197c84eb2648290219f1697c6dba988343b529ce9a21b5870646e5c25534156ad6879cb609b4ff729cbaecd34211ec36257d37acef2301c801b010c"}, {0x1010, 0x109, 0x0, "30c40f357bc1da59f6bbcf3fe3263abdb0c272042d3f72ace107d81a2d7002cf7cbdfbc7d1d51c380a7f162ac89d4b255adb5726ce8c28fb40ea2ee41493cdb8e3df9b2ce0c37272b451fcd10e774b60165d9119bac5b9bd7cefbe8dcfc87c341710f134b21a33e004aff0a3fa3308eb0aa728a9d542583f86179ced0e383b48818e3ad6cda49a021a2d12ba0f21a42124d58c4c5e68f8240114b175edfabaa219ba396c2379c97266e45606c0d7ff51272a5c28ffcc23977d55a80d5ebce1d1bac5ac4599c48e6b8b6e3977c358fa7af13c412a26eb695db5a6341a98294b618e652555a8c994a16def76b102d3979250265b59d8600be80081eea28fbb9be5bd82ce9cc05e43355d5d44a9f66d4a7b3775066546f0182d7110456ec164406f6fcfe60e3518d3d28aa5762d9a76ff98152b9408e255db863a0eb3cf629bcef66be11e5d1b4392ef63927e1206876e48287fabda1e96f01d46ff117702c4f44500560be9018e59e2e48f4cdf0fcc95672e816df2321b0355432f21bb1076ff3ccb2f653baf5a2e4fee00f92004ca10b4ad4c9c5403051e3b1348d521b3d78abfafccb0e5ab4e3f7abb22385a465a9b92c23f20470d33a467f5e91797ae72d3181a08a19d2d18d1e760bc451b3898df7b270716caa81d4f5bd35d889ed5da3533f0dfd80e9527b669c4299fc92a30248f526e12d0b8cdc690152c4e5ae6ef8ab33ce223d8ff6e702467b83a1797ea25c1b9614ffff4d45c29fa9ef40df7a9d2cd0b59151cfc0dccc2b5a64c980baa065bc7e034556b5b6b1529380df0f8fb124f903ff743d51777f9499c66874a308dfe13ebfd1f69aeeddf1b5c60ca5e02449e0d38b5279bf8f0e7d9153ef59e3d82a407735a3929743a3beabdaa7950119b112429483fc74f530dd55959e9595c9b5a18225533c8d8556f391de50db4d182f49349797c177678d28c0f19e499fe37a01c41e66aab640bbc6a7aaf0823c28fb2a2b374d2624114a917e68d11cab65ddebf43b277df855757fefdaa545473e0610a61dde36e42206a89e61897c079fb59087d2b37768e4cb77e759f8cc3e5d33e498cdb354a82402d756b320e32e641b1dd990b22a52305ed7a10c699d478bbdf8665a7e9c48240e7983416b766f223c4094c833b07666b8168eac0e5c2570c95c0ed36dd1f00fcd9049fe910c3908d6375eb98cfa3e0ff787b383ef542e5154b80e287be7eace44a3c60055737a97e7b13139dfb17b32561f81e830059deacf274ee819051fd47c5e061ea45f04faab03db9312b95a2d58e1c8929bb842753073c368070765bc8b901b730ec95221aab733f2397130893bed19e871ca88d4337f7282be8f80447f04bb75abfd4b929be3310a6a7ed659657d838a19e87caf2290d247e62d10ed54558f71daf1f64288eaea6b6e0e98c7e34b25e08cb6e4b38ab26b962d686b60907d9b7d0e5e75f78967e69d4e869efe936178c03e08106fe5cba7f36383a760a66aac02bfe32b3f4e3e79d2f4f0713dd134520d3eb929b2514a3e15b1963bdd02fab08b4eb16e6e65f03d3bdefabe590120653fad0ff4d43ca4699c3983e13056731b64fd6df67a7ceadd0e17c92dbd6dfe9306dfc0009768ad5282f9908e376db0744b68fab603a74d3a844ecebbd1270fded51e240029e3af034fc07420c9c1f2a821073ec122566f23956ea1f633ae31561828eefd9c127e32866be9003ef6cd30f9325592b324baa5261545d333f31adf630aad16fca4ee77c4f6ef741726bb13121fafa23240b4c6257473b277d0e633e05d280a158bbd72723ce56615e0b44cb42a1c9a6eb55ed0d240e3b9172738289bff3a877111a49f23c36297d98011ca59dcd96dfe4bd9f6df615be91ce086355147f721315fe45c4819d92277d66fa5db893658df52e91cf19d1a7af744ea44a9477d0ea2430ebde090771eb13067e38622db641ff216351bb68bb43017f77f750244e9b472e3454b9a6fed2c26e1300e8d3ee23cd7fd7596437ff7365dec5c82978e6b8f5fa61098663ede8961710e7fd1473ce6614258804a0e74284175769785258015ea5497af7d49703ae77431ab9b9376d55d53a80247e72b664e78b5710ec04051ea63a2ce2b351a4f91f92983b21fa7b20080819a8e410cdcf8ff5daeda6214d2a6142ccd3cea203e07ec6932a9af49b4ccbfbfabf36d7ea202fa9cbe7eb2f0ddee37d18f51d128282be2adc4893acd235452bef9a299bc0d57039bd4325988908f1e21ecfc72493d726ff810433e39ba1c3a5fca56b2a105b30c5022827de9d391be8f4a69f87b1b74e05742f7cd74880a39abfc672f65b212a928119e434b49dbaa09989f6dec5a9ab3fa3f682d8437f2ecb63a3c0b9dce6088fe6ec7a6e143871613273c7f5cfa310e679b33f5fcc17f8cd1ff831497dfb9d6b0bb7fd62b798acaee92042b3eca9b6cea73f57b900d00b752bf689af6de398a8b017b9c3aef72bfd6a1a2d62e9916c2c42e6bb4d3e7af14f7f19ce716315f70de47a7b2499b6103d0420ebf1adecfa11054dd9b947b41d9a98b7f232dce6f6e049221974b5c330f462b94f39c656f33f3df0411761588935df6d525152b430b45b87190377201dc27a5d916b0e2b86a25bb83d48bd95555439650aefa1a23a64045384d53c5779ebc8cafccc881c9ffc08a3f2cdcaf326280c02e131fa2439d7c567d7f3e863c995d6f6f0f08e5c3dcf304fb0c318723c2796af4888adce0d0054226996ed42c5f34c0135e73743e166477a51086343ca407b041b77691e475a7bf1842984fd03d7d7276a1c5c8379d6cd396e3e62d8fbfd6951db85b56c21ad1ecc8ef3012e045f2ed1f55c72dcf698908406dd912dce8462a11aa1c7c7573455bbcd734239dbfad5e306b7087b25de0bf8ee498aaddc9841a4082d76c544638957a6db18ecfd97916d4ef6e0542a1199025987c98afdb018e02c069eaee24a4f2af547350893b51893bef74a7246c8ef7c8195237f29366a5f6e5f3a9d21618f02da8b721ed7212808070dd01f69cd8e9f482022085273aafea1e7ecb8c66ae4f3d2ffacae713f1e291564b3b84e16205914a9282e8eb9300091b0c5ff96fb1355e73acc0a555af75ed3db5fd3ce8e0587060437b0e7c199b72b46436808e38e6e59ef417f2bbfe71a8bcc2eb824bb8af8c8cda92797c39d491dc53e8716faefb26d22db1c7995876030a12f60abc4a4a1a4d1732ffa6802ee8bd1437b6cdd840af31a15028f01f72a96ea44d8aed1e8951a9a8b3b07fbf3072c83b2a5e63196095ba5e2365bc6b98358f5d72c93eca2e111a7ab2362288e1a1dbcd979fcdb2852c6077ef58868cb464315970adb24310b7733c1265812cee605220c42802a436ba01a4c34bc2d5755501c4b35af26af69bc213f8fb86fd81a3ae4f4c600b2efa813fee352fcb42dfa38683ee0f7035b250b345835e351ac717a6718e36caa9d395c8bca45f00917c26ba0dc4ca1f2b3519ea5cf215f8fc0014d757d9a38d3e28a5d425bb19baf8c9684b363e2641087813c24e268a837c2c84b85f0688fe92362ebb13173bd6db98d3aac227c574649a075869518441045cfe8dd703c61ffe70d3791133822466938d6c31424e1b358d613565de0430a0512a200098b322ac36dbe9f978f12de225d2389072b7bb46b0447bd7ede33c51794090d61f9d9b2b931d512d5b08290fa83779098cf118c5f2e3057354d79eb0ae6e70addef3f30dfff7fba6c9d212ef5d59d0d9e32218b2331b52ac829cdfed26083c6e19098387e5644d40e3d2749dd27101b391fd799b4492fdd89e10315955900d617202b472d506c403decebfbe46b68c5da5fac5b261ecf800bf37c5a698621a63efdae31f58edd10c3a6438797c70f1d95e668c7722aaa7f4aae2546ae2e7d716c294d48045a80e9d253a7c760d72cff3e3f7eaf42370c13dfc02dee6d4b3effacb8776b9c31da4290eb733b6e18ab48b13ecb6687ee116f42fbfabcfe947e192b1d077022b1c554d6899f2a2491ded0b82d47bd228c3b68c62e52b027402362111e256b66d92723daf773bb264836386e0dbe7d535d024842cf18857f8555ba0b04ad96975249465ac54f7116a1d02be28bc128c6fa990bf673981435225950b28463b7947ed6976123ef86812a555bf3757d3b1a90fdf0f77066b564fae3ea9435faffec7b51aed21249ce5bd86e98e1f3445c52a5842d6795febae2e98e74075a8aefc7c7381cb4c821d3b0baa36ddbed245d9bb1af1ca07c161ca1d1ac04e49598576f86298dd147625240e797bb51632da96d0f8ed91eb5a45438db3f45e3aae91ce99fc3d759d0ca44b0d8ec1a4c4eaa2bbc3ad6a963ef7a333dbc8d29e2e912aef0e4316d20deab86528348e1fc902e8ff15fd5a7bc7ec061f37017cf3948176a1f0d3e6ddb849b0c3e61ed45de68646f0cdc5fbd3c1e07b88a0e25a775d00ca58b8aef1681651682bd56496adfecb8056caaa9a7269dcf5484b8a1d9b715b685968499309a0951ba7258ab607b2e38cfbbdc3c557595e9071b8a38b754cd27366cefa3d2a17a006139dc8a7cbaa6c25a2e1dd287fc4bfd53b442e34b882123245bd25ff0ca88c3f48f80f72ca728e6ad217cf2014582c6f434338185fd7326a2b3e086bd5ac7c6f343b2ece523bb2f4da19f63b26fd45cf8ab41bdafdb7daa5afada50cbc50ab189c0a1a01aa48f06103bb91fcecad52a34cbd17f2a17fa80a0b9994b9a50a77611fb4cda22104ab084d89b647c1b452459b5cff5b40b49d833e97248a8fb64462139206f550eb7f85aa22b211e2e097209587c6199fd55d301a0e61ef0a8af5a76d13656d6e5403794949df931127b2115173c6f7487e75ddbb731ff8030c6c8f4e563895a07fed2d811d1ed605fedb979fb95bbbc7ea19a9ea8e300164ce9500f4f52c3a7c4124a7a936f37e5a2ba0080e68f979581673c59ad77632d4c4bbd14f4856ec6d74949ea1ff5dd5663639cf817e8d0aab00adf7a2cf71453253509471e8a8e74fa7baf4133b1d07e2ec17d2bee279d801b1ebb1cc8f34e35c4b8a3b8d11ada9fa220d9fd007e07b761c4c493734e16a7742e7ecdd773d5d497eca9daee6e3e5a183b581b5169b6eb1667c318e3a750beb8a9a2200a022936c37e9765414d8a461838f24643774b675da0b97efc796552fff8d4e2f965027beef84d22e24496aee7a881903b779082e022e297325f5f38c0f7ee2878c50a1910bd027398601e6c04b6764e3a8cd9bcfff028bb65fc32c2a31e68f2e64f3fc9e5fafaf8dae8da9925e310a67b07a03c3554a2db1e75f93877d1b8d6048386b94bb83cbed630f976823a6ca904571e89ca1ca041cc965e25dc8ecfdf6fb925785fb51e0e51c2494cd8e9da9b57684d8ae90e3c24d25741e34122b11b30d68372f92e22b70778a35727dd78e9399b7a4a81c20c58fab56662c0c64535d05f6ed23f24b854136a7abdcf5adc9f4aca751b565de0dd0e6ff33cce3fde0cfbd72711b3dc5b07cbcf8d737ae7f744bf6db4980a207643a6fefc66c4c393ed20934311710f2979209d9309e105080f9b1834cd51182c19f4616faea967493a298611e1295634dde30c826f83707cc7c3dd41255f3417b7438d152ab5dde95fc18334d421451261dbd451417a9b780a1d086d6dd2570452743c81d8eff9e4b18d99f849eb8fca7311744cdf79ae654c73feb598346ccd54fb46a4815edf1523db04d74e4f921185a555f16624af67e0b15c198565192e19a30c7fc8ed7288827e577f9973391e"}], 0x11c0}}, {{&(0x7f0000006900)=@nl=@kern={0x10, 0x0, 0x0, 0x400000}, 0x80, &(0x7f0000006a00)=[{&(0x7f0000006980)="2cf9af09479e0e25be633725619cc8c7963ed600dd697c3eac09b0642baeb5d236dc1dcf3c", 0x25}, {&(0x7f00000069c0)="c8afd508975f1e9a515fa5ff689de4eeb77d8011bdcc5655d23108492e6850a9923503bf370da37950aed8", 0x2b}], 0x2, &(0x7f0000006a40)=[{0xd8, 0x104, 0xffff9307, "3744073860d3e08371eccbbafaf31b8733bc87e901839aa3e0722748ed6f178534cb3a18259087caec1304a3f79a5805ced42d62a8242cd70cea9274dac40edb402751394e7e727020845c66207ae6970bea6981708920281d1bd86bce26fdd371ad0cd768d7de117d17c55536e066b419b2a937d42e50b0b5c0d63f774d7682d71894848ca14d30f025fe7f601109017ea6a5abfe19038a1f93b4ee15153c0171cf76d7ae62a1c8102107de69b785394015915f2b0d3b7c802693e43680a3973c8f58cc7be91f"}, {0x98, 0x114, 0x9, "30ed14a24b2c70e4e907a88d847857a98026106999b1e7413e4f83f5e90fc2d2bf77860a1f3d5bb258243c5c06d3fdc5e35f65ccd491f3d9fb8ac98e8ab60742f4146214001eaaf88d43289ad8028b7b708bc6c70e7e72caf12504a4f43be713a845220f6950f57e841e241a3a4157013598f1f69544bf1b1e5ca19e54e4ab6e4a0857415d19"}, {0x18, 0x109, 0x3, "b994d1caabb2"}, {0x40, 0x29, 0x8001, "7c53309abb53a377fa6dee23f4c94368872034efd3e589e11c51d9294ad4199230fd97bf569e5df85684b28646835695"}, {0xc8, 0x100, 0x8, "8926b14d5048243dfbd59f7ea85674acbdb2ccdec27371744fe93f54ce7526f5bc26f988a2b307335c9a7c37d68c2eb66d8e7c124e1d5f9c25ca83ef7e5d40c71afc0e55af76b2adae2319a4666b4833fe30aed0f87edbbd3081d9247aef63135de33c790390681631ff3fa9ac3166e75ec79a1b6dbdc3371c987dc892dea3ce9a409f6f69270947d8cb4ac820c3570ced23a337bc3a7b26cfa15d98f8d5ccfc6399c2f6a1bc36b28a006d0abff392443b1b1bf07682692a"}], 0x290}}, {{0x0, 0x0, &(0x7f0000006ec0)=[{&(0x7f0000006d00)="d068aec1a2048ea39554654f93196147329eb7313ed590f9560ddbfa87ce57466e94c5f3f2c8f7a611ab4c0bfcbd78febce060b469722552e1ae6f07e0dafac318d06a4a9131edd80628b0d7c3b85ad44d6ab65c985f5927b0fc1b0d53b743fe8d541271cc7e87f9479fc5009e002b0eed746b3ffd111c273fa9818d8aa23556ec3fbf6f0c22b8fa1b79a0afe917a46c7355041b6dddcb8725154f77343bab45d400b93771c36157", 0xa8}, {&(0x7f0000006dc0)="ad01ffb85e26e4b6f420cbd2d00b52364e5066be33865156f04eca08815f0e638d7c66cf3b6c2746f1ea20967a91a2f8c00c8918a3b9401caff663af42449b632b53b6bd3432d2cf605ea55507890a447eda699589811dfa425e1004d9976949cbd918bb9942a96a393d1290556aa4d2d71a843e65eb27d99e44e61bb209c05dd0780ced7c61a9d51df52761e99da6f00c261a1a1a9d10c50c23b47b7d933fc8faacceaf6f56513fb2504bc5bea2b1da5711c3fd8a75f875c0b17990d67be096d760f62e3e6c7b78063b10e70e1a7c8f98e627e1475fc79db61316a44d25d769d82ce89a8cda9fc505f363b8578acb1f3d325296e825fc7cb5", 0xf9}], 0x2}}, {{&(0x7f0000006f00)=@nfc_llcp={0x27, 0x1, 0x2, 0x2, 0x13, 0xd6, "84d8e77dfbc41002862455469a9648283fc6126473f460d7b771ca80eee18a00751c3d50cda620478fb60cda6135be1dba0a8427869afc70dfe5955ecbcdc8", 0x1f}, 0x80, &(0x7f00000080c0)=[{&(0x7f0000006f80)="999c436f1da03a489672d94a7dd6012197d9d961bb6970e2b979c442971397e3989b27a75d17e60eac5fd82be1fd9a36e4a8b52053721c7680d8", 0x3a}, {&(0x7f0000006fc0)="b7dfee5b1207006e70720a2f282c29b4964273e7e357db1ea6b83d9cd2326f6bcf32b7f8b966878c565e269d28c07c0728396985fb95de49b226abb25c45e95736e03bbe7f3ba3e3f58d27e353db591415c2e5d6ece02d3ea639dc1f75030380049d2d7f7391fa70392dde6353be2208c199eabe8385f57754bb7cdf2ca963ecf6bb9704e2bf34c2fe2267376606a191321222bb5e77b7fa4e10b9c96190efe28ee2468b73f9221e3d082bcc04fd84d6d7ad31411053095aeae6ba204dc7d0335f674d2dd774427e2d64a76386adced42a3f21cb3b95047ca7b8de01d68e8941e0", 0xe1}, {&(0x7f00000070c0)="323c05b57126a5148b4925a03d689e6da3e0a582c7ac6f8fca591b8af10174ce4ef180fa6c2eb5b929433e50f3473459ffe5df1bf2afd8f65602cb6e9ab1f47da74027532a93349e45a84f6592311b549fa973aea77079c4aeeecca0bba3b7fcc5c3908b17629602049bf83aa3fb9ede705993b4a6f2179cdcc89c0b8ea59861b783b78d35d577489aed0a3e90ebac47fb022ae0981b753d2af074361f66e60f95ed5d215fee47577ef2ae5650ae1222cf01fc6615940a8d33e3bc0a4f5802e7db4a66add8e030aa5a14160416c5b51385453224eeb2e77eaf0fad0199568735a9fd068e81ddd4a4142d9ad4d048d06cb2b05cc07af175a9eaaa03146fc088490b02a768f09b19b5b84759092fc21043da4f7955831747eca44255ff027326bb27ad65cd0961a8e06fafef7a55bfca858250b71566638d1c96134de8f72ee0d19d6f0380553b454bd0a180a26fbc49cd5709fb91c40c4cad62884063fc76c9b77b46078a94b51dd89ddacfc93bf2885fb1e51703a78ee36f07177daf199256b1e571c80427b12240c9067c324d018c7bb892a15e457272497a0a59da7147e465ae828f803fbeb99dfea7f89d6f88ece2a474360f480ba1a49c684ae5378c6d925d72e4f1f43c785d698cf8d2cd342fefc709880de6b4ffa5ae5d941ba2434428a57fb66b51cc163a3dd1176f9a83140bba9f745a4afebd004d781a9190674cb22be6735ae2e228dbb08c3c3527917ce7c0c2fdf678a9647a46a72ae7ec764d843dfd6db65eaee34cea28192dad34b4370f30084fb4c482f6a840e24fe1a2eca2f9c5cfe4790dc713ca64e8772818f91c66a1ebaa39333c1cda59e26028b3227b0a5cbe6db86921d8f788297dcb9ae36d9820c9ce360445e732b864c1cbafc0d65032df83315c470cb2466871f74deb5697c48cbab400a87843957417e4427e34bce0e6ccf17a10b8f2c970eb0b8d9b830f213137f1b883678bca47b3402685b1a534ff4e72df0ea54094a2eee1d56addebf1278ae30bd95425059786776596e7727f96bee25dfc9993b99c25064e8b3f2bcf5f4e87c609412bb20736d68193aaf817c0d44992553bf3fccf6b40a3891bb3274d88efec6f5cbf6d968b8e2a785831276fd5d6a954bf8f5cac40ada289d2ca6f215b69452d935b9729b283346a5e3415bf892d886897234214b297b10f9e52568549d6eeb7b1becd795738b062041f0e0adc4652e9f5643363122239f7fccb84b24184ff56c51b4c882bf1f2560b1afdeed230dfe5b5962133b98096344326074845e6be79dd20ff2e5f9fd81f89c59a45e1f5fa4b781ac337e4d32d0fd53db772abd93d287340322d6c62d54517ca17abc5ec0e9020415a9482a5c8863697bc37a7dc554e16bdbd44bc803787504eb4f54e3b064ba25aa237e48704e14e7a14dddc3055a776a4ec930e6debb439c2ba509e0d406408e8234f77bec263371f2f2709e0ea36f2a43ee206f7ad35e68e981841c4674ad8e9b73f63c0be194061ba345689d54e021d24774f84f1ca2e5180da722780806b647207c436984024fda9700987ea89b60f3dd4a419e3643a85c5b1672bfeca673dfa03a0e9b49722c71c048385abcd2f9d8e1b508970be34fa383b10f0684c40ee34793560a629653b224da296b2d58df57870145c6d382e08f6ecc253aed243410876577899f4852ab0457e15321625d2fd236097f5a91a31fb242a15fa161ffb69aff9074542de3893e6e1ca32f5c2d9a51c6031659fd669774069042462005c252e3b0a6c8e1e15db6ea94ee47f8f37ceb91b2605389d2f61e0ce56410d9a4014d89e9b096ec45af3f1425690a7efd32fd6909e4374096c1f7d9ae8ef907687472cc3dc618b21d8b522fc4c9ebc70dd803db7c956a68cbff87817b4866fe1bbb94a7e9d0f31f6feb1cf613931c1ab1d6ca8de45ca42383cbe7eba9bdd267cb3dfa81448a2ff1761d24da0549a5a89d5d48592ca610dc84a37f2da2cd96b5d8b4acfc8f2124288a31b94a4561efba7d818e6fc69ca045e7bfbac7b2aff4af8d00a2b07c66b0c8b848d3fc2b00a5f9011bb60af07da9e1494348c8cd0fe277b58360f469a8ef2749ee43da92a6bc0316b8395a0eb5d505cdb266616c0afe88ce40c5f9df765a9c6deb2bd26277d0182ff8b85ce1329f553b95abc64a3995c99526fb28d4836db7554a10dba0c7fb54ecc6d813a73e12038dc06b9de50e7b0e94a67b27b58247a0bc5a4c65aef36054e33cb03acfb64b1dad5cd035e03984016121565c5bbaaa521a09cd5a96c5cfd13ce4fc8b7695149f4b14f50dca29d39a9ce6de467a0a801626864c75fa5d2d0caba95e5a0c27d898daf7a1312089e73444015374651e4a16e837e8e7cb07bdc8881039953babd4194097e8ebc24d68a601adfdc1d95a9ef0207ec053365b3b65936a4af44eb2aa6915035f56ac17b729c8a155b49639ffd663098b812389e2dc509748699b658c2ecadd9f52d1176abaf65e5b9f54715c38c7f29c8fdc9953cde055421bc0a2f93b1bcca7410d4f9c1438b76e2fd6708af2004ffd8d196babf2f9676d04a82f1510d7179cb22b5239eb1b77c66897fb6bf58ccc2e7841146aa8a8e66c8e3e1f8fbe482050dca7e5137627362070d188982c7b643765242822778e5cc318ccbf447d482816b2ceb7af63e28a6ed63c0d816a4e7a391a76c4a8c0cd9a5fd83ab15b26e81e6feb04e35485711e758c2024e9e6142d27760b0c50e51c47ecc019cf8706167fb9642021f5c9742cb823663ebb34046d8e0c7ede682a8cdc3be21e7d7e22bc086a6a0118c306938dfb8f7e7ea4208649ed649051c04477110a726ab7068479d2273e4eba3fbb90fd93c78acf9e16507427e4c4c0d1e83c74ce222c04b733f872ba4f3fc148e0ce9305ce72817bb183ffb8c251a3489d3feeb25ead8061c4354908ba9cfbe351865a6bc6ad87566eff1ae22f68e75540a354d1d52e6d0129a7f33d9a833f9d38e96ee04c0498abed9963f2c344880d437eef9311b360edc3c2172a81aec9f1b79e7985a79c3a66a9c768f3b78aba0c9c2abaae06144e111f2aaa182e28e1d33d7748b2156a8252077124840eee654837c2315935326b429742f46317af9f1db21662a4488ab421911fd3ca4039fff332be70a83eb88addf648f96b48264278f5015b12a5ecae9394a9088e54b72e157ebfe1e7f7b757177f18278b1dee87860455ca956f90a4cdfebc62c9e235fc72c7dbda82cf635ee8eeae496fea322d66e3863a36a77ccaf4e7b2b8c5f0aa7b26dc5b198754812cea90b4d34664ea08dd114e85a34898ad56c4ddb0da3c447fd833e8cec3f73c29b6213c9e7dc346d3924baefee426468aa5d92c44730a33e70d8d8e2b7aa0eefdd3c7aa30a50012e0ac45faed1f69924e52ee03bf9433ed4abceb2f0b7e2dd6b14b3db1542b2f19b4952803f12336017033adeb49225932938a7c23e3d6f024ea30aa37d1f13bf401eb7f7df2b22acdda87bdfb7a59874fc2069c1ee97b70f7cf3179c936968907e953d5cd1d56e44c49f51c707213d21ccf13469f61335d5747c57bb318e383481bb3969d257e082c914d2b9c4f9d862a4f7c924c429aaf3f17bad46e75c6ea142bc5f6f483fdf90e2e92ed5c3c45dec89a57e3cfb21c5514eafdb0e02d12d7196d71ca6a46a905c3254d60daa237e6b6aa5d442259080dffaf31d0a6f4ef18f6842b79218c865eb6da3016a55483328428bbdec06d11102afdce9e5bd683b2db7cd7dc1083f9fd226abf57b7630306a35b8ddc34ad4bbce9f41298371c7a213fc09c33459ad21bb52d204a58938384067ef5487ce5c651a312a9eb9118e3a598dfcc63eb042fdb88d0d7ca1e3aa535b3f1455a5f0104759bab9e59c5160c08413189a515a48117ab6e68f8d2ccfe114314758e906b236b325d591fb688903cc3effc8a9f41769ddfb94f46a03717d1f8904375c7e65ab0736f3880100f574d2537f18304f08b155360a8dab838c600da076e7467acc2b673dc14dbe6b7847c21419f594ee2680903b88fa6b97e81ca052eec21ac524e505cdaa4659855c0266e3caeb31eb7c898b2cd9dfe3360e72515795c0743a44be9ad9fc8ee50054eb55ffb1c4218f7048deb2fe5814721d73e2e025922e597d87b1a1cfb642b0dc7ed0f707ccc51d7f5d46a40b8e0490148bea117f484f209920e456b4e5ce8c666ca57a8ba9437610c0cdc48ebc6201413179c965d4a9f55b51ed95ca881fab33ac816504740376e7a96b3fe89a2095959e942fe2cb8a093c257d8f69c2a5d0dec07c5d83c897fc39124eb65fb3468d8e1d2c04e6c206e6641ab880053872891631bd3d40fc1688a11288b0b1d240a7986970f2bd4107c806182d494da72015eb1cdea3ded2b91ce910ef068e8955dfa99914b34882eca723fcf40d92432bfad01d9e5c8c579572a6a6af19a0640a535ebea65eadefb05a956f7a06da20c640a4afb50db60509b319d5a18408d251aa5d4075fa7eedc04255c2978d8d0d5ae6a08e0ab9fccc3698eadaba0677dd61662f48e976cc49f1559e5f5839c115fe5381a3f32dc811601785858e87571e3b16bf8fae313778b015871370a9ae747acb3c6fe8464727dce9952d77988b46fe50dc9ee23943c7bed732b649ad686b0ce738a99a9ef31724372af8774f930f4cdd091f276cb20b96f4625444795519c5d4c8e7aa28cb247249e41ca8c6fca61b1ddd7271d293e6ed27cffbcc42954d24a0671d7d898d0e9b4fda80ce14d9dbd3f0f6ff4d25fbc8d96b539c36c5988af2dee375d8137cf277031100f78902fc469d77efa6a293e9d5fb1daddda2a2a26400c730122677de3fb90beba6859486a352a0b2502bf5fd80d5de811363d1c63ec9f11f548ef012dbe7c3e5fd2088f8a4430341e1f87c17915b7df0a7644cd062bd68962bb361fd346edf298c3118a44c0dc5d2fa89ed3c4ca5d6205e8b163d1e9001158e60f65907215e65c56e01c3e6973e1e4f0ed875815a7146ce464fcdf6dbcfac96e90608e43e35795a553c6dfb207322ba1ae64238be580f4f2c35619cb24aae99b316f581a7b52f19d236b71a060641b110fd751acd9ad1b2724e1c524ec95fd77546975dd4d13b3bb4dcb5e3ba3efc4d5f541817d874580f38d67eabb2b0735dd0ee93c5137ea1539579de1780fc0f7abfd682d8db1ec980fdc174865dce352de79faa71770da55d8e75e249fc6a3823d0677ea745d13934f32cb59b8f6f7f552ffeae1969e5ce88a1ec26a6e76305d39d11ddb9fee3b8f39063b4f37460a19d6d4f118937022d0a48c85723c17c0ff4d9a31258cadd5a306752dfe5f0bd7be0b18ef6f0657b77a5675d67e77cd077100d4db69b5de4f6f3537b5caa872648d84cda0f0e6b342b4c4623b1342623b8226232f85e829e8db31b6b3bc17dc4674f832c465abd43e797a74a71775c41f9e0d12bc60b08ba25d9c747b0835675ef88f837d95eaffb116a3db84d6c2eecac991a3c056f908a1ae8a420e89d1c64d99a4077795042d0eca8a348225cb4d1d8df0fdc84872767c21ba9af3eb3df68a73846e348cbbdf8c68f7da4dc9263cf4007c0ce8cd14072d9e8f2dc9982b119e7c1b1df03cd81c6a04e0dcfffa5928ebca551f8d71a6c061b93202cdf05895d3c194f8f89e0caffdb41f58caa516a6407443156250ca6e4dfcfacea2d58ebf28f356bb8e2cb64b584dfc4edf53285a30da6d5af0ecbcee78eda762e9b31d89c2506011f289d5f43e1167c4b209fadc8074054636b6a8c5bdc909916866f", 0x1000}], 0x3, &(0x7f0000008100)=[{0xf0, 0x28b, 0x4, "a273ade469017972d059d62a33e8696e8094db8b2e48c175c5fd606eb934d0f5ca58b90baf283cdb82959f232144a409e46f24111b09113e1ef48182af38a9521f18de05e4d5a6636b8bf5055d2b3c5780955161c944b92119b735bbfd16668faa39de99f72a5cc2a7b54d572b61a27bad8ec4a8bf54c1ae674716c9f7db42d9d6d8258c7bb15605ec8d93e4bdea990e59b10cff435f0199d8fbefd16864fe9480d802691308209f91efe3dcc79d1a4c416d448e342ac22316609dea5f279c9dea770c798984a105f93da484c978b19c6f30c79dd58394de6fc217dfd827"}, {0xd0, 0x108, 0xfffff20e, "662459f13a48ebabb0290e96b8314498dc9211aba4a8050230717e33afde67a98309d014cbe5d2f083dda68dc690cc5f62d3103735b56f094d11d7707c2468fb42107c6a3fd64cf4fee5c89882a3e232bc00db60d399ce788ea220c8dd6d7b90e9c6634f7c40179f443db7bc1166e6623048dc02e41fbaa8a911ef0f1aac1277f9e8f12b062617085bc2f252c7bbebbd6451afad45dcb89a49a7bf90193aab2f81792048e830832ee5fc69176ce5525b2a02604ab323c8a8d2"}, {0xe8, 0x6, 0x71ac, "60a752bd70ad080ff3343449de11e644aae5c73fa0b8e0ed3cecf8470c1f1c135eaa4a357c9f367ecc30905ca6a35fe0d1f7be52a0bfa3275c582bfe2582a9f9079297cbb57293884c89120f8649253b7be11ce1f1611de7c877a07f07dd2a4b13a906208dfe7ec5f583fa386c46a482f7f685fdcf2b25d4ae76de1f31d7e27e764aa17543db0880458bdb2702dadc929b5f83452ffec04f0df288bf92a85ae98e69cb6198b40e4b1d0496abcd51f6b2e8f91b67eba57bd466f70cd30b4ba59480a50a7fa843eaa2dccfb3f4a1534201999dfbe513966b"}], 0x2a8}}], 0x8, 0x20008010) 14:44:48 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x7ffffffffe, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r5 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0xffffff0f, 0xf0, 0xf000, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_VERSION={0x5, 0x6, 0x81}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0xce}]}}}]}, 0x50}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) r7 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r7, 0x0) r8 = dup2(r1, r7) io_uring_register$IORING_REGISTER_FILES_UPDATE(r8, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)}, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:48 executing program 1: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x38, 0x0) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f00000001c0)=0xc) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="15ffffa3d88a4e4b79a1bbeab063ca0b5d479f4c196e67e4bd96d5b7a1381b852952f43efcabcfe139b412bde63df544de0c3cbcc657a7fd51344f39676335fb653da840b021b074404ae25c3829a80e200673ca523d2bc1f7ad94a3114d85e2775dc46957cad781e988a59196612ce7a0d4e14ba79493865b675f4507f3ae7cf329244b4d11039e68248ba8849ea0f5ccd0946471ba015fd62f9535b3b3b0b78609c7859fefe6804b39f126032463dae653b1929f2bb5912c4c56166a515865e4d92b38ccbc4fc7df25af5df747500788e47cede30041863c6012ce1f48eb2ef73e97dd09f67e0a6b757911479217981b5d4f739b7821"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r4, r0) read$fb(0xffffffffffffffff, 0x0, 0x0) 14:44:48 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000000000006c0000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1702.361981][T22039] binder: 22033:22039 unknown command -1543504107 14:44:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000f00000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000000000900000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1702.412185][T22039] binder: 22033:22039 ioctl c0306201 20000200 returned -22 14:44:48 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(0x0) r2 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:48 executing program 1: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x38, 0x0) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f00000001c0)=0xc) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="15ffffa3d88a4e4b79a1bbeab063ca0b5d479f4c196e67e4bd96d5b7a1381b852952f43efcabcfe139b412bde63df544de0c3cbcc657a7fd51344f39676335fb653da840b021b074404ae25c3829a80e200673ca523d2bc1f7ad94a3114d85e2775dc46957cad781e988a59196612ce7a0d4e14ba79493865b675f4507f3ae7cf329244b4d11039e68248ba8849ea0f5ccd0946471ba015fd62f9535b3b3b0b78609c7859fefe6804b39f126032463dae653b1929f2bb5912c4c56166a515865e4d92b38ccbc4fc7df25af5df747500788e47cede30041863c6012ce1f48eb2ef73e97dd09f67e0a6b757911479217981b5d4f739b7821"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) 14:44:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYRES32], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f00000000c0)={0xc85, 0x8e7, 0x4b}) read$fb(r3, 0x0, 0x0) 14:44:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000000000a00000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1702.619429][T22047] device batadv0 entered promiscuous mode [ 1702.620035][T22153] binder: 22152:22153 unknown command -1543504107 [ 1702.643861][T22153] binder: 22152:22153 ioctl c0306201 20000200 returned -22 [ 1702.653617][T22159] binder: 22158:22159 unknown command -1 [ 1702.663097][T22159] binder: 22158:22159 ioctl c0306201 20000200 returned -22 [ 1702.680374][T22047] lo: Cannot use loopback or non-ethernet device as HSR slave. 14:44:48 executing program 1: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x38, 0x0) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f00000001c0)=0xc) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="15ffffa3d88a4e4b79a1bbeab063ca0b5d479f4c196e67e4bd96d5b7a1381b852952f43efcabcfe139b412bde63df544de0c3cbcc657a7fd51344f39676335fb653da840b021b074404ae25c3829a80e200673ca523d2bc1f7ad94a3114d85e2775dc46957cad781e988a59196612ce7a0d4e14ba79493865b675f4507f3ae7cf329244b4d11039e68248ba8849ea0f5ccd0946471ba015fd62f9535b3b3b0b78609c7859fefe6804b39f126032463dae653b1929f2bb5912c4c56166a515865e4d92b38ccbc4fc7df25af5df747500788e47cede30041863c6012ce1f48eb2ef73e97dd09f67e0a6b757911479217981b5d4f739b7821"], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) 14:44:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000400300000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1702.777653][T22047] device batadv0 left promiscuous mode [ 1702.884204][T22268] binder: 22267:22268 unknown command -1543504107 [ 1702.891027][T22268] binder: 22267:22268 ioctl c0306201 20000200 returned -22 14:44:49 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x38, 0x0) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f00000001c0)=0xc) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="15ffffa3d88a4e4b79a1bbeab063ca0b5d479f4c196e67e4bd96d5b7a1381b852952f43efcabcfe139b412bde63df544de0c3cbcc657a7fd51344f39676335fb653da840b021b074404ae25c3829a80e200673ca523d2bc1f7ad94a3114d85e2775dc46957cad781e988a59196612ce7a0d4e14ba79493865b675f4507f3ae7cf329244b4d11039e68248ba8849ea0f5ccd0946471ba015fd62f9535b3b3b0b78609c7859fefe6804b39f126032463dae653b1929f2bb5912c4c56166a515865e4d92b38ccbc4fc7df25af5df747500788e47cede30041863c6012ce1f48eb2ef73e97dd09f67e0a6b757911479217981b5d4f739b7821"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) 14:44:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000000000b00000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:49 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = dup2(r2, r0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYRES16=r5, @ANYBLOB="00019bbd7000fedbdf140006006e65746465763e25ffa3e9f7b57fa761bdeb26b24d9473696d30000000000000050001000000000014000300000000000000000000000000000000002c00070073797374656d5f753a6f626a676e5f657865635f743a"], 0x2}}, 0x80) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r5, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c010}, 0x8080) 14:44:49 executing program 1: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x38, 0x0) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f00000001c0)=0xc) syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) 14:44:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000034000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:49 executing program 1: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x38, 0x0) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f00000001c0)=0xc) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) 14:44:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000000000fffff000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000000000e00000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1703.308660][T22317] binder: 22294:22317 unknown command -1543504107 [ 1703.339523][T22317] binder: 22294:22317 ioctl c0306201 20000200 returned -22 14:44:49 executing program 1: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x38, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) 14:44:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="170d120eab12aae6d24e07c17a55f9031fb9370716d7a5297846a9da05c46cb54cb569c9b5a13dfbfc850a592e9a118f46c4a7"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) 14:44:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000001000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:49 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x38, 0x0) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f00000001c0)=0xc) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="15ffffa3d88a4e4b79a1bbeab063ca0b5d479f4c196e67e4bd96d5b7a1381b852952f43efcabcfe139b412bde63df544de0c3cbcc657a7fd51344f39676335fb653da840b021b074404ae25c3829a80e200673ca523d2bc1f7ad94a3114d85e2775dc46957cad781e988a59196612ce7a0d4e14ba79493865b675f4507f3ae7cf329244b4d11039e68248ba8849ea0f5ccd0946471ba015fd62f9535b3b3b0b78609c7859fefe6804b39f126032463dae653b1929f2bb5912c4c56166a515865e4d92b38ccbc4fc7df25af5df747500788e47cede30041863c6012ce1f48eb2ef73e97dd09f67e0a6b757911479217981b5d4f739b7821"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) 14:44:49 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000000001000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1703.470868][T22397] binder: 22393:22397 unknown command 236064023 [ 1703.494614][T22397] binder: 22393:22397 ioctl c0306201 20000200 returned -22 14:44:49 executing program 1: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r2, 0x0, 0x0) 14:44:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000002000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r3, r0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) 14:44:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000000001100000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1703.675743][T22508] binder: 22506:22508 unknown command -1543504107 14:44:49 executing program 1: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) 14:44:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000003000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1703.726097][T22508] binder: 22506:22508 ioctl c0306201 20000200 returned -22 14:44:49 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:49 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x38, 0x0) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f00000001c0)=0xc) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="15ffffa3d88a4e4b79a1bbeab063ca0b5d479f4c196e67e4bd96d5b7a1381b852952f43efcabcfe139b412bde63df544de0c3cbcc657a7fd51344f39676335fb653da840b021b074404ae25c3829a80e200673ca523d2bc1f7ad94a3114d85e2775dc46957cad781e988a59196612ce7a0d4e14ba79493865b675f4507f3ae7cf329244b4d11039e68248ba8849ea0f5ccd0946471ba015fd62f9535b3b3b0b78609c7859fefe6804b39f126032463dae653b1929f2bb5912c4c56166a515865e4d92b38ccbc4fc7df25af5df747500788e47cede30041863c6012ce1f48eb2ef73e97dd09f67e0a6b757911479217981b5d4f739b7821"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) 14:44:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000000001200000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:50 executing program 1: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) 14:44:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x527a43, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="19630099fead106dd7d2f29d2b58f266a2074628ff8eb786ffb1aa53253fe3a9a67f75ff00841740a251a490f81b7b9c4d556958eb5c25209cb5b91568178697d90d92de139b83522732f2b8b1204756ba03755418d65345366974198d00f9ec45f5aa7433918a3a0176914e98864d38aa662c25362379b735b7f3406b844fea198573cdf8de0ace81d14c26e96303d2e457671f943190ffdde13675f8fd10ea6391994f14c7449cd31e9b05e7d139dbd817b971336c24e9bb"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, r3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r7, 0xc0285628, &(0x7f0000000240)={0x0, 0x1, 0xffffffff, [], &(0x7f00000001c0)=0x7}) syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x9, 0x40) read$fb(r4, 0x0, 0x0) 14:44:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000004000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1703.997117][T22628] binder: 22626:22628 unknown command -1543504107 14:44:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000000001300000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:50 executing program 1: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) [ 1704.038855][T22628] binder: 22626:22628 ioctl c0306201 20000200 returned -22 14:44:50 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) [ 1704.088610][T22637] binder: 22635:22637 unknown command -1728027879 [ 1704.112303][T22637] binder: 22635:22637 ioctl c0306201 20000200 returned -22 14:44:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000005000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000000001400000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:50 executing program 1: socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) 14:44:50 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x38, 0x0) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f00000001c0)=0xc) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="15ffffa3d88a4e4b79a1bbeab063ca0b5d479f4c196e67e4bd96d5b7a1381b852952f43efcabcfe139b412bde63df544de0c3cbcc657a7fd51344f39676335fb653da840b021b074404ae25c3829a80e200673ca523d2bc1f7ad94a3114d85e2775dc46957cad781e988a59196612ce7a0d4e14ba79493865b675f4507f3ae7cf329244b4d11039e68248ba8849ea0f5ccd0946471ba015fd62f9535b3b3b0b78609c7859fefe6804b39f126032463dae653b1929f2bb5912c4c56166a515865e4d92b38ccbc4fc7df25af5df747500788e47cede30041863c6012ce1f48eb2ef73e97dd09f67e0a6b757911479217981b5d4f739b7821"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) read$fb(0xffffffffffffffff, 0x0, 0x0) 14:44:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000006000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:50 executing program 1: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) 14:44:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000000001900000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1704.331250][T22757] binder: 22729:22757 unknown command -1543504107 14:44:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="45e64629506b0bfee34880ceaf937603833095e3c52505630440581a66e64416acdd13fe942cfb3409c034823c618518517c9f765143303aad03ae8b1600278b674d0df069488a6830bf47cd222140020f18e4d711692de2983bf10b9340eea87fba5501fad75f0d7ae6e041dc614ffa920bc50a31d380bef4e51e740a881fc762817a95de1cedcf6bd40614506300000000201376d4ecc6215fb68fdad16039604cf62f9cea240000000000"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x11, 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a1, &(0x7f0000000000)='veth0\x00') 14:44:50 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) 14:44:50 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) [ 1704.399007][T22757] binder: 22729:22757 ioctl c0306201 20000200 returned -22 14:44:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000008000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000000004c00000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1704.461463][T22768] binder: 22767:22768 unknown command 692512325 [ 1704.469330][T22768] binder: 22767:22768 ioctl c0306201 20000200 returned -22 14:44:50 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) 14:44:50 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x38, 0x0) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f00000001c0)=0xc) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="15ffffa3d88a4e4b79a1bbeab063ca0b5d479f4c196e67e4bd96d5b7a1381b852952f43efcabcfe139b412bde63df544de0c3cbcc657a7fd51344f39676335fb653da840b021b074404ae25c3829a80e200673ca523d2bc1f7ad94a3114d85e2775dc46957cad781e988a59196612ce7a0d4e14ba79493865b675f4507f3ae7cf329244b4d11039e68248ba8849ea0f5ccd0946471ba015fd62f9535b3b3b0b78609c7859fefe6804b39f126032463dae653b1929f2bb5912c4c56166a515865e4d92b38ccbc4fc7df25af5df747500788e47cede30041863c6012ce1f48eb2ef73e97dd09f67e0a6b757911479217981b5d4f739b7821"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) read$fb(0xffffffffffffffff, 0x0, 0x0) 14:44:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x6}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="fa2201f204b1f4f94c2279e4", @ANYRES16, @ANYBLOB="080039bd7000ffdbdf25040000000c00c57f43085b62692d19bc5bfb010008000900510000004000020014000100fe8000000000000000000000000000bb080003000300000008000700ff00000008000e004e240000080002004e24000008000400"], 0x68}, 0x1, 0x0, 0x0, 0x200008c1}, 0x4000) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x9040000}, 0xc, &(0x7f0000000540)={&(0x7f0000000b00)=ANY=[@ANYBLOB="7c3f27010d661fab9854c56a4a0d74f311e75ed89eed4fc00dad5b6e1412e6d9b9566d6dcae9b9a64a4f919f1794600fa8b5bc5c3b008fbbe688ce9bbb1a2d73c7ffb455eb50e5348cf1aef26716e6b41cbe3d33aec06136c2a7e274dd4f845af44bdc5d8c62763c1396682f6ac5341b3fc91679da0a021ebe6a12c9803a8573e993168ef2392808962fbdc51a4ca4f8", @ANYRES16, @ANYBLOB="08002bbd7000fddbdf2507000300000000000000020064756d6d793000000000000000000000080004000000f8ff070003000400000014000600fe800000000000000000000000000025080003000400000014000600000000000000000000000000000000000800040085b4000014000600ff02000000000000000000000000000128000100080009007e0000000c0006006e6f6e65000000000800060072720000080002003d000000380001000800080001000000080004004e24000014000300ac1414bb00000000000000000000000008000500000000000800090072000000140001000800090054000000080004004e20000054000100080002002e0000000c0007000000000001000000080004004e200000080002002c0000000800090067000000080002002f000000080009001b00000008000500010000000c00070013000000020000002c0a010008000b00736970000800090041000000080005000000000008000100000000000800020000000000"], 0x3}, 0x1, 0x0, 0x0, 0xa040091}, 0x1) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f00000010c0), 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x40002) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x90, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xbf}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0x14}, @IPVS_CMD_ATTR_DEST={0x50}]}, 0x90}, 0x1, 0x0, 0x0, 0x40801}, 0x4000080) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80a0002}, 0xc, &(0x7f0000000540)={&(0x7f0000001500)=ANY=[@ANYRES64, @ANYRES16, @ANYBLOB="000129bd7000fcdbcf2509000000080005000200000008000400040025008d030000"], 0x3}, 0x1, 0x0, 0x0, 0xc0884}, 0x4008040) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c010000", @ANYRES16, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000040}, 0xc, &(0x7f0000000140)={&(0x7f0000001480)=ANY=[@ANYPTR, @ANYRESHEX=r2, @ANYRES32, @ANYPTR=&(0x7f0000001400)=ANY=[@ANYRESDEC], @ANYPTR, @ANYPTR64=&(0x7f0000001440)=ANY=[@ANYRESHEX], @ANYRES64, @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC], 0xa}, 0x1, 0x0, 0x0, 0x24044804}, 0x9850) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40200000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="000425bd7000fddbdf25030000002400018074000280080005000b0d000050000280"], 0x104}, 0x1, 0x0, 0x0, 0x20002080}, 0x4000) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f00000000c0)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14084}, 0x800) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001640)={0xf4, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1f}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x18}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0xa}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xf}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc36}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffffffff}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x48000}, 0x4008000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r3, r0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) 14:44:50 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) 14:44:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000009000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000000006000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:50 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$fb(r0, 0x0, 0x0) [ 1704.738690][T22885] binder: 22884:22885 unknown command -1543504107 [ 1704.778066][T22885] binder: 22884:22885 ioctl c0306201 20000200 returned -22 14:44:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff00000000000000000a000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000000006c00000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:51 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x38, 0x0) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f00000001c0)=0xc) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="15ffffa3d88a4e4b79a1bbeab063ca0b5d479f4c196e67e4bd96d5b7a1381b852952f43efcabcfe139b412bde63df544de0c3cbcc657a7fd51344f39676335fb653da840b021b074404ae25c3829a80e200673ca523d2bc1f7ad94a3114d85e2775dc46957cad781e988a59196612ce7a0d4e14ba79493865b675f4507f3ae7cf329244b4d11039e68248ba8849ea0f5ccd0946471ba015fd62f9535b3b3b0b78609c7859fefe6804b39f126032463dae653b1929f2bb5912c4c56166a515865e4d92b38ccbc4fc7df25af5df747500788e47cede30041863c6012ce1f48eb2ef73e97dd09f67e0a6b757911479217981b5d4f739b7821"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) read$fb(0xffffffffffffffff, 0x0, 0x0) 14:44:51 executing program 0: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) 14:44:51 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$fb(r0, 0x0, 0x0) [ 1705.000633][T22989] binder: 22973:22989 unknown command -1543504107 14:44:51 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) 14:44:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a0108000000000000ffffff9e00000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff00000000000000000b000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:51 executing program 0: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) [ 1705.050333][T22989] binder: 22973:22989 ioctl c0306201 20000200 returned -22 14:44:51 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x38, 0x0) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f00000001c0)=0xc) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="15ffffa3d88a4e4b79a1bbeab063ca0b5d479f4c196e67e4bd96d5b7a1381b852952f43efcabcfe139b412bde63df544de0c3cbcc657a7fd51344f39676335fb653da840b021b074404ae25c3829a80e200673ca523d2bc1f7ad94a3114d85e2775dc46957cad781e988a59196612ce7a0d4e14ba79493865b675f4507f3ae7cf329244b4d11039e68248ba8849ea0f5ccd0946471ba015fd62f9535b3b3b0b78609c7859fefe6804b39f126032463dae653b1929f2bb5912c4c56166a515865e4d92b38ccbc4fc7df25af5df747500788e47cede30041863c6012ce1f48eb2ef73e97dd09f67e0a6b757911479217981b5d4f739b7821"], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) 14:44:51 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$fb(r0, 0x0, 0x0) 14:44:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a0108000000000000000017a100000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff00000000000000000e000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:51 executing program 0: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) [ 1705.250622][T23075] binder: 23067:23075 unknown command -1543504107 [ 1705.279532][T23075] binder: 23067:23075 ioctl c0306201 20000200 returned -22 14:44:51 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x38, 0x0) getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 14:44:51 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x38, 0x0) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f00000001c0)=0xc) syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) 14:44:51 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(0xffffffffffffffff, 0x0, 0x0) 14:44:51 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a0108000000000000fffffff000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000010000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:51 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(0xffffffffffffffff, 0x0, 0x0) 14:44:51 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x38, 0x0) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f00000001c0)=0xc) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) 14:44:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000007fffffff00000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000011000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:51 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:51 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(0xffffffffffffffff, 0x0, 0x0) 14:44:51 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000001740)=ANY=[@ANYRES16], 0x0, 0x0, 0x0}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400, 0x0) execveat(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000100)='/dev/binder#\x00', &(0x7f0000000140)='em0wlan0@user+wlan0\x00', &(0x7f0000000180)='trustedposix_acl_access\x00', &(0x7f00000001c0)='/sys/kernel/debug/binder/state\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='/sys/kernel/debug/binder/state\x00', &(0x7f00000002c0)='.!#\x00'], &(0x7f00000004c0)=[&(0x7f0000000380)='md5sum\x00', &(0x7f00000003c0)='/dev/binder#\x00', &(0x7f0000000500)='\t\x00\x00\x00\x00\x80\x00\x00\x00', &(0x7f0000000400)='\x00', &(0x7f0000000480)='/sys/kernel/debug/binder/state\x00'], 0x1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r3, r0) r4 = semget$private(0x0, 0x7, 0x0) semop(r4, &(0x7f0000000340)=[{0x0, 0x0, 0x1000}], 0x2aaaac53) semctl$IPC_RMID(r4, 0x0, 0x0) semctl$IPC_RMID(r4, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r5, 0x0, 0x0) 14:44:51 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x38, 0x0) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f00000001c0)=0xc) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) 14:44:51 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5a, 0x10000}, 0x1018, 0x0, 0x4, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, r6, 0x0) vmsplice(r6, &(0x7f0000000140)=[{&(0x7f0000000240)="e5242e4f729f88e4233b831680f45bd58fe1653146c1f7f1f4e16709cf399d70d271fede928d7696e30338932aa8a3f9aa5415b690f84f289fbed6dc5088137e328c412140d8013d627cb0a53d513f7db8bac156dd4a598863da1546cb6abe13a76cfc98126f27a5669b6505b315e1ed56e58e0cad9773e892dc6c68ff6ec0715a750a19866741145296fe308f7e373a35d915f32385a1af3ae4d1a1d019ee2c5fc1c1b015098dd9c69ef5a399561fb979e0a86c052e33e2996a3b4c8af431e248f658d7fd33092cbd16d1", 0xcb}], 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e20, 0x80, @local, 0x3}, {0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, 0x5234, [0x38243578, 0x9, 0x4bd, 0x7f, 0x66, 0x0, 0xffffffe1, 0x9]}, 0x5c) [ 1705.760147][T23257] binder: 23254:23257 unknown command 65535 [ 1705.775125][T23257] binder: 23254:23257 ioctl c0306201 20000200 returned -22 14:44:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000012000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a0108000000f0ffffffffffff00000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:52 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x38, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) 14:44:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000200000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:52 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 14:44:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000013000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5a, 0x10000}, 0x1018, 0x0, 0x4, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, r6, 0x0) vmsplice(r6, &(0x7f0000000140)=[{&(0x7f0000000240)="e5242e4f729f88e4233b831680f45bd58fe1653146c1f7f1f4e16709cf399d70d271fede928d7696e30338932aa8a3f9aa5415b690f84f289fbed6dc5088137e328c412140d8013d627cb0a53d513f7db8bac156dd4a598863da1546cb6abe13a76cfc98126f27a5669b6505b315e1ed56e58e0cad9773e892dc6c68ff6ec0715a750a19866741145296fe308f7e373a35d915f32385a1af3ae4d1a1d019ee2c5fc1c1b015098dd9c69ef5a399561fb979e0a86c052e33e2996a3b4c8af431e248f658d7fd33092cbd16d1", 0xcb}], 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e20, 0x80, @local, 0x3}, {0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, 0x5234, [0x38243578, 0x9, 0x4bd, 0x7f, 0x66, 0x0, 0xffffffe1, 0x9]}, 0x5c) 14:44:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0563aad71b6ed10e534204408edece3286ed79b7b65ca47a3e559c19007c535a6e9847c4a0b23f30bf1fc615d66c570c8f7bc7a8b8755d434a40162969f585d0c614ea8eb0f2b592d3f768af189151789973a7922f77c248f959b5ef01289ec68286fd6c2105b615cb6fc8a71c4d6aaaa2eccfba8039d064aec616f99db9c0b02028dd"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) 14:44:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000014000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:52 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x38, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) [ 1706.105258][T23387] binder: 23381:23387 unknown command -676699387 [ 1706.114863][T23387] binder: 23381:23387 ioctl c0306201 20000200 returned -22 14:44:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000300000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x6c000000) 14:44:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000522000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:52 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 14:44:52 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r2, 0x0, 0x0) 14:44:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) write$P9_RSTAT(r1, &(0x7f00000000c0)={0x5c, 0x7d, 0x1, {0x0, 0x55, 0x8001, 0x1, {0x80, 0x4, 0x7}, 0x120000, 0x400, 0x80, 0x0, 0xe, '%.{:-{security', 0xd, '/dev/binder#\x00', 0x7, 'user*%]'}}, 0x5c) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r3, r0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f0000000000)=0x400) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x5c1102, 0x0) ioctl$TIOCCBRK(r5, 0x5428) 14:44:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000400000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:52 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) select(0x40, &(0x7f0000000000)={0x8, 0x5, 0x31a3, 0x469, 0x4, 0x0, 0x0, 0x21ea}, &(0x7f0000000040)={0x7ff, 0xffffffffffffffe1, 0x5, 0x3, 0x7fff, 0x6, 0x2, 0x9}, &(0x7f00000000c0)={0x9, 0x7, 0x2, 0x5, 0x1, 0x147f, 0x40, 0x6}, &(0x7f0000000140)={r1, r2/1000+30000}) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) close(r0) 14:44:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff00000000000000004c000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:52 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r2, 0x0, 0x0) 14:44:52 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 14:44:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000500000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000060000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:52 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) select(0x40, &(0x7f0000000000)={0x8, 0x5, 0x31a3, 0x469, 0x4, 0x0, 0x0, 0x21ea}, &(0x7f0000000040)={0x7ff, 0xffffffffffffffe1, 0x5, 0x3, 0x7fff, 0x6, 0x2, 0x9}, &(0x7f00000000c0)={0x9, 0x7, 0x2, 0x5, 0x1, 0x147f, 0x40, 0x6}, &(0x7f0000000140)={r1, r2/1000+30000}) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) close(r0) 14:44:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff00000000000000006c000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:52 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) 14:44:52 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r2, 0x0, 0x0) 14:44:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = msgget$private(0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) msgsnd(r4, &(0x7f0000000300)={0x1}, 0x8, 0x0) msgctl$IPC_RMID(r4, 0x0) read$fb(r3, 0x0, 0x0) 14:44:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000600000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:52 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) select(0x40, &(0x7f0000000000)={0x8, 0x5, 0x31a3, 0x469, 0x4, 0x0, 0x0, 0x21ea}, &(0x7f0000000040)={0x7ff, 0xffffffffffffffe1, 0x5, 0x3, 0x7fff, 0x6, 0x2, 0x9}, &(0x7f00000000c0)={0x9, 0x7, 0x2, 0x5, 0x1, 0x147f, 0x40, 0x6}, &(0x7f0000000140)={r1, r2/1000+30000}) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) close(r0) 14:44:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000000000ffffff9e000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000800000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:53 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) 14:44:53 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) pipe(&(0x7f0000000080)) 14:44:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000000000fffffff0000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:53 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) select(0x40, &(0x7f0000000000)={0x8, 0x5, 0x31a3, 0x469, 0x4, 0x0, 0x0, 0x21ea}, &(0x7f0000000040)={0x7ff, 0xffffffffffffffe1, 0x5, 0x3, 0x7fff, 0x6, 0x2, 0x9}, &(0x7f00000000c0)={0x9, 0x7, 0x2, 0x5, 0x1, 0x147f, 0x40, 0x6}, &(0x7f0000000140)={r1, r2/1000+30000}) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:44:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000000000fffffff5000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:53 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) 14:44:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000900000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:53 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) clock_gettime(0x0, &(0x7f0000000100)) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:44:53 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) 14:44:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000f0ffff000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, &(0x7f0000000140)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x38, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x10002, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x6c, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000013000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="852a747000000000", @ANYPTR=&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], @ANYBLOB="e90000000000000002000000000000003500000000000000852a62770100000001000000000000000000000000000000852a747000000000", @ANYPTR=&(0x7f0000000640)=ANY=[@ANYBLOB='\x00'/191], @ANYBLOB="bf0000000000000001000000000000003e00000000000000"], @ANYPTR=&(0x7f0000000700)=ANY=[@ANYBLOB='\x00'/24], @ANYBLOB="000000000000000006630440020000000f630c400000000000000000000000000763044003000000"], 0xc2, 0x0, &(0x7f00000003c0)="f6fb06c505010a906a9312a653d9fc0474d23eab02be9cfb3598dc0f63454b4fe258084af6af63b172a9906b53dee55d6109dac46182d9dce8a3b89088f911974f695386022926f76833caec7f1e2ab663ff7337406595b61193aaa69fce677f3a189a5d4c95fad1bbae1afd1b56e4be6b28a08e04b33fc775d88098ed1f2b143bfa89fbaf230434f7d15d73809ef0edb1b31ceffe7121473ce68016e007694c7ea03e221145e7d1fe94642da7ad90cd206540e4a924d1a38f031c8a84d089a2413a"}) read$fb(r5, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000500)=[{&(0x7f0000000340)="c950ecd429727e15479a6259e691c1686d2acbd04694d1483994e9c00531a0abbe692a33d59a2e29d17208b3144f8992fd8847c633181892be1cc97057aa0f6b2d1aeffef74b26c663ff8f101590174387d159b583ff1b2e7bb5f0c0ef5331bf84c4a405d2e1f63d3fb281a04b67429a8cab37", 0x73}, {&(0x7f00000001c0)="05337185ee79dd5b2d9eca59b9263b0ea6883d9d95a388f11f3a2d3f86762ed8c66c735e7c8f7a", 0xff85}], 0x2, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000100), &(0x7f00000000c0)=0x1c, 0x40000) 14:44:53 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000080)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) 14:44:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000a00000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:53 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:44:53 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) 14:44:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff00000000007fffffff000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:53 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) 14:44:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000b00000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:53 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:44:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff00000000009effffff000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:53 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) 14:44:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000e00000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:53 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) 14:44:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000000000f0ffffff000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:53 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) 14:44:54 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) 14:44:54 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:44:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000001000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/diskstats\x00', 0x0, 0x0) read(r4, &(0x7f0000000280)=""/152, 0x20000318) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r5, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'fd/3\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20000881) sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r5, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x21}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x800) dup2(r2, r0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r6, 0x0, 0x0) 14:44:54 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) 14:44:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000000000f5ffffff000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000001100000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:54 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) 14:44:54 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:44:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r1, r0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r2, 0x0, 0x0) 14:44:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000020000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:54 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) 14:44:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000001200000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:54 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) 14:44:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000030000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:54 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:44:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = pidfd_open(r3, 0x0) dup2(r4, r0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r5, 0x0, 0x0) 14:44:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000001300000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:54 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) 14:44:54 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) 14:44:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000040000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:54 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:44:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x802) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, &(0x7f0000000100)=""/161, &(0x7f00000001c0)=0xa1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x12, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r1], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r4, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x38, 0x0) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000000), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r5, r0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r6, 0x80044326, &(0x7f0000000240)=0x6) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x100000, 0x0) read$fb(r7, 0x0, 0x0) 14:44:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000001400000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:54 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) 14:44:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000050000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:54 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:44:54 executing program 0: r0 = inotify_init() io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[r0], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r0]}, 0x1) 14:44:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000001900000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1708.771395][T24168] binder: 24166:24168 unknown command 808482864 [ 1708.800392][T24168] binder: 24166:24168 ioctl c0306201 20000200 returned -22 14:44:55 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) 14:44:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000060000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:55 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r4, 0x0) dup2(r4, r2) read$fb(r3, 0x0, 0x0) 14:44:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000004c00000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:55 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:44:55 executing program 0: r0 = inotify_init() io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[r0], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r0]}, 0x1) 14:44:55 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) 14:44:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000080000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000006000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:55 executing program 0: r0 = inotify_init() io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[r0], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r0]}, 0x1) 14:44:55 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) 14:44:55 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:44:55 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2e14e200e045f6e7c7f4753d07a1ee88e787d800728bc68e54ae79ae8a1447af1fc969271cbcb716f25e90226af8ff691b4e25d00d63bd099f1a4b4594eea1210ad6e38c3be3aa6a38ffc5e5735d44443340e0e04aec0421087e438f017bf49990e7b844215484de94a644a083fa6cd9258fd1e5b30a0b0ab9e187f17a76abfd7a15f2fd24d953d3a951eef351d747710cf35b40db33ae"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) 14:44:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000090000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000006c00000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:55 executing program 0: r0 = io_uring_setup(0x0, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) 14:44:55 executing program 2: socket$inet6_sctp(0xa, 0x0, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) [ 1709.440356][T24406] binder: 24402:24406 unknown command 14816302 [ 1709.454715][T24406] binder: 24402:24406 ioctl c0306201 20000200 returned -22 14:44:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000000000000a0000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:55 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="0006000000000000c910000000004d430000000000000000000101070000000000000000134addedd59ce0df31ad54403fb3a67f00000080beb6538f0000000000006308ca1f30901a895b9c20301c4406a521298c08ff6e9d0e0b693f5bf3a7dc8ad15af1a5471ec90015ad064c9f9626714648fd677c35c36d2f421db726fdc001a39bf17e2ef0a96df86a02f12c6d581aa7d336c3bc62fa27cb02c6bb4cd39fb7672d18ab2b1c4d8766addaf9143efdb3d38fe704dd6981bb1482ebdb5d0ea6e4fa2b75ad179c0c2e35edb4465c69cab7775949ddf01198a5da050e095a9b6706310cbe8c2ac62287791f98546af493ee6e14f3fc45360d3561105a4f8d196e5aaee6bfe35b07af8898f4c65ab3c800fbb31cabce9d47eb221f23538bf509bd475ed55829415ccaa77ba75995947aaf62e7"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:44:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a0108000000f000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:55 executing program 0: r0 = io_uring_setup(0x0, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) 14:44:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000000000000b0000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:55 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:44:55 executing program 2: socket$inet6_sctp(0xa, 0x0, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$fb(r0, 0x0, 0x0) 14:44:55 executing program 0: r0 = io_uring_setup(0x0, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) 14:44:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000003000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:55 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, r4}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x9, {0x0, @dev}}]}]}, @IFLA_IFALIASn={0x4}]}, 0x54}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r7, &(0x7f0000000240)={0x11, 0x0, r9}, 0x14) getsockname$packet(r7, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x9, {0x0, @dev}}]}]}, @IFLA_IFALIASn={0x4}]}, 0x54}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xcc5eb577e891a575}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000) read$fb(r3, 0x0, 0x0) 14:44:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000000000000e0000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1709.914829][T24534] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. 14:44:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000005000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:56 executing program 2: socket$inet6_sctp(0xa, 0x0, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$fb(r0, 0x0, 0x0) 14:44:56 executing program 0: r0 = io_uring_setup(0xa4, 0x0) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) 14:44:56 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="0006000000000000c910000000004d430000000000000000000101070000000000000000134addedd59ce0df31ad54403fb3a67f00000080beb6538f0000000000006308ca1f30901a895b9c20301c4406a521298c08ff6e9d0e0b693f5bf3a7dc8ad15af1a5471ec90015ad064c9f9626714648fd677c35c36d2f421db726fdc001a39bf17e2ef0a96df86a02f12c6d581aa7d336c3bc62fa27cb02c6bb4cd39fb7672d18ab2b1c4d8766addaf9143efdb3d38fe704dd6981bb1482ebdb5d0ea6e4fa2b75ad179c0c2e35edb4465c69cab7775949ddf01198a5da050e095a9b6706310cbe8c2ac62287791f98546af493ee6e14f3fc45360d3561105a4f8d196e5aaee6bfe35b07af8898f4c65ab3c800fbb31cabce9d47eb221f23538bf509bd475ed55829415ccaa77ba75995947aaf62e7"], 0x38) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:44:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000006000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000100000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:56 executing program 0: r0 = io_uring_setup(0xa4, 0x0) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) 14:44:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r1 = syz_open_dev$binderN(0x0, 0x0, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1100, 0x2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x44a4b, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x10, r4, 0x0) dup2(r3, r4) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x2c) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x38, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f00000000c0)={0x3, 'macsec0\x00', {0xfff}, 0x8}) read$fb(r5, 0x0, 0x0) 14:44:56 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:44:56 executing program 2: socket$inet6_sctp(0xa, 0x0, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$fb(r0, 0x0, 0x0) 14:44:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000009000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:56 executing program 0: r0 = io_uring_setup(0xa4, 0x0) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) 14:44:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000110000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:56 executing program 1: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:44:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x17, 0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r3, r0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) 14:44:56 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) 14:44:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a0108000000000a000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000120000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:56 executing program 2: socket$inet6_sctp(0xa, 0x0, 0x84) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(0xffffffffffffffff, 0x0, 0x0) [ 1710.549691][T24775] binder: 24773:24775 unknown command 808464432 [ 1710.574753][T24775] binder: 24773:24775 ioctl c0306201 20000200 returned -22 14:44:56 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) 14:44:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000130000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:56 executing program 1: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:44:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a0108000000000b000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:56 executing program 2: socket$inet6_sctp(0xa, 0x0, 0x84) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(0xffffffffffffffff, 0x0, 0x0) 14:44:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05401685bb085431fcd55e19274baaafbc98da382c82d95a260393fd9f74aef1042bc039a948b517b7863b7e79318cc005d5597c0fab39d0cd7ad78cdb395f961ef6c4e6d0fcb163aafd6f0f8db4fdf4ac92027421a647ad36e834887c1248806139fd2f7208cd081228cb0c940dd8d609409ac360095f0fdc624a1ef64c6a2059c0fe100300e8e087b9177e06c30b4b812036eb91c5f7f3a8ef35a9bfe27d5ee676cc"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) ioctl$VIDIOC_QUERYCAP(r5, 0x80685600, &(0x7f0000000440)) splice(r4, 0x0, r6, 0x0, 0x38, 0x0) syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0x4, 0x2000) r7 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r7, 0x0) r8 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r8, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000400)={0x98, 0x0, &(0x7f0000000240)=[@request_death={0x400c630e, 0x3}, @decrefs={0x40046307, 0x1}, @increfs={0x40046304, 0x3}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@weak_handle={0x77682a85, 0xb, 0x2}, @fd={0x66642a85, 0x0, r7}, @fd={0x66642a85, 0x0, r8}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}, @register_looper, @enter_looper, @release={0x40046306, 0x1}, @release={0x40046306, 0x1}, @free_buffer, @acquire={0x40046305, 0x2}], 0xbe, 0x0, &(0x7f0000000340)="3ac955cf25990f8b994907a110b119aad69224e1ccb6191b463f4c956fdbb1b36c80b211d9e106702886bb7c48ab4173658de00fe164b9fd38add4fb8ee584e14e541a12089f19faf3f92a72662a6e6a909c81ed99a433c74579527e8a84be09f86c0f435bf611e1f35645fed1244564922f76322da9ab43514f521959a4e9bc978894d02513b891f2d416d4c7808af1caffbb7b78bd0434241997d26ceb56c3aee1526ac105c7f5ee7ed6a182bcded1962605d659fb56f819e999a66b9e"}) 14:44:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000140000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:57 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) [ 1710.873036][T24911] binder: 24909:24911 unknown command -2062139387 [ 1710.922034][T24911] binder: 24909:24911 ioctl c0306201 20000200 returned -22 14:44:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a0108000000000e000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:57 executing program 2: socket$inet6_sctp(0xa, 0x0, 0x84) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(0xffffffffffffffff, 0x0, 0x0) 14:44:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:44:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000000000004c0000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:57 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) 14:44:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000011000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:57 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = dup2(r2, r0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r5, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr="25071f206db1a72ae1d9c27b0befffd5"}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 14:44:57 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x2) 14:44:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000600000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:44:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000012000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:57 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) 14:44:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000000000006c0000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:57 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x2) 14:44:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000013000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:44:57 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000000100)=[{}, {}], &(0x7f0000001780)=""/4096}, &(0x7f00000001c0)=0x78) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000001440)={0x0, @in={{0x2, 0x4e21, @local}}, [0x7, 0x8, 0x3f, 0x4, 0x80000001, 0x6ca, 0x100, 0x1, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x1, 0x7fff, 0x7]}, &(0x7f0000000240)=0x100) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000002c0)={r4, 0x5}, 0x8) close(r3) splice(r1, 0x0, r3, 0x0, 0x38, 0x0) read$FUSE(r1, &(0x7f0000000340), 0x1000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r6, 0x54a1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r7, r0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r8, 0x0, 0x0) 14:44:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000014000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:57 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) 14:44:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000f00000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:57 executing program 2 (fault-call:2 fault-nth:0): socket$inet6_sctp(0xa, 0x0, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) 14:44:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:44:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a0108000000a117000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000300000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1711.897857][T25284] FAULT_INJECTION: forcing a failure. [ 1711.897857][T25284] name failslab, interval 1, probability 0, space 0, times 0 [ 1711.920603][T25284] CPU: 1 PID: 25284 Comm: syz-executor.2 Not tainted 5.6.0-rc6-syzkaller #0 [ 1711.929415][T25284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1711.939484][T25284] Call Trace: [ 1711.942801][T25284] dump_stack+0x188/0x20d 14:44:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3a937e7cc9f58d3ca58ada8bf9db3e21c43d4f3754df3166a2317447b3259d1b8e213da2e963b134d3231113fa5735eff82226310d2deb1126e9a0537da4176e5da6db6028756941177155a553bbde4a467d9e0d39aba27fcc29a53143e3f2732e85e7bf93a329"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) [ 1711.947167][T25284] should_fail.cold+0x5/0xa [ 1711.951702][T25284] ? fault_create_debugfs_attr+0x140/0x140 [ 1711.957808][T25284] should_failslab+0x5/0xf [ 1711.962248][T25284] kmem_cache_alloc_node_trace+0x27c/0x790 [ 1711.968079][T25284] ? lock_acquire+0x197/0x420 [ 1711.972817][T25284] ? __fdget_pos+0xe3/0x100 [ 1711.977453][T25284] __kmalloc_node+0x38/0x60 [ 1711.981984][T25284] kvmalloc_node+0x61/0xf0 [ 1711.986474][T25284] seq_read+0x82e/0x1160 [ 1711.990750][T25284] ? debugfs_file_get+0x1f7/0x430 [ 1711.995795][T25284] ? debugfs_locked_down.isra.0+0x150/0x150 [ 1712.001725][T25284] full_proxy_read+0x118/0x190 [ 1712.006522][T25284] ? full_proxy_write+0x190/0x190 [ 1712.011577][T25284] __vfs_read+0x76/0x100 [ 1712.015869][T25284] vfs_read+0x1ea/0x430 [ 1712.020061][T25284] ksys_read+0x127/0x250 [ 1712.024326][T25284] ? kernel_write+0x120/0x120 [ 1712.029463][T25284] ? __ia32_sys_clock_settime+0x260/0x260 [ 1712.035296][T25284] ? trace_hardirqs_off_caller+0x55/0x230 [ 1712.041050][T25284] do_syscall_64+0xf6/0x7d0 [ 1712.045585][T25284] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1712.051492][T25284] RIP: 0033:0x45c849 [ 1712.055409][T25284] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1712.075893][T25284] RSP: 002b:00007fafa168cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1712.081667][T25291] binder: 25290:25291 unknown command 2088670010 14:44:58 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) [ 1712.084313][T25284] RAX: ffffffffffffffda RBX: 00007fafa168d6d4 RCX: 000000000045c849 [ 1712.084346][T25284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1712.084355][T25284] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1712.084364][T25284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1712.084372][T25284] R13: 0000000000000875 R14: 00000000004cb2ca R15: 0000000000000000 14:44:58 executing program 2 (fault-call:2 fault-nth:1): socket$inet6_sctp(0xa, 0x0, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) 14:44:58 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000), 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) 14:44:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000500000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000019000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:58 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) [ 1712.223928][T25291] binder: 25290:25291 ioctl c0306201 20000200 returned -22 14:44:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000220500000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1712.314889][T25347] FAULT_INJECTION: forcing a failure. [ 1712.314889][T25347] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1712.328494][T25347] CPU: 0 PID: 25347 Comm: syz-executor.2 Not tainted 5.6.0-rc6-syzkaller #0 [ 1712.337233][T25347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1712.347384][T25347] Call Trace: [ 1712.350696][T25347] dump_stack+0x188/0x20d [ 1712.355065][T25347] should_fail.cold+0x5/0xa [ 1712.359597][T25347] ? fault_create_debugfs_attr+0x140/0x140 [ 1712.365428][T25347] ? find_held_lock+0x2d/0x110 [ 1712.370230][T25347] __alloc_pages_nodemask+0x17a/0x820 [ 1712.375634][T25347] ? lock_downgrade+0x7f0/0x7f0 [ 1712.380521][T25347] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 1712.386258][T25347] ? lock_acquire+0x197/0x420 [ 1712.391131][T25347] cache_grow_begin+0x8c/0xc30 [ 1712.395922][T25347] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 1712.401417][T25347] kmem_cache_alloc_node_trace+0x6bd/0x790 [ 1712.407257][T25347] ? lock_acquire+0x197/0x420 [ 1712.411965][T25347] ? __fdget_pos+0xe3/0x100 [ 1712.416505][T25347] __kmalloc_node+0x38/0x60 [ 1712.421032][T25347] kvmalloc_node+0x61/0xf0 [ 1712.425477][T25347] seq_read+0x82e/0x1160 [ 1712.429746][T25347] ? debugfs_file_get+0x1f7/0x430 [ 1712.434821][T25347] ? debugfs_locked_down.isra.0+0x150/0x150 [ 1712.440752][T25347] full_proxy_read+0x118/0x190 [ 1712.445546][T25347] ? full_proxy_write+0x190/0x190 [ 1712.450591][T25347] __vfs_read+0x76/0x100 [ 1712.454860][T25347] vfs_read+0x1ea/0x430 [ 1712.459055][T25347] ksys_read+0x127/0x250 [ 1712.463367][T25347] ? kernel_write+0x120/0x120 [ 1712.468068][T25347] ? __ia32_sys_clock_settime+0x260/0x260 [ 1712.473811][T25347] ? trace_hardirqs_off_caller+0x55/0x230 [ 1712.479567][T25347] do_syscall_64+0xf6/0x7d0 [ 1712.484095][T25347] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1712.490001][T25347] RIP: 0033:0x45c849 [ 1712.494046][T25347] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 14:44:58 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) [ 1712.513672][T25347] RSP: 002b:00007fafa168cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1712.522195][T25347] RAX: ffffffffffffffda RBX: 00007fafa168d6d4 RCX: 000000000045c849 [ 1712.530189][T25347] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1712.538179][T25347] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1712.546166][T25347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1712.554151][T25347] R13: 0000000000000875 R14: 00000000004cb2ca R15: 0000000000000001 14:44:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000440)='NLBL_CIPSOv4\x00') r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r2, 0x0, r4, 0x0, 0x38, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r5, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000240)={0x3, 0x1, 0x4, 0x40000000, 0x3, {0x77359400}, {0x5, 0x0, 0x8, 0x1, 0x9, 0x5, "08e54b95"}, 0x9, 0x4, @fd=r3, 0x9, 0x0, r5}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r6, 0xc0945662, &(0x7f0000000340)={0xffffffff, 0x0, [], {0x0, @bt={0x101, 0x6a5e, 0x0, 0x0, 0xfa4, 0x80000000, 0x6, 0x2, 0x4, 0x7, 0xa000, 0x8, 0x4, 0x400, 0x9, 0x1, {0x1, 0x6}, 0x5, 0x7}}}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="056304404ea3fbf811c8ac2be0c3eb199accec020000000d630000"], 0xbb, 0x0, &(0x7f00000000c0)="f9a6709216b4b1fbd7bcac5873cb69c5f9117b3d80f9d82db42112d0a00766e5e5db5aa9075b6f0f01ec9628e31092db285409ab17dfea306a88f571a8f0717e92fcbd2f3bfb1cb50d290f99eba4c2a29c694223cbc5fab0c4f1cf4cb7c685ae3f8dd6f22fc68c5203b4853f1bcfeabf37e172909ef66a1afdb0480d1abb0e57059e47da7abc252a4534ce54165c51a096c0488c900418d5c2bebaf1adbf6a048fc0c8bf8257f168bb525338e1e9b774f2d93bfedc97858309a524"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r7, r0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f00000002c0)={0x9a0000, 0x3, 0x80000000, r6, 0x0, &(0x7f00000001c0)={0x990afe, 0x6, [], @ptr=0xffffffffffffffff}}) read$fb(r8, 0x0, 0x0) 14:44:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a0108000000004c000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:58 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000), 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) 14:44:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000600000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:58 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:44:58 executing program 2 (fault-call:2 fault-nth:2): socket$inet6_sctp(0xa, 0x0, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) 14:44:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f00000000c0)) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/udmabuf\x00', 0x2) 14:44:59 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000060000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:59 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000), 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) 14:44:59 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:44:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000900000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1712.973033][T25533] binder: 25532:25533 ioctl 40106614 200000c0 returned -22 14:44:59 executing program 2: socket$inet6_sctp(0xa, 0x0, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) 14:44:59 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a0108000000006c000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:59 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) 14:44:59 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:44:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000a00000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="43fa044000"/20], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x38, 0x0) mmap$snddsp_status(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x4010, r3, 0x82000000) dup2(r2, r0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000000c0)={0x9, 0x7fffffff, 0x5}) read$fb(r5, 0x0, 0x0) 14:44:59 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a010800000017a1000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:59 executing program 2: socket$inet6_sctp(0xa, 0x0, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x1b6) 14:44:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000b00000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:59 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="0006000000000000c910000000004d430000000000000000000101070000000000000000134addedd59ce0df31ad54403fb3a67f00000080beb6538f0000000000006308ca1f30901a895b9c20301c4406a521298c08ff6e9d0e0b693f5bf3a7dc8ad15af1a5471ec90015ad064c9f9626714648fd677c35c36d2f421db726fdc001a39bf17e2ef0a96df86a02f12c6d581aa7d336c3bc62fa27cb02c6bb4cd39fb7672d18ab2b1c4d8766addaf9143efdb3d38fe704dd6981bb1482ebdb5d0ea6e4fa2b75ad179c0c2e35edb4465c69cab7775949ddf01198a5da050e095a9b6706310cbe8c2ac62287791f98546af493ee6e14f3fc45360d3561105a4f8d196e5aaee6bfe35b07af8898f4c65ab3c800fbb31cabce9d47eb221f23538bf509bd475ed55829415ccaa77ba75995947aaf62e7"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) [ 1713.339424][T25665] binder: 25663:25665 unknown command 1074068035 [ 1713.371140][T25665] binder: 25663:25665 ioctl c0306201 20000200 returned -22 14:44:59 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) 14:44:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000e00000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:59 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a010800000000f0000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="056304406ae84b"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) 14:44:59 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="0006000000000000c910000000004d430000000000000000000101070000000000000000134addedd59ce0df31ad54403fb3a67f00000080beb6538f0000000000006308ca1f30901a895b9c20301c4406a521298c08ff6e9d0e0b693f5bf3a7dc8ad15af1a5471ec90015ad064c9f9626714648fd677c35c36d2f421db726fdc001a39bf17e2ef0a96df86a02f12c6d581aa7d336c3bc62fa27cb02c6bb4cd39fb7672d18ab2b1c4d8766addaf9143efdb3d38fe704dd6981bb1482ebdb5d0ea6e4fa2b75ad179c0c2e35edb4465c69cab7775949ddf01198a5da050e095a9b6706310cbe8c2ac62287791f98546af493ee6e14f3fc45360d3561105a4f8d196e5aaee6bfe35b07af8898f4c65ab3c800fbb31cabce9d47eb221f23538bf509bd475ed55829415ccaa77ba75995947aaf62e7"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:44:59 executing program 2: socket$inet6_sctp(0xa, 0x0, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r0, 0x0, 0xb601) 14:44:59 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) 14:44:59 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000040030000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000001100000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:44:59 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:45:00 executing program 2: socket$inet6_sctp(0xa, 0x0, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x1000000) 14:45:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x38, 0x0) getsockname$tipc(r2, &(0x7f0000000000)=@name, &(0x7f00000000c0)=0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r4, r0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r5, 0x0, 0x0) 14:45:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000003400000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000001200000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:00 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) 14:45:00 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:45:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a0108000000fffff00000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000001300000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:00 executing program 2: socket$inet6_sctp(0xa, 0x0, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r0, 0x0, 0xb6010000) 14:45:00 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:45:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x38, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000700)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000100000000100000040002000000000408000000200381722adaf6c044d1973af665e30736f4dfcb146edd8ad240166fd9a5699accb5671ab4603c11542bdb43fec676fe142508f7629bfda18938cba7508e89e2630a67e26fb525e879dd5a00841698c7d0c5cd2bd48356e1e7c1898cad6a70", @ANYRES32=r3, @ANYBLOB="10000100000000002000000000000000"], 0x2c, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) setfsgid(r3) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000001740)=ANY=[@ANYRES16=0x0], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x80000, 0x0) dup2(r5, r0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r6, 0x0, 0x0) 14:45:00 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) 14:45:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000001400000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000100000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:00 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) [ 1714.496724][T26045] binder: 26043:26045 unknown command 0 [ 1714.527268][T26045] binder: 26043:26045 ioctl c0306201 20000200 returned -22 14:45:00 executing program 2: socket$inet6_sctp(0xa, 0x0, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r0, 0x0, 0xffffff7f) 14:45:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000200000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:00 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) 14:45:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000052200000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:00 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:45:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0x80000000, 0x8) read$fb(r3, 0x0, 0x0) 14:45:01 executing program 2: socket$inet6_sctp(0xa, 0x0, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x7ffffffff000) 14:45:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000300000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000004c00000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:01 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:45:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000006000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:01 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 14:45:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000400000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:01 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) 14:45:01 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:45:01 executing program 2: socket$inet6_sctp(0xa, 0x0, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r0, 0x0, 0xf0ffffff7f0000) 14:45:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000006c00000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000500000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1715.273244][T26307] binder: 26306:26307 unknown command -1894458874 [ 1715.297793][T26307] binder: 26306:26307 ioctl c0306201 20000200 returned -22 14:45:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff00000000000000f000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:01 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:45:01 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 14:45:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000600000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:01 executing program 2: socket$inet6_sctp(0xa, 0x0, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x100000000000000) 14:45:01 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="23210400"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f00000000c0)={0x0, 0xeb, 0x200b}) dup2(r2, r0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) 14:45:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000004003000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:01 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:45:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000800000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000340000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:01 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) [ 1715.674779][T26442] binder: 26437:26442 unknown command 270627 [ 1715.712467][T26442] binder: 26437:26442 ioctl c0306201 20000100 returned -22 14:45:01 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="0006000000000000c910000000004d430000000000000000000101070000000000000000134addedd59ce0df31ad54403fb3a67f00000080beb6538f0000000000006308ca1f30901a895b9c20301c4406a521298c08ff6e9d0e0b693f5bf3a7dc8ad15af1a5471ec90015ad064c9f9626714648fd677c35c36d2f421db726fdc001a39bf17e2ef0a96df86a02f12c6d581aa7d336c3bc62fa27cb02c6bb4cd39fb7672d18ab2b1c4d8766addaf9143efdb3d38fe704dd6981bb1482ebdb5d0ea6e4fa2b75ad179c0c2e35edb4465c69cab7775949ddf01198a5da050e095a9b6706310cbe8c2ac62287791f98546af493ee6e14f3fc45360d3561105a4f8d196e5aaee6bfe35b07af8898f4c65ab3c800fbb31cabce9d47eb221f23538bf509bd475ed55829415ccaa77ba75995947aaf62e7"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:45:01 executing program 2: socket$inet6_sctp(0xa, 0x0, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r0, 0x0, 0xb601000000000000) 14:45:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000900000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000fffff0000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05637040"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x696382, 0x0) ioctl$CAPI_NCCI_GETUNIT(r5, 0x80044327, &(0x7f00000000c0)=0xf6a) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r3, 0x0, r6, 0x0, 0x38, 0x0) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x5) dup2(r2, r0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r4, 0x4010ae74, &(0x7f0000000140)={0x5, 0x1, 0x1f}) read$fb(r7, 0x0, 0x0) 14:45:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="0006000000000000c910000000004d430000000000000000000101070000000000000000134addedd59ce0df31ad54403fb3a67f00000080beb6538f0000000000006308ca1f30901a895b9c20301c4406a521298c08ff6e9d0e0b693f5bf3a7dc8ad15af1a5471ec90015ad064c9f9626714648fd677c35c36d2f421db726fdc001a39bf17e2ef0a96df86a02f12c6d581aa7d336c3bc62fa27cb02c6bb4cd39fb7672d18ab2b1c4d8766addaf9143efdb3d38fe704dd6981bb1482ebdb5d0ea6e4fa2b75ad179c0c2e35edb4465c69cab7775949ddf01198a5da050e095a9b6706310cbe8c2ac62287791f98546af493ee6e14f3fc45360d3561105a4f8d196e5aaee6bfe35b07af8898f4c65ab3c800fbb31cabce9d47eb221f23538bf509bd475ed55829415ccaa77ba75995947aaf62e7"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:45:02 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, 0x0}, 0x0) [ 1716.006838][T26571] binder: 26565:26571 unknown command 1081107205 14:45:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000a00000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000000010900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:02 executing program 2: socket$inet6_sctp(0xa, 0x0, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r0, 0x0, 0xffffff7f00000000) [ 1716.072399][T26571] binder: 26565:26571 ioctl c0306201 20000200 returned -22 14:45:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:45:02 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, 0x0}, 0x0) 14:45:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000b00000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000000020900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x103000, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0), 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x38, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05630440b702f78996c28aad26f4680cff1d6386624d1f48e8db6d43825f0d0f3c1c00e62f84"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r6, r0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r7, 0x0, 0x0) 14:45:02 executing program 2: socket$inet6_sctp(0xa, 0x0, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) 14:45:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:45:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000000e00000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000000030900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1716.392810][T26703] binder: 26699:26703 unknown command -1383415146 [ 1716.410573][T26703] binder: 26699:26703 ioctl c0306201 20000200 returned -22 14:45:02 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, 0x0}, 0x0) 14:45:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000001000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:02 executing program 2: socket$inet6_sctp(0xa, 0x0, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) getsockopt$inet_dccp_int(r1, 0x21, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 14:45:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000000040900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:45:02 executing program 3: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x6, 0x408101) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xe) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)={0x200, 0x3, 0x4, 0x100000, 0x2, {0x77359400}, {0x1, 0x0, 0x7, 0x1, 0x0, 0x20, "f9db26db"}, 0x4, 0x2, @userptr=0x9, 0x7, 0x0, r0}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r4, r1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8983, &(0x7f0000000100)={0x7, 'bridge_slave_0\x00', {0x3}, 0x8a}) r6 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r6, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000001c0)={0x6, 0x0, 0x9, 0xffffffff, 0x5c}) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r7, 0x0, 0x0) 14:45:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000001100000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:02 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)}, 0x0) 14:45:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000000050900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="0006000000000000c910000000004d430000000000000000000101070000000000000000134addedd59ce0df31ad54403fb3a67f00000080beb6538f0000000000006308ca1f30901a895b9c20301c4406a521298c08ff6e9d0e0b693f5bf3a7dc8ad15af1a5471ec90015ad064c9f9626714648fd677c35c36d2f421db726fdc001a39bf17e2ef0a96df86a02f12c6d581aa7d336c3bc62fa27cb02c6bb4cd39fb7672d18ab2b1c4d8766addaf9143efdb3d38fe704dd6981bb1482ebdb5d0ea6e4fa2b75ad179c0c2e35edb4465c69cab7775949ddf01198a5da050e095a9b6706310cbe8c2ac62287791f98546af493ee6e14f3fc45360d3561105a4f8d196e5aaee6bfe35b07af8898f4c65ab3c800fbb31cabce9d47eb221f23538bf509bd475ed55829415ccaa77ba75995947aaf62e7"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:45:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000001200000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000000060900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x1000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\b\x00\x00\x00'], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x38, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000200)={0x9e0000, 0x10000, 0x4, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x990900, 0x5, [], @p_u16=&(0x7f0000000180)=0x2}}) ioctl$USBDEVFS_RELEASEINTERFACE(r5, 0x80045510, &(0x7f0000000240)=0xa01) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f00000000c0)={0x33, 0x2}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r6, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r7, 0x1, 0x53, &(0x7f0000000080)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000140)=0x28) 14:45:03 executing program 2: socket$inet6_sctp(0xa, 0x0, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x20) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000040)={r4, 0xfff, 0x6d, "f171d9d5a54ff9ace44facc1fb4708ce0c954496dd394a80266a8672c33bbcf07bc1c7d7dc7de822ee46763b862e8785a732305cdef7265e5debc2a7ce68c69746329f3a63c5ec7f1976962761128f5f2972e3a92f75a58011baed2965830ce2016ce35e07eb92deefce434035"}, 0x75) 14:45:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:45:03 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)}, 0x0) [ 1717.073733][T26954] binder: 26952:26954 unknown command 8 [ 1717.116231][T26954] binder: 26952:26954 ioctl c0306201 20000000 returned -22 14:45:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000000080900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000001300000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:45:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = dup2(r2, r0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000000)={0x5000, 0x4000, 0x1, 0x20, 0x1}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x38, 0x0) read$fb(r4, 0x0, 0x23) 14:45:03 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)}, 0x0) 14:45:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000000090900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:03 executing program 2: socket$inet6_sctp(0xa, 0x0, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0xa, 0x0, 0x70bd2a, 0x25dfdbfc, {0xa, 0x0, 0x1}, [@nested={0x30, 0x68, 0x0, 0x1, [@typed={0x2a, 0x5, 0x0, 0x0, @str='/sys/kernel/debug/binder/transactions\x00'}]}, @typed={0x6, 0x15, 0x0, 0x0, @str='-\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) 14:45:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0006000000000000c910000000004d430000000000000000000101070000000000000000134addedd59ce0df31ad54403fb3a67f00000080beb6538f0000000000006308ca1f30901a895b9c20301c4406a521298c08ff6e9d0e0b693f5bf3a7dc8ad15af1a5471ec90015ad064c9f9626714648fd677c35c36d2f421db726fdc001a39bf17e2ef0a96df86a02f12c6d581aa7d336c3bc62fa27cb02c6bb4cd39fb7672d18ab2b1c4d8766addaf9143efdb3d38fe704dd6981bb1482ebdb5d0ea6e4fa2b75ad179c0c2e35edb4465c69cab7775949ddf01198a5da050e095a9b6706310cbe8c2ac62287791f98546af493ee6e14f3fc45360d3561105a4f8d196e5aaee6bfe35b07af8898f4c65ab3c800fbb31cabce9d47eb221f23538bf509bd475ed55829415ccaa77ba75995947aaf62e7"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:45:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000001400000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:03 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) 14:45:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000000000000000000a0900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000001900000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:45:03 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) 14:45:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:45:04 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff00000000000000f000000900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:04 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) 14:45:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000000000000000000b0900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000004c00000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:04 executing program 2: socket$inet6_sctp(0xa, 0x0, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) 14:45:04 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:45:04 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:45:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff0000000000000000000e0900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000006000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:04 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) 14:45:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) 14:45:04 executing program 2: socket$inet6_sctp(0xa, 0x0, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x38, 0x0) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000140)={0x3f, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080), &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 14:45:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000000100900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:04 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[], 0x0) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:45:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000000000006c00000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1718.823116][T27244] binder: 27243:27244 unknown command -1894458874 [ 1718.868057][T27244] binder: 27243:27244 ioctl c0306201 20000200 returned -22 14:45:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a0108000000ffffff9e00000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000000110900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:05 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[], 0x0) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:45:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:45:05 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000040)) 14:45:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="06da148fadd88d6128aef29fdd85c786b1d10f01cf1fe54a763823256bb8b6d31cf35b25d8da2bbe283932d99ea6361870fb5a76ffb3d218c73f8a2b4577c3ffd42b5b3642492b2aa6c00898a1d7acdca8bea5127d5f7ce849938b3f1580ce420648fb6d59c37ad910ca7f8cc2cd9cfdf44d5071055c7ebc250d480c60f7c786d4212653749b35771c269a4ce7eac5bcf24b4cc7fa2a51f50ef8f5c3162b9f334d5b177660c229e2c0202f1b9ef55e0a74910114937a7db8d255b53a39809013c2f4efb27cd9000048ffee8ef7751bbc11f26e008f3beb0527f0f6a12d270ad8afd555c55d585fa8569e3b29e61872f2d452a132c3a724cb6b0cec3c5e17e1eb69216f1f0f687c3df285c798b1a06e5d220018017a6fb18398da3dea789a74f7ed5cd76de8ef157dda0773630a58120aee2e209b0a9fafdf6225ae4266a144e97d73e475f122136b104d9ef1aa99ee42faa9d4bdc155b36af7fa15fa"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) 14:45:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000000120900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a0108000000000017a100000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:05 executing program 0 (fault-call:3 fault-nth:0): r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = inotify_init() io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1]}, 0x1) 14:45:05 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[], 0x0) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) 14:45:05 executing program 2: socket$inet6_sctp(0xa, 0x0, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001640)=[{&(0x7f0000000280)="440a61f251c1c4e23486312947adcce7af5edab79d00ebb855faa5a27275e95907d782f4e6f980b4ebe9c71ca91341e58485d9296be333e3", 0x38}], 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x3, 0x80) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={r4, 0x7ff, 0x20}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r5, 0x4e}, &(0x7f0000000100)=0x8) read$fb(r0, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) ptrace$peek(0xffffffffffffffff, r6, &(0x7f0000000180)) 14:45:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000000130900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a0108000000fffffff000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1719.277084][T27379] binder: 27373:27379 unknown command -1894458874 [ 1719.301920][T27379] binder: 27373:27379 ioctl c0306201 20000200 returned -22 [ 1719.406686][T27409] FAULT_INJECTION: forcing a failure. [ 1719.406686][T27409] name failslab, interval 1, probability 0, space 0, times 0 [ 1719.446212][T27409] CPU: 1 PID: 27409 Comm: syz-executor.0 Not tainted 5.6.0-rc6-syzkaller #0 14:45:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000000140900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a010800000000f0ffff00000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1719.455208][T27409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1719.465452][T27409] Call Trace: [ 1719.468790][T27409] dump_stack+0x188/0x20d [ 1719.473150][T27409] should_fail.cold+0x5/0xa [ 1719.477682][T27409] ? fault_create_debugfs_attr+0x140/0x140 [ 1719.483528][T27409] should_failslab+0x5/0xf [ 1719.487987][T27409] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 1719.493383][T27409] ? lockdep_init_map+0x1b0/0x6c0 [ 1719.498432][T27409] ? lockdep_init_map+0x1b0/0x6c0 14:45:05 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x1) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) [ 1719.503554][T27409] io_queue_file_removal+0xd0/0x1e0 [ 1719.508781][T27409] ? trace_event_raw_event_io_uring_submit_sqe+0x2f0/0x2f0 [ 1719.516039][T27409] ? lock_downgrade+0x7f0/0x7f0 [ 1719.520938][T27409] ? lock_acquire+0x197/0x420 [ 1719.525636][T27409] ? __might_fault+0xef/0x1d0 [ 1719.530372][T27409] ? __might_fault+0x190/0x1d0 [ 1719.535156][T27409] ? _copy_from_user+0x123/0x190 [ 1719.540124][T27409] __io_sqe_files_update.isra.0+0x3a1/0xb00 [ 1719.546127][T27409] ? lock_downgrade+0x7f0/0x7f0 [ 1719.551013][T27409] ? __io_sqe_files_scm+0x7d0/0x7d0 [ 1719.556395][T27409] ? __might_fault+0x190/0x1d0 [ 1719.561223][T27409] __io_uring_register+0x377/0x2c00 [ 1719.566451][T27409] ? __x64_sys_io_uring_register+0x181/0x560 [ 1719.572463][T27409] ? mutex_trylock+0x2c0/0x2c0 [ 1719.577246][T27409] ? __fget_files+0x329/0x4f0 [ 1719.581953][T27409] ? __io_sqe_files_update.isra.0+0xb00/0xb00 [ 1719.588059][T27409] ? ksys_dup3+0x3c0/0x3c0 [ 1719.592589][T27409] ? vfs_write+0x15b/0x5c0 [ 1719.597080][T27409] __x64_sys_io_uring_register+0x192/0x560 [ 1719.602911][T27409] ? do_syscall_64+0x21/0x7d0 [ 1719.607628][T27409] do_syscall_64+0xf6/0x7d0 [ 1719.612168][T27409] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1719.618104][T27409] RIP: 0033:0x45c849 [ 1719.622028][T27409] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1719.641644][T27409] RSP: 002b:00007f20b2763c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1719.650079][T27409] RAX: ffffffffffffffda RBX: 00007f20b27646d4 RCX: 000000000045c849 14:45:05 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x1) sendto$inet6(r0, &(0x7f0000000080)="459e81123973836821c64be75f27aab14be7c9b6e9dc1a9d3f515ca2b1a47206f9f99477", 0x10a73, 0x884, 0x0, 0xffffffffffffffc3) [ 1719.658196][T27409] RDX: 0000000020000300 RSI: 0000000000000006 RDI: 0000000000000003 [ 1719.666319][T27409] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1719.674403][T27409] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000005 [ 1719.682418][T27409] R13: 00000000000001fe R14: 00000000004d2f40 R15: 0000000000000000 14:45:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) 14:45:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000080a1fffffff000000000000000005220900010073797a300000000038000000120a01080000000000000000000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 14:45:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a1fffffff000000000000000000000900010073797a300000000038000000120a01080000007fffffff00000000000400078009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 1719.939665][T27513] binder: 27512:27513 unknown command -1894458874 [ 1719.951250][T27513] binder: 27512:27513 ioctl c0306201 20000200 returned -22 [ 1756.346337][ T0] NOHZ: local_softirq_pending 08 [ 1756.351402][ T0] NOHZ: local_softirq_pending 08 [ 1797.306971][ T0] NOHZ: local_softirq_pending 08 [ 1797.312027][ T0] NOHZ: local_softirq_pending 08 [ 1825.466978][ T0] NOHZ: local_softirq_pending 08 [ 1867.064858][ T1132] INFO: task syz-executor.0:27409 blocked for more than 143 seconds. [ 1867.073230][ T1132] Not tainted 5.6.0-rc6-syzkaller #0 [ 1867.079918][ T1132] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1867.094841][ T1132] syz-executor.0 D28328 27409 9562 0x80004004 [ 1867.102059][ T1132] Call Trace: [ 1867.112912][ T1132] ? __schedule+0x934/0x1f90 [ 1867.118080][ T1132] ? __sched_text_start+0x8/0x8 [ 1867.123016][ T1132] ? __lock_acquire+0x14bd/0x3ca0 [ 1867.133367][ T1132] schedule+0xd0/0x2a0 [ 1867.138010][ T1132] schedule_timeout+0x6db/0xba0 [ 1867.142955][ T1132] ? find_held_lock+0x2d/0x110 [ 1867.155155][ T1132] ? usleep_range+0x160/0x160 [ 1867.159992][ T1132] ? wait_for_completion+0x262/0x3c0 [ 1867.185414][ T1132] ? mark_lock+0xbc/0x1220 [ 1867.190004][ T1132] ? do_raw_spin_lock+0x129/0x2e0 [ 1867.210213][ T1132] ? mark_held_locks+0x9f/0xe0 [ 1867.215126][ T1132] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1867.220510][ T1132] wait_for_completion+0x26a/0x3c0 [ 1867.233283][ T1132] ? wait_for_completion_interruptible+0x420/0x420 [ 1867.240163][ T1132] ? lock_acquire+0x197/0x420 [ 1867.250939][ T1132] ? wake_up_q+0x140/0x140 [ 1867.255527][ T1132] ? mark_held_locks+0x9f/0xe0 [ 1867.260349][ T1132] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 1867.272177][ T1132] io_queue_file_removal+0x1af/0x1e0 [ 1867.277623][ T1132] ? trace_event_raw_event_io_uring_submit_sqe+0x2f0/0x2f0 [ 1867.290399][ T1132] ? lock_acquire+0x197/0x420 [ 1867.296097][ T1132] ? __might_fault+0xef/0x1d0 [ 1867.300955][ T1132] ? __might_fault+0x190/0x1d0 [ 1867.312586][ T1132] ? _copy_from_user+0x123/0x190 [ 1867.317647][ T1132] __io_sqe_files_update.isra.0+0x3a1/0xb00 [ 1867.323574][ T1132] ? lock_downgrade+0x7f0/0x7f0 [ 1867.333913][ T1132] ? __io_sqe_files_scm+0x7d0/0x7d0 [ 1867.339297][ T1132] ? __might_fault+0x190/0x1d0 [ 1867.344262][ T1132] __io_uring_register+0x377/0x2c00 [ 1867.355092][ T1132] ? __x64_sys_io_uring_register+0x181/0x560 [ 1867.361167][ T1132] ? mutex_trylock+0x2c0/0x2c0 [ 1867.366079][ T1132] ? __fget_files+0x329/0x4f0 [ 1867.382126][ T1132] ? __io_sqe_files_update.isra.0+0xb00/0xb00 [ 1867.390968][ T1132] ? ksys_dup3+0x3c0/0x3c0 [ 1867.396208][ T1132] ? vfs_write+0x15b/0x5c0 [ 1867.400657][ T1132] __x64_sys_io_uring_register+0x192/0x560 [ 1867.407216][ T1132] ? do_syscall_64+0x21/0x7d0 [ 1867.411937][ T1132] do_syscall_64+0xf6/0x7d0 [ 1867.416919][ T1132] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1867.422866][ T1132] RIP: 0033:0x45c849 [ 1867.428894][ T1132] Code: Bad RIP value. [ 1867.433011][ T1132] RSP: 002b:00007f20b2763c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1867.442833][ T1132] RAX: ffffffffffffffda RBX: 00007f20b27646d4 RCX: 000000000045c849 [ 1867.450967][ T1132] RDX: 0000000020000300 RSI: 0000000000000006 RDI: 0000000000000003 [ 1867.459050][ T1132] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1867.467115][ T1132] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000005 [ 1867.475374][ T1132] R13: 00000000000001fe R14: 00000000004d2f40 R15: 0000000000000000 [ 1867.483422][ T1132] [ 1867.483422][ T1132] Showing all locks held in the system: [ 1867.491690][ T1132] 1 lock held by khungtaskd/1132: [ 1867.497157][ T1132] #0: ffffffff897accc0 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x260 [ 1867.506920][ T1132] 1 lock held by rsyslogd/9434: [ 1867.511784][ T1132] #0: ffff8880952e5ba0 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xe3/0x100 [ 1867.521685][ T1132] 2 locks held by getty/9524: [ 1867.526854][ T1132] #0: ffff8880a07f8090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 1867.536580][ T1132] #1: ffffc9000172b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 [ 1867.546687][ T1132] 2 locks held by getty/9525: [ 1867.551363][ T1132] #0: ffff888098509090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 1867.584550][ T1132] #1: ffffc900017bb2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 [ 1867.594160][ T1132] 2 locks held by getty/9526: [ 1867.614627][ T1132] #0: ffff8880a80a7090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 1867.623906][ T1132] #1: ffffc9000176b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 [ 1867.634952][ T1132] 2 locks held by getty/9527: [ 1867.639656][ T1132] #0: ffff888097b59090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 1867.649523][ T1132] #1: ffffc900017872e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 [ 1867.659558][ T1132] 2 locks held by getty/9528: [ 1867.664244][ T1132] #0: ffff8880a40c2090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 1867.673938][ T1132] #1: ffffc9000179b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 [ 1867.684004][ T1132] 2 locks held by getty/9529: [ 1867.689091][ T1132] #0: ffff8880a8ed2090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 1867.698853][ T1132] #1: ffffc900017ab2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 [ 1867.709671][ T1132] 2 locks held by getty/9530: [ 1867.714366][ T1132] #0: ffff88809a73b090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 1867.723989][ T1132] #1: ffffc9000170b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 [ 1867.734062][ T1132] 7 locks held by kworker/u4:0/23281: [ 1867.740319][ T1132] 1 lock held by syz-executor.0/27409: [ 1867.746635][ T1132] #0: ffff888091e1b320 (&ctx->uring_lock){+.+.}, at: __x64_sys_io_uring_register+0x181/0x560 [ 1867.757442][ T1132] [ 1867.759799][ T1132] ============================================= [ 1867.759799][ T1132] [ 1867.771361][ T1132] NMI backtrace for cpu 1 [ 1867.775934][ T1132] CPU: 1 PID: 1132 Comm: khungtaskd Not tainted 5.6.0-rc6-syzkaller #0 [ 1867.784182][ T1132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1867.794254][ T1132] Call Trace: [ 1867.797560][ T1132] dump_stack+0x188/0x20d [ 1867.801917][ T1132] nmi_cpu_backtrace.cold+0x70/0xb1 [ 1867.807313][ T1132] ? lapic_can_unplug_cpu.cold+0x3b/0x3b [ 1867.812970][ T1132] nmi_trigger_cpumask_backtrace+0x231/0x27e [ 1867.819349][ T1132] watchdog+0xa8c/0x1010 [ 1867.823645][ T1132] ? reset_hung_task_detector+0x30/0x30 [ 1867.829221][ T1132] kthread+0x357/0x430 [ 1867.833312][ T1132] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 1867.840273][ T1132] ret_from_fork+0x24/0x30 [ 1867.844758][ T1132] Sending NMI from CPU 1 to CPUs 0: [ 1867.851244][ C0] NMI backtrace for cpu 0 [ 1867.851250][ C0] CPU: 0 PID: 23281 Comm: kworker/u4:0 Not tainted 5.6.0-rc6-syzkaller #0 [ 1867.851256][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1867.851259][ C0] Workqueue: krdsd rds_connect_worker [ 1867.851265][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x9/0x50 [ 1867.851275][ C0] Code: cc 65 48 8b 04 25 c0 1e 02 00 48 8b 80 98 13 00 00 c3 0f 1f 44 00 00 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 04 25 c0 1e 02 00 <65> 8b 15 58 f9 8f 7e 81 e2 00 01 1f 00 48 8b 34 24 75 2b 8b 90 80 [ 1867.851279][ C0] RSP: 0018:ffffc90000006f78 EFLAGS: 00000206 [ 1867.851285][ C0] RAX: ffff88804b7d24c0 RBX: ffff8880a7d48000 RCX: 0000000000000000 [ 1867.851290][ C0] RDX: 0000000000000100 RSI: ffffffff860fb59f RDI: ffff88802bd34102 [ 1867.851295][ C0] RBP: ffffc90000007110 R08: ffff88804b7d24c0 R09: ffffed1015cc7074 [ 1867.851299][ C0] R10: ffffed1015cc7073 R11: ffff8880ae63839b R12: ffff88802bd34080 [ 1867.851304][ C0] R13: ffff8880a7d482c0 R14: 000000000000004a R15: 0000000000000000 [ 1867.851309][ C0] FS: 0000000000000000(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 1867.851313][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1867.851317][ C0] CR2: 000000000045c81f CR3: 00000000942d0000 CR4: 00000000001406f0 [ 1867.851322][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1867.851326][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1867.851329][ C0] Call Trace: [ 1867.851331][ C0] [ 1867.851334][ C0] __dev_queue_xmit+0x764/0x30a0 [ 1867.851337][ C0] ? __lock_acquire+0x14bd/0x3ca0 [ 1867.851340][ C0] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1867.851343][ C0] ? find_held_lock+0x2d/0x110 [ 1867.851347][ C0] ? __ip_finish_output+0x5f3/0xbd0 [ 1867.851350][ C0] ? nf_ct_deliver_cached_events+0x1eb/0x680 [ 1867.851353][ C0] ? mark_lock+0xbc/0x1220 [ 1867.851356][ C0] ? ip_finish_output2+0x17b7/0x2610 [ 1867.851360][ C0] ip_finish_output2+0x17b7/0x2610 [ 1867.851363][ C0] ? ip_frag_next+0x9a0/0x9a0 [ 1867.851366][ C0] ? ip_output+0x41d/0x620 [ 1867.851369][ C0] ? __ip_finish_output+0x5f3/0xbd0 [ 1867.851372][ C0] __ip_finish_output+0x5f3/0xbd0 [ 1867.851375][ C0] ip_finish_output+0x34/0x1f0 [ 1867.851378][ C0] ip_output+0x1fe/0x620 [ 1867.851381][ C0] ? ip_mc_output+0xed0/0xed0 [ 1867.851384][ C0] ? __ip_finish_output+0xbd0/0xbd0 [ 1867.851386][ C0] ? skb_push+0x97/0xc0 [ 1867.851389][ C0] ip_local_out+0xaf/0x1a0 [ 1867.851392][ C0] tcp_v4_send_synack+0x222/0x460 [ 1867.851396][ C0] ? tcp_v4_send_check+0x90/0x90 [ 1867.851399][ C0] ? do_raw_spin_unlock+0x171/0x260 [ 1867.851402][ C0] ? _raw_spin_unlock+0x24/0x40 [ 1867.851405][ C0] ? inet_ehash_insert+0x622/0x830 [ 1867.851409][ C0] ? inet_csk_reqsk_queue_drop_and_put+0x300/0x300 [ 1867.851412][ C0] tcp_conn_request+0x2548/0x34c0 [ 1867.851416][ C0] ? tcp_ack_update_rtt.isra.0+0x1510/0x1510 [ 1867.851419][ C0] ? find_held_lock+0x2d/0x110 [ 1867.851421][ C0] ? mark_lock+0xbc/0x1220 [ 1867.851424][ C0] ? mark_held_locks+0xe0/0xe0 [ 1867.851428][ C0] ? tcp_v4_conn_request+0xbc/0x240 [ 1867.851431][ C0] ? tcp_rcv_state_process+0x95c/0x52ca [ 1867.851434][ C0] tcp_v4_conn_request+0xbc/0x240 [ 1867.851437][ C0] tcp_v6_conn_request+0x1ed/0x2b0 [ 1867.851441][ C0] tcp_rcv_state_process+0xa27/0x52ca [ 1867.851444][ C0] ? tcp_finish_connect+0x500/0x500 [ 1867.851447][ C0] ? rcu_read_lock_held_common+0x130/0x130 [ 1867.851451][ C0] ? sk_filter_trim_cap+0x3e1/0xaa0 [ 1867.851454][ C0] ? tcp_v4_inbound_md5_hash+0x261/0x3d0 [ 1867.851457][ C0] ? sk_skb_change_tail+0xa70/0xa70 [ 1867.851460][ C0] ? tcp_v4_do_rcv+0x34c/0x8b0 [ 1867.851463][ C0] tcp_v4_do_rcv+0x34c/0x8b0 [ 1867.851466][ C0] tcp_v4_rcv+0x33aa/0x3870 [ 1867.851469][ C0] ? tcp_v4_early_demux+0x8d0/0x8d0 [ 1867.851477][ C0] ? rcu_read_lock_held+0x9c/0xb0 [ 1867.851481][ C0] ? rcu_read_lock_held_common+0x130/0x130 [ 1867.851484][ C0] ip_protocol_deliver_rcu+0x57/0x880 [ 1867.851487][ C0] ip_local_deliver_finish+0x220/0x360 [ 1867.851490][ C0] ip_local_deliver+0x1c8/0x4e0 [ 1867.851493][ C0] ? ip_local_deliver_finish+0x360/0x360 [ 1867.851496][ C0] ? ip_rcv+0x24e/0x3c0 [ 1867.851499][ C0] ? ip_protocol_deliver_rcu+0x880/0x880 [ 1867.851502][ C0] ? lock_downgrade+0x7f0/0x7f0 [ 1867.851506][ C0] ? ip_rcv_finish_core.isra.0+0x5fd/0x1ec0 [ 1867.851509][ C0] ip_rcv_finish+0x1da/0x2f0 [ 1867.851511][ C0] ip_rcv+0xd0/0x3c0 [ 1867.851514][ C0] ? ip_local_deliver+0x4e0/0x4e0 [ 1867.851518][ C0] ? ip_rcv_finish_core.isra.0+0x1ec0/0x1ec0 [ 1867.851521][ C0] ? find_held_lock+0x2d/0x110 [ 1867.851524][ C0] ? ip_local_deliver+0x4e0/0x4e0 [ 1867.851528][ C0] __netif_receive_skb_one_core+0xf5/0x160 [ 1867.851532][ C0] ? __netif_receive_skb_core+0x30b0/0x30b0 [ 1867.851535][ C0] ? lock_acquire+0x197/0x420 [ 1867.851538][ C0] ? process_backlog+0x1ad/0x7a0 [ 1867.851541][ C0] __netif_receive_skb+0x27/0x1c0 [ 1867.851544][ C0] process_backlog+0x21e/0x7a0 [ 1867.851547][ C0] ? mark_held_locks+0x9f/0xe0 [ 1867.851550][ C0] ? net_rx_action+0x25f/0x1070 [ 1867.851553][ C0] net_rx_action+0x4c2/0x1070 [ 1867.851556][ C0] ? napi_busy_loop+0x950/0x950 [ 1867.851560][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1867.851563][ C0] ? mark_held_locks+0x9f/0xe0 [ 1867.851565][ C0] __do_softirq+0x26c/0x99d [ 1867.851569][ C0] do_softirq_own_stack+0x2a/0x40 [ 1867.851571][ C0] [ 1867.851574][ C0] ? ip_finish_output2+0x929/0x2610 [ 1867.851577][ C0] do_softirq.part.0+0x10f/0x160 [ 1867.851580][ C0] __local_bh_enable_ip+0x20e/0x270 [ 1867.851583][ C0] ip_finish_output2+0x957/0x2610 [ 1867.851586][ C0] ? ip_frag_next+0x9a0/0x9a0 [ 1867.851589][ C0] ? rcu_read_lock_held+0x9c/0xb0 [ 1867.851592][ C0] ? rcu_read_lock_held_common+0x130/0x130 [ 1867.851596][ C0] ? __ip_finish_output+0x5f3/0xbd0 [ 1867.851599][ C0] __ip_finish_output+0x5f3/0xbd0 [ 1867.851602][ C0] ip_finish_output+0x34/0x1f0 [ 1867.851604][ C0] ip_output+0x1fe/0x620 [ 1867.851607][ C0] ? ip_mc_output+0xed0/0xed0 [ 1867.851610][ C0] ? __ip_finish_output+0xbd0/0xbd0 [ 1867.851620][ C0] ? rcu_read_lock_held+0x9c/0xb0 [ 1867.851623][ C0] ? rcu_read_lock_held_common+0x130/0x130 [ 1867.851626][ C0] ip_local_out+0xaf/0x1a0 [ 1867.851629][ C0] __ip_queue_xmit+0x863/0x1c20 [ 1867.851634][ C0] ? tcp_options_write+0x2cd/0xa90 [ 1867.851638][ C0] __tcp_transmit_skb+0x19d6/0x3740 [ 1867.851641][ C0] ? __tcp_select_window+0x880/0x880 [ 1867.851644][ C0] tcp_connect+0x2d06/0x42a0 [ 1867.851647][ C0] ? __tcp_transmit_skb+0x3740/0x3740 [ 1867.851650][ C0] ? siphash_1u64+0x13/0x260 [ 1867.851653][ C0] ? secure_ipv6_port_ephemeral+0x250/0x250 [ 1867.851656][ C0] ? xfrm_lookup_route+0x65/0x1e0 [ 1867.851659][ C0] ? dst_release+0xd/0xe0 [ 1867.851662][ C0] ? prandom_u32_state+0xe/0x170 [ 1867.851665][ C0] tcp_v4_connect+0x14f0/0x1c10 [ 1867.851668][ C0] ? tcp_v4_md5_lookup+0x240/0x240 [ 1867.851672][ C0] __inet_stream_connect+0x80f/0xe30 [ 1867.851675][ C0] ? ipv4_mib_init_net+0x570/0x570 [ 1867.851678][ C0] ? lock_acquire+0x197/0x420 [ 1867.851681][ C0] ? mark_held_locks+0x9f/0xe0 [ 1867.851684][ C0] ? __local_bh_enable_ip+0x159/0x270 [ 1867.851687][ C0] inet_stream_connect+0x53/0xa0 [ 1867.851691][ C0] rds_tcp_conn_path_connect+0x620/0x880 [ 1867.851694][ C0] ? rds_tcp_state_change+0x270/0x270 [ 1867.851697][ C0] ? mark_held_locks+0xe0/0xe0 [ 1867.851700][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1867.851704][ C0] rds_connect_worker+0x1a5/0x2c0 [ 1867.851707][ C0] process_one_work+0x94b/0x1690 [ 1867.851710][ C0] ? pwq_dec_nr_in_flight+0x310/0x310 [ 1867.851713][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 1867.851717][ C0] worker_thread+0x96/0xe20 [ 1867.851720][ C0] ? process_one_work+0x1690/0x1690 [ 1867.851722][ C0] kthread+0x357/0x430 [ 1867.851726][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 1867.851729][ C0] ret_from_fork+0x24/0x30 [ 1867.866832][ T1132] Kernel panic - not syncing: hung_task: blocked tasks [ 1868.640091][ T1132] CPU: 1 PID: 1132 Comm: khungtaskd Not tainted 5.6.0-rc6-syzkaller #0 [ 1868.648426][ T1132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1868.658581][ T1132] Call Trace: [ 1868.661899][ T1132] dump_stack+0x188/0x20d [ 1868.666970][ T1132] panic+0x2e3/0x75c [ 1868.670892][ T1132] ? add_taint.cold+0x16/0x16 [ 1868.675598][ T1132] ? lapic_can_unplug_cpu.cold+0x3b/0x3b [ 1868.681257][ T1132] ? ___preempt_schedule+0x16/0x18 [ 1868.686400][ T1132] ? watchdog+0xa8c/0x1010 [ 1868.690837][ T1132] ? nmi_trigger_cpumask_backtrace+0x214/0x27e [ 1868.697024][ T1132] watchdog+0xa9d/0x1010 [ 1868.701303][ T1132] ? reset_hung_task_detector+0x30/0x30 [ 1868.706884][ T1132] kthread+0x357/0x430 [ 1868.710971][ T1132] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 1868.716709][ T1132] ret_from_fork+0x24/0x30 [ 1868.722789][ T1132] Kernel Offset: disabled [ 1868.727132][ T1132] Rebooting in 86400 seconds..