yz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x12634840}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 957.070823][T28108] binder: 28106:28108 ioctl c0306201 20000200 returned -14 07:16:44 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf0") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) [ 957.145499][T28153] binder: 28111:28153 unknown command 0 [ 957.174392][T28153] binder: 28111:28153 ioctl c0306201 20000200 returned -22 [ 957.235629][T28217] binder: 28111:28217 unknown command 0 [ 957.250356][T28217] binder: 28111:28217 ioctl c0306201 20000200 returned -22 07:16:45 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) r5 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) readv(r6, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r6, 0xab00, r5) r7 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x6, 0x261000) recvmmsg(r2, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) r8 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r8, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r9, 0x800000c004500a, &(0x7f0000000300)) readv(r9, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r9, 0xab00, r8) ioctl$NBD_SET_SOCK(r7, 0xab00, r9) write$UHID_INPUT(r3, &(0x7f0000000540)={0x8, "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", 0x1000}, 0x1006) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) 07:16:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x20000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:16:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x6800, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:16:45 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf0") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) 07:16:45 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfe47bf070") perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffe000/0x1000)=nil) r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) epoll_create1(0x80000) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) readv(r3, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000080)={[0x5000, 0x2000, 0xf000], 0x3, 0x40, 0x4}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 957.571561][T28335] binder: 28332:28335 ioctl c0306201 20000200 returned -14 [ 957.585231][T28334] binder: 28328:28334 unknown command 0 [ 957.598096][T28334] binder: 28328:28334 ioctl c0306201 20000200 returned -22 07:16:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x1, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff74, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f00000016c0)=[{0x0}], 0x1}}], 0x1, 0x0) [ 957.627008][T28367] binder: 28328:28367 unknown command 0 [ 957.648533][T28367] binder: 28328:28367 ioctl c0306201 20000200 returned -22 07:16:45 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) 07:16:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:16:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x40000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:16:45 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)) r1 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) sendfile(r1, r1, &(0x7f0000000040), 0x82) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x5, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0xfec) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x100, 0x0) r3 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) inotify_rm_watch(r2, r3) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0) msgctl$IPC_RMID(0x0, 0x0) 07:16:45 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dwv/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) ioctl(r1, 0x100000000, &(0x7f0000000800)="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") r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 957.909595][T28553] binder: 28550:28553 unknown command 0 [ 957.943373][T28553] binder: 28550:28553 ioctl c0306201 20000200 returned -22 07:16:45 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) [ 957.963329][T28556] binder: 28551:28556 ioctl c0306201 20000200 returned -14 [ 958.001274][T28561] binder: 28550:28561 unknown command 0 [ 958.017856][T28561] binder: 28550:28561 ioctl c0306201 20000200 returned -22 07:16:45 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) r5 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) readv(r6, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r6, 0xab00, r5) r7 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x6, 0x261000) recvmmsg(r2, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) r8 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r8, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r9, 0x800000c004500a, &(0x7f0000000300)) readv(r9, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r9, 0xab00, r8) ioctl$NBD_SET_SOCK(r7, 0xab00, r9) write$UHID_INPUT(r3, &(0x7f0000000540)={0x8, "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", 0x1000}, 0x1006) 07:16:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x40046302}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:16:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:16:45 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) 07:16:45 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x3, &(0x7f0000000100), 0x4) 07:16:45 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfe47bf070") perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0xfffffffffffffffa, 0x8000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000100)=@keyring={'key_or_keyring:', 0x0, 0x2}) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) lseek(r3, 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000600)=""/71) r4 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r1) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000100)=@keyring={'key_or_keyring:', 0x0, 0x2}) r6 = request_key(&(0x7f00000001c0)='rxrpc\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)='&\\-nodev$\x00', r5) r7 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r4, r6, r7, 0x1) keyctl$negate(0xd, 0x0, 0x7fff, r7) [ 958.413310][T28776] binder: 28775:28776 ioctl c0306201 20000200 returned -14 [ 958.418829][T28784] binder: 28782:28784 unknown command 0 [ 958.451980][T28784] binder: 28782:28784 ioctl c0306201 20000200 returned -22 07:16:46 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000240)={0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x3, &(0x7f0000000280), 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) readv(0xffffffffffffffff, &(0x7f000058c000), 0x0) tkill(0x0, 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0x0, 0x0) 07:16:46 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) [ 958.475595][T28789] binder: 28782:28789 unknown command 0 [ 958.494656][T28789] binder: 28782:28789 ioctl c0306201 20000200 returned -22 07:16:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7600, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:16:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x40046304}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 958.612227][ C1] net_ratelimit: 21 callbacks suppressed [ 958.612237][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 958.623791][ C1] protocol 88fb is buggy, dev hsr_slave_1 07:16:46 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfe47bf070") perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x9, 0x600002) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r4, 0xab00, r3) r5 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) readv(r6, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r6, 0xab00, r5) ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x4b) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) ptrace$setregset(0x4205, r7, 0x0, &(0x7f0000000280)={&(0x7f0000000180)="503349578b572fa21f20d03fa14f37de3af91e6297a1f29deaaae6d0c3a4ca2573913ef341f256f8e8002ee533d16ed1097f9bb0eac86f6336776adb784b12f419155924afd77b90c70b5e689bb5424d0dccd078538d4d84d318fb5b0903698b635dca8d906eb50bf423648ebf33c21022348cb1eeac8908ec1356444ecfcfe3126bf2c6f0bc59ecb32ee2bd207846bc51abe35d177206121e72179f22ccb3819d1afd974a2bf0b0428d9461d09d3b832f70e364292015a90cb8564ed62d7d61152e798e15a12329e58d122dcd5d6b994adca36cb5786e59baa142555c", 0xdd}) 07:16:46 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) [ 958.797849][T29007] binder: 29004:29007 unknown command 0 [ 958.806687][T29005] binder: 29003:29005 ioctl c0306201 20000200 returned -14 [ 958.821904][T29007] binder: 29004:29007 ioctl c0306201 20000200 returned -22 [ 958.872571][T29014] binder: 29004:29014 unknown command 0 [ 958.888592][T29014] binder: 29004:29014 ioctl c0306201 20000200 returned -22 [ 959.011852][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 959.017735][ C0] protocol 88fb is buggy, dev hsr_slave_1 07:16:46 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) r5 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) readv(r6, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r6, 0xab00, r5) r7 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x6, 0x261000) recvmmsg(r2, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) r8 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r8, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r9, 0x800000c004500a, &(0x7f0000000300)) readv(r9, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r9, 0xab00, r8) ioctl$NBD_SET_SOCK(r7, 0xab00, r9) 07:16:46 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfe47bf070") r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f00000000c0)={0x7, 0x2, 0x57}) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 07:16:46 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x801}, 0x5b) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@initdev, @in=@multicast2}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000000)=0xe8) r3 = syz_open_dev$mice(0x0, 0x0, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000840)={@dev, @remote, 0x0}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000940)={0x1d, r4}, 0x10, &(0x7f0000000a80)={&(0x7f0000000a00)={0x5, 0x1, 0x0, {0x77359400}, {0x77359400}, {0x0, 0x0, 0xffffffff, 0x2}, 0x1, @can={{0x0, 0x9, 0xd891, 0x51c}, 0x0, 0x2, 0x0, 0x0, "2f776d8ffd71e2cd"}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r5 = syz_open_dev$mice(0x0, 0x0, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000840)={@dev, @remote, 0x0}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000940)={0x1d, r6}, 0x10, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[@ANYBLOB="050000000100"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00faff4001000000c631006000e3ffff2e776d8ff5716b0620f3f297286bd2ab82190e15c0a1f92f87e380119ceb80de44a264144d78e61cc5e2e51a1bac4d7aa08a7d5ec7d52d32ac19e045b1f0e4d116cb832dc666d1ca6f11f2cd60d5638c8c817b2c4ecc948eec19fb42370f6d3af339c7285eb97b885ba81d4183da1c4a6e4d5580610a13dd8e3fc9da531bee1529ae0eb18179dfb86851ead36807bfe411d4bf1fd69e861881d9b02b0339f5dc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r7 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r8, 0x800000c004500a, &(0x7f0000000300)) readv(r8, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r8, 0xab00, r7) accept$packet(r7, &(0x7f0000002680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000026c0)=0x14) r9 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r9, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r10, 0x800000c004500a, &(0x7f0000000300)) readv(r10, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r10, 0xab00, r9) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002700)=@ipv4_getrule={0x20, 0x22, 0x408, 0x70bd2c, 0x25dfdbff, {0x2, 0x14, 0x0, 0xec, 0x6, 0x0, 0x0, 0x6, 0x8}}, 0x20}}, 0x20000000) 07:16:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:16:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x40046307}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:16:46 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) [ 959.303193][T29224] binder: 29222:29224 unknown command 0 [ 959.308860][T29224] binder: 29222:29224 ioctl c0306201 20000200 returned -22 [ 959.346911][T29229] binder: 29221:29229 ioctl c0306201 20000200 returned -14 [ 959.360280][T29231] binder: 29222:29231 unknown command 0 07:16:47 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) [ 959.390631][T29231] binder: 29222:29231 ioctl c0306201 20000200 returned -22 07:16:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x40086303}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:16:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x9600, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:16:47 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) [ 959.590428][T29344] binder: 29343:29344 unknown command 0 [ 959.617644][T29402] binder: 29386:29402 ioctl c0306201 20000200 returned -14 [ 959.624578][T29344] binder: 29343:29344 ioctl c0306201 20000200 returned -22 07:16:47 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) [ 959.651856][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 959.651894][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 959.657691][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 959.663410][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 959.675081][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 959.680876][ C0] protocol 88fb is buggy, dev hsr_slave_1 07:16:47 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfe47bf070") lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x2) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 959.726594][T29499] binder: 29343:29499 unknown command 0 [ 959.794275][T29499] binder: 29343:29499 ioctl c0306201 20000200 returned -22 07:16:47 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) r5 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) readv(r6, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r6, 0xab00, r5) syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x6, 0x261000) recvmmsg(r2, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) r7 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r8, 0x800000c004500a, &(0x7f0000000300)) readv(r8, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r8, 0xab00, r7) 07:16:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0xff00, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 960.101527][T29666] binder: 29665:29666 ioctl c0306201 20000200 returned -14 07:16:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x4008630a}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:16:47 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0xe0, 0x0, 0x0) 07:16:47 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfe47bf070") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x8401, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x800, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r4, &(0x7f0000000240)="db409511", 0x4) r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) keyctl$get_security(0x11, r4, &(0x7f0000000280)=""/4096, 0x1000) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 07:16:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:16:47 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x78, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe66, 0x200007fd, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) sendto$inet(r1, &(0x7f0000000540)="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", 0x246, 0x80, 0x0, 0xfffffffffffffd9b) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) r5 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000003c0)={0x80000003, {{0x2, 0x4e20, @multicast1}}}, 0x88) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) readv(r6, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r6, 0xab00, r5) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0x3, &(0x7f0000000100)=0x7ce9, 0x4) readv(r4, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r4, 0xab00, r3) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400000, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000080)=r7, 0x4) [ 960.214683][T29773] binder: 29772:29773 unknown command 0 [ 960.258819][T29773] binder: 29772:29773 ioctl c0306201 20000200 returned -22 [ 960.283801][T29781] binder: 29780:29781 ioctl c0306201 20000200 returned -14 07:16:47 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0xe0, 0x0, 0x0) [ 960.318317][T29786] binder: 29772:29786 unknown command 0 [ 960.330358][T29786] binder: 29772:29786 ioctl c0306201 20000200 returned -22 07:16:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x40086310}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:16:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x50f000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:16:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x40, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000540)={0x1, {{0xa, 0x4e22, 0x38a, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}, 0x6}}, 0x0, 0x9, [{{0xa, 0x4e21, 0x6, @empty, 0x65d6}}, {{0xa, 0x4e22, 0xffffffff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}}, {{0xa, 0x4e24, 0x7, @mcast2, 0x9}}, {{0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xfffffffffffffffc}}, {{0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, [], 0x1e}, 0x396}}, {{0xa, 0x4e21, 0x401, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x70000}}, {{0xa, 0x4e23, 0x7, @empty, 0x4}}, {{0xa, 0x4e20, 0x3, @empty, 0x5}}, {{0xa, 0x4e22, 0x2, @loopback, 0x2}}]}, 0x510) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000180)=0xb9fe, 0x4) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r4, 0xab00, r3) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000080)) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) dup3(r3, 0xffffffffffffffff, 0x2d9de5c378e0221d) 07:16:48 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0xe0, 0x0, 0x0) [ 960.522339][T29996] binder: 29989:29996 unknown command 0 [ 960.569510][T29996] binder: 29989:29996 ioctl c0306201 20000200 returned -22 [ 960.587991][T29998] binder: 29997:29998 ioctl c0306201 20000200 returned -14 [ 960.656055][T30013] binder: 29989:30013 unknown command 0 [ 960.715985][T30013] binder: 29989:30013 ioctl c0306201 20000200 returned -22 07:16:48 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) r5 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) readv(r6, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r6, 0xab00, r5) syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x6, 0x261000) recvmmsg(r2, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) r7 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r8, 0x800000c004500a, &(0x7f0000000300)) readv(r8, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) 07:16:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x400c630e}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:16:48 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0x0, 0x0, 0x150) 07:16:48 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfe47bf070") ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000080)={0x80b1, 0x9, 0x3, 0xfffffffffffffffe, 0xe, 0x3, 0x8, 0xf8f8, 0xfffffffffffffff9, 0x5, 0x0, 0x5}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 07:16:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x707100, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:16:48 executing program 2: setrlimit(0x40000000000008, &(0x7f0000000000)={0x4847, 0xfffffffffffff001}) mlock(&(0x7f000000e000/0x2000)=nil, 0x2000) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070") mlock2(&(0x7f000000e000/0x3000)=nil, 0x3000, 0x0) [ 960.938744][T30115] binder: 30114:30115 ioctl c0306201 20000200 returned -14 [ 960.963785][T30120] binder: 30118:30120 unknown command 0 [ 960.995123][T30120] binder: 30118:30120 ioctl c0306201 20000200 returned -22 [ 961.032729][T30144] binder: 30118:30144 unknown command 0 07:16:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x400c630f}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 961.047120][T30144] binder: 30118:30144 ioctl c0306201 20000200 returned -22 07:16:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x70e000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 961.155528][T30331] binder: 30281:30331 unknown command 0 [ 961.161251][T30331] binder: 30281:30331 ioctl c0306201 20000200 returned -22 07:16:48 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x1402, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfea1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfe47bf070") perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 07:16:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) unshare(0x20000a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x1007}) [ 961.207422][T30334] binder: 30281:30334 unknown command 0 [ 961.221100][T30334] binder: 30281:30334 ioctl c0306201 20000200 returned -22 [ 961.232341][T30336] binder: 30335:30336 ioctl c0306201 20000200 returned -14 07:16:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x40106308}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:16:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x717000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 961.360941][T30442] binder: 30440:30442 unknown command 0 [ 961.397483][T30442] binder: 30440:30442 ioctl c0306201 20000200 returned -22 [ 961.434325][T30448] binder: 30440:30448 unknown command 0 [ 961.454614][T30448] binder: 30440:30448 ioctl c0306201 20000200 returned -22 [ 961.465681][T30451] binder: 30447:30451 ioctl c0306201 20000200 returned -14 07:16:49 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) r5 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) readv(r6, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r6, 0xab00, r5) syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x6, 0x261000) recvmmsg(r2, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) r7 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r8, 0x800000c004500a, &(0x7f0000000300)) 07:16:49 executing program 2: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x4, 0x8}) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r2, 0x200006) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$FITRIM(r0, 0x40046629, &(0x7f0000000000)) 07:16:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x40106309}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:16:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x760000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:16:49 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfe47bf070") perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 07:16:49 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0x0, 0x0, 0x150) [ 961.855999][T30659] binder: 30657:30659 unknown command 0 [ 961.876496][T30667] binder: 30658:30667 ioctl c0306201 20000200 returned -14 [ 961.883448][T30659] binder: 30657:30659 ioctl c0306201 20000200 returned -22 [ 961.935223][T30689] binder: 30657:30689 unknown command 0 [ 961.956116][T30689] binder: 30657:30689 ioctl c0306201 20000200 returned -22 07:16:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x40406300}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:16:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x960000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:16:49 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfe47bf070") r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, 0x416, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0xfb74}, 0x0, 0xfffffffffffffffc, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) fsetxattr$trusted_overlay_origin(r2, &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x2, 0x1) readv(r4, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) fadvise64(0xffffffffffffffff, 0x0, 0xfffffffffffffff9, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, r3) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uhid\x00', 0x802, 0x0) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000080)=0xfffffffffffffff7) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000100)=0x5, 0x4) [ 962.118437][T30878] binder: 30874:30878 unknown command 0 [ 962.148096][T30878] binder: 30874:30878 ioctl c0306201 20000200 returned -22 [ 962.161491][T30880] binder: 30879:30880 ioctl c0306201 20000200 returned -14 [ 962.191564][T30882] binder: 30874:30882 unknown command 0 [ 962.211232][T30882] binder: 30874:30882 ioctl c0306201 20000200 returned -22 07:16:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x40406301}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:16:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0xe07000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:16:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4010ae68, &(0x7f0000000200)) r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000080)={0x1, 0x100000000}) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) readv(r3, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x7, 0x4, 0x478, 0x258, 0x118, 0x258, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7, 0x2}}}, {{@arp={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff, 0x181fffe01, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0xff, 0xff, 0x0, 0xff]}, @mac=@broadcast, {[0x17e, 0x0, 0xff, 0xff, 0x0, 0xff]}, 0x2, 0x2, 0x4f2a, 0xcc9, 0x3, 0x8, 'netdevsim0\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x200}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={[], 0x16}, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @broadcast, 0x4, 0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x25}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0x4379a26f81cbe1, @empty, {[0x0, 0xff, 0xff, 0x7f, 0x8dd5a4429c5bc415]}, @empty, {[0x0, 0x0, 0x1fe]}, 0xfffffffffffffc01, 0x100, 0x1, 0x0, 0x401, 0x6a, 'rose0\x00', 'nr0\x00', {}, {}, 0x0, 0x100}, 0xf0, 0x138}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100000001, 'syz0\x00', 0x7}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c8) [ 962.405042][T31091] binder: 31070:31091 unknown command 0 [ 962.435820][T31091] binder: 31070:31091 ioctl c0306201 20000200 returned -22 [ 962.438299][T31092] binder: 31090:31092 ioctl c0306201 20000200 returned -14 [ 962.449403][T31093] binder: 31070:31093 unknown command 0 [ 962.457707][T31093] binder: 31070:31093 ioctl c0306201 20000200 returned -22 07:16:50 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) r5 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) readv(r6, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r6, 0xab00, r5) syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x6, 0x261000) recvmmsg(r2, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) r7 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) 07:16:50 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfe47bf070") perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 07:16:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x40486311}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:16:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0xf05000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:16:50 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0x0, 0x0, 0x150) [ 962.730423][T31203] binder: 31202:31203 unknown command 0 [ 962.770321][T31203] binder: 31202:31203 ioctl c0306201 20000200 returned -22 07:16:50 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2902c1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) renameat2(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x8) setitimer(0x0, &(0x7f0000000040)={{0x100000000000}, {0x77359400}}, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) readv(r3, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000140)={{0x97bfadd3c0e9b82b, 0x10000, 0xf, 0x9, 0xb5, 0x200, 0x20, 0x563, 0x2000200000000, 0x3ff, 0x7fff, 0x4}, {0x0, 0xf000, 0xa, 0x6, 0x6, 0x81, 0x7, 0x4, 0x48, 0x80000000, 0x6, 0xfffffffffffffffe}, {0x5000, 0x5000, 0x0, 0x4, 0x7fff, 0x404, 0x8, 0x80000000, 0xb0b, 0xe8f0, 0x1, 0x7}, {0x4, 0x8006, 0x0, 0x200, 0x4, 0x4, 0x78a5, 0x0, 0x6, 0x1, 0x8, 0x2}, {0x2, 0x0, 0xe, 0x6, 0x7fff, 0x22fd, 0xffd, 0x7fffffff, 0x7, 0x100000001, 0x20, 0x2}, {0xf000, 0x48503ad68c5ceb9e, 0x4, 0x4, 0x101, 0x7fff, 0x3ff, 0x8, 0x7, 0x0, 0x33, 0x8}, {0x10000, 0x4, 0x3, 0x9, 0x5, 0xfffffffffffffe01, 0x0, 0x2, 0x1, 0x1, 0xffffffffffffff00, 0x7}, {0x3000, 0x0, 0x3, 0x10001, 0x5, 0x9, 0x1, 0x7, 0x200, 0x3, 0x1a, 0x3}, {0x6000, 0x35b4cd0e41863d2}, {0x10000, 0x10000}, 0x80000000, 0x0, 0x4000, 0x109, 0x2, 0x2000, 0x4, [0xe99c, 0xa06, 0x6, 0x8000]}) r4 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) readv(r5, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r5, 0xab00, r4) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) [ 962.810398][T31211] binder: 31208:31211 ioctl c0306201 20000200 returned -14 [ 962.873962][T31203] binder: BINDER_SET_CONTEXT_MGR already set [ 962.902118][T31226] binder: 31202:31226 unknown command 0 [ 962.927455][T31203] binder: 31202:31203 ioctl 40046207 0 returned -16 [ 962.940972][T31226] binder: 31202:31226 ioctl c0306201 20000200 returned -22 07:16:50 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfe47bf070") perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0xfffffffffffffffb, 0x0, 0xffffffffffffff7b, 0x80000000, 0x0, 0x7fff, 0xb6048, 0x1, 0x1, 0x4, 0x6, 0x8, 0x3, 0x9, 0x4, 0x67dc, 0xffffffff, 0x3, 0x7, 0xffffffffffffff81, 0x7f, 0x10000, 0x0, 0xfffffffffffff41b, 0x3, 0x20, 0x7, 0x1f, 0x10001, 0x100, 0xfffffffffffffffc, 0x1ff, 0x4, 0x4, 0xffffffffffff0001, 0x5, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000080), 0xa}, 0x0, 0x9, 0x550, 0x5, 0x7, 0x1, 0x1}, 0xffffffffffffffff, 0xd, r0, 0x2) 07:16:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:16:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x40486312}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 963.114625][T31427] binder: 31422:31427 ioctl c0306201 20000200 returned -14 [ 963.140573][T31430] binder: 31429:31430 unknown command 0 07:16:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 963.165903][T31430] binder: 31429:31430 ioctl c0306201 20000200 returned -22 [ 963.197713][T31582] binder: 31429:31582 unknown command 0 [ 963.206717][T31582] binder: 31429:31582 ioctl c0306201 20000200 returned -22 07:16:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x48000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:16:50 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfe47bf070") perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0xc189f8826c38a10a, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "49f43b922358583e", "b99656aa87aaab5b76c13ba346d88217", "013a0c5b", "efa47ed615236de8"}, 0x28) [ 963.291516][T31636] binder: 31635:31636 ioctl c0306201 20000200 returned -14 [ 963.369747][T31670] binder: 31652:31670 unknown command 0 [ 963.381749][T31670] binder: 31652:31670 ioctl c0306201 20000200 returned -22 [ 963.395467][T31699] binder: 31652:31699 unknown command 0 [ 963.413786][T31699] binder: 31652:31699 ioctl c0306201 20000200 returned -22 07:16:51 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) r5 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) readv(r6, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r6, 0xab00, r5) syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x6, 0x261000) recvmmsg(r2, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) r7 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) 07:16:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x4c000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:16:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:16:51 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e22, 0x40, @remote, 0x3349}}}, &(0x7f0000000180)=0x84) fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x89e1, &(0x7f00000001c0)) syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x6, 0x226400) [ 963.623631][T31852] binder: 31848:31852 ioctl c0306201 20000200 returned -14 [ 963.636259][T31853] binder: 31849:31853 unknown command 0 [ 963.656863][T31853] binder: 31849:31853 ioctl c0306201 20000200 returned -22 07:16:51 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0xc80, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @mcast1, 0x8}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0xc80, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @mcast1, 0x8}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0xfffffffffffffffd) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0xc80, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @mcast1, 0x8}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0xc80, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @mcast1, 0x8}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0xc80, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @mcast1, 0x8}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0xc80, 0x4) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @mcast1, 0x8}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000000)=0xc80, 0x4) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @mcast1, 0x8}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000040)=0xc80, 0x4) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @mcast1, 0x8}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0xc80, 0x4) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @mcast1, 0x8}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000040)=0xc80, 0x4) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @mcast1, 0x8}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000040)=0xc80, 0x4) bind$inet6(r10, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @mcast1, 0x8}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000040)=0xc80, 0x4) bind$inet6(r11, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @mcast1, 0x8}, 0x1c) 07:16:51 executing program 3 (fault-call:6 fault-nth:0): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) [ 963.721429][T31853] binder: BINDER_SET_CONTEXT_MGR already set 07:16:51 executing program 2: syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x2, 0x2) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100800) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x3}, 0x10) r1 = syz_open_dev$mice(&(0x7f0000000040)='\x00de\x8a/imiae\x00', 0x0, 0x440a40) r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) readv(r3, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r4 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) readv(r5, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r5, 0xab00, r4) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0xfffffffffffffedc) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0xfffffffffffffffc, 0x8) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x7f, 0x4}) [ 963.777486][T31853] binder: 31849:31853 ioctl 40046207 0 returned -16 [ 963.811859][ C1] net_ratelimit: 18 callbacks suppressed [ 963.811867][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 963.811900][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 963.817715][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 963.823546][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 963.840724][ C0] protocol 88fb is buggy, dev hsr_slave_1 07:16:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x60000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:16:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 963.894213][T31956] FAULT_INJECTION: forcing a failure. [ 963.894213][T31956] name failslab, interval 1, probability 0, space 0, times 0 [ 963.976128][T31956] CPU: 0 PID: 31956 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 963.985305][T31956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 963.995465][T31956] Call Trace: [ 963.998779][T31956] dump_stack+0x172/0x1f0 [ 964.003840][T31956] should_fail.cold+0xa/0x15 [ 964.009065][T31956] ? fault_create_debugfs_attr+0x180/0x180 [ 964.015012][T31956] ? ___might_sleep+0x163/0x280 [ 964.019137][T31972] binder: 31971:31972 unknown command 0 [ 964.020572][T31956] __should_failslab+0x121/0x190 [ 964.020643][T31956] should_failslab+0x9/0x14 [ 964.038858][T31956] kmem_cache_alloc_node+0x268/0x740 [ 964.044250][T31956] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 964.050583][T31956] ? tcp_established_options+0x29d/0x4d0 [ 964.050595][T31972] binder: 31971:31972 ioctl c0306201 20000200 returned -22 [ 964.057009][T31974] binder: 31971:31974 unknown command 0 [ 964.063428][T31956] __alloc_skb+0xd5/0x5e0 [ 964.063448][T31956] ? netdev_alloc_frag+0x1b0/0x1b0 07:16:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x68000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 964.063467][T31956] ? __kasan_check_read+0x11/0x20 [ 964.063484][T31956] ? mark_lock+0xc2/0x1220 [ 964.063503][T31956] sk_stream_alloc_skb+0x2d2/0xc50 [ 964.063521][T31956] tcp_sendmsg_locked+0xc70/0x3220 [ 964.063537][T31956] ? mark_lock+0xc2/0x1220 [ 964.063561][T31956] ? tcp_sendpage+0x60/0x60 [ 964.063577][T31956] ? trace_hardirqs_on+0x67/0x240 [ 964.063594][T31956] ? lock_sock_nested+0x9a/0x120 [ 964.063613][T31956] ? __local_bh_enable_ip+0x15a/0x270 [ 964.063633][T31956] tcp_sendmsg+0x30/0x50 [ 964.063655][T31956] inet_sendmsg+0x9e/0xe0 [ 964.076334][T31974] binder: 31971:31974 ioctl c0306201 20000200 returned -22 [ 964.079152][T31956] ? inet_send_prepare+0x4f0/0x4f0 [ 964.079172][T31956] sock_sendmsg+0xd7/0x130 [ 964.079189][T31956] __sys_sendto+0x262/0x380 [ 964.079207][T31956] ? __ia32_sys_getpeername+0xb0/0xb0 [ 964.079230][T31956] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 964.079276][T31956] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 964.165662][T31978] binder: 31977:31978 unknown command 0 [ 964.170863][T31956] ? fput_many+0x12c/0x1a0 [ 964.170881][T31956] ? fput+0x1b/0x20 [ 964.170896][T31956] ? ksys_write+0x1cf/0x290 [ 964.170918][T31956] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 964.170933][T31956] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 964.170948][T31956] ? do_syscall_64+0x26/0x760 [ 964.170966][T31956] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 964.170989][T31956] __x64_sys_sendto+0xe1/0x1a0 [ 964.215707][T31956] do_syscall_64+0xfa/0x760 [ 964.216966][T31978] binder: 31977:31978 ioctl c0306201 20000200 returned -22 [ 964.220239][T31956] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 964.220253][T31956] RIP: 0033:0x459879 [ 964.220270][T31956] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 964.220278][T31956] RSP: 002b:00007f400e5a2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 964.220293][T31956] RAX: ffffffffffffffda RBX: 00007f400e5a2c90 RCX: 0000000000459879 07:16:51 executing program 3 (fault-call:6 fault-nth:1): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) [ 964.220303][T31956] RDX: 7564c14c40b01eec RSI: 0000000020000480 RDI: 0000000000000003 [ 964.220310][T31956] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000150 [ 964.220319][T31956] R10: 00000000000000e0 R11: 0000000000000246 R12: 00007f400e5a36d4 [ 964.220327][T31956] R13: 00000000004c783b R14: 00000000004dd0f0 R15: 0000000000000005 [ 964.293491][T32009] binder: 31973:32009 ioctl c0306201 20000200 returned -14 [ 964.329710][T32065] binder: 31977:32065 unknown command 0 07:16:52 executing program 0: [ 964.376570][T32065] binder: 31977:32065 ioctl c0306201 20000200 returned -22 [ 964.421484][T32164] FAULT_INJECTION: forcing a failure. [ 964.421484][T32164] name failslab, interval 1, probability 0, space 0, times 0 [ 964.448997][T32164] CPU: 1 PID: 32164 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 964.458202][T32164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 964.468729][T32164] Call Trace: [ 964.472045][T32164] dump_stack+0x172/0x1f0 [ 964.476399][T32164] should_fail.cold+0xa/0x15 [ 964.476424][T32164] ? fault_create_debugfs_attr+0x180/0x180 [ 964.476449][T32164] ? ___might_sleep+0x163/0x280 [ 964.476471][T32164] __should_failslab+0x121/0x190 [ 964.491768][T32164] should_failslab+0x9/0x14 [ 964.491786][T32164] kmem_cache_alloc_node_trace+0x274/0x750 [ 964.491807][T32164] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 964.491823][T32164] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 964.491842][T32164] __kmalloc_node_track_caller+0x3d/0x70 [ 964.491859][T32164] __kmalloc_reserve.isra.0+0x40/0xf0 [ 964.491876][T32164] __alloc_skb+0x10b/0x5e0 [ 964.491890][T32164] ? netdev_alloc_frag+0x1b0/0x1b0 [ 964.491906][T32164] ? __kasan_check_read+0x11/0x20 [ 964.491921][T32164] ? mark_lock+0xc2/0x1220 [ 964.491943][T32164] sk_stream_alloc_skb+0x2d2/0xc50 [ 964.554264][T32164] tcp_sendmsg_locked+0xc70/0x3220 [ 964.559427][T32164] ? mark_lock+0xc2/0x1220 [ 964.564487][T32164] ? tcp_sendpage+0x60/0x60 [ 964.569007][T32164] ? trace_hardirqs_on+0x67/0x240 [ 964.574184][T32164] ? lock_sock_nested+0x9a/0x120 [ 964.579139][T32164] ? __local_bh_enable_ip+0x15a/0x270 [ 964.584504][T32164] tcp_sendmsg+0x30/0x50 [ 964.588756][T32164] inet_sendmsg+0x9e/0xe0 [ 964.593093][T32164] ? inet_send_prepare+0x4f0/0x4f0 [ 964.598202][T32164] sock_sendmsg+0xd7/0x130 [ 964.602622][T32164] __sys_sendto+0x262/0x380 [ 964.607124][T32164] ? __ia32_sys_getpeername+0xb0/0xb0 [ 964.614055][T32164] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 964.619685][T32164] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 964.625969][T32164] ? fput_many+0x12c/0x1a0 [ 964.630392][T32164] ? fput+0x1b/0x20 [ 964.634205][T32164] ? ksys_write+0x1cf/0x290 [ 964.638712][T32164] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 964.644166][T32164] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 964.649613][T32164] ? do_syscall_64+0x26/0x760 [ 964.654373][T32164] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 964.660804][T32164] __x64_sys_sendto+0xe1/0x1a0 [ 964.665626][T32164] do_syscall_64+0xfa/0x760 [ 964.670199][T32164] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 964.676432][T32164] RIP: 0033:0x459879 [ 964.680335][T32164] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 964.700363][T32164] RSP: 002b:00007f400e5a2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 964.709294][T32164] RAX: ffffffffffffffda RBX: 00007f400e5a2c90 RCX: 0000000000459879 [ 964.717267][T32164] RDX: 7564c14c40b01eec RSI: 0000000020000480 RDI: 0000000000000003 [ 964.725874][T32164] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000150 [ 964.735670][T32164] R10: 00000000000000e0 R11: 0000000000000246 R12: 00007f400e5a36d4 [ 964.743723][T32164] R13: 00000000004c783b R14: 00000000004dd0f0 R15: 0000000000000005 [ 964.762260][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 964.768105][ C0] protocol 88fb is buggy, dev hsr_slave_1 07:16:52 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) r5 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) readv(r6, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r6, 0xab00, r5) syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x6, 0x261000) recvmmsg(r2, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) r7 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000340)=""/94) 07:16:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x6c000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 964.851873][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 964.857702][ C1] protocol 88fb is buggy, dev hsr_slave_1 07:16:52 executing program 0: 07:16:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:16:52 executing program 2: 07:16:52 executing program 3 (fault-call:6 fault-nth:2): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) [ 964.960453][T32198] binder: 32196:32198 ioctl c0306201 20000200 returned -14 [ 964.973496][T32199] binder: 32194:32199 unknown command 0 [ 964.996666][T32200] FAULT_INJECTION: forcing a failure. 07:16:52 executing program 0: 07:16:52 executing program 2: mkdir(&(0x7f0000000140)='./file0/bus\x00', 0x84) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fad81cb4b1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x400, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000100)={0x492, 0x5, 0x40}) write$binfmt_elf32(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f"], 0x1) fcntl$lock(r0, 0x26, &(0x7f0000027000)={0x1}) truncate(&(0x7f0000000040)='./file0/bus\x00', 0x0) [ 964.996666][T32200] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 965.034686][T32199] binder: 32194:32199 ioctl c0306201 20000200 returned -22 [ 965.062211][T32244] binder: 32194:32244 unknown command 0 [ 965.067846][T32244] binder: 32194:32244 ioctl c0306201 20000200 returned -22 [ 965.182020][T32200] CPU: 0 PID: 32200 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 965.191274][T32200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 965.201543][T32200] Call Trace: [ 965.205250][T32200] dump_stack+0x172/0x1f0 [ 965.209630][T32200] should_fail.cold+0xa/0x15 [ 965.214249][T32200] ? fault_create_debugfs_attr+0x180/0x180 [ 965.220102][T32200] should_fail_alloc_page+0x50/0x60 [ 965.225348][T32200] __alloc_pages_nodemask+0x1a1/0x900 07:16:52 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) r4 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000040)=""/94) r5 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) readv(r6, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r6, 0xab00, r5) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast2}}}, 0x88) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r7, 0x800000c004500a, &(0x7f0000000300)) readv(r7, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r7, 0xab00, r4) r8 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fremovexattr(r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fremovexattr(r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) poll(&(0x7f0000000000)=[{r1, 0x10}, {r0}, {r0, 0x1}, {r3, 0x80}, {r4, 0x100}, {r8, 0x20}, {r9}], 0x7, 0x400) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000100), 0x3b) [ 965.230740][T32200] ? __alloc_pages_slowpath+0x2540/0x2540 [ 965.236658][T32200] ? __phys_addr+0xa4/0x120 [ 965.241190][T32200] ? __kasan_check_write+0x14/0x20 [ 965.246323][T32200] ? __alloc_skb+0x3d0/0x5e0 [ 965.250949][T32200] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 965.257220][T32200] alloc_pages_current+0x107/0x210 [ 965.262357][T32200] ? mark_lock+0xc2/0x1220 [ 965.266789][T32200] skb_page_frag_refill+0x267/0x470 [ 965.272265][T32200] sk_page_frag_refill+0x55/0x1f0 [ 965.277304][T32200] tcp_sendmsg_locked+0xfa9/0x3220 07:16:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 965.282430][T32200] ? mark_lock+0xc2/0x1220 [ 965.286885][T32200] ? tcp_sendpage+0x60/0x60 [ 965.291400][T32200] ? trace_hardirqs_on+0x67/0x240 [ 965.296470][T32200] ? lock_sock_nested+0x9a/0x120 [ 965.301452][T32200] ? __local_bh_enable_ip+0x15a/0x270 [ 965.306851][T32200] tcp_sendmsg+0x30/0x50 [ 965.311103][T32200] inet_sendmsg+0x9e/0xe0 [ 965.315442][T32200] ? inet_send_prepare+0x4f0/0x4f0 [ 965.320567][T32200] sock_sendmsg+0xd7/0x130 [ 965.325023][T32200] __sys_sendto+0x262/0x380 [ 965.329552][T32200] ? __ia32_sys_getpeername+0xb0/0xb0 [ 965.334943][T32200] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 965.340503][T32200] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 965.340525][T32200] ? fput_many+0x12c/0x1a0 [ 965.351158][T32200] ? fput+0x1b/0x20 [ 965.354988][T32200] ? ksys_write+0x1cf/0x290 [ 965.359507][T32200] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 965.365064][T32200] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 965.370622][T32200] ? do_syscall_64+0x26/0x760 [ 965.375308][T32200] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe 07:16:52 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000080)={{0x7, 0xff}, 'port0\x00', 0x2, 0x120044, 0x600, 0x5, 0x4, 0x10000, 0x756, 0x0, 0x6, 0x7ff}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x0, 0x10001}}) [ 965.375332][T32200] __x64_sys_sendto+0xe1/0x1a0 [ 965.375358][T32200] do_syscall_64+0xfa/0x760 [ 965.390711][T32200] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 965.396617][T32200] RIP: 0033:0x459879 [ 965.400537][T32200] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 965.421973][T32200] RSP: 002b:00007f400e5a2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 07:16:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x74000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 965.430506][T32200] RAX: ffffffffffffffda RBX: 00007f400e5a2c90 RCX: 0000000000459879 [ 965.430517][T32200] RDX: 7564c14c40b01eec RSI: 0000000020000480 RDI: 0000000000000003 [ 965.430526][T32200] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000150 [ 965.430535][T32200] R10: 00000000000000e0 R11: 0000000000000246 R12: 00007f400e5a36d4 [ 965.430543][T32200] R13: 00000000004c783b R14: 00000000004dd0f0 R15: 0000000000000005 [ 965.430832][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 965.504087][T32408] binder: 32407:32408 unknown command 0 [ 965.509929][T32408] binder: 32407:32408 ioctl c0306201 20000200 returned -22 [ 965.523610][T32422] binder: 32407:32422 unknown command 0 [ 965.543364][T32419] binder: 32316:32419 ioctl c0306201 20000200 returned -14 [ 965.558106][T32422] binder: 32407:32422 ioctl c0306201 20000200 returned -22 07:16:53 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) r5 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) readv(r6, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r6, 0xab00, r5) syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x6, 0x261000) recvmmsg(r2, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) 07:16:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x7a000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:16:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8e7efb985396d0ab1fb82197f1cd9c5ab763c5bd5a13418c30ae404316279c6"}}) 07:16:53 executing program 3 (fault-call:6 fault-nth:3): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) 07:16:53 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x2080, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video35\x00', 0x2, 0x0) tee(r4, r5, 0x8, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80002, 0x0) r7 = accept4$inet6(r6, 0x0, &(0x7f00000000c0), 0x80800) ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000000080)=0xc9, 0x4) clock_nanosleep(0x3, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000240)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r8, &(0x7f000000e000/0x18000)=nil, 0x0, 0xfffffffffffffddf, 0x0, 0x0, 0xbd) 07:16:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 965.922460][T32539] binder: 32533:32539 unknown command 0 [ 965.932550][T32537] binder: 32535:32537 ioctl c0306201 20000200 returned -14 [ 965.947216][T32539] binder: 32533:32539 ioctl c0306201 20000200 returned -22 [ 965.960091][T32545] binder: 32533:32545 unknown command 0 [ 965.972165][T32540] FAULT_INJECTION: forcing a failure. [ 965.972165][T32540] name failslab, interval 1, probability 0, space 0, times 0 [ 965.982070][T32545] binder: 32533:32545 ioctl c0306201 20000200 returned -22 [ 965.985371][T32540] CPU: 1 PID: 32540 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 966.001678][T32540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 966.011954][T32540] Call Trace: [ 966.015270][T32540] dump_stack+0x172/0x1f0 [ 966.019809][T32540] should_fail.cold+0xa/0x15 [ 966.024506][T32540] ? fault_create_debugfs_attr+0x180/0x180 [ 966.030434][T32540] __should_failslab+0x121/0x190 [ 966.035505][T32540] should_failslab+0x9/0x14 [ 966.040021][T32540] kmem_cache_alloc+0x47/0x710 [ 966.044814][T32540] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 966.051078][T32540] dst_alloc+0x10e/0x200 [ 966.055352][T32540] ? rt_dst_clone+0x820/0x820 [ 966.060178][T32540] rt_dst_alloc+0x83/0x3f0 [ 966.064597][T32540] ip_route_output_key_hash_rcu+0x8d7/0x2d70 [ 966.064618][T32540] ? ip_route_input_noref+0x270/0x270 [ 966.064633][T32540] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 966.064650][T32540] ? __kasan_check_read+0x11/0x20 [ 966.064667][T32540] ip_route_output_key_hash+0x1ef/0x360 [ 966.064682][T32540] ? ip_route_output_key_hash_rcu+0x2d70/0x2d70 [ 966.064704][T32540] ? __kasan_check_read+0x11/0x20 [ 966.104647][T32540] icmp_route_lookup.constprop.0+0x457/0x15c0 [ 966.110736][T32540] ? __kasan_check_read+0x11/0x20 [ 966.115787][T32540] ? __lock_acquire+0x8a0/0x4a00 [ 966.120849][T32540] ? nf_conntrack_tcp_packet.cold+0x25d/0x312 [ 966.120871][T32540] ? icmp_timestamp+0x240/0x240 [ 966.133047][T32540] ? __icmp_send+0xf9b/0x1460 [ 966.137838][T32540] ? find_held_lock+0x35/0x130 [ 966.142621][T32540] ? __icmp_send+0xf9b/0x1460 [ 966.147416][T32540] ? memset+0x32/0x40 [ 966.151700][T32540] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 966.158588][T32540] ? __ip_options_echo+0x6ad/0x1120 [ 966.163838][T32540] __icmp_send+0xaef/0x1460 [ 966.168379][T32540] ? icmp_route_lookup.constprop.0+0x15c0/0x15c0 [ 966.174715][T32540] ? find_held_lock+0x35/0x130 [ 966.174735][T32540] ? __cgroup_bpf_run_filter_skb+0xe18/0x1570 [ 966.174756][T32540] ? lock_downgrade+0x920/0x920 [ 966.174783][T32540] ? __kasan_check_read+0x11/0x20 [ 966.191238][T32540] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 966.191254][T32540] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 966.191279][T32540] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 966.215804][T32540] ip_fragment.constprop.0+0x1ee/0x240 [ 966.221466][T32540] ? ip_fragment.constprop.0+0x1ee/0x240 [ 966.227423][T32540] __ip_finish_output+0x4bd/0xbc0 [ 966.232769][T32540] ? alloc_chunk+0x120/0x220 [ 966.237573][T32540] ip_finish_output+0x38/0x1f0 [ 966.242617][T32540] ip_output+0x21f/0x670 [ 966.242638][T32540] ? ip_mc_output+0xf70/0xf70 [ 966.242656][T32540] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 966.242675][T32540] ? __ip_finish_output+0xbc0/0xbc0 [ 966.258350][T32540] ? rcu_read_lock_held_common+0x130/0x130 [ 966.258373][T32540] ip_local_out+0xbb/0x1b0 [ 966.258391][T32540] __ip_queue_xmit+0x86f/0x1c00 [ 966.258413][T32540] ip_queue_xmit+0x5a/0x70 [ 966.283734][T32540] __tcp_transmit_skb+0x1a2f/0x3820 [ 966.288966][T32540] ? __tcp_select_window+0x8b0/0x8b0 [ 966.294355][T32540] ? lockdep_hardirqs_on+0x418/0x5d0 [ 966.299925][T32540] ? trace_hardirqs_on+0x67/0x240 [ 966.304973][T32540] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 966.311750][T32540] tcp_write_xmit+0xf0f/0x5910 [ 966.311765][T32540] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 966.311799][T32540] tcp_push_one+0xd7/0x110 [ 966.311815][T32540] tcp_sendmsg_locked+0xa4f/0x3220 [ 966.311846][T32540] ? tcp_sendpage+0x60/0x60 [ 966.341459][T32540] ? trace_hardirqs_on+0x67/0x240 [ 966.347159][T32540] ? lock_sock_nested+0x9a/0x120 [ 966.352135][T32540] ? __local_bh_enable_ip+0x15a/0x270 [ 966.357547][T32540] tcp_sendmsg+0x30/0x50 [ 966.361825][T32540] inet_sendmsg+0x9e/0xe0 [ 966.361839][T32540] ? inet_send_prepare+0x4f0/0x4f0 [ 966.361854][T32540] sock_sendmsg+0xd7/0x130 [ 966.361870][T32540] __sys_sendto+0x262/0x380 [ 966.361884][T32540] ? __ia32_sys_getpeername+0xb0/0xb0 [ 966.361907][T32540] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 966.372098][T32540] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 966.372115][T32540] ? fput_many+0x12c/0x1a0 [ 966.372128][T32540] ? fput+0x1b/0x20 [ 966.372140][T32540] ? ksys_write+0x1cf/0x290 [ 966.372160][T32540] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 966.372174][T32540] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 966.372192][T32540] ? do_syscall_64+0x26/0x760 [ 966.427784][T32540] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 966.433884][T32540] __x64_sys_sendto+0xe1/0x1a0 [ 966.438679][T32540] do_syscall_64+0xfa/0x760 [ 966.443212][T32540] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 966.449342][T32540] RIP: 0033:0x459879 [ 966.453347][T32540] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 07:16:54 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000040)={'bond0\x00', 0x1fae85a8}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65300a2b5dbbfb2bb428efddfb5117fba1699756876915922a9b66379e3db940dc75c2b5705d38810f8092a7b90444665882322da4d762249babde56293cdfd8ccf70f7bf323452be740261c4f6cf95f0b8810707ef1daccbc1048b2c20b884e0e"], 0x69) write$binfmt_elf32(r0, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"/825], 0x339) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x41) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) readv(r3, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) write$P9_RLCREATE(r2, &(0x7f0000000180)={0x18, 0xf, 0x1, {{0x84, 0x2}, 0x5}}, 0x18) 07:16:54 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="021800001000000000000019000000000800120000000000000009000000004a10006e39498b80bc0000000000000000e000000100000000000000265bac7607000000000000000000000000e8ff1700030006001600000002002000ac14ffbb0000000000000000030005001c0000000200003db28dbebb0000000000000000"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000040)={0x0, 0xfcf}, 0x2) r3 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) 07:16:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:16:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0xa0010000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 966.460580][T32755] binder: 32753:32755 ioctl c0306201 20000200 returned -14 [ 966.473439][T32540] RSP: 002b:00007f400e5a2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 966.473455][T32540] RAX: ffffffffffffffda RBX: 00007f400e5a2c90 RCX: 0000000000459879 [ 966.473463][T32540] RDX: 7564c14c40b01eec RSI: 0000000020000480 RDI: 0000000000000003 [ 966.473469][T32540] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000150 [ 966.473477][T32540] R10: 00000000000000e0 R11: 0000000000000246 R12: 00007f400e5a36d4 [ 966.473484][T32540] R13: 00000000004c783b R14: 00000000004dd0f0 R15: 0000000000000005 [ 966.482828][T32756] binder: 32754:32756 unknown command 0 [ 966.547597][T32756] binder: 32754:32756 ioctl c0306201 20000200 returned -22 [ 966.566441][ T335] binder: 32754:335 unknown command 0 [ 966.577466][ T335] binder: 32754:335 ioctl c0306201 20000200 returned -22 07:16:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x1a0ffffffff}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:16:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 966.770865][ T496] binder: 495:496 unknown command 0 [ 966.811491][ T496] binder: 495:496 ioctl c0306201 20000200 returned -22 [ 966.838632][ T501] binder: 498:501 ioctl c0306201 20000200 returned -14 [ 966.855699][ T503] binder: 495:503 unknown command 0 [ 966.876672][ T503] binder: 495:503 ioctl c0306201 20000200 returned -22 07:16:54 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) r5 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) readv(r6, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r6, 0xab00, r5) syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x6, 0x261000) recvmmsg(r2, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) 07:16:54 executing program 3 (fault-call:6 fault-nth:4): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) 07:16:54 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) fcntl$setflags(r0, 0x2, 0x1) r1 = semget(0x1, 0x0, 0x0) semctl$GETZCNT(r1, 0x1, 0xf, &(0x7f0000000640)=""/209) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) lseek(r2, 0x0, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) r4 = semget(0x1, 0x0, 0x0) semctl$GETZCNT(r4, 0x1, 0xf, &(0x7f0000000640)=""/209) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYRES16=0x0, @ANYPTR64=&(0x7f00000027c0)=ANY=[@ANYRES64, @ANYRESHEX=r4, @ANYBLOB="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", @ANYRESOCT=r0], @ANYRES32=0x0, @ANYRES32=r1, @ANYRESOCT=r2, @ANYRES32=r3], &(0x7f0000000180)=""/131, 0x2d, 0x83, 0x1}, 0x20) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) 07:16:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x63404000000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:16:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:16:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) init_module(&(0x7f0000000080)='eth0*\x00', 0x6, &(0x7f00000000c0)='cpusetppp0\x00') r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e20, 0x4, @ipv4}}}, 0x80) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) sendmmsg(r1, &(0x7f0000006f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x101000) fchmod(r3, 0x132) [ 967.336064][ T616] binder: 611:616 unknown command 0 [ 967.360408][ T617] FAULT_INJECTION: forcing a failure. [ 967.360408][ T617] name failslab, interval 1, probability 0, space 0, times 0 [ 967.366997][ T619] binder: 609:619 ioctl c0306201 20000200 returned -14 [ 967.373244][ T617] CPU: 0 PID: 617 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 967.373257][ T617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 967.373264][ T617] Call Trace: [ 967.373288][ T617] dump_stack+0x172/0x1f0 [ 967.373314][ T617] should_fail.cold+0xa/0x15 [ 967.373336][ T617] ? fault_create_debugfs_attr+0x180/0x180 [ 967.373365][ T617] __should_failslab+0x121/0x190 [ 967.423498][ T617] should_failslab+0x9/0x14 [ 967.428021][ T617] kmem_cache_alloc+0x47/0x710 [ 967.432995][ T617] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 967.435858][ T616] binder: 611:616 ioctl c0306201 20000200 returned -22 [ 967.439372][ T617] dst_alloc+0x10e/0x200 [ 967.439389][ T617] ? rt_dst_clone+0x820/0x820 [ 967.439406][ T617] rt_dst_alloc+0x83/0x3f0 [ 967.439426][ T617] ip_route_output_key_hash_rcu+0x8d7/0x2d70 [ 967.439447][ T617] ? ip_route_input_noref+0x270/0x270 [ 967.439470][ T617] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 967.478523][ T617] ? __kasan_check_read+0x11/0x20 [ 967.483575][ T617] ip_route_output_key_hash+0x1ef/0x360 [ 967.490220][ T722] binder: 611:722 unknown command 0 [ 967.490754][ T617] ? ip_route_output_key_hash_rcu+0x2d70/0x2d70 [ 967.490778][ T617] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 967.510834][ T617] icmp_route_lookup.constprop.0+0xbe7/0x15c0 [ 967.517678][ T617] ? __kasan_check_read+0x11/0x20 [ 967.524092][ T617] ? __lock_acquire+0x8a0/0x4a00 [ 967.530389][ T617] ? icmp_timestamp+0x240/0x240 07:16:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 967.535271][ T617] ? __icmp_send+0xf9b/0x1460 [ 967.539988][ T617] ? memset+0x32/0x40 [ 967.544189][ T617] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 967.549779][ T722] binder: 611:722 ioctl c0306201 20000200 returned -22 [ 967.550603][ T617] ? __ip_options_echo+0x6ad/0x1120 [ 967.550626][ T617] __icmp_send+0xaef/0x1460 [ 967.550655][ T617] ? icmp_route_lookup.constprop.0+0x15c0/0x15c0 [ 967.550667][ T617] ? find_held_lock+0x35/0x130 [ 967.550692][ T617] ? __cgroup_bpf_run_filter_skb+0xe18/0x1570 [ 967.586481][ T617] ? lock_downgrade+0x920/0x920 [ 967.591763][ T617] ? __kasan_check_read+0x11/0x20 [ 967.596906][ T617] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 967.602655][ T617] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 967.609026][ T617] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 967.615337][ T617] ip_fragment.constprop.0+0x1ee/0x240 [ 967.621024][ T617] ? ip_fragment.constprop.0+0x1ee/0x240 [ 967.621043][ T617] __ip_finish_output+0x4bd/0xbc0 [ 967.621057][ T617] ? alloc_chunk+0x120/0x220 07:16:55 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa8}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101}, 0x10}, 0x70) [ 967.621075][ T617] ip_finish_output+0x38/0x1f0 [ 967.621091][ T617] ip_output+0x21f/0x670 [ 967.621109][ T617] ? ip_mc_output+0xf70/0xf70 [ 967.650360][ T617] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 967.656560][ T617] ? __ip_finish_output+0xbc0/0xbc0 [ 967.661951][ T617] ? rcu_read_lock_held_common+0x130/0x130 [ 967.661976][ T617] ip_local_out+0xbb/0x1b0 [ 967.661994][ T617] __ip_queue_xmit+0x86f/0x1c00 [ 967.662017][ T617] ip_queue_xmit+0x5a/0x70 [ 967.662034][ T617] __tcp_transmit_skb+0x1a2f/0x3820 07:16:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x100000000000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 967.662062][ T617] ? __tcp_select_window+0x8b0/0x8b0 [ 967.662077][ T617] ? lockdep_hardirqs_on+0x418/0x5d0 [ 967.662093][ T617] ? trace_hardirqs_on+0x67/0x240 [ 967.662115][ T617] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 967.709480][ T617] tcp_write_xmit+0xf0f/0x5910 [ 967.714349][ T617] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 967.714390][ T617] tcp_push_one+0xd7/0x110 [ 967.714410][ T617] tcp_sendmsg_locked+0xa4f/0x3220 [ 967.730585][ T617] ? tcp_sendpage+0x60/0x60 [ 967.735115][ T617] ? trace_hardirqs_on+0x67/0x240 [ 967.740179][ T617] ? lock_sock_nested+0x9a/0x120 [ 967.745156][ T617] ? __local_bh_enable_ip+0x15a/0x270 [ 967.750930][ T617] tcp_sendmsg+0x30/0x50 [ 967.750948][ T617] inet_sendmsg+0x9e/0xe0 [ 967.750963][ T617] ? inet_send_prepare+0x4f0/0x4f0 [ 967.750979][ T617] sock_sendmsg+0xd7/0x130 [ 967.750997][ T617] __sys_sendto+0x262/0x380 [ 967.751014][ T617] ? __ia32_sys_getpeername+0xb0/0xb0 [ 967.751035][ T617] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 967.751067][ T617] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 967.751083][ T617] ? fput_many+0x12c/0x1a0 [ 967.751104][ T617] ? fput+0x1b/0x20 [ 967.795624][ T617] ? ksys_write+0x1cf/0x290 [ 967.795647][ T617] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 967.795664][ T617] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 967.795680][ T617] ? do_syscall_64+0x26/0x760 [ 967.795697][ T617] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 967.795716][ T617] __x64_sys_sendto+0xe1/0x1a0 [ 967.811012][ T732] binder: 731:732 unknown command 0 [ 967.815260][ T617] do_syscall_64+0xfa/0x760 [ 967.815285][ T617] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 967.815297][ T617] RIP: 0033:0x459879 [ 967.815312][ T617] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 967.815320][ T617] RSP: 002b:00007f400e5a2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 07:16:55 executing program 2: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000001800)='cmdline\x00') sendfile(r0, r2, 0x0, 0x1000000000e6) [ 967.815334][ T617] RAX: ffffffffffffffda RBX: 00007f400e5a2c90 RCX: 0000000000459879 [ 967.815342][ T617] RDX: 7564c14c40b01eec RSI: 0000000020000480 RDI: 0000000000000003 [ 967.815349][ T617] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000150 [ 967.815356][ T617] R10: 00000000000000e0 R11: 0000000000000246 R12: 00007f400e5a36d4 [ 967.815363][ T617] R13: 00000000004c783b R14: 00000000004dd0f0 R15: 0000000000000005 [ 967.835214][ T734] binder: 728:734 ioctl c0306201 20000200 returned -14 [ 967.892055][ T732] binder: 731:732 ioctl c0306201 20000200 returned -22 07:16:55 executing program 3 (fault-call:6 fault-nth:5): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) 07:16:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 968.070476][ T941] binder: 731:941 unknown command 0 [ 968.154025][ T946] binder: 944:946 ioctl c0306201 20000200 returned -14 [ 968.158322][ T941] binder: 731:941 ioctl c0306201 20000200 returned -22 [ 968.227908][ T948] FAULT_INJECTION: forcing a failure. [ 968.227908][ T948] name failslab, interval 1, probability 0, space 0, times 0 [ 968.240752][ T948] CPU: 1 PID: 948 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 968.249817][ T948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 968.259987][ T948] Call Trace: [ 968.263310][ T948] dump_stack+0x172/0x1f0 [ 968.267679][ T948] should_fail.cold+0xa/0x15 [ 968.272306][ T948] ? fault_create_debugfs_attr+0x180/0x180 [ 968.278157][ T948] __should_failslab+0x121/0x190 [ 968.283355][ T948] should_failslab+0x9/0x14 [ 968.287887][ T948] kmem_cache_alloc+0x47/0x710 [ 968.292690][ T948] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 968.299070][ T948] dst_alloc+0x10e/0x200 [ 968.303479][ T948] ? rt_dst_clone+0x820/0x820 [ 968.308182][ T948] rt_dst_alloc+0x83/0x3f0 [ 968.312628][ T948] ip_route_output_key_hash_rcu+0x8d7/0x2d70 [ 968.318646][ T948] ? ip_route_input_noref+0x270/0x270 [ 968.324188][ T948] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 968.330467][ T948] ? __kasan_check_read+0x11/0x20 [ 968.335532][ T948] ip_route_output_key_hash+0x1ef/0x360 [ 968.341243][ T948] ? ip_route_output_key_hash_rcu+0x2d70/0x2d70 [ 968.347519][ T948] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 968.353942][ T948] icmp_route_lookup.constprop.0+0xbe7/0x15c0 [ 968.360039][ T948] ? __kasan_check_read+0x11/0x20 [ 968.365105][ T948] ? __lock_acquire+0x8a0/0x4a00 [ 968.365125][ T948] ? icmp_timestamp+0x240/0x240 [ 968.365142][ T948] ? __icmp_send+0xf9b/0x1460 [ 968.375034][ T948] ? memset+0x32/0x40 [ 968.375052][ T948] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 968.375066][ T948] ? __ip_options_echo+0x6ad/0x1120 [ 968.375086][ T948] __icmp_send+0xaef/0x1460 [ 968.375123][ T948] ? icmp_route_lookup.constprop.0+0x15c0/0x15c0 [ 968.406663][ T948] ? find_held_lock+0x35/0x130 [ 968.411519][ T948] ? __cgroup_bpf_run_filter_skb+0xe18/0x1570 [ 968.417622][ T948] ? lock_downgrade+0x920/0x920 [ 968.417646][ T948] ? __kasan_check_read+0x11/0x20 [ 968.417668][ T948] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 968.417684][ T948] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 968.417709][ T948] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 968.417734][ T948] ip_fragment.constprop.0+0x1ee/0x240 [ 968.417756][ T948] ? ip_fragment.constprop.0+0x1ee/0x240 [ 968.430144][ T1056] binder: 1054:1056 ioctl c0306201 20000200 returned -14 [ 968.433535][ T948] __ip_finish_output+0x4bd/0xbc0 [ 968.433553][ T948] ? alloc_chunk+0x120/0x220 [ 968.433572][ T948] ip_finish_output+0x38/0x1f0 [ 968.433591][ T948] ip_output+0x21f/0x670 [ 968.433608][ T948] ? ip_mc_output+0xf70/0xf70 [ 968.433623][ T948] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 968.433641][ T948] ? __ip_finish_output+0xbc0/0xbc0 [ 968.433655][ T948] ? rcu_read_lock_held_common+0x130/0x130 [ 968.433676][ T948] ip_local_out+0xbb/0x1b0 [ 968.433696][ T948] __ip_queue_xmit+0x86f/0x1c00 [ 968.433724][ T948] ip_queue_xmit+0x5a/0x70 [ 968.446355][ T948] __tcp_transmit_skb+0x1a2f/0x3820 [ 968.446383][ T948] ? __tcp_select_window+0x8b0/0x8b0 [ 968.446398][ T948] ? lockdep_hardirqs_on+0x418/0x5d0 [ 968.446413][ T948] ? trace_hardirqs_on+0x67/0x240 [ 968.446436][ T948] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 968.446453][ T948] tcp_write_xmit+0xf0f/0x5910 [ 968.446471][ T948] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 968.446512][ T948] tcp_push_one+0xd7/0x110 [ 968.446529][ T948] tcp_sendmsg_locked+0xa4f/0x3220 [ 968.446559][ T948] ? tcp_sendpage+0x60/0x60 [ 968.479315][ T948] ? trace_hardirqs_on+0x67/0x240 [ 968.479337][ T948] ? lock_sock_nested+0x9a/0x120 [ 968.479363][ T948] ? __local_bh_enable_ip+0x15a/0x270 [ 968.479392][ T948] tcp_sendmsg+0x30/0x50 [ 968.494540][ T948] inet_sendmsg+0x9e/0xe0 [ 968.494556][ T948] ? inet_send_prepare+0x4f0/0x4f0 [ 968.494574][ T948] sock_sendmsg+0xd7/0x130 [ 968.494592][ T948] __sys_sendto+0x262/0x380 [ 968.494610][ T948] ? __ia32_sys_getpeername+0xb0/0xb0 [ 968.494637][ T948] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 968.619874][ T948] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 07:16:55 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) r5 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) readv(r6, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r6, 0xab00, r5) syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x6, 0x261000) recvmmsg(r2, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) 07:16:55 executing program 0: r0 = getuid() r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) setresuid(r0, r3, 0xffffffffffffffff) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2040, 0x0) 07:16:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x163404000000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:16:55 executing program 2: syz_open_dev$sndtimer(&(0x7f0000000340)='/dev/snd/timer\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='cpuret.memory_pressure\x00\x8bEY\xd0\x1b\x05\xa2\bG\xdb\xd8\xee\x04=\x17\xae\x89\xbdA\x8a\x1d,v[v1r%\xd8w\x8f\xe7\xcc\n\x93\x06:\xef~\xa7yv\v\xdb\xc62e\xe3\x00%\xa4-\xdb\x8a1\x9c\x89\xf3\xbd\x8aW\xd9\xa3 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 968.706830][ T948] RSP: 002b:00007f400e5a2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 968.715285][ T948] RAX: ffffffffffffffda RBX: 00007f400e5a2c90 RCX: 0000000000459879 [ 968.723281][ T948] RDX: 7564c14c40b01eec RSI: 0000000020000480 RDI: 0000000000000003 [ 968.731285][ T948] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000150 [ 968.739287][ T948] R10: 00000000000000e0 R11: 0000000000000246 R12: 00007f400e5a36d4 [ 968.747276][ T948] R13: 00000000004c783b R14: 00000000004dd0f0 R15: 0000000000000005 07:16:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x6c000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:16:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x200000000000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 968.781166][ T1271] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 968.793105][ T1357] binder: 1011:1357 unknown command 0 [ 968.805477][ T1357] binder: 1011:1357 ioctl c0306201 20000200 returned -22 [ 968.815869][ T1363] binder: 1011:1363 unknown command 0 [ 968.821325][ T1363] binder: 1011:1363 ioctl c0306201 20000200 returned -22 07:16:56 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x9, 0x6d, 0x3, 0x0, 0x0}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f00000000c0)}, 0x10) 07:16:56 executing program 3 (fault-call:6 fault-nth:6): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) [ 968.931887][ C0] net_ratelimit: 18 callbacks suppressed [ 968.931896][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 968.943794][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 969.011889][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 969.018055][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 969.027567][ T1386] binder: 1383:1386 ioctl c0306201 20000200 returned -14 07:16:56 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) readv(r3, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) readv(r5, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r5, 0xab00, r4) syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x6, 0x261000) [ 969.102085][ T1391] binder: 1388:1391 unknown command 0 [ 969.132926][ T1391] binder: 1388:1391 ioctl c0306201 20000200 returned -22 [ 969.161439][ T1271] syz-executor.2 (1271) used greatest stack depth: 23400 bytes left [ 969.181011][ T1473] binder: 1388:1473 unknown command 0 [ 969.191100][ T1421] FAULT_INJECTION: forcing a failure. [ 969.191100][ T1421] name failslab, interval 1, probability 0, space 0, times 0 [ 969.204308][ T1421] CPU: 0 PID: 1421 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 969.206594][ T1473] binder: 1388:1473 ioctl c0306201 20000200 returned -22 [ 969.213360][ T1421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 969.213425][ T1421] Call Trace: [ 969.213456][ T1421] dump_stack+0x172/0x1f0 [ 969.213483][ T1421] should_fail.cold+0xa/0x15 [ 969.213505][ T1421] ? fault_create_debugfs_attr+0x180/0x180 [ 969.213523][ T1421] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 969.213540][ T1421] ? __kasan_check_read+0x11/0x20 07:16:56 executing program 2: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) r5 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) readv(r6, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r6, 0xab00, r5) syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x6, 0x261000) recvmmsg(r2, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) 07:16:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x263044000000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 969.213559][ T1421] __should_failslab+0x121/0x190 [ 969.213576][ T1421] should_failslab+0x9/0x14 [ 969.213595][ T1421] kmem_cache_alloc_node+0x56/0x740 [ 969.275067][ T1421] ? __kernel_text_address+0xd/0x40 [ 969.280272][ T1421] ? unwind_get_return_address+0x61/0xa0 [ 969.286031][ T1421] ? profile_setup.cold+0xbb/0xbb [ 969.291077][ T1421] __alloc_skb+0xd5/0x5e0 [ 969.295557][ T1421] ? netdev_alloc_frag+0x1b0/0x1b0 [ 969.300699][ T1421] ? stack_trace_save+0xac/0xe0 [ 969.305664][ T1421] ? stack_trace_consume_entry+0x190/0x190 [ 969.311503][ T1421] alloc_skb_with_frags+0x93/0x590 [ 969.316653][ T1421] sock_alloc_send_pskb+0x7ad/0x920 [ 969.321886][ T1421] ? ip_fragment.constprop.0+0x1ee/0x240 [ 969.327549][ T1421] ? ip_output+0x21f/0x670 [ 969.327564][ T1421] ? ip_local_out+0xbb/0x1b0 [ 969.327577][ T1421] ? __ip_queue_xmit+0x86f/0x1c00 [ 969.327601][ T1421] ? proto_register+0x990/0x990 [ 969.327619][ T1421] ? __sys_sendto+0x262/0x380 [ 969.346499][ T1421] ? __x64_sys_sendto+0xe1/0x1a0 [ 969.346517][ T1421] ? do_syscall_64+0xfa/0x760 [ 969.346541][ T1421] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 969.367001][ T1421] ? call_rcu+0xb/0x10 [ 969.371101][ T1421] ? dst_release+0x84/0xb0 [ 969.375535][ T1421] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 969.375623][ T1421] ? xfrm_lookup_with_ifid+0x579/0x1fc0 [ 969.375648][ T1421] sock_alloc_send_skb+0x32/0x40 [ 969.392614][ T1421] __ip_append_data.isra.0+0x16c9/0x30d0 [ 969.398280][ T1421] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 969.404473][ T1421] ? icmp_push_reply+0x4a0/0x4a0 07:16:57 executing program 0: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1000002, 0x11, r1, 0x0) madvise(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x9) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000000)={'bond0\x00', {0x2, 0x4e20, @local}}) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="73799a7d4b3a3169328ca3469424c62cb1667159dd00f62a8e59ef3f79e24f8f75ec132140afbd8c4603241231acc4744897120ea1a3ccd2b362aa2048aa34020000006c9a10876986f8e2989392be40557f3983602a15960801ea80a8353413e97f73000014eea34c0000"], 0xffffffffffffffa5) [ 969.409467][ T1421] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 969.416048][ T1421] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 969.422332][ T1421] ? ip_setup_cork+0x548/0x870 [ 969.427316][ T1421] ? icmp_push_reply+0x4a0/0x4a0 [ 969.427338][ T1421] ip_append_data.part.0+0xf2/0x170 [ 969.427358][ T1421] ? icmp_push_reply+0x4a0/0x4a0 [ 969.427374][ T1421] ip_append_data+0x6e/0x90 [ 969.427394][ T1421] icmp_push_reply+0x13d/0x4a0 [ 969.451906][ T1421] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 969.458184][ T1421] __icmp_send+0xc44/0x1460 [ 969.462723][ T1421] ? icmp_route_lookup.constprop.0+0x15c0/0x15c0 [ 969.469077][ T1421] ? find_held_lock+0x35/0x130 [ 969.474255][ T1421] ? __cgroup_bpf_run_filter_skb+0xe18/0x1570 [ 969.478932][ T1604] binder: 1602:1604 unknown command 0 [ 969.480355][ T1421] ? lock_downgrade+0x920/0x920 [ 969.480381][ T1421] ? __kasan_check_read+0x11/0x20 [ 969.480405][ T1421] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 969.480426][ T1421] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 969.490991][ T1421] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 969.491024][ T1421] ip_fragment.constprop.0+0x1ee/0x240 [ 969.491040][ T1421] ? ip_fragment.constprop.0+0x1ee/0x240 [ 969.491059][ T1421] __ip_finish_output+0x4bd/0xbc0 [ 969.491073][ T1421] ? alloc_chunk+0x120/0x220 [ 969.491092][ T1421] ip_finish_output+0x38/0x1f0 [ 969.514853][ T1604] binder: 1602:1604 ioctl c0306201 20000200 returned -22 [ 969.519826][ T1421] ip_output+0x21f/0x670 [ 969.519846][ T1421] ? ip_mc_output+0xf70/0xf70 [ 969.519865][ T1421] ? rcu_lockdep_current_cpu_online+0xe3/0x130 07:16:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x74000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 969.519885][ T1421] ? __ip_finish_output+0xbc0/0xbc0 [ 969.519901][ T1421] ? rcu_read_lock_held_common+0x130/0x130 [ 969.519922][ T1421] ip_local_out+0xbb/0x1b0 [ 969.519942][ T1421] __ip_queue_xmit+0x86f/0x1c00 [ 969.519964][ T1421] ip_queue_xmit+0x5a/0x70 [ 969.519988][ T1421] __tcp_transmit_skb+0x1a2f/0x3820 [ 969.593398][ T1421] ? __tcp_select_window+0x8b0/0x8b0 [ 969.597466][ T1625] binder: 1602:1625 unknown command 0 [ 969.598706][ T1421] ? lockdep_hardirqs_on+0x418/0x5d0 [ 969.598727][ T1421] ? trace_hardirqs_on+0x67/0x240 [ 969.598750][ T1421] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 969.598772][ T1421] tcp_write_xmit+0xf0f/0x5910 [ 969.598793][ T1421] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 969.631648][ T1421] tcp_push_one+0xd7/0x110 [ 969.631672][ T1421] tcp_sendmsg_locked+0xa4f/0x3220 [ 969.641347][ T1421] ? tcp_sendpage+0x60/0x60 [ 969.646358][ T1421] ? trace_hardirqs_on+0x67/0x240 [ 969.651453][ T1421] ? lock_sock_nested+0x9a/0x120 [ 969.651474][ T1421] ? __local_bh_enable_ip+0x15a/0x270 [ 969.651497][ T1421] tcp_sendmsg+0x30/0x50 [ 969.651514][ T1421] inet_sendmsg+0x9e/0xe0 [ 969.651527][ T1421] ? inet_send_prepare+0x4f0/0x4f0 [ 969.651541][ T1421] sock_sendmsg+0xd7/0x130 [ 969.651557][ T1421] __sys_sendto+0x262/0x380 [ 969.651712][ T1421] ? __ia32_sys_getpeername+0xb0/0xb0 [ 969.666849][ T1625] binder: 1602:1625 ioctl c0306201 20000200 returned -22 [ 969.671014][ T1421] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 969.671047][ T1421] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 969.671064][ T1421] ? fput_many+0x12c/0x1a0 [ 969.671078][ T1421] ? fput+0x1b/0x20 [ 969.671090][ T1421] ? ksys_write+0x1cf/0x290 [ 969.671110][ T1421] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 969.671126][ T1421] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 969.671138][ T1421] ? do_syscall_64+0x26/0x760 [ 969.671163][ T1421] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 969.746475][ T1421] __x64_sys_sendto+0xe1/0x1a0 [ 969.751279][ T1421] do_syscall_64+0xfa/0x760 [ 969.755827][ T1421] entry_SYSCALL_64_after_hwframe+0x49/0xbe 07:16:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x300000000000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 969.761868][ T1421] RIP: 0033:0x459879 [ 969.765790][ T1421] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 969.785804][ T1421] RSP: 002b:00007f400e5a2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 969.794585][ T1421] RAX: ffffffffffffffda RBX: 00007f400e5a2c90 RCX: 0000000000459879 [ 969.802590][ T1421] RDX: 7564c14c40b01eec RSI: 0000000020000480 RDI: 0000000000000003 [ 969.810588][ T1421] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000150 [ 969.818585][ T1421] R10: 00000000000000e0 R11: 0000000000000246 R12: 00007f400e5a36d4 [ 969.826816][ T1421] R13: 00000000004c783b R14: 00000000004dd0f0 R15: 0000000000000005 [ 969.849596][ T1728] binder: 1638:1728 ioctl c0306201 20000200 returned -14 07:16:57 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0xe, 0x4, 0x4, 0x3}, 0x3c) bpf$MAP_CREATE(0x4, &(0x7f0000003000)={0x1, 0x0, 0x760000, 0x0, 0x10020000000, 0x0}, 0x3c) [ 969.891935][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 969.898084][ C0] protocol 88fb is buggy, dev hsr_slave_1 07:16:57 executing program 3 (fault-call:6 fault-nth:7): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) [ 969.969148][ T1822] binder: 1820:1822 unknown command 0 07:16:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7a000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 970.029833][ T1822] binder: 1820:1822 ioctl c0306201 20000200 returned -22 [ 970.051961][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 970.052018][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 970.057896][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 970.063676][ C0] protocol 88fb is buggy, dev hsr_slave_0 07:16:57 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) readv(r3, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) readv(r5, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r5, 0xab00, r4) syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x6, 0x261000) [ 970.128688][ T1851] binder: 1820:1851 unknown command 0 [ 970.151228][ T1852] FAULT_INJECTION: forcing a failure. [ 970.151228][ T1852] name failslab, interval 1, probability 0, space 0, times 0 [ 970.164290][ T1852] CPU: 0 PID: 1852 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 970.173322][ T1852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 970.173330][ T1852] Call Trace: [ 970.173355][ T1852] dump_stack+0x172/0x1f0 07:16:57 executing program 0: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5, 0x442) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r3, 0x20d, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_PORT={0x8}]}]}, 0x30}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r3, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfffffffffffffc00}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @broadcast}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x67, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x808) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) fallocate(r0, 0x20, 0x0, 0x8000) [ 970.173380][ T1852] should_fail.cold+0xa/0x15 [ 970.173400][ T1852] ? fault_create_debugfs_attr+0x180/0x180 [ 970.173420][ T1852] ? __kasan_check_read+0x11/0x20 [ 970.192145][ T1851] binder: 1820:1851 ioctl c0306201 20000200 returned -22 [ 970.192278][ T1852] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 970.221643][ T1852] __should_failslab+0x121/0x190 [ 970.226744][ T1852] should_failslab+0x9/0x14 [ 970.231282][ T1852] kmem_cache_alloc_node_trace+0x5a/0x750 07:16:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000001500)='/\x04\xf7\xe4\xdcvc\xc1a#\x00', 0x1, 0x141001) write$UHID_INPUT(r2, &(0x7f00000015c0)={0x8, "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", 0x1000}, 0x1006) [ 970.237223][ T1852] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 970.243220][ T1852] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 970.243243][ T1852] __kmalloc_node_track_caller+0x3d/0x70 [ 970.254886][ T1852] __kmalloc_reserve.isra.0+0x40/0xf0 [ 970.260405][ T1858] binder: 1857:1858 ioctl c0306201 20000200 returned -14 [ 970.267478][ T1852] __alloc_skb+0x10b/0x5e0 [ 970.271950][ T1852] ? netdev_alloc_frag+0x1b0/0x1b0 [ 970.277256][ T1852] ? stack_trace_save+0xac/0xe0 [ 970.282141][ T1852] ? stack_trace_consume_entry+0x190/0x190 [ 970.288249][ T1852] alloc_skb_with_frags+0x93/0x590 [ 970.293603][ T1852] sock_alloc_send_pskb+0x7ad/0x920 [ 970.298845][ T1852] ? ip_fragment.constprop.0+0x1ee/0x240 [ 970.304773][ T1852] ? ip_output+0x21f/0x670 [ 970.304787][ T1852] ? ip_local_out+0xbb/0x1b0 [ 970.304799][ T1852] ? __ip_queue_xmit+0x86f/0x1c00 [ 970.304818][ T1852] ? proto_register+0x990/0x990 [ 970.304829][ T1852] ? __sys_sendto+0x262/0x380 [ 970.304840][ T1852] ? __x64_sys_sendto+0xe1/0x1a0 [ 970.304854][ T1852] ? do_syscall_64+0xfa/0x760 [ 970.304871][ T1852] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 970.304891][ T1852] ? call_rcu+0xb/0x10 [ 970.349837][ T1852] ? dst_release+0x84/0xb0 [ 970.354531][ T1852] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 970.354549][ T1852] ? xfrm_lookup_with_ifid+0x579/0x1fc0 [ 970.354573][ T1852] sock_alloc_send_skb+0x32/0x40 [ 970.354594][ T1852] __ip_append_data.isra.0+0x16c9/0x30d0 [ 970.354611][ T1852] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 970.354631][ T1852] ? icmp_push_reply+0x4a0/0x4a0 07:16:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x363084000000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 970.354666][ T1852] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 970.396302][ T1852] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 970.402734][ T1852] ? ip_setup_cork+0x548/0x870 [ 970.407535][ T1852] ? icmp_push_reply+0x4a0/0x4a0 [ 970.412517][ T1852] ip_append_data.part.0+0xf2/0x170 [ 970.417755][ T1852] ? icmp_push_reply+0x4a0/0x4a0 [ 970.422728][ T1852] ip_append_data+0x6e/0x90 [ 970.427727][ T1852] icmp_push_reply+0x13d/0x4a0 [ 970.432638][ T1852] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 970.439140][ T1852] __icmp_send+0xc44/0x1460 [ 970.443703][ T1852] ? icmp_route_lookup.constprop.0+0x15c0/0x15c0 [ 970.450057][ T1852] ? find_held_lock+0x35/0x130 [ 970.454857][ T1852] ? __cgroup_bpf_run_filter_skb+0xe18/0x1570 [ 970.460966][ T1852] ? lock_downgrade+0x920/0x920 [ 970.465852][ T1852] ? __kasan_check_read+0x11/0x20 [ 970.471078][ T1852] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 970.476985][ T1852] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 970.483533][ T1852] ? rcu_lockdep_current_cpu_online+0xe3/0x130 07:16:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0xff000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 970.489737][ T1852] ip_fragment.constprop.0+0x1ee/0x240 [ 970.495413][ T1852] ? ip_fragment.constprop.0+0x1ee/0x240 [ 970.501082][ T1852] __ip_finish_output+0x4bd/0xbc0 [ 970.506138][ T1852] ? alloc_chunk+0x120/0x220 [ 970.510767][ T1852] ip_finish_output+0x38/0x1f0 [ 970.515698][ T1852] ip_output+0x21f/0x670 [ 970.520078][ T1852] ? ip_mc_output+0xf70/0xf70 [ 970.524924][ T1852] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 970.531119][ T1852] ? __ip_finish_output+0xbc0/0xbc0 [ 970.536465][ T1852] ? rcu_read_lock_held_common+0x130/0x130 [ 970.542422][ T1852] ip_local_out+0xbb/0x1b0 [ 970.546930][ T1852] __ip_queue_xmit+0x86f/0x1c00 [ 970.551815][ T1852] ip_queue_xmit+0x5a/0x70 [ 970.556256][ T1852] __tcp_transmit_skb+0x1a2f/0x3820 [ 970.556285][ T1852] ? __tcp_select_window+0x8b0/0x8b0 [ 970.556304][ T1852] ? lockdep_hardirqs_on+0x418/0x5d0 [ 970.572284][ T1852] ? trace_hardirqs_on+0x67/0x240 [ 970.577520][ T1852] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 970.583278][ T1852] tcp_write_xmit+0xf0f/0x5910 [ 970.588594][ T1852] ? __sanitizer_cov_trace_cmp8+0x18/0x20 07:16:58 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ubi_ctrl\x00', 0x2, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x5) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) set_robust_list(&(0x7f0000000780)={&(0x7f0000000c40)={&(0x7f0000000c00)}, 0x2, &(0x7f0000000bc0)={&(0x7f00000000c0)}}, 0x18) sysinfo(&(0x7f00000007c0)=""/154) pipe(&(0x7f0000000340)) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$BLKPG(r5, 0x1269, &(0x7f00000006c0)={0x1, 0xfffffffffffffffd, 0x2ca, &(0x7f0000000800)}) r6 = request_key(&(0x7f00000001c0)='blacklist\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000380)={r6, 0x78, 0xe1}, &(0x7f0000000600)=ANY=[@ANYBLOB="653d726d6431363000000000000000000000000000000000d9963375ba6aaf1d0000000000000000000200000000005c9dd309c8883d6c0000000000000000000000000000001f2923939bdb33721bc06ed5451f086fcdb92757a1887e7e72ecfc75079541e069c5cff1e8c0c8af13032580160e1dbe4b24c691f4c4bfc448"], &(0x7f0000000580)="08b81785e4df7ca4fb9172139509d325b78070e759082d2bec1f6bf93735756c602c3e7042756fce9cbd04b307bc71f80342dfafbdaec3570c7a77e3c4cb02e72ecb1a567e48f93ae70dcc9e80c47a73cd807b6bc6927ea1c4afc46d6c20776ba6a49478be096590ee0144919eef070d804d9e0c66ac3cc5", &(0x7f00000009c0)=""/225) r7 = memfd_create(&(0x7f0000000880)='\f\xcd\x80\xbf\xcd\xbd\xfb\x8bwa\x01\xaa>\xf7\xff\xc6\xb5%\xbd\n\x90\x9e\xa8\x94\xefC\x9f\xb1\xf4\x8arA\xa1\x88\xef\"/\xcd@\x19(\xb58\x88\xca\x8de*\xed\x89\x99\xa9*\xc3W&\xa4y]\xb5\x85P\xa7M\xf84\xcc\x91\xe7@\xdf\x8a\xc2*\x18\xd2:}\xae\xf1\xe3\xe0\x13\xe9\xbe\xe8\x84\xb8\xc8\x1fX\x86\xd8\xf6a\x02\x91\xf2\xc1\xc9\xcb\x90X0\xad\x02\xdb\x9b\xdd\x01\x8f\xfa\x9f\x16\x12pT1A\xcf.\x88\xf8b\x83e\x93K\x8ai\xb0|\xa6\xec\n\xf5\xe1|\xc6\x935\x92q\xaa\xfbv\x11\x02w/\xdb\xbe\xca\x94\x00\x00\x00\x00\x00\x00\x00\x00\xea\x1e\xf1s\x01\xdaI\xa7\xf6\x0e\xbb\xadP\f\"\xd4\xdf\x19\xedY\xdf\xcc6\x1e@;\xf2#\x9bKi7\xd19\xeb\x89\xf6n\x1a~\xfc6W\xab\x03\x05\b\xadDrM~\xd4\xb4m\x8b\b\xcc4y\xe4\xa3\x87\t\x1a#+P\x1e-\xbc\xad8\xff\x1c\xa3\x83\xff25\xd5\xf7\xbd\xdb\xbd\x7f\xf2%\a\xc5\xab\x0few\xa7\x9f\x0e\xb5\xbd\xae\x18', 0x7) mount$9p_rdma(&(0x7f0000000500)='127.0.0.1\x00', &(0x7f0000000540)='./file0\x00', &(0x7f0000000680)='9p\x00', 0x40000, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532312c74696d656f75743d3078303030303030303030303030303766662c74d3696d656f75743d3078303030303030303030303030303030342c746900656f75743d3078666666666666666666666666666666392c686173282c00ae0c6b1e25fc4f17cea52a67ca51b43154d392b5152925b351230b767c9f3a71f56de82881476f4e66a86372aeaeca41541c1f27f99b58b9dba55b1336cab6143ab582d01674eb2e88b2c1baebd0ed4a45809708d5a917c8979ddd179d5d98"]) ftruncate(r7, 0x8003) write(r7, &(0x7f00000002c0)="0600", 0x1) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x50040, 0x0) getsockopt$packet_buf(r8, 0x107, 0x5, &(0x7f0000000400)=""/212, 0x0) sendfile(r7, r4, &(0x7f0000000700), 0x0) r9 = creat(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$SNDRV_TIMER_IOCTL_START(r9, 0x54a0) accept$alg(r9, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab04) [ 970.594368][ T1852] tcp_push_one+0xd7/0x110 [ 970.598811][ T1852] tcp_sendmsg_locked+0xa4f/0x3220 [ 970.598841][ T1852] ? tcp_sendpage+0x60/0x60 [ 970.608468][ T1852] ? trace_hardirqs_on+0x67/0x240 [ 970.613529][ T1852] ? lock_sock_nested+0x9a/0x120 [ 970.618493][ T1852] ? __local_bh_enable_ip+0x15a/0x270 [ 970.623899][ T1852] tcp_sendmsg+0x30/0x50 [ 970.628359][ T1852] inet_sendmsg+0x9e/0xe0 [ 970.632719][ T1852] ? inet_send_prepare+0x4f0/0x4f0 [ 970.638078][ T1852] sock_sendmsg+0xd7/0x130 [ 970.642528][ T1852] __sys_sendto+0x262/0x380 [ 970.647067][ T1852] ? __ia32_sys_getpeername+0xb0/0xb0 [ 970.652897][ T1852] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 970.658493][ T1852] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 970.664981][ T1852] ? fput_many+0x12c/0x1a0 [ 970.664995][ T1852] ? fput+0x1b/0x20 [ 970.665008][ T1852] ? ksys_write+0x1cf/0x290 [ 970.665029][ T1852] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 970.665044][ T1852] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 970.665058][ T1852] ? do_syscall_64+0x26/0x760 [ 970.665080][ T1852] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 970.665099][ T1852] __x64_sys_sendto+0xe1/0x1a0 [ 970.673588][ T1852] do_syscall_64+0xfa/0x760 [ 970.673608][ T1852] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 970.673619][ T1852] RIP: 0033:0x459879 [ 970.673633][ T1852] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 970.673639][ T1852] RSP: 002b:00007f400e5a2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 970.673652][ T1852] RAX: ffffffffffffffda RBX: 00007f400e5a2c90 RCX: 0000000000459879 [ 970.673660][ T1852] RDX: 7564c14c40b01eec RSI: 0000000020000480 RDI: 0000000000000003 [ 970.673667][ T1852] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000150 [ 970.673674][ T1852] R10: 00000000000000e0 R11: 0000000000000246 R12: 00007f400e5a36d4 [ 970.673682][ T1852] R13: 00000000004c783b R14: 00000000004dd0f0 R15: 0000000000000005 [ 970.798367][ T2114] binder: 2100:2114 unknown command 0 07:16:58 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x7ff, 0x0) r1 = dup(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2100, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x200, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$mice(0x0, 0x0, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x61, &(0x7f00000000c0)={@dev, @remote}, 0x0) write$FUSE_ATTR(r3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000640)={0x0, 0xc70}, &(0x7f0000000680)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000800)={r4, 0x3, 0x4, [0x40, 0xac6f, 0x3f, 0x401]}, 0x10) fstat(r3, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000d40)={0x0}, &(0x7f0000000d80)=0xc) lstat(&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000fc0)=0x0) sendmsg$unix(r3, &(0x7f0000001280)={&(0x7f0000000b00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000b80)="6a5a89e487465d7d3c6d059d253a953641c6c11fca2f352b11bc10f36b1b9ebb028573aff77526a64723", 0x2a}, {&(0x7f0000001640)="f0cfe3c3ed3554fc4c1839ca462236e553e907dc1c8c3b704f80756619ea332eaf03298d4fbe5eebe60444e81bba63b868c69682a2ef2c480f2b24ba51be461f1d56b3a02a3831a433b6d709aca4b704be8d1714a28a0f0029b1af998f36f9db2391e29284e170a1c232ca743c803f703da308f5d1a31c9bb237d5b406a2bda9c765b88da90ae021c6e8899d8fa5564134c2ce6384185876acc68241ac27cec90c6d0e1883c3d18c23c116ba7b2ec2ff050e73a94ec4d7df2a1113bf2006d69cc8b21ce7219e4e423992971526aa2940e0c522f6e39f8adfa0e8489d6df276d746b9ff1158f9f7d841a0108368d6d5e89c69c1f805a9fe16b40586cc9e531f5dd9021a621a65801fa98851098ae677187cce11471d2f1733dafa1491eba73138c401aaf4800da5684cd53fc47c21748e4b53f6138be1091094ca8618f84f5f9788713508a6a3ff8eee5b5cea16e568f1603c35f5aa042438e03b9b012474955decf86f8c0a8b557165a72705386a68a37e913822d619c1cf728fde06d20521bb4e90bf321f9b6f0c892e28d9c940ac4fe171bff0a5905689e22e8810309bd7f21d615ad9e31fcfd9cf64669bc8965a5f6e89aefb04037fdfeceb9656e0ca7b0e087ddff306a1baf7f0913ba2352ea6fdf7739d29b4cb910022032d0d5d6a1854038e8e6a3aa0140a8970b704fbf72f9fc82739bc60fac16a43e6b9e0bdbdc0ac39036cf89fca66829dc589745aef2768bc4517959a87902b9efd0d76d0b8b2dfb05e0a113b993f21b5be095e579681f36fee6b047d6494ecc6c911acc91a47ae238295bcd5aaac3946c0db4228ebbb7b364373bb7b559a75b595a280180d0459c144ff232afe0070511a06e1245b5ae847f4d48b1945fca5f2db0e40ef6c9817a7a71f88e03504a8d4b677f9c036bd8a82e51262224ce47e37ade879971060caa59512e929d7358940b93734b4e79f96803476fd64f31ff98b7efef5d2c1717ef1501c33dd74a54212b65fd2d7203ab9b21172b196233d6d2fc6464245f2d86e63b001473495ec58e9aca1bcb2b3ac4c17d2f213829316c0d00cb1642bc9c03b0cd640bc7f3187e52c59a1340e80bdc5baacacbabd76a99093b084a97a308cf01ad92c3933e8cacabd36133321f9f993a4d255eeb1c678df09fd5c7650ce6ec8ac6f00c4fe753dd58cd74d7a839f02e317e47b9a65d4c1603ecc8c7a964848947d50a68d21fb7544fd079f2d6690268027d38b1d534232db6a65abf18855931ee9f2e85598bead497a319f8b6264fae46b9dbbaa69e94699725ace6f4820ce46fbb8edb90522dbd3d99498fe5f0002c006db8abced4d0f15c5dcbb5ca849458c8fefc08088b96485a0b28336603a64f0102a72f24c9f4417d1f1bd32d7f9dc89497243924c052fc69c579f1083f242badf22a0a7d78a1fcf8671bcd1578aa6c9ae71acd632526de62536a879fb86292ec5bbd244c0ff1173d0c2b082ff8a8fc5439aa0b35c786e9a22cf52b9d8202e8464b802e104c5e9ecceea43709e394efd21333d8f8ec5d0024fc102576d806d36efe62b61bfbfe081bc46b70b37444b3be784dd1a64cb565e25c740e76abdb005d995e54014b12714420b7d70e5196fd7de32e5c6b69263e79974c302880a49030d55f766ba2caa74128cde68a5a9121e670059915515228c5a4e9df75b049c048a6e74680ea09790697c14b10c6359c30406ffb5bbedbd602fccbddfb702328c81647bd9c5855e5660aff273a2f9520b972fb25328514719cd48ea7e6995835e6e5cd465df3184677484d03720e3bce84ff20cc97e0d146089bda670b9f72127fe246e10c9524bf964232c7a3a6d041b7fe1eeb0b965422429309587a23a4342d7b64b36d699e69d60681198acb18e913465ff3677f11dd3986fa7f5244a8665d01446bf23a586a00f00262e212dbb7a0d2fa3aa9346a50cdb5d7ac68bf50a06e8943f9a910e5cea0eaa71bb17f7aecbde06ce1929df7be44a553f9e6adfad14aa3320978c2f726de5f5ea14d0f6d2f5720e19f5dcf702374b60066207a78d2a03e39abf6516766159e6c8333fa499195530fb956484e4959708a97b4232e38197902352f8edc928c5dabe46354b211b7e69b9139873ced988ff3a55d89dddbda853d91c3c6eebb9749cb8339e37db7e175b15da87bb055efc0d832f3722a3c3c3daaef9178d22da3c441a4ebafe84b016bfa4f7ca2dd7ecabe85a8cb49f5d1446f2d43b4ffe7c1315e7636d807ec38db41b49983c065f82f4ff79948aee6b6eb4d50dd7c096c0a3455441ff80ca1434d67cea7911918babd7b77a21b44b5c8135df7463aaa4ba75ce8bdf7a511bbb4da088479b13ffa87eb961634adc467b1283e0e7d2de13cb49cf8dc6ddd8b8ddce47e7c3ae5d5c32c12fe74d58943e2cc2db9d6fd9b5bc78be7d036b3ea653e374afe0fdff8abc759c2999cd33f1efa972ae3a7010468b9826a015788f95b209c2b47d56dae55cd5629c89dd46517e4e2e7075d0734043e7e0656667dffeeabb45be02e42e315ffb4508119313373a3c65ec8bc4247a1f4b6eda10be909391e6a8cac2906ae7d4ee52a6fa24d151ec8b051491996a7c2983379b9e5cfc8506aaf544f845fc8d96174a5cff65cc0304dd32e9888128cac06dd307c537997847d6ba60c09f8be4d5f74961ebc5faf7a1f11258458db3cb5d8aefcf0431b58eb967dc6324902dc8ecc9e4a6641382b4945d9204ecbe1e34f99d09e7cbf90ffb6bd7af7782165ec4fbe664b97782ea285e1dade38ea7e753e3fd41c256156e8650b83af17e4802205ac8531cf8c9f733b05acb08ee7b8f0de7a684469a55e52a9fba87797d5399efc270e27cdfb4e26e42c6b4f6d414e30957c9ba57869dae3c2474c03c8a6bac6b437a33416bc96f878b15be2858c14a45a7c1542cd045d3b7d1549195e82028a95eb4e377838c01c376137e38ee158858b0fdb32d65415a1d72080a6fcea531de4b020c36d5f4349963c453481d15826b78508be714330403de82f58eff6208e3cf1e6ae18bf56ebc1b0b9a950fbab61907b0348e7b3a80f97c5108d1fd3d57e1a34936d82990e654ebceadce375fdf2c4500dfcb09d29401782211ad4d85fb24947b9209606084fe66da8c84855ad7f5849e2cb9fa7702b53c92f429cd07b978df8fd5f83c77c9bae2d1ed1966e2f2a7dad097dffb721b12eefdfa544f8a8e8fb5665fe5a9e5322ba5b13e67605032acbb0c3f7043bc8c9b4b110e9bb98372403b19f9a1a4df32ec69e6505eab632069e301f736aca96fc36affc49e26584c06ba43eaeefa0436c2604403cc06f967b4418554f9ef1321b3cd38c7fb8fc8fbe42d13993c0bab93d96ca1797f3f42e674c62c67729eb5f21e55a982552d4c46e266bd589d7b276b3e40446e805224dd282f3df87a9f1b8800a2c3d55d2579a28a075a572fb24d8c6d8481669a6b68ba8065dae4d5342616ecfee012a61434ec7644905cdf31d5d598deaa0c9a2e764fbb9268825740fad8ccd5213a4c23113eacecce00187ef56fa4a64feb39b681d31602cf5ed92af2068321be3412a993abdf70be76fbf37e27b06f8102e7136dbf872cbf4d2bdfb9e09d035529c17ebf142d9320c5b7f22de5eab8f9f49c42a1d7553e7ddb4fb7136582a5a3d8cfa6ad847a31371df000a3dd1f1d3608b219b56533ad3e8a8543e02ed67de8bd8120a0e92a24240134add2816379812e9b0f72d253aee86a20dabae8b74e2cdd03ebecad29eff96dd33c0e3c7d3313d1db167791eea3baea29e24edf3c93d2da57a17bcd3bdc13b47c07a0deff1320fcc373aed25388bb87bc700c6aff758ef134409c4605827111bac968c07ab152292fbb969f65c7cf78701235d9b41ad3380bfd375a1ed9fc490e4dafb6f3d76fb64a07da2a465d215c7b53ffeeebf5af21e9770e62765f39a788691046f251ce8d6c7189c0f1df4f8a80ce877f9fd2812f4f6c0e925303bec8ae8b64b7477790d9ae1b55b499ccc0d9c02ef5e3227dac22c2a4fb19b6e5137518c780ce475493bd3eb298555e4ac81719621bb5cc1d188a583da8451b990d24336a760cd488bb501dd1524da437649444f0396dcd75871ce81e81b30d6ca8890fff0ca7529d9e8a89670b55912be730197dabd1a77df8b1f833627e4c328ea8e42e18114080979ee150092f0ec0310ca48f2853ab37da1b8b8b6e93ff6621f8926804e6d6a0ee0e317726110d31eae4b06fbb87152333a7567c02790523206df3987d741af889548a30da5f895cd277e929d6af59b7acccdcc4a96532a0b4500fc8df6c726d5c4a8c52318ec851430edbaf80fd45d36375a1a05e0004823c2ebb56a31f5e49de1c5ec5bcc925bc861608a963308c68b2ddfdbf5a02a167ccd857b59d998a7269e6d94377111c8544eca00bcd04ef0689a567d25d78c51dc1c40a9889cb254d20ff9dc6fc3071dae73804ed4b130f29b17dcedde580e1c4fd1b8772d62426c669245f89f6d7f18a48f84023648e4cf6756e3137ec8587c948d731bd5acbefdd86aacbae98962b8bbc13ecc45cef8f283d18be8139335333c165ba77118ccd2c66762bfe5dc141e8d042d24d51bb34037df2f91d244f00079ebe20bfac39bb28f50ebecd0ef01cc00d494f4277b907ecd3e0f506fd163c9d104e7e8908d5c27ab4703f8a96fcedee2870c11c33dfe1015e918a299837113963fed7446ffbae97fc93303740c3c7d4faad41f02f573a3282ea199520daa321059463b7605707fc1ffde4d7eaa05fc2c3482c57a3898f3993525de7a6ee71552dcd56b151bf55be93f516f1924e5715a841929118299ea77d6f6cab5850342fa296c368a4928ba003609824917f4da19dbd4a7d55f8a1d2e92bc85ba3acbd040061bfc1f1ace2dfb4b320c98c4ad04fe0623a4c7327e90767dee874f3b42f38b0f07e62d031774b795be911cede6ab8c70656f3e5df0155494e94adb26b2eea71e041def4a358d38e065a0473b67ae737b83bcc9153b6b3daed42214b5a23aa69f1786853b7399e8ab430ff350cd66da9b5dda7ddb30d9d963ffbae1d96620ee6bad9c502097fd00f8f08b03aa668fb1e146d92cc851ee23f530f32b046e6e741ee45be644a4fc3870d1af4f5a9367599eebe3a66b90fb4c8fbc18d3c1d411312d3100cc316f6ec8320a48e766e40b563097cd6af9693b933349575f196d09344639736b176737cc3db3528747d0cba45aa3f279931fa3e7d0020f32632e61a7af573e817e06a0bb8c36e3f6dc03201f1a16c8dc5e1b26b851c867e4151689214eafac4189875090604a4e5a4648e1770b4dec976e05a29c84838cf92afa368d44e792c180ba66a79a8d88b84a3f676e2b203a66c409ace41bf3e468afa7fc3bf6876969780313d5ea69cdbb777e6e0be55b6d457e2e077b649356a32893f98d3632cef33abe07313c13e59705f7e3350b8072a80360cfdc309ad2d003bad07ba3ed31acb88ae14f1fd201d22cd06f3319031bd786c3623a47d13170a324747c41778c6102933c3240886578a290b6984d4ef43eba517547d0d4a3dc587a8a3b33b4debd25e2e8f4c636cd638b86acb408554c78deba9f566dd715503179f124fa9629f7ea12d1a3b61d80b9385f5aa62a64c1771a619fe5d16aa152ede165fce4752bd4d1b9f45619c0d18cc996610d3a77c12edb63ff27973b0fd35d99431ad341c835b02805d89606cc94edf5141251eccce24b9de8f9641047c3741a8f7d8a174f5524f204e826289ca915b4a6026f9b5e9bd8187981b47", 0x1000}, {&(0x7f0000002640)="e7af96d13cb78605ce2d59d2a05b04489d41079f295711ce35002ac2a86ef0c59e49f0149296fcced9099b041e0e20e37a23e5c0f50a656e823c8802331e6c7846786fe5a9f88475b10bc1d7d47c4824e19ff1fda1be567a1dc7ca0320b7a4eeed38f2245d99f14d6a7627e385be85e42e83c6b821cd1a71f1406de25b961d1c1ea0acba8644b911ddaf300281d166ff398d38010de4c9598d55f616fcef1528d599087d73b2102e67939d1f02a520846e937a684b1e0154e0d4d37af711feaf9d2dab746bdd2d89603203cdae9b247b4293dadced5bb6b45640fd5eaa5392fc34facb369907e3af8fc497520581713c6a439998442f39d605bba56a08e0cb1bf9ed5e4a21bdcd82328a8e9dbf2cbff41efe204aaf062e6660f7f6a10a6fedb4eb05165518556f1d74a07ad39b33f394bb152ca21838033c68a84b5a4265991b633ee24e368ba2e59fbf9b2f9e0fd5e45f2636c59b7e50675529c20b0c3fafd2637a72552991f2025a91da8b427927046c2089aa2c871a285a67393091b2bec091363d058c3b99a31f05326a0379b8ea2212d23ceb43bc25480053ae1599dc98468151507ad4f4f28d517aff9c547a3f343e1ddc6cb79eb545bc10ab69406aa82c1246b5b636f06083702036e6cd49b71a696d30c8326b19335599e03e039e3c1a55e3843e8cd957e2717c5f37b6e718f2df5d7283b0798ac88d22adfd1aaf4f53c912e0eb027c55754a1c417821ad64820ac106c734ab84c22503014dbd6299894fab5467326230e7be81560ed3bdcd052c2b3522e77a29fb0336bcd7176b353db2edce160d8b535db72aaee30cf6f466c364dc031f49236c37dbe24a2e9ebc93f5f7737c21841f95affb626611874d136a199cac3b5f2703845483fa333fc54d5c351b412855f431f56c583fb29639e476f63210f1a91cdfa807658970f2ff6392f77b3570b86e3009d7282a5dbdbe38377ef30ed14e12ba57549ab64142677726627b765e04082b6da09669ee24992bf3cb6782d0a7e1a0f0527ccc03e96858c623f474814448c963581bb2a503d8ca5357f16807e667add887794f4cdfbcb2fa5cd02594dee11d66ac25521e9e1ee3cd325dffed575d2948c4145276d04b912d7e2ce3f5bd0bb7c5f3b29d7238a42c632b98af1ee6b971e51d2caaa0d0f2c8d163c43c059609ee92563b3d4854d578d64b32fd50e3900e0221338eaf28f0e2c50e859ad1a27caefad59b0e0a23bdbbb440a67aab88e4168b5105d154c572532ac031f11c59d3c77d57efb6edc7fadb79ff4d544565be9c7d50aebdd8cdf978c7c42dbeb3d648dc7ad7a6745e5451259a5792fa86d70e97f214e467d92f2038ab8ca88400d3a9a394e29614dd45af8700d18f0290865f70659e314928aeb6cf68f957a31c73c7e6d35b56f685ed0c7a2a030e3831a78c491d116db48e3e495a1ba3d1c55dfa73b827d723cec98c13fbd0d6c888c349249d2d121665bdc6cb312a82e894ef4ddacd4a7fabe19c2eeab4ff5e465f4e0ef06150a531b63baf53fa10e86a258975c82aee4554e291b9c2d12543e775b58f5f97113f5456ed98a89e8bb736357aa558db2b449a543c14aafaa3cbd5b9465564a1b2fc225871a3ac0c6608a8d8dcdb6fa398e25fd98f21ca9f7e5fe2196c4654d7fe392f07222304adc848155adf98c275c62b34bab4cc33bcdca3c84d08d74380b75d22d4131be8471c0dd4b47ea56dbe92557bf6ef27438b514839e4e328d62df818ddc953a3930cbd1c12b75884b854dcbedde3df62922cc69b0a484d39536fee38e4c6e985519e72a6387ef09fd79621453ccb714d7781d90eb2a2136fb4ca0dc28d651130033a5e4b4d278ccc75913dc37b048956f2bffc9105b93cd1eecb20c74caeca0487b1d8f4d2c8a397d854b96c57d7b91479a7510150720bf122a1b16794a1c24e6cbd2ef6687b5496acc544369272f50c7c75d0e8b6238dd7cfa1a03f97112487a6d879cfafca77520c29946499959116d01038ffb8c6bf964d55c0c58c00a982e99b02439be7af7535e72d3977775bf79bdbf8fb45663d70a7c597fabae3e2a4aff9cb623e99ef84863d55526c2df7d0d69c87c3887f3c63bbf9109727cfbb617a6d4b8339553db6f05385e7cecb914e7e0d0b0a70571c162135a58b7bb5b1d9da59f1f35abd1f9515ce4795ad431b3aaaebf505a0be56ff36caab05ad16fb9285230e8193b376bc1349ada4d76baac0b8040bed4ddeadec3cdb306f0ca4b33f265bb85335222c03b7c12676bdd29cd67fb1b4e72c036f30e0f5662720e615036f944b22c6ad6c7faa4a78d5365e2dd64a3c94f77e2bc57834dad75a9c4f39c03da6f8b97da67067a419214b21333f0f3ba536c02efdd968b35dcec61bd544e410e0f8a225423b88c03b9a14a81eba6c540fdfe9b951770e0d462782906410039627922f30bf0b964bd209314ef6f78d9f52c4a01c84ee5326383a78abddd0a4dd3da42f9c655aac0654db7070b6f18600f9cc2e9ca59c918eee8db4eef0ee96fb4755216450f0df8ce761d9462f82e596b7fdba4062946216cc2b696ac15e0381c7f8c9b91e64c4bec91f26fc9c3d3f1dd76b476576db4cea0b618b6e2b0f3dcc75201ea5a663654019990d52ec06466cecf6c29c825b8073a6fa0a3da657ed75f257ed651da347c6013ba3f292338d8448a3fdc5da1d214ab70d063a478e3110a887e11e0bf83b0a719e535e26a62b7f3938fe72b9775f33c4e16dfaec38c6c014990988d295b1bd6dc9269dd4eabd8b62e2491531345e2972a22fb66a6d2629820547650de823d4517db9f585708c79670f4952be97db38ec12a042737d9d661822736b94d6fa7cba9dd30d3cf3a1b4153d5df55bfba702c61a68711a39db21033c68154b1bd179bb28042c4ae88a71f4429a87a1c197a424e11bbc29d431de61193b532fe71aa06c1f97966292359f098b8148f68120bdce6146f6b7feb7ad695aa59da32dcba070f33056ff798e4bd87f9176c2bd849be6a515c304c5e1a05ee05180bb18704eba3ba84d58e102d86af7f7acbc1cda117207e9b9ee24b9b093c937b03b96306bf75ce472e50747351c96d5bfcbf734173ae1aaf81266cc87388d6d209fbc2f20593b9e4097c3b87875fbc60df80275a72394ea0cb3d75952d685a8f781b0dea9a247d88de440b762bd7983732b851dfdacab19082e45ae3371208cefc3253bf5593734d48282b9439dd8517144fc8a584b81b8a951200482acb8629f31e4bbe29ddbc2872b878dea00edf5ba8c5a2817a03eb8683d4e7eb10424735a93380c6aae553011b4b67384a30136c042830d53dae4ca7567066f72443827e6a3a38874993fd2fde73dffb07a97f74b3a35bbba2d25e221449675d5a0f9e3e266a1496cfcbfeb4545e95b989d1920b4141d2e3d7924a669ac5c63c9d134b1161080dba331990386f72d42901bdb2fae8c88813ccd82ca0f8123d4bc563b3c7c2230384eb1483397ff58d3b97efb29ef7b1f30d51b637945978538aacf6261e3b13fc977e3c7877c40405ca1f6d44a8214a3fa96b6a982201c155160ea9f978f6b66908f9b000a3faf5ac5e76b6f934666225900d6c732200d4943cddda6612306f6b9f721721e8d930fac6664f5cd93d4900d2d85cc912cf552b00fef485203a3b02f7a9559333dd9cac8e6c14e7632f16e70f87d4f98a38f521d8ca7166cca963d00c8f1aef1066808ba85b0a22e83e14aa64e8e01b0ec36c25f03ede2ad42660bae77e232522c0ace086a183b8185a3fe466e4e187c141977c8bdb2d96c509c2fbd9a5d11ba08fbe1fc6c54537ca898303eaa04778fbb84aedaabebc178d2db5828f130fed9c989106eac3ce8b1fe39a6cc1ef3c60b385ce0f8319acf7be508ec6dea11c3b1d227995da2a2c70e1d008b513b7ecc8075a1faf1ef6a2d858619450ff2f29a1b6827634b6ef7bf5e6286a07eca7046f81ca67be1fe75d89032039543b23c7507c9e3c5c1b8c9a3b459267c9ddd8c0b7ed265ec6183eb0ded4f44b239b0755e59766dacb46e8873bc7e88c0aedb25ae62628387fd39074e3d3a572d63c930b1231b264995ba64f887b1c720954b49aa5743276d8a673d124260679d2d43295189db74c4ad60f0e39d399d8f224eb69b9a8f7b89800c8e8c9514bdb068f4c37e2a31cb8dfc6bbee89aaed3a983987f2786220e6a5440a57c391f4c20a5d7e9d67577f8845f5442e20cb20797125616121f1d5ffee50ea620ca18a08313c9ddde0c5121b879964aba849002372ae70eb72c5d2e8a632fd654de1e9edb2e82d5825277a3e38a0dca9adb110e9a82dc75bcaa9d8bfc20a2aa333b8193beef2f13a3ddf87579355ff99ec80c52336b5e15b5ba9f4e1b70911a2a866599f0f380a41488bf13c18d5857369001f33e49ef59f87e758cbf0d9f0d1f0228e4194f4adc2fee11bd496f69a99a94a35db12d3a9162d130646a167361c61c8ea78118b6bd6837eb52d4d3ef5d0ba616f075cbb30fbb7e7e2d24d39da943e640eacc09b7a8e9d8745a436f415a05be87832da9e5435c22b983e819a3822bb330ecd3717446702eef2ac9f004e2d4ff1a6af26f33d899c3ac3958874d37ef2573beb50ff588683e2aec6768fe4a27a66d16e6f161e15af325c9ea752b70b70b20c0c0d187f9c9c0283e2af6b88353fc764fdc8633fa643dd7267d8e76ce436cb76a368bb2da4e8633adf9a95c8a5b3175285fdde2f61edc3ad86eabcf2f7584d1f8c01d7c21c787e139acbe1259294887f0ea2b724d258929b905b1f885ddbca94702313b8a7560a6d9d82e045f6c8289c863e4bf91d54c948d9f48e4423acc9739a1636aaf982cb5f62622df16151f430a455fa4c23c3a9cd8b458befc4a5aeac8292540116832eb2be2935c1165c16f0099a82f660b4c5cfc587d768f984016b4e7f7d9966777480319a27e9c09dd7b50811fbb1f9eb3565cb5312d16253467b89835998561753770e7b87830d429c202e104c59023f8bab36c74f78bdf3c631d7fdbb5df0b8bbeb2c55534140a66dfc9435951af80ebce93926b9c34bc734897f4b36f0a6fdb365b86d1d058daf6744e7d8ca2c4fa6be63193084f7d5474d2f83b28bbc10270fdf35104f68ab305870823a72c344e24b66c9cdc95663748e6621f6c00f4a09d2d0c44127c9361eeca44c9dea6f83412eba3f97ad8389aed1548b892f7636fcdc10dc3fe41830a461ecaa4ff791f6a387ad066b83d0a9d7bb833fdc604b94afc4e5e650cb0f48c4c4e2811197f3890debeab3882a17b148ea68850e3845f551c09a66bc12610233c9dc7e221883c6897dcb3198c0344b89885fc6937dd23568a062b30a48f39bc3b25dc834b445403dfa35c438462bb1715138f0c99acae699752fd22aecffc4966bf91c7641f1202c50ea7cc69d760c73b52b33bb8a0c1de6f169883974e7033d7dd3a06288c09ce1b158ee3d409bf7d4db52a5d72140a0324584e9a92527723c28bb9ea9c0a15b42839e8687d75ad95d3c548daaaa1f5f47763e062555fe863ae97c3e85367653277c4aa9abae1c0ff185901d07bb9f47f67c0e54c5605336a101675259a88163fa9a62fb9922eb708dc3fdee8212140a74b72278f79116752246ba35f7014294373b5530f5e928db1369350594da3f49937b796d93de10dfd9d57096c0f755aabe9aaa8ee500360ddbb753f2a4cd021691d8e02d5f9a31964fba2ca5b0dfa1a5df362ba83efa1da94a7034f02c35dad87ef0a86ef9f95c77d8716ac373bffb8fac593ab7b983d", 0x1000}], 0x3, &(0x7f0000001200)=[@cred={{0x1c, 0x1, 0x2, {0x0, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0x0, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9}}}], 0x60, 0x4080}, 0x4000) sched_setparam(r9, &(0x7f0000000080)=0x8) setsockopt$inet_buf(r2, 0x0, 0x25, &(0x7f0000000400)="ddeafa0727e1ae729a60c74d1deb8cb28dd4553f4bc160e711e13e3b6ed1bc0df7dbc767b8ff9247c16a3b0415bc80ab300542393c71cc9f58130d2b6f9ff4c8eab1f306023152382467348c34d18379cb7ee2432ee48b34043967188860f0493ce6785fc736ceb748be0bc3a9c241f0f36681c2e6ce45cb234d5714061cf6644998d909c8f13b8141ec6629f58db4d38757487298ea4d867bc4dea39afadd62e8528e61a1dcf37c0df46c", 0xab) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) [ 970.830288][ T2114] binder: 2100:2114 ioctl c0306201 20000200 returned -22 07:16:58 executing program 3 (fault-call:6 fault-nth:8): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) 07:16:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0xff600000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 970.871204][ T2167] binder: 2100:2167 unknown command 0 [ 970.897384][ T2167] binder: 2100:2167 ioctl c0306201 20000200 returned -22 07:16:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x400000000000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 971.087230][ T2184] binder: 2181:2184 ioctl c0306201 20000200 returned -14 [ 971.103985][ T2187] block nbd2: shutting down sockets [ 971.129192][ T2186] FAULT_INJECTION: forcing a failure. [ 971.129192][ T2186] name failslab, interval 1, probability 0, space 0, times 0 [ 971.142362][ T2186] CPU: 0 PID: 2186 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 971.151422][ T2186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 971.161504][ T2186] Call Trace: [ 971.164822][ T2186] dump_stack+0x172/0x1f0 [ 971.170176][ T2186] should_fail.cold+0xa/0x15 07:16:58 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) readv(r3, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) readv(r5, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r5, 0xab00, r4) syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x6, 0x261000) [ 971.175066][ T2186] ? fault_create_debugfs_attr+0x180/0x180 [ 971.180908][ T2186] __should_failslab+0x121/0x190 [ 971.185880][ T2186] should_failslab+0x9/0x14 [ 971.190409][ T2186] kmem_cache_alloc+0x47/0x710 [ 971.195202][ T2186] ? lock_acquire+0x190/0x410 [ 971.199900][ T2186] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 971.206509][ T2186] skb_clone+0x154/0x3d0 [ 971.211023][ T2186] dev_queue_xmit_nit+0x342/0x990 [ 971.216149][ T2186] ? validate_xmit_xfrm+0x43c/0xf10 [ 971.221625][ T2186] dev_hard_start_xmit+0xbb/0x9c0 07:16:58 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu&3\n||\n\x00\x00\xc8 \xf4\xb3\xca\f\x90|\x1ff\xf0\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-W\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x00\x00\x80T\"\x00'/89) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$sock_proto_private(r2, 0x89e3, &(0x7f0000000100)="1075705a0527f4085479af41864c70cf2e3d1d947a07404f519dbe05076baf71f1ed61be9c7c61736d0c654f00b90164b329") [ 971.226951][ T2186] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 971.234035][ T2186] __dev_queue_xmit+0x2b82/0x37c0 [ 971.239226][ T2186] ? __kasan_check_read+0x11/0x20 [ 971.244291][ T2186] ? __lock_acquire+0x16f2/0x4a00 [ 971.249468][ T2186] ? __lock_acquire+0x8a0/0x4a00 [ 971.254442][ T2186] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 971.259762][ T2186] ? __kasan_check_read+0x11/0x20 [ 971.264811][ T2186] ? mark_lock+0xc2/0x1220 [ 971.269262][ T2186] ? mark_held_locks+0xa4/0xf0 [ 971.274488][ T2186] ? ip_finish_output2+0x140e/0x2590 07:16:58 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ubi_ctrl\x00', 0x2, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x5) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) set_robust_list(&(0x7f0000000780)={&(0x7f0000000c40)={&(0x7f0000000c00)}, 0x2, &(0x7f0000000bc0)={&(0x7f00000000c0)}}, 0x18) sysinfo(&(0x7f00000007c0)=""/154) pipe(&(0x7f0000000340)) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$BLKPG(r5, 0x1269, &(0x7f00000006c0)={0x1, 0xfffffffffffffffd, 0x2ca, &(0x7f0000000800)}) r6 = request_key(&(0x7f00000001c0)='blacklist\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000380)={r6, 0x78, 0xe1}, &(0x7f0000000600)=ANY=[@ANYBLOB="653d726d6431363000000000000000000000000000000000d9963375ba6aaf1d0000000000000000000200000000005c9dd309c8883d6c0000000000000000000000000000001f2923939bdb33721bc06ed5451f086fcdb92757a1887e7e72ecfc75079541e069c5cff1e8c0c8af13032580160e1dbe4b24c691f4c4bfc448"], &(0x7f0000000580)="08b81785e4df7ca4fb9172139509d325b78070e759082d2bec1f6bf93735756c602c3e7042756fce9cbd04b307bc71f80342dfafbdaec3570c7a77e3c4cb02e72ecb1a567e48f93ae70dcc9e80c47a73cd807b6bc6927ea1c4afc46d6c20776ba6a49478be096590ee0144919eef070d804d9e0c66ac3cc5", &(0x7f00000009c0)=""/225) r7 = memfd_create(&(0x7f0000000880)='\f\xcd\x80\xbf\xcd\xbd\xfb\x8bwa\x01\xaa>\xf7\xff\xc6\xb5%\xbd\n\x90\x9e\xa8\x94\xefC\x9f\xb1\xf4\x8arA\xa1\x88\xef\"/\xcd@\x19(\xb58\x88\xca\x8de*\xed\x89\x99\xa9*\xc3W&\xa4y]\xb5\x85P\xa7M\xf84\xcc\x91\xe7@\xdf\x8a\xc2*\x18\xd2:}\xae\xf1\xe3\xe0\x13\xe9\xbe\xe8\x84\xb8\xc8\x1fX\x86\xd8\xf6a\x02\x91\xf2\xc1\xc9\xcb\x90X0\xad\x02\xdb\x9b\xdd\x01\x8f\xfa\x9f\x16\x12pT1A\xcf.\x88\xf8b\x83e\x93K\x8ai\xb0|\xa6\xec\n\xf5\xe1|\xc6\x935\x92q\xaa\xfbv\x11\x02w/\xdb\xbe\xca\x94\x00\x00\x00\x00\x00\x00\x00\x00\xea\x1e\xf1s\x01\xdaI\xa7\xf6\x0e\xbb\xadP\f\"\xd4\xdf\x19\xedY\xdf\xcc6\x1e@;\xf2#\x9bKi7\xd19\xeb\x89\xf6n\x1a~\xfc6W\xab\x03\x05\b\xadDrM~\xd4\xb4m\x8b\b\xcc4y\xe4\xa3\x87\t\x1a#+P\x1e-\xbc\xad8\xff\x1c\xa3\x83\xff25\xd5\xf7\xbd\xdb\xbd\x7f\xf2%\a\xc5\xab\x0few\xa7\x9f\x0e\xb5\xbd\xae\x18', 0x7) mount$9p_rdma(&(0x7f0000000500)='127.0.0.1\x00', &(0x7f0000000540)='./file0\x00', &(0x7f0000000680)='9p\x00', 0x40000, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532312c74696d656f75743d3078303030303030303030303030303766662c74d3696d656f75743d3078303030303030303030303030303030342c746900656f75743d3078666666666666666666666666666666392c686173282c00ae0c6b1e25fc4f17cea52a67ca51b43154d392b5152925b351230b767c9f3a71f56de82881476f4e66a86372aeaeca41541c1f27f99b58b9dba55b1336cab6143ab582d01674eb2e88b2c1baebd0ed4a45809708d5a917c8979ddd179d5d98"]) ftruncate(r7, 0x8003) write(r7, &(0x7f00000002c0)="0600", 0x1) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x50040, 0x0) getsockopt$packet_buf(r8, 0x107, 0x5, &(0x7f0000000400)=""/212, 0x0) sendfile(r7, r4, &(0x7f0000000700), 0x0) r9 = creat(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$SNDRV_TIMER_IOCTL_START(r9, 0x54a0) accept$alg(r9, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab04) [ 971.279808][ T2186] ? __ip_finish_output+0x5fc/0xbc0 [ 971.285271][ T2186] ? ip_finish_output2+0x140e/0x2590 [ 971.290735][ T2186] dev_queue_xmit+0x18/0x20 [ 971.295428][ T2186] ? dev_queue_xmit+0x18/0x20 [ 971.300141][ T2186] ip_finish_output2+0x1752/0x2590 [ 971.305575][ T2186] ? __cgroup_bpf_run_filter_skb+0x127/0x1570 [ 971.311695][ T2186] ? ip_frag_next+0x910/0x910 [ 971.316416][ T2186] ? __cgroup_bpf_run_filter_setsockopt+0xb10/0xb10 [ 971.323251][ T2186] __ip_finish_output+0x5fc/0xbc0 [ 971.330048][ T2186] ? __ip_finish_output+0x5fc/0xbc0 [ 971.335364][ T2186] ? alloc_chunk+0x120/0x220 [ 971.340310][ T2186] ip_finish_output+0x38/0x1f0 [ 971.345118][ T2186] ip_output+0x21f/0x670 [ 971.349548][ T2186] ? ip_mc_output+0xf70/0xf70 [ 971.354329][ T2186] ? trace_hardirqs_on+0x67/0x240 [ 971.359718][ T2186] ? __ip_finish_output+0xbc0/0xbc0 [ 971.365087][ T2186] ? dst_release+0x62/0xb0 [ 971.369592][ T2186] ? __ip_make_skb+0xf8e/0x1810 [ 971.374460][ T2186] ip_local_out+0xbb/0x1b0 [ 971.378974][ T2186] ip_send_skb+0x42/0xf0 [ 971.383235][ T2186] ip_push_pending_frames+0x64/0x80 [ 971.388752][ T2186] icmp_push_reply+0x350/0x4a0 [ 971.393540][ T2186] __icmp_send+0xc44/0x1460 [ 971.398065][ T2186] ? icmp_route_lookup.constprop.0+0x15c0/0x15c0 [ 971.404453][ T2186] ? find_held_lock+0x35/0x130 [ 971.409640][ T2186] ? __cgroup_bpf_run_filter_skb+0xe18/0x1570 [ 971.415721][ T2186] ? lock_downgrade+0x920/0x920 [ 971.420603][ T2186] ? __kasan_check_read+0x11/0x20 [ 971.425659][ T2186] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 971.431428][ T2186] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 971.437678][ T2186] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 971.443865][ T2186] ip_fragment.constprop.0+0x1ee/0x240 [ 971.449519][ T2186] ? ip_fragment.constprop.0+0x1ee/0x240 [ 971.455300][ T2186] __ip_finish_output+0x4bd/0xbc0 [ 971.460332][ T2186] ? alloc_chunk+0x120/0x220 [ 971.465212][ T2186] ip_finish_output+0x38/0x1f0 [ 971.470619][ T2186] ip_output+0x21f/0x670 [ 971.474889][ T2186] ? ip_mc_output+0xf70/0xf70 [ 971.479574][ T2186] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 971.485859][ T2186] ? __ip_finish_output+0xbc0/0xbc0 [ 971.491058][ T2186] ? rcu_read_lock_held_common+0x130/0x130 [ 971.496866][ T2186] ip_local_out+0xbb/0x1b0 [ 971.501282][ T2186] __ip_queue_xmit+0x86f/0x1c00 [ 971.506139][ T2186] ip_queue_xmit+0x5a/0x70 [ 971.510551][ T2186] __tcp_transmit_skb+0x1a2f/0x3820 [ 971.515898][ T2186] ? __tcp_select_window+0x8b0/0x8b0 [ 971.521175][ T2186] ? lockdep_hardirqs_on+0x418/0x5d0 [ 971.526628][ T2186] ? trace_hardirqs_on+0x67/0x240 [ 971.531791][ T2186] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 971.537535][ T2186] tcp_write_xmit+0xf0f/0x5910 [ 971.542460][ T2186] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 971.548367][ T2186] tcp_push_one+0xd7/0x110 [ 971.552790][ T2186] tcp_sendmsg_locked+0xa4f/0x3220 [ 971.557945][ T2186] ? tcp_sendpage+0x60/0x60 [ 971.562456][ T2186] ? trace_hardirqs_on+0x67/0x240 [ 971.567811][ T2186] ? lock_sock_nested+0x9a/0x120 [ 971.572915][ T2186] ? __local_bh_enable_ip+0x15a/0x270 [ 971.578316][ T2186] tcp_sendmsg+0x30/0x50 [ 971.582574][ T2186] inet_sendmsg+0x9e/0xe0 [ 971.586911][ T2186] ? inet_send_prepare+0x4f0/0x4f0 [ 971.592018][ T2186] sock_sendmsg+0xd7/0x130 [ 971.596429][ T2186] __sys_sendto+0x262/0x380 [ 971.600923][ T2186] ? __ia32_sys_getpeername+0xb0/0xb0 [ 971.606294][ T2186] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 971.611874][ T2186] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 971.618132][ T2186] ? fput_many+0x12c/0x1a0 [ 971.622546][ T2186] ? fput+0x1b/0x20 [ 971.626367][ T2186] ? ksys_write+0x1cf/0x290 [ 971.630867][ T2186] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 971.636315][ T2186] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 971.641802][ T2186] ? do_syscall_64+0x26/0x760 [ 971.646490][ T2186] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 971.653080][ T2186] __x64_sys_sendto+0xe1/0x1a0 [ 971.657845][ T2186] do_syscall_64+0xfa/0x760 [ 971.662348][ T2186] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 971.668222][ T2186] RIP: 0033:0x459879 [ 971.672115][ T2186] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 971.691729][ T2186] RSP: 002b:00007f400e5a2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 971.700137][ T2186] RAX: ffffffffffffffda RBX: 00007f400e5a2c90 RCX: 0000000000459879 [ 971.708234][ T2186] RDX: 7564c14c40b01eec RSI: 0000000020000480 RDI: 0000000000000003 [ 971.716487][ T2186] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000150 [ 971.724464][ T2186] R10: 00000000000000e0 R11: 0000000000000246 R12: 00007f400e5a36d4 [ 971.732434][ T2186] R13: 00000000004c783b R14: 00000000004dd0f0 R15: 0000000000000005 07:16:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 971.779299][ T2217] binder: 2198:2217 unknown command 0 [ 971.799214][ T2217] binder: 2198:2217 ioctl c0306201 20000200 returned -22 [ 971.867705][ T2493] binder: 2198:2493 unknown command 0 [ 971.886822][ T2493] binder: 2198:2493 ioctl c0306201 20000200 returned -22 [ 971.897556][ T2507] binder: 2483:2507 ioctl c0306201 20000200 returned -14 07:16:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x463044000000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:16:59 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) clone(0x80000, &(0x7f00000000c0)="499a1ff9fb0fc75a9a0acb0b84e25a89a36a5dc2ff2ee81a1e9a5ab840dc8307e6a1b14bbe9387cf5500e90b82bf8a4cc86de3947d5bd687d8b353c7a53ed7e0495a47e79a06d4f8fb304a42d70c2a7fa25b0ff824503f1dcc0eeab00b2cce80e9aac206292f453c6f569ca2baccf7ec7a807a1a849ceb9ffbb20f2a2adff11d2133485b0a40407d46814240813f6273f8f7cefc7ff5849e459e147a6c9e8c5c5635325794e33ea91290b2bce6e5c304ce84877c0faab4611697efaf68ed2f41c4dd9648bed3b95e265812ff5b5fcf49d62c74ef89081e8ff13fc49f8fadf6875bfffad07684a140d6724f", &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)="93f4ac956f2a1cef0d26a19b3f7cef9c284f65f9676a9541de4939c16003f350b0aa337a295c0833a3e0bb1cd9b9ef5a4655486013faa9a81324d5a8dcc609da17497116821ef88893c0c86c022e5bd97b27d5c291db01e37582e6fd12a92d0933082b01ba4aa70d2a9e53acc7779e65a3518397") r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000015c0)) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000300)={{0x6b, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x3, 'sed\x00', 0x20, 0x8000, 0x2a}, {@local, 0x4e24, 0x87bb5251448dcd57, 0xfffffffffffffffd, 0xfffffffffffffff8, 0x6}}, 0x44) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @loopback}}}, 0x84) 07:16:59 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) 07:16:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x555555a43000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 972.163162][ T2620] binder: 2619:2620 unknown command 0 [ 972.184367][ T2400] block nbd2: shutting down sockets [ 972.199607][ T2620] binder: 2619:2620 ioctl c0306201 20000200 returned -22 07:16:59 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) r5 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) readv(r6, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r6, 0xab00, r5) recvmmsg(r2, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) 07:16:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = gettid() io_uring_setup(0xa22, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x35f}) process_vm_writev(r1, &(0x7f0000000580)=[{&(0x7f0000000100)=""/127, 0xffffff76}], 0x1, &(0x7f0000000d40)=[{&(0x7f0000001880)=""/4096, 0x20000502}], 0x1, 0x0) 07:16:59 executing program 0: r0 = socket(0x0, 0x6, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x801}, 0x5b) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00830200"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}}, 0x0) [ 972.324874][ T2733] binder: 2619:2733 unknown command 0 [ 972.332340][ T2738] binder: 2730:2738 ioctl c0306201 20000200 returned -14 [ 972.350888][ T2733] binder: 2619:2733 ioctl c0306201 20000200 returned -22 07:17:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x500000000000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x555555a65000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 972.593652][ T2876] binder: 2853:2876 ioctl c0306201 20000200 returned -14 [ 972.614090][ T2905] binder: 2852:2905 unknown command 0 [ 972.628897][ T2905] binder: 2852:2905 ioctl c0306201 20000200 returned -22 07:17:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x9, 0x1c000000}) setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f0000000140)=@sha1={0x1, "f0a460aef8f02ef756bcb4ae1353f82ccf3fed86"}, 0x15, 0x1) [ 972.669106][ T2905] binder: 2852:2905 unknown command 0 [ 972.689861][ T2905] binder: 2852:2905 ioctl c0306201 20000200 returned -22 07:17:00 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01ee0, 0xe0, 0x0, 0x150) 07:17:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x60ffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x600000000000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 972.927552][ T3114] binder: 3067:3114 ioctl c0306201 20000200 returned -14 [ 972.960259][ T3197] binder: 3110:3197 unknown command 0 07:17:00 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000200), &(0x7f0000000100)}, 0x20) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x4, 0x0, 0x77fffb, 0x4, 0x820005, 0xffffffffffffffff, 0x6b, [], 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x3c) bpf$MAP_CREATE(0x4, &(0x7f0000000040)={0x3, 0x2, 0x740002, 0x0, 0x20820000, r0, 0x1}, 0x3c) [ 972.991132][ T3197] binder: 3110:3197 ioctl c0306201 20000200 returned -22 07:17:00 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0x2, 0x0, 0x150) [ 973.048948][ T3302] binder: 3110:3302 unknown command 0 07:17:00 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) r5 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) readv(r6, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) recvmmsg(r2, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) [ 973.102665][ T3302] binder: 3110:3302 ioctl c0306201 20000200 returned -22 07:17:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x760000000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 973.279986][ T3421] binder: 3370:3421 ioctl c0306201 20000200 returned -14 07:17:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000001800)="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", 0x6de}], 0x1}}], 0x1, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000080)={0x6, 0x38415261, 0x81, 0x8, 0x3, @stepwise={{0x5, 0x400}, {0x767f, 0x3}, {0x7, 0x100000}}}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x7, 0x2, 0xa49d, 0x100000001, 0x6, 0x5, 0x100, 0xffff, 0x6, 0xb08, 0x3, 0x68}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) futimesat(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x77359400}}) 07:17:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x700000000000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:01 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x2, 0x2c100) write$cgroup_int(r1, &(0x7f0000000100)=0x7, 0x12) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc020662a, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5000000}) r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) readv(r3, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) ioctl$KIOCSOUND(r2, 0x4b2f, 0x3) 07:17:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7fffffffefff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 973.715766][ T3564] binder: 3560:3564 unknown command 0 [ 973.731314][ T3564] binder: 3560:3564 ioctl c0306201 20000200 returned -22 [ 973.735651][ T3562] binder: 3559:3562 ioctl c0306201 20000200 returned -14 [ 973.766579][ T3567] binder: 3560:3567 unknown command 0 07:17:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x763044000000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 973.794086][ T3567] binder: 3560:3567 ioctl c0306201 20000200 returned -22 07:17:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x863104000000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 973.857900][ T3701] binder: 3691:3701 unknown command 0 [ 973.863781][ T3701] binder: 3691:3701 ioctl c0306201 20000200 returned -22 [ 973.876205][ T3748] binder: 3691:3748 unknown command 0 [ 973.889859][ T3748] binder: 3691:3748 ioctl c0306201 20000200 returned -22 07:17:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x960000000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:01 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) r5 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) recvmmsg(r2, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) 07:17:01 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffffffeffff) mmap(&(0x7f0000fee000/0x10000)=nil, 0x10000, 0x0, 0x12, r1, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000100)={0x1, 0x1, @start={0x1}}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x168}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setflags(r0, 0x2, 0x2) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x8) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0xf9) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) lseek(r3, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cachefiles\x00', 0x20000, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000340)=""/43, 0x1a3}], 0x1, 0x0) [ 974.015876][ T3792] binder: 3790:3792 unknown command 0 [ 974.021421][ T3792] binder: 3790:3792 ioctl c0306201 20000200 returned -22 [ 974.051895][ C0] net_ratelimit: 17 callbacks suppressed [ 974.051903][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 974.063489][ C0] protocol 88fb is buggy, dev hsr_slave_1 07:17:01 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0x3, 0x0, 0x150) 07:17:01 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, 0x0) listen(r0, 0x4000000020000000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @mcast1, 0x40}}}, &(0x7f0000000280)=0x84) sendmmsg(r2, &(0x7f0000001bc0)=[{{&(0x7f0000000040)=@nfc={0x27, 0x1, 0x0, 0x2}, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)="d08dd2257e01fa45bb852aee83d76aac7990a97fa9c390d7a8eb0ba1e97dce3522ad6642f449ee75c34ba31fe116f67d56f118ec816964fa0258dca1dbeea940e544657e73abd9c1d7db31cd5a60579e07e4dc37c11734cfa27bdef30cbf99143b1699c0e22b8d38a95875dea53270052c74175bebc733854203ec6233b574d3a54615d54e56ee1ad33a3f88da58feae1a507b6fbd8f849bed22f17ef505a7dd7f2759a4bbb2ece0238150c7fbfb374e11d4a79509e1a7d615897cb6cb3aaa1dc656a88a5c20c07564dd153683e013c41558cfc2d90cc80c88b270db0694ad01b8273201cd592b57c226c3fd6acae3809c53", 0xf2}, {&(0x7f00000002c0)="ba7b2c3cbfc626eac1f7ea49b1aff1f742cc9e5d34402b514b17d14365bf1e4d25d4e6461585d9e0e1e2f17306a559bc241771f2e84fe776a5d6c02f72990091fdac51cd4bb0a2ee1884bfb348a82411b2c4c1d9fc56d59027ca1e85809548", 0x5f}, {&(0x7f0000000340)="a0207645e6b99599231adaed111e", 0xe}], 0x3, &(0x7f00000003c0)=[{0xe8, 0x117, 0x8, "5cf3ce48ec5392b62159b6e2eb5af58b5be8dac42a16a64e17509a0e1f69b0824d1ef889c84c231082d021970cc1bbee057ad665c662a3eb5898ebe813020a3bf137118147bca4a4cdf76ce212b8e7c876abecfad340265187c8bafba3eeb5f8dc61751a5ec0024e79a79c2ed5d99876862ecc0a0aacd1556ae4bd18e6696e8707147885da9fea260fef4d56874f8ffc1a92e981654a1ff83b0db790356057f0da5ef9ee732130f3786d23ca21404391b6ebf74099ffc3c896c4340312f46a0740ac9309f3ddcbc03b709c2c519d54934801795ef3"}, {0x90, 0x10a, 0x29f85da7, "29cd4c1c87f8304cb41a9bac58a5144a3c66ca264a64c9be234212b4c35997d5aeafa8eaa37bc93e08f0718a2818513cbcbdb09f35d6026fad60414c0e77dd523ebe2c6f83eff33f444f04ae1601c1cad14a9f2754dedd31783514a59726c6920b3569de82de645884fd4e19a3fbd4639ebaf1151a827329dce8"}, {0x58, 0x0, 0x2, "13b4ba7d2ece4934cacd2bb7643531fb42d754009adcf02914e644be51a5f7cec3d360e965f66591c82cc3c76565fe213bee0bea84a499243792237391587bd49bae0648"}, {0x78, 0x10b, 0x1, "d7fe4529fc4e378f379913548ff8bf4d21b234a39d58e205ca1c9d080d06bf61b5048fbea63b80acedf160bea8bbf48b3088b2d70f1f45a6dda9b198431947c72b815db34a7b63865e016b76f3391f22acdfab2444aba115b519591d16bbed20a191398a"}, {0x48, 0x8c, 0x37a1, "899016009829c6587f1a0a62d485445f42e2d8716a156c3a9772cb9c50ee93a8459e920acc43be42181fa761bf237696ca1c"}, {0x1010, 0x11, 0x2, "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"}, {0x78, 0x104, 0xf6d, "d2d3a2f89223eaa0bd874d7d9d1477c82d5c3530cc8ba0580e857d24de68169ccc4a620d5e7ce574223e16549c5395fe82ec25ccd4615ba572c8c89d94f997b0fb94d77d442c513da45fe87f4639612209f3b5a4e8b9ce0ec830721b48e34737a73da2d7"}, {0x28, 0x112, 0x6, "4794c0549d1dc95d88ca430b8275e5de2c28524a861c45bd"}, {0x100, 0x100, 0x3cc400000, "afc8b8875bf1e32d0ac071221e6ff6f4d9f2cab16bdbaf9424f5392674995796d4cdcdea1caf1bdc6c11477e1320c8405348b533dcf112a51da3cc98f47dc4caadccc1bfd236d9a1333873972150f7b2a2f47d60d92123ad76e0847231e34ef5ae8ea343955f9af829c918c69c52634452ed1a568c3b18c77d5046ea178a518e37d282e757c38b6fa88c3f1af664fbb04a95e68e26f2735fe04d4d3c4154cad30a8e2fa21d1f9fe69835455c78ea2a9da64f0d9c22d4159d77af031b309f7ff7f22c43760d5ee7079047bfee8cfa0247f3d058dafdd6400cc8855f34f4c2bb9412447a896c4e7099cb664a50674f"}], 0x1440}}, {{&(0x7f0000001800)=@nfc={0x27, 0x0, 0x2, 0x2}, 0x80, &(0x7f00000019c0), 0x0, &(0x7f0000001a00)}}], 0x2, 0x3ecd23ab174e54de) [ 974.115846][ T3795] binder: 3793:3795 ioctl c0306201 20000200 returned -14 [ 974.204267][ T3798] dccp_close: ABORT with 351 bytes unread [ 974.211854][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 974.211875][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 974.217718][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 974.223432][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 974.235348][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 974.241163][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 974.247337][ T3810] binder: 3790:3810 unknown command 0 [ 974.252822][ T3810] binder: 3790:3810 ioctl c0306201 20000200 returned -22 07:17:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x963104000000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30a45555550000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:01 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) syz_mount_image$msdos(&(0x7f0000000300)='msdos\x00', &(0x7f0000000500)='./file0\x00', 0xc9, 0x4, &(0x7f0000001700)=[{&(0x7f0000000540)="bfbf200d4908f1560f5775c204515acdd1d119f216a68762260fe56bc81d4e73ff9cbc9708f9ecbd2b", 0x29, 0x6}, {&(0x7f0000000580)="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", 0x1000, 0xffffffff}, {&(0x7f0000001580)="e2fac463781c6e28746866d60187dc471891d20e72702b47c757c97a89533c9131e0b034568c959b70636fa822e261b62dfe3a064c8b70e63b393620e447bf0a8010044c1156224f095f5b544327d71b7b08e228f02750f86611b09e8cef6da70cf27c5610b3dc7f825181e0d05bd83e496496fb3e8ab4167f58b3958b9edb812b1c941e4cf09492545f89bec8d5b63e2c2902e62d87c13952181a642584245f0af883529bbf95f8674ec1d7d31dfdd241a3f87223e75b1c5c08aacb8eee70d76a7c4829af", 0xc5, 0x2}, {&(0x7f0000001680)="55f89280c2b73e8e77595b98f4f750ea975cdcbcca3fc3b46d1266663224e74396b2cabf8a4dc5c8ec05af35fe60ca94ee76b249b2cf78c3ad4e3606cd39880d379f0bdd23909b7d1c75649f5855d9500ce1a102a12f", 0x56, 0x7ff}], 0x0, &(0x7f0000001780)={[{@dots='dots'}, {@fat=@check_normal='check=normal'}, {@fat=@sys_immutable='sys_immutable'}, {@nodots='nodots'}, {@fat=@showexec='showexec'}, {@nodots='nodots'}], [{@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x1800000000000060, 0xe80, 0x0, &(0x7f0000000100)="0000003f0000007e5bc5795ecaa29a16f291d36a48e93100ffff81", 0x0, 0x100, 0xf2ffffff}, 0x28) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x2) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=""/78, 0x4e) [ 974.431506][ T3913] binder: 3911:3913 unknown command 0 [ 974.467663][ T3913] binder: 3911:3913 ioctl c0306201 20000200 returned -22 [ 974.502334][ T3917] binder: 3916:3917 ioctl c0306201 20000200 returned -14 [ 974.530166][ T3919] binder: 3911:3919 unknown command 0 [ 974.564895][ T3919] binder: 3911:3919 ioctl c0306201 20000200 returned -22 07:17:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x50a65555550000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0xa00000000000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 974.747836][ T4129] binder: 4128:4129 ioctl c0306201 20000200 returned -14 07:17:02 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1}, 0x8) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x8, 0xe069e39b02af5dee) ioctl$sock_inet_udp_SIOCINQ(r1, 0x5421, &(0x7f00000000c0)) 07:17:02 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) r5 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) recvmmsg(r2, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) [ 974.824375][ T4134] binder: 4130:4134 unknown command 0 [ 974.835784][ T4134] binder: 4130:4134 ioctl c0306201 20000200 returned -22 [ 974.846236][ T4164] binder: 4130:4164 unknown command 0 [ 974.860408][ T4164] binder: 4130:4164 ioctl c0306201 20000200 returned -22 07:17:02 executing program 0: r0 = epoll_create1(0x0) epoll_create1(0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'L+', 0x58f}, 0x28, 0x2) close(r0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x121001, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f00000002c0)) readv(r2, &(0x7f0000395000)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000000c0)={0x9, 0x80, 0x10001, 'queue0\x00', 0x5}) 07:17:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0xa63084000000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x70710000000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:02 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0x4, 0x0, 0x150) [ 975.147081][ T4250] binder: 4247:4250 ioctl c0306201 20000200 returned -14 [ 975.158801][ T4251] binder: 4249:4251 unknown command 0 [ 975.172171][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 975.191170][ T4251] binder: 4249:4251 ioctl c0306201 20000200 returned -22 07:17:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2201, 0xffffffffffffffff) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000000)) [ 975.221503][ T4409] binder: 4249:4409 unknown command 0 [ 975.242014][ T4409] binder: 4249:4409 ioctl c0306201 20000200 returned -22 07:17:02 executing program 2: syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f0000000000)={@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, 0x0, 0x0, [@default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default]}) 07:17:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0xb63000000000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0xe0700000000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev#jvm\x00', 0x200200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2, 0x404001) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0x101000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1c2, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x80800, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000027000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000040)="0fc04b34650f015d010f01c9663ef30fa7c8bad104b032ee0f01c20ff8cc0f0051eaf3d382b039fecf", 0x29}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, &(0x7f0000000480)="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") r5 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r7 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r8, 0x800000c004500a, &(0x7f0000000300)) readv(r8, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r8, 0xab00, r7) ioctl$UI_SET_MSCBIT(r7, 0x40045568, 0xb) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) ioctl$UI_DEV_DESTROY(r6, 0x5502) readv(r6, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r6, 0xab00, r5) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x7, @loopback, 0x2bef}}, [0x3, 0x0, 0x0, 0x10001, 0xff, 0x3, 0x171, 0x400, 0x5, 0x2, 0x1, 0x0, 0x3, 0xffffffffffffffff, 0x3]}, &(0x7f00000000c0)=0x100) accept4$x25(r2, &(0x7f0000000100)={0x9, @remote}, &(0x7f0000000140)=0x12, 0x800) [ 975.428844][ T4465] binder: 4464:4465 unknown command 0 [ 975.443566][ T4465] binder: 4464:4465 ioctl c0306201 20000200 returned -22 [ 975.460910][ T4508] binder: 4464:4508 unknown command 0 [ 975.489809][ T4508] binder: 4464:4508 ioctl c0306201 20000200 returned -22 07:17:03 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lstat(&(0x7f0000000740)='./file0\x00', 0x0) r1 = dup(0xffffffffffffffff) read(r1, &(0x7f0000000780)=""/4096, 0x8539) write$FUSE_DIRENT(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="38000000000000000200000000000000070000000000000000ca0000000000000a000000000000002e5c7d2b766d6e657430000000000000"], 0x38) 07:17:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0xc63000000000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 975.549450][ T4572] binder: 4517:4572 ioctl c0306201 20000200 returned -14 [ 975.677758][ T4679] binder: 4671:4679 unknown command 0 [ 975.702519][ T4679] binder: 4671:4679 ioctl c0306201 20000200 returned -22 [ 975.733478][ T4681] binder: 4671:4681 unknown command 0 [ 975.738974][ T4681] binder: 4671:4681 ioctl c0306201 20000200 returned -22 07:17:03 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) r5 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) recvmmsg(r2, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) 07:17:03 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0xf0500000000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0xd63000000000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:03 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair(0x9, 0x2, 0x3ff, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0xb) r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) readv(r3, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) ioctl$VT_WAITACTIVE(r3, 0x5607) getsockopt$IP6T_SO_GET_INFO(r0, 0x6, 0x1e, 0x0, &(0x7f0000000080)) [ 975.862469][ T4785] binder: 4783:4785 ioctl c0306201 20000200 returned -14 [ 975.876770][ T4786] binder: 4784:4786 unknown command 0 [ 975.902044][ T4786] binder: 4784:4786 ioctl c0306201 20000200 returned -22 [ 975.920706][ T4819] binder: 4784:4819 unknown command 0 [ 975.929172][ T4819] binder: 4784:4819 ioctl c0306201 20000200 returned -22 07:17:03 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0x5, 0x0, 0x150) 07:17:03 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0xe630c4000000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:03 executing program 0: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = memfd_create(0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x4, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f00000000c0)) socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x8, 0x0, 0x7fff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x3ff, 0x2e, 0x155f8512, 0x8, 0x3, 0x0, 0x5, 0x7fffffff, 0x7fffffff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x846f, 0x0, 0xe81, 0x3, @perf_config_ext={0x7fff, 0x9}, 0x4, 0xd147, 0x0, 0x9, 0x8, 0x0, 0xef1}, 0x0, 0x3, 0xffffffffffffffff, 0x0) sendmsg$netlink(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="9050c2bd000000002721651e1dc1cae762dd26ab67e73ecde9db8b37ca836d39dcc00c47f3dd4d48f78286187d9a18801139a983ed23472cf8bb0edaf09f0bf9f414eae3fd163f67c95be7b3370e1b8bcf1f81c0781238ccf153cb0c1464e46d8a6549aaa2f99de007f6c42307898d7930b61169e2abf1028307"], 0x3}], 0x1}, 0x41) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000580)={{0x8, 0x7, 0xff, 0x7fffffff, '\x00', 0xffff}, 0x1, [0x8, 0x0, 0x4, 0xb7, 0x3, 0x0, 0x5, 0x5, 0x800, 0x0, 0x0, 0x6, 0x16, 0x1000, 0x800, 0x9, 0x3, 0x288, 0x9, 0xae38, 0x8, 0x3, 0x1, 0x101, 0x5420, 0x3, 0x80000000, 0x3ff, 0x1000, 0x7, 0x10001, 0x4d, 0x80000001, 0x80000000, 0x7bc, 0x100, 0xfffffffffffffffe, 0x1b, 0x7, 0x7f, 0x0, 0x7e, 0x54, 0xbd5, 0x7, 0x286, 0x3, 0xfffffffffffffeff, 0x0, 0xfffffffffffffff9, 0x4, 0x0, 0x8000, 0x3, 0xffff, 0x100, 0x9d6dc1, 0x48, 0x40, 0x6496, 0x0, 0x0, 0x0, 0xffffffffffff185e, 0x4, 0x0, 0xb7, 0x9e92, 0x881, 0x3, 0x0, 0x5, 0xd4, 0xf2b0, 0x81, 0x2, 0xf73, 0x0, 0xfb, 0x0, 0x0, 0x4, 0x5, 0x100000000, 0x0, 0x9, 0x0, 0x6, 0x2, 0x10001, 0x6, 0x0, 0x4, 0x4, 0x8, 0x100000001, 0x0, 0x400, 0x6, 0x2, 0x3, 0x80000001, 0x80, 0x7fffffff, 0x0, 0x7ff, 0xfffffffffffffff8, 0x0, 0x95, 0x100000000, 0x34361ace, 0xfffffffffffff718, 0xa8cf, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x23, 0x2, 0x7f, 0xffffffff, 0x0, 0x9, 0xff, 0x0, 0x1216], {0x77359400}}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000000)=0x5) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40405) dup2(r5, r4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f0000000240)) connect$x25(r5, &(0x7f00000003c0)={0x9, @null=' \x00'}, 0x12) syz_open_dev$dspn(0x0, 0x1602, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x9, 0x10}, 0x0) ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) connect$x25(r4, &(0x7f0000000340)={0x9, @null=' \x00'}, 0x12) [ 976.168446][ T5002] binder: 4998:5002 ioctl c0306201 20000200 returned -14 [ 976.171875][ T5001] binder: 4997:5001 unknown command 0 [ 976.201377][ T5001] binder: 4997:5001 ioctl c0306201 20000200 returned -22 [ 976.248795][ T5067] binder: 4997:5067 unknown command 0 07:17:03 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 976.292571][ T5067] binder: 4997:5067 ioctl c0306201 20000200 returned -22 07:17:03 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) close(r1) close(r0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffffe, 0x80) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) r4 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) readv(r5, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r5, 0xab00, r4) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000480)={0x6, {{0x2, 0x4e24, @multicast1}}}, 0x63) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) readv(r6, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r6, 0xab00, r3) ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x100, 0x7, {0x8, 0x7c6, 0x10000}}) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="070000046d28020100", 0x9}], 0x1, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r2) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080)=0x1, &(0x7f0000000140)=0x4) close(r7) pipe(&(0x7f00000001c0)) splice(r0, 0x0, r7, 0x0, 0x8, 0x0) 07:17:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0xf630c4000000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x40000, 0x0) r2 = socket(0x10, 0x2, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x71, &(0x7f0000000040)={r4}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={r4, 0x80}, 0xc) r5 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xa6f9, 0x600) r6 = dup(r3) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, &(0x7f0000000180), 0x1) r7 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r8, 0x800000c004500a, &(0x7f0000000300)) readv(r8, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r8, 0xab00, r7) setns(r8, 0x14000000) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)={0x5, 0x0, [{0xbbc, 0x0, 0x3}, {0xa83, 0x0, 0x6}, {0x284, 0x0, 0x10000}, {0xb9d, 0x0, 0x7}, {0x94b, 0x0, 0x100}]}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x19, &(0x7f0000000000), 0x8) [ 976.466949][ T5220] binder: 5184:5220 ioctl c0306201 20000200 returned -14 [ 976.515441][ T5232] binder: 5222:5232 unknown command 0 [ 976.524463][ T5232] binder: 5222:5232 ioctl c0306201 20000200 returned -22 [ 976.551538][ T5264] binder: 5222:5264 unknown command 0 07:17:04 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) r5 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f0000000340)=""/94) recvmmsg(r2, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) [ 976.583199][ T5264] binder: 5222:5264 ioctl c0306201 20000200 returned -22 07:17:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x1063084000000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x40000, 0x0) r2 = socket(0x10, 0x2, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x71, &(0x7f0000000040)={r4}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={r4, 0x80}, 0xc) r5 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xa6f9, 0x600) r6 = dup(r3) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, &(0x7f0000000180), 0x1) r7 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r8, 0x800000c004500a, &(0x7f0000000300)) readv(r8, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r8, 0xab00, r7) setns(r8, 0x14000000) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)={0x5, 0x0, [{0xbbc, 0x0, 0x3}, {0xa83, 0x0, 0x6}, {0x284, 0x0, 0x10000}, {0xb9d, 0x0, 0x7}, {0x94b, 0x0, 0x100}]}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x19, &(0x7f0000000000), 0x8) [ 976.763092][ T5437] binder: 5429:5437 ioctl c0306201 20000200 returned -14 [ 976.765993][ T5438] binder: 5435:5438 unknown command 0 [ 976.795483][ T5438] binder: 5435:5438 ioctl c0306201 20000200 returned -22 [ 976.840448][ T5506] binder: 5435:5506 unknown command 0 [ 976.876849][ T5506] binder: 5435:5506 ioctl c0306201 20000200 returned -22 07:17:04 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0x6, 0x0, 0x150) 07:17:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x1163484000000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="c0dca5055e0bcfec7bf070") syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, 0x0}, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000340)={0x0, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x5, 0x3, 0x0, 0x3, 0x0, 0x0, &(0x7f0000000780)=""/4096, 0x6, 0x0, 0xffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000700)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, &(0x7f0000000580)=""/85, &(0x7f0000000600)=0x55) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000004c0)=""/59, &(0x7f0000000540)=0x3b) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) readv(r5, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r5, 0xab00, r4) setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 977.103016][ T5651] binder: 5649:5651 unknown command 0 [ 977.131952][ T5651] binder: 5649:5651 ioctl c0306201 20000200 returned -22 [ 977.146505][ T5653] binder: 5650:5653 ioctl c0306201 20000200 returned -14 07:17:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) r5 = dup3(r3, r4, 0x40000) r6 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fremovexattr(r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1c2, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="0fc04b3466b9800000c00f326635000400000f300f01c9663ef30fa7c8fad1042e26673e676765f30f01dfee0f01c20ff8cc0f495193f317d382b03939cf", 0xfffffffffffffe79}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 977.186239][ T5658] binder: 5649:5658 unknown command 0 [ 977.217228][ T5658] binder: 5649:5658 ioctl c0306201 20000200 returned -22 07:17:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x1200000000000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:05 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) recvmmsg(r2, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) 07:17:05 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000640)={{{@in=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0x23) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000740)=@delsa={0xf0, 0x11, 0x200, 0x70bd2d, 0x25dfdbfb, {@in6=@ipv4={[], [], @broadcast}, 0x4d5, 0x2, 0x6c}, [@srcaddr={0x14, 0xd, @in6=@local}, @output_mark={0x8, 0x1d, 0x9}, @policy={0xac, 0x7, {{@in=@local, @in=@remote, 0x4e24, 0x8, 0x4e20, 0x3, 0x2, 0x0, 0x20, 0x2b, 0x0, r0}, {0x23b2313a, 0x6, 0x3, 0x5, 0xc4f, 0x4}, {0x6, 0x4, 0x8, 0x2}, 0x80000000, 0x0, 0x0, 0x1, 0x1, 0x7}}]}, 0xf0}, 0x1, 0x0, 0x0, 0xb3b1b6f73ebc55e3}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @empty}}}, 0x77) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) openat$urandom(0xffffffffffffff9c, &(0x7f0000000840)='/dev/urandom\x00', 0x20080, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f00000001c0)=[0x6, 0x2]) unshare(0x8000400) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x0, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000200)={0x14, 0xf3, &(0x7f0000000540)="5b57b8c7256abdfcfd06cb20024703a9cf99d67e1d8808dcefb5efdd7c319f4a8a0e960fc1e069cd98c4570c3f66f0dc4405a1a6f92451b7f7b7fa06f725ee7e8878f9c8e497c35b257f2d1130848fd2b8a82bf66483865a7f07ea9e15fb38c5525f4d90530f1cce03b4edb63501afd5f69ebed3eb0c5a4ed0a18f8e6beaf8ad48921fcb8a1f00231607e725ca17019773b1002fe0047cbd0576d1bf1698a0bca4ada33138e2042bab28530a9f63a0cb24c1071c549dccc75eed318a21c6fa8aa484dc2446e2c838556f8c0b99878212a9c6e8bdd1c2ca648a4ce1404c54392e4493af1da755f33edd5ff083820972363a507e"}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) accept4$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x1c, 0x80800) exit(0x0) mknod$loop(&(0x7f0000000040)='./file0/bus\x00', 0x0, 0x0) [ 977.543491][ T5875] binder: 5870:5875 ioctl c0306201 20000200 returned -14 [ 977.582229][ T5874] binder: 5873:5874 unknown command 0 [ 977.616149][ T5874] binder: 5873:5874 ioctl c0306201 20000200 returned -22 07:17:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x1263484000000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 977.692406][ T5961] binder: 5873:5961 unknown command 0 [ 977.718559][ T5961] binder: 5873:5961 ioctl c0306201 20000200 returned -22 07:17:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="850000000f000000250000000000000095000000000000006d3ef7703e64593f4fe0e059acc80fd45556754e43478955e21229440e8eb9e2f954fb8c0aeaa6927ca08d8453f2395ccbf73e028cca69d1b4309b0c565a720558df863d07d9d659eafcf53a2ed1c3fa5211fe2a755eda3d04ed6ab0446b2a675851b19d0a1338e1ce60bbd8bdc4a50c7a594aa7c220044362702be67568fe801e30a89e50c56ebd2440fb2cf3708ed28ae6feb956c4301ae36a2dc51af52e4cc336dcc5448c15a55b3af5a127a21ad288e970dba2c6ff68703988876e12612ea7baf76ceedd9e4eaa106a18171e41d6fc662a86390b68c50dd8ae759fd04c8f30a0015b301cd283a5c586bfcf530840892a423ec08999c62d75ad279571298bfb870f280a00ab4af7a03743268740c2180245f7e3f10a9ce10db6199ea156c4ff2acdd922d9709978a500a911be8e6877507d117b93203d9aa4f0bcb1412abe76bce902bbc0171b9e16ffba545c59c9ac2a1c5ba0c6f39914bc39015789c191dc33f7777773077c327a2a6a17e0dfd00bd55e07d869aaea536147cb2ca4e3891ff3fd8373c6647b7cc9839f2ffd8c04b4358528ffde8e1bb6119a650dc88b451b4ef24b3c56ddb6ed8f42248ef18297c37c973526240000000000000000c927b14a2b5537a6466f8ddca921c6fc1f4e4d2605054f5a56a375562b46ce9da8bc49cac92d679d644eabe950affb7c7bbcfca108e439dd621d16253c2c43d4aaf25933a0cd5d8ec218488391df5e545314f6a6af21929befd13c6014709cc2a287ee6095ee382e1c32c0c771c3566015672c22e5569f2bfa35fab2029b02cc3bc3c9991628eb000000000000000000d2085889da3cbccc4889b8b81891fbc477d83c50bb9473461b3618bdd08803dc27853a54c307f7ad9a697eac7562a8af3c68e3abc427c473f17aaa8a30bb09a8cd2c19af1fba1d92f3f2c9ec2e5c032ef6f73d8bcd2b31fdb2223a5e5fc677c59d524cc3276d6fa655d182764f8822cc932bc671645af02a6b7144ecf12b68f758b0409720b37d5e26ed956c8f3e15a29d57d84398a29dcdc096c8e752ec07fab92715e4f93d210c03119a32af268dd9320eb6d812f4b01a106b6d4620d1d75ca83a8fff4f2f6b26cd2ad8b9e70deb25889551dba017cefeb220185fa19f7be1bfd1cf0ff822706f5185b22215d709bcee5992698e6c58be1c648c0a5a57777d73e574abc16335e5a976cde09ce4bb7bfd807e54270092eedeae02a4642e9882bc159bbee58039778babdc910c96ab674768a09ec60b612882096821a2766f995ee77c0c0dd0efc7433b095e11d9bbf5c5374f47078a65fa676f65527a558c7b9d5ebe3b4c799d39e294d69f20ec0fc9fc70564f58342c742dcf2f062b75eb8431e83536368f96728d78bc4e79c30a5711c1c885517d161f308d15aa24f83054489f474ece433d5c6fd92ca85ad956ea1dd3dbf47c15dc8328897834d844454f92892d2526337edc569cb82f58d7a1cce3b591436998c2eef2fd104dc62b5fdc0c17e3268e30e468e08db63cc1b85c95f524dabcbc36c5502cb456008e8d1e3e4e1ee7900ebcac03656c362a021514"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000), 0xfffffffffffffca7}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") dup2(r0, r1) [ 977.870319][ T6073] binder: 6067:6073 ioctl c0306201 20000200 returned -14 [ 977.885654][ T6088] binder: 6075:6088 unknown command 0 [ 977.920909][ T6088] binder: 6075:6088 ioctl c0306201 20000200 returned -22 [ 977.958409][ T6133] binder: 6075:6133 unknown command 0 07:17:05 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xeb, 0x0, 0x150) [ 977.974782][ T6133] binder: 6075:6133 ioctl c0306201 20000200 returned -22 07:17:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x2000000000000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:05 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) recvmmsg(r2, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) [ 978.215427][ T5762] debugfs: Directory '5762-4' with parent 'kvm' already present! [ 978.227624][ T6303] binder: 6301:6303 unknown command 0 [ 978.251272][ T6305] binder: 6302:6305 ioctl c0306201 20000200 returned -14 [ 978.262105][ T6303] binder: 6301:6303 ioctl c0306201 20000200 returned -22 [ 978.342202][ T6312] binder: 6301:6312 unknown command 0 [ 978.385140][ T6312] binder: 6301:6312 ioctl c0306201 20000200 returned -22 07:17:06 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xec, 0x0, 0x150) 07:17:06 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x10, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) r4 = socket(0x10, 0x2, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x71, &(0x7f0000000040)={r6}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000080)={r6, 0x468c}, 0x8) ioctl$TUNSETOFFLOAD(r2, 0x400454da, 0x400004) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'yam\x00\x00\x10\x00', 0x2}) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000160007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 07:17:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x4000000000000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:06 executing program 2: prlimit64(0x0, 0xd, &(0x7f0000000040)={0x18c7, 0x2040000000000000}, 0x0) setpriority(0x0, 0x0, 0xcebd654a) r0 = syz_open_dev$vcsa(&(0x7f00000012c0)='/dev/vcsa#\x00', 0x10001, 0x20040) ioctl$VT_RELDISP(r0, 0x5605) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) lseek(r1, 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x40000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001240)={&(0x7f00000000c0)={0x115c, 0x2b, 0x300, 0x70bd29, 0x25dfdbfd, {0x18}, [@nested={0xd8, 0x4, [@typed={0x8, 0x53, @fd=r1}, @typed={0x4, 0x52}, @generic="c6ef12778a401a08dc8948c077a79388cbd253f228a7014e3e56fe5ec5271e20f2d45d4aa43f4d241f516c90555025153e8c4ba280f8693a78e754385fac7bdb25d7603c85c3136aa0c5a1f18a5feae344199e73f58c8a26b30fd9d370aae08946caa0765c9854e818ee2f02b758505442cf16402d9b9650324bf973b1e3cc16ed48be476d8427f7047f87ed1f60dc4b2bc5936525377706ca61058dfd06a989a8d4293d91465e0ff6f5a008e8813634205049796094f67bfd", @typed={0xc, 0x5f, @u64=0x3}]}, @nested={0x1070, 0x72, [@generic="db17973623af18fbe72e8f648d9f9cc9bb5d9fa8d858e4306a94dceb2cd97026732eb5dd2f91e19341540eaf5ce2a0bfcdeb7662f851bb9f8bb1c05edba2b3dcb53ddfc7a26eb1be2ed1030122", @generic="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", @generic, @typed={0x14, 0x93, @ipv6=@dev={0xfe, 0x80, [], 0xf}}, @typed={0x8, 0x7b, @fd=r2}]}]}, 0x115c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) [ 978.597124][ T6423] binder: 6420:6423 unknown command 0 [ 978.603671][ T6424] binder: 6419:6424 ioctl c0306201 20000200 returned -14 [ 978.644880][ T6423] binder: 6420:6423 ioctl c0306201 20000200 returned -22 [ 978.672861][ T6462] binder: 6420:6462 unknown command 0 [ 978.692418][ T6462] binder: 6420:6462 ioctl c0306201 20000200 returned -22 07:17:06 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6c736d6163696e7569742c0000deb729000000000200000000"]) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x0, 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='lp\x00', 0x3) 07:17:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x4800000000000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:06 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xed, 0x0, 0x150) [ 978.892876][ T6619] binder: 6567:6619 ioctl c0306201 20000200 returned -14 [ 978.915265][ T6620] hfsplus: unable to parse mount options [ 978.947134][ T6634] binder: 6617:6634 unknown command 0 07:17:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_FPEXC(0xc, 0x2) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) readv(r3, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f00000002c0)=0x5) listen(r1, 0xff2c) r4 = socket$inet6(0xa, 0x6, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) ioctl$KVM_DIRTY_TLB(r5, 0x4010aeaa, &(0x7f00000000c0)={0x5, 0xd9}) sendmsg$inet6(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffd1a}, 0x0) r6 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r6, 0x81785501, &(0x7f0000000340)=""/94) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r7, 0x800000c004500a, &(0x7f0000000300)) readv(r7, &(0x7f00000003c0)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r7, 0xab00, r6) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x400, 0x0) fsetxattr$security_smack_entry(r7, &(0x7f0000000000)='security.SMACK64\x00', &(0x7f00000001c0)='\x00', 0x1, 0x3d872d29bd120944) r8 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r8, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r9, 0x800000c004500a, &(0x7f0000000300)) readv(r9, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r9, 0xab00, r8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e23, @remote}], 0x10) connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) [ 978.972056][ T6634] binder: 6617:6634 ioctl c0306201 20000200 returned -22 [ 978.986863][ T6678] binder: 6617:6678 unknown command 0 [ 979.005049][ T6678] binder: 6617:6678 ioctl c0306201 20000200 returned -22 07:17:06 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) recvmmsg(r2, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) 07:17:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:06 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xee, 0x0, 0x150) [ 979.077289][ T6620] hfsplus: unable to parse mount options 07:17:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x4c00000000000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:06 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x0, 0x181002) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="851d5f97f71b9d0e7e000000000000009500000000000000987ae8c82c31e8ec2c32d15be8f57f5ee4b8be019d2c1efd8b3b4261e5b1828e7600003642ec5d147c8a63"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0xffffffffffffff2d}, 0x48) socket$bt_hidp(0x1f, 0x3, 0x6) [ 979.243668][ T6787] binder: 6783:6787 unknown command 0 [ 979.276863][ T6820] binder: 6781:6820 ioctl c0306201 20000200 returned -14 [ 979.296195][ T6787] binder: 6783:6787 ioctl c0306201 20000200 returned -22 [ 979.331854][ C0] net_ratelimit: 23 callbacks suppressed [ 979.331862][ C0] protocol 88fb is buggy, dev hsr_slave_0 07:17:06 executing program 0: setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @remote}}}, &(0x7f00000001c0)=0x84) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000200)={r1, 0x9}, 0x8) umount2(&(0x7f0000000240)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x10) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000300)={0x0, 0xfff, 0x8, &(0x7f00000002c0)=0xb3}) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f0000000340)) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={r1, 0x100000001}, &(0x7f00000003c0)=0x8) r6 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000400)={0x200, 0x0, 0x1, 0x3}) ioctl$DRM_IOCTL_AGP_FREE(r6, 0x40206435, &(0x7f0000000440)={0x3, r7, 0x10000, 0x400}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000640)={0x2, @win={{0x1ff, 0x2, 0x1, 0xffffffff}, 0x4, 0x80000001, &(0x7f0000000500)={{0x630d, 0x9, 0xed, 0x9}, &(0x7f00000004c0)={{0x8000, 0xffffffffffffc469, 0x5, 0xffffffffffff7fff}, &(0x7f0000000480)={{0xffffffff00000001, 0x83, 0x80000000, 0xc9d0}}}}, 0x44, &(0x7f0000000540)="c095a89aad05839db5c184ce3be67b47d0b99a65c444b373248b76870096d9ccba6a784b29fe7571e0b09577db518e85855d65c3c739c91479b9c56d05bdd3dcee2d2f323e54812d92ec8005b932f75e5514973845f95d8f717aad4622010c8e77cd1fa6b46650e854436dd7d0a69f1048428f8d9f6670424699955fbb66efae7504fe36be758c0237a96ff85da388e91cd42617f7d9629e6a79dda8cb199eb9435ba9e2a4e1ef9c30c2072dabb8d52893d032f689d17f7d0ee2d82b2dd7a0f97d681172f6e25eb0fd128d916893975c8e7b6312a9d3438e7bb16fc6a1073a8e775f84"}}) syz_mount_image$erofs(&(0x7f0000000740)='erofs\x00', &(0x7f0000000780)='./file0\x00', 0x7c, 0x7, &(0x7f0000000b80)=[{&(0x7f00000007c0)="05ba01f65ad452a1186f9e7931b62e940d8886cdd793829ab40ee13e2d1357c408d135b835904a62199b6d118e3852ce67072b8f8e8ab57742c1a0f302aa78287cc9f222027b38f1c453033c2154b46ad47b60332f999a4fe5ae958ff9b964ea31590032d62e0c43cde8b5e685936b50fb856f636bc45aff74d95f8727e7b8ce43fb8272aa81692c79cf3251eac7a2c9397156d740f4124a2d8c9fb882d7981211e8e779d04fa17249", 0xa9, 0xff6}, {&(0x7f0000000880)="1af2bd1d731d66049db20deaf2e9664a81e72a1a8f", 0x15, 0x8}, {&(0x7f00000008c0)="42d3dfa58a3cc09167b2b89142cd660c4814b394bc4a70ab1d954b15e67a66be021005dfd0f8a6b02f00acd7a0cd8722558b144645d87f0778e9c667b43b2ac2539b0f04d73fe0c24d6e4c5545fd26bf1d62d19aa86f38ddc0e6521ee559205d723ca95a071fe907dae21375d50776047ef86b0824c6a47bd396deb3c477fdb8ff5407cf4ed4717f326eefe00454b3ca25cf22246c17ef2f42ea93b3192cae7be8b96c407c7aa7e7a6a9922d6959a91fe1d8fc1c4930262ed24a9ed8d5f907974d461e4c10f82fdeceef4008fc65638168363e2e29b32f21427d6be020e515c419", 0xe1, 0xfffffffffffffffe}, {&(0x7f00000009c0)="aa8f4d1f4ff4377d68185821a96a8a3c1ad1cc5486075058c9b90de992306da91d40a5b3cfcd5577a28f459539b2c58f9d712d1d4405107c41", 0x39, 0x3}, {&(0x7f0000000a00)="358d247884e4df9baadb1f7d893c015a12a58ec73cfd4a2a8337cc1b6e6b4f3a6e7397e6314a0c9b7ec8e7a4d0bc48d3bf652fb3f5fb384caeca653204fdb340d290256173d4d2cd38ddb1949596498c0927bc6e2953c2a8f8441bf6567fec9cd5abb38459b8a6beba55fe2923261398a20c6812bb8348d7ad55effb00998ae351cbd1e02c847384baee25760cc50a014216a4bba1ab7886e9038cabd3e69e7093eb92db7f712f141739414f8b3020a322f27d29501ace55e397725dc34e7e07f112fad9da49fff57318fdf10ee4693121", 0xd1, 0x3}, {&(0x7f0000000b00)="03d77cc4e50369ff167959f43c3ed694534b2cb76bfb5ce6794f928f7a72968ee8f86686894cfcf21b3d29b0f5dd17216428eb", 0x33, 0x3f9}, {&(0x7f0000000b40)="5507d6f1c0f6123aa7b01fc0164240d427ef3390cdb9b44688fbf079b1ff1ea2138ce07b245324656124fb8c51a7fc1a02434d0043", 0x35, 0x8}], 0x80, &(0x7f0000000c40)={[{@fault_injection={'fault_injection', 0x3d, 0x6}}, {@nouser_xattr='nouser_xattr'}, {@acl='acl'}, {@user_xattr='user_xattr'}, {@acl='acl'}, {@noacl='noacl'}]}) fsetxattr(r3, &(0x7f0000000cc0)=@random={'osx.', 'erofs\x00'}, &(0x7f0000000d00)='nodev@-cpuset:\'\xddoeth1!system.(-^\x00', 0x21, 0x5) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r8, 0xc034564b, &(0x7f0000000d40)={0x8, 0x38415262, 0x650, 0xfffffffffffffe00, 0x0, @discrete={0x7ff, 0x7}}) accept4$vsock_stream(r6, &(0x7f0000000d80)={0x28, 0x0, 0x2710, @host}, 0x10, 0x80000) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r9, 0x40305652, &(0x7f0000000e00)={0x1, 0x4, 0x0, 0x401, 0xff, 0x328f, 0xfff}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000e40)={0xa, 0x3, 0xc3, 0x7, '\x00', 0x400}) r10 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000e80), 0x800) getsockopt$inet_sctp_SCTP_MAXSEG(r10, 0x84, 0xd, &(0x7f0000000ec0)=@assoc_id=r5, &(0x7f0000000f00)=0x4) r11 = dup(0xffffffffffffffff) setsockopt$kcm_KCM_RECV_DISABLE(r11, 0x119, 0x1, &(0x7f0000000f40)=0x7, 0x4) r12 = syz_open_dev$midi(&(0x7f0000000f80)='/dev/midi#\x00', 0x4, 0x674192c011abd41) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000fc0)={0x0, 0xdc4b, 0x3, [0x100000000, 0x5, 0x1f]}, &(0x7f0000001000)=0xe) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r12, 0x84, 0x6c, &(0x7f0000001040)={r13, 0xab, "3dd4a3059bfb15b25525f1eef367040322d6d6e2346c8457acfcd9eda7882aa13da3f8cd29670a6a7bf4598420bcccf4938985689f30cacec42ce8a355f5efe85606edec3ea4ac9c13c151be643e74e56933b2808c58d63758c6af6a48e96f16a7b501a2e49444ca56e19fd6486b0ec7a2e6c4fb444a82a7071ebad204195523474099ac68c3afdf4183857227d64742dad41d0dfe966a64ca194ce2adaa7dce74f175a648235995518c7d"}, &(0x7f0000001100)=0xb3) [ 979.343390][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 979.350094][ T6892] binder: 6783:6892 unknown command 0 [ 979.355584][ T6892] binder: 6783:6892 ioctl c0306201 20000200 returned -22 07:17:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x6000000000000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 979.412193][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 979.418137][ C1] protocol 88fb is buggy, dev hsr_slave_1 07:17:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000000)={0x2, @remote, 0x4e22, 0x1, 'lblcr\x00', 0x3d, 0x7, 0x1c}, 0x2c) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x5e831, 0xffffffffffffffff, 0x0) 07:17:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x4800000000000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:07 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xef, 0x0, 0x150) [ 979.613738][ T6979] binder: 6978:6979 unknown command 0 [ 979.645010][ T6996] binder: 6994:6996 ioctl c0306201 20000200 returned -14 [ 979.645394][ T6979] binder: 6978:6979 ioctl c0306201 20000200 returned -22 [ 979.708545][ T7121] binder: 6978:7121 unknown command 0 [ 979.720612][ T7121] binder: 6978:7121 ioctl c0306201 20000200 returned -22 07:17:07 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002940)={0x13, 0x10, 0x3}, 0x3c) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x66f7, 0x101002) r2 = syz_open_dev$mice(0x0, 0x0, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000840)={@dev, @remote, 0x0}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000940)={0x1d, r3}, 0x10, &(0x7f0000000a80)={&(0x7f0000000a00)={0x5, 0x1, 0x0, {0x77359400}, {0x77359400}, {0x0, 0x0, 0xffffffff, 0x2}, 0x1, @can={{0x0, 0x9, 0xd891, 0x51c}, 0x0, 0x2, 0x0, 0x0, "2f776d8ffd71e2cd"}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={r3, 0x7, 0x4, 0xff, 0x200, 0x101, 0xb917}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000003f00000000000000ef18100000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\xeb\xff\xff(1\x18\xc7\xc1\xde\xdc(,J\\\xc4hM=\xf4\x04\xd0\xe9\'rT\x8dm\x1a?\x1a\b\x93\x82\xbf\xfe\x83\xcb4tX{$\x9f\xbfHY\x1e;\xd0\xcf\xdb&\x12G\xfd\xd7\xe71\xd8K\x9b\xc9\x04C\xf5$\xd0\x93k\x12u\x9eMM\x03\x00\x00\x00\xc8\x83\x16\x9c2)\xaa\x9fh\xa4\xd2\x0f\x98.\x06t^\xc0\xcd\x95\x81*\xece1\x9e*3\xfa\xb5=\xd2\x1e-\xd3]}\xa7\xbfDZn\xd4\x82\x19\xfb\x1bjE\xc3D\xd8\xd56G\xd9\xc3\x90\xf5\xb9\xdc\x98\xb8\x8f=\xdf\xf0,e\x1dl\xe0\xc5\x80\a\xb1\xad\xbf\xc5\x88!j\xce\x00\x00\x00\x00\x00\x00', 0x4, 0x90, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 07:17:07 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) recvmmsg(r2, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) 07:17:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x6800000000000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:07 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xf0, 0x0, 0x150) [ 980.002759][ T7268] binder: 7226:7268 unknown command 0 [ 980.013168][ T7264] binder: 7218:7264 ioctl c0306201 20000200 returned -14 [ 980.030905][ T7268] binder: 7226:7268 ioctl c0306201 20000200 returned -22 07:17:07 executing program 0: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x4) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x71, 0x9, {{0xc, 0x0, 0x4}, 0x2}}, 0x18) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x7, 0x0) bind$xdp(r2, &(0x7f00000000c0)={0x2c, 0x2, 0x0, 0xc}, 0x10) [ 980.069498][ T7305] binder: 7226:7305 unknown command 0 07:17:07 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) recvmmsg(r2, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) [ 980.104603][ T7305] binder: 7226:7305 ioctl c0306201 20000200 returned -22 07:17:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x6c00000000000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 980.291874][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 980.297753][ C0] protocol 88fb is buggy, dev hsr_slave_1 07:17:07 executing program 2: clone(0x4000000000082fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000000)={'HL\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00d\xff\x00'}, &(0x7f0000000100)=0xfffffffffffffdc2) close(0xffffffffffffffff) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) connect$llc(r1, &(0x7f0000000040)={0x1a, 0x108, 0x5, 0xfffffffffffff001, 0xe9, 0x9, @remote}, 0x10) 07:17:08 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xf1, 0x0, 0x150) 07:17:08 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) recvmmsg(r2, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) [ 980.385832][ T7521] binder: 7506:7521 ioctl c0306201 20000200 returned -14 07:17:08 executing program 0: socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7a, 0x0, [0x480]}) [ 980.446816][ T7523] binder: 7520:7523 unknown command 0 [ 980.452398][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 980.452456][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 980.461849][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 980.473231][ C0] protocol 88fb is buggy, dev hsr_slave_1 07:17:08 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xf2, 0x0, 0x150) [ 980.610532][ T7523] binder: 7520:7523 ioctl c0306201 20000200 returned -22 07:17:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:08 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) recvmmsg(r2, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) [ 980.682621][ T7639] binder: 7520:7639 unknown command 0 [ 980.722727][ T7639] binder: 7520:7639 ioctl c0306201 20000200 returned -22 07:17:08 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$zero(0xffffffffffffff9c, 0x0, 0x500, 0x0) open(&(0x7f0000000300)='./file1\x00', 0x40, 0x8) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mkdirat(r1, 0x0, 0x12) mount$fuse(0x0, 0x0, &(0x7f0000000040)='fuse\x00', 0x0, 0x0) r2 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400), 0x0, 0x0) getgroups(0x3, &(0x7f0000000740)=[0xffffffffffffffff, 0xee00, 0xee01]) keyctl$chown(0x4, r2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r3) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="56ef637615f704c4f0040000010000f9002d00000000000000000000008c8cbe6bcb87a050237a731d4d8b33f0e5cf604f248f43b88278805b0c52902ff56df1f21f166a029f3fb10af27bca66541d772f6ffa2602ac81a8dd0d95aea43a7771d55fbb9d839c40576d81aa5710ad030ff8ed1ba133df961b303ad78d6108ca94159ccc5bf5f94b30009437bfcc532785a1256005c79ad9952f98a596faa40bed5d90d3de602697364d6c9b06e6d80b4431cbcb4d4ac50703f80000d20f67c6e15ab9d017ff9067823fa34637c6b5b18b11b4b23fc02949591f86cfc52fb91d952e6fd34afa49c127875f0d1d7e319ccbe3d847c548a8ed31577804c76da93dc3ce29c5d83f74dc851e0b18d62b04742802829f9c9160ad7c292ffb92a145815c256bbcaee1bd4c82031d67f1b7031eca83adadc4878cf343e621c7ea1a9c"], 0x1d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r4, r4, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) sendmsg(r0, 0x0, 0x0) r5 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) readv(r6, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r6, 0xab00, r5) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x6, 0x200}, &(0x7f0000000000)=0x90) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000340)={r7, 0xe4af}, &(0x7f00000004c0)=0x8) sched_setattr(0x0, &(0x7f00000000c0)={0x30, 0x2, 0x2, 0x0, 0x10005}, 0x0) 07:17:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x7400000000000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 980.827464][ T7746] binder: 7740:7746 ioctl c0306201 20000200 returned -14 07:17:08 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) recvmmsg(r2, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) 07:17:08 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xf3, 0x0, 0x150) [ 981.011051][ T7843] binder: 7834:7843 unknown command 0 [ 981.050739][ T7843] binder: 7834:7843 ioctl c0306201 20000200 returned -22 07:17:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 981.113937][ T7957] binder: 7834:7957 unknown command 0 [ 981.152922][ T7957] binder: 7834:7957 ioctl c0306201 20000200 returned -22 [ 981.247872][ T7971] binder: 7968:7971 ioctl c0306201 20000200 returned -14 07:17:08 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus/file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v1={0x1000000, [{0x0, 0x721c}]}, 0xc, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) 07:17:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x238) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200, 0x8a52, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000180)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clone(0x400000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x8, 0xf06f, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fremovexattr(r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = fcntl$dupfd(r2, 0x406, r3) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = geteuid() ioctl$UI_SET_PHYS(r5, 0x4008556c, &(0x7f0000000080)='syz0\x00') mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='fuse\x00', 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00613177540764370324202,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r7, @ANYBLOB=',allow_other,fscontext=unconfined_u,obj_role=,dont_hash,euid<', @ANYRESDEC=r8, @ANYBLOB=',uid=', @ANYRESDEC=r9, @ANYBLOB="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"]) ioctl$SIOCAX25DELUID(r4, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, r8}) r10 = getpid() rt_tgsigqueueinfo(r10, r10, 0x16, &(0x7f0000000180)) ptrace(0x10, r10) ptrace$poke(0x21, r10, 0x0, 0x0) 07:17:08 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) recvmmsg(r2, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) 07:17:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x7a00000000000000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:09 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xf4, 0x0, 0x150) [ 981.432745][ T8049] binder: 8016:8049 unknown command 0 07:17:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7400000000000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 981.477905][ T8049] binder: 8016:8049 ioctl c0306201 20000200 returned -22 07:17:09 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) recvmmsg(0xffffffffffffffff, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) [ 981.548309][ T8086] binder: 8016:8086 unknown command 0 [ 981.568140][ T8086] binder: 8016:8086 ioctl c0306201 20000200 returned -22 07:17:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0xffffffffa0010000}, @release={0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 981.690658][ T8197] binder: 8150:8197 ioctl c0306201 20000200 returned -14 07:17:09 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x8000000001, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @local, 0x81}, 0x80, 0x0}, 0x20040001) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @initdev, 0xa66d}, 0x80, 0x0}, 0x20000004) socket$kcm(0x29, 0x3, 0x0) 07:17:09 executing program 0: socket$inet6(0xa, 0x401000000001, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000080)={0x5}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r2 = socket$kcm(0xa, 0x2, 0x73) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000280)="0f2016c4e2f92a4208c4c241983e2ef30fc7b22b660000660f38818f00a00000670f01c366baa100b806000000efc74424009d3e0000c7442402aa000000c7442406000000000f011c24c4c2cd3df00f01d1", 0x52}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4068aea3, &(0x7f0000000300)={0x0, 0x0, [0x6, 0x3, 0x3ff, 0xb819]}) r6 = msgget(0x3, 0x224) msgctl$IPC_INFO(r6, 0x3, 0x0) recvfrom(r2, 0x0, 0x0, 0x40002000, 0x0, 0x0) r7 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) 07:17:09 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) recvmmsg(0xffffffffffffffff, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) [ 981.863541][ T8221] binder: 8204:8221 unknown command 0 07:17:09 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xf5, 0x0, 0x150) [ 981.906324][ T8221] binder: 8204:8221 ioctl c0306201 20000200 returned -22 07:17:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7a00000000000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 981.953509][ T8312] binder: 8204:8312 unknown command 0 [ 981.984810][ T8312] binder: 8204:8312 ioctl c0306201 20000200 returned -22 07:17:09 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) recvmmsg(0xffffffffffffffff, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) 07:17:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x630b}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:09 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"98ec5316d59b380f8c6e72ad7594f81f"}, 0xfff}}}, 0x90) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="ffd722dce20f92597102784bad12b4ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r2}}, 0x48) pread64(r1, &(0x7f00000004c0)=""/232, 0xe8, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r2}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r2, 0x8638}}, 0x10) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x8) r3 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x800) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 982.087462][ T8385] binder: 8366:8385 ioctl c0306201 20000200 returned -14 07:17:09 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x2020, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='uid_map\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 07:17:09 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xf6, 0x0, 0x150) [ 982.275604][ T8531] binder: 8454:8531 unknown command 0 07:17:09 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) recvmmsg(0xffffffffffffffff, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) 07:17:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0xff00000000000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 982.345790][ T8531] binder: 8454:8531 ioctl c0306201 20000200 returned -22 [ 982.424109][ T8548] binder: 8454:8548 unknown command 0 [ 982.443754][ T8548] binder: 8454:8548 ioctl c0306201 20000200 returned -22 07:17:10 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket(0x0, 0x2, 0x0) fcntl$getown(r0, 0x9) syz_open_procfs(0x0, &(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16;\xd0QA\xd0\xa6\x1b\x1bh=\xae\x81\xc2\xa6\x8df/\x8b\x91\x19\xd4\n\xb4\xbd\\\xa0\xb6\xbeAv\t\xa2\xedK\x101\x8f\x88\x80\x97a\x84)K\x18Y\x86\xff\xe0\xcc\xa2,C\xbf\xf1=\x9ai\xffui\x190x0, 0xc70}, &(0x7f0000000680)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000800)={r7, 0x3, 0x4, [0x40, 0xac6f, 0x3f, 0x401]}, 0x10) fstat(r6, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000d40)={0x0}, &(0x7f0000000d80)=0xc) lstat(&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000fc0)=0x0) sendmsg$unix(r6, &(0x7f0000001280)={&(0x7f0000000b00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000b80)="6a5a89e487465d7d3c6d059d253a953641c6c11fca2f352b11bc10f36b1b9ebb028573aff77526a64723", 0x2a}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000002640)="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", 0x1000}], 0x3, &(0x7f0000001200)=[@cred={{0x1c, 0x1, 0x2, {0x0, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, 0x0, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12}}}], 0x60, 0x4080}, 0x4000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={r10, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00'}, 0x30) perf_event_open(&(0x7f0000000200)={0x4, 0x70, 0x6, 0x6b, 0x96b, 0x4d, 0x0, 0x6000000, 0x240, 0x8, 0x3, 0x2, 0x6, 0x8001, 0x7, 0x0, 0x4, 0x3, 0x0, 0x100, 0x5, 0xff, 0x8, 0x7, 0x2, 0x5, 0x7, 0x6, 0x5, 0xfffffffffffffffa, 0x7ff, 0x7, 0x9, 0x1, 0x52c5, 0x1ff, 0x9, 0x2, 0x0, 0x3, 0x1, @perf_config_ext={0x6, 0x5}, 0x6, 0xfffffffffffffffb, 0x9, 0x7, 0xc7a, 0x9, 0x2}, r13, 0x3, r4, 0x2) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r14, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x71, &(0x7f0000000040)={r15}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000140)={r15, 0x8}, &(0x7f0000000180)=0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x101000, 0x0) listen(r1, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 07:17:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0xffefffffff7f0000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 982.851999][ T8771] binder: 8610:8771 ioctl c0306201 20000200 returned -22 [ 982.960831][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 07:17:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x630d}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:10 executing program 1: bind$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) recvmmsg(0xffffffffffffffff, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) 07:17:10 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xf8, 0x0, 0x150) [ 983.103265][ T8809] binder: 8781:8809 ioctl c0306201 20000200 returned -14 07:17:10 executing program 1: bind$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) recvmmsg(0xffffffffffffffff, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) [ 983.240591][ T8993] binder: 8888:8993 unknown command 0 [ 983.261922][ T8993] binder: 8888:8993 ioctl c0306201 20000200 returned -22 07:17:10 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x9, 0x100) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000100), 0x4) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f00000000c0)={0x3b, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 'none\x00', 0x2c, 0xffffffffffff60ae, 0x56}, 0x2c) r3 = socket$inet(0x2, 0x2c6299d063bfcb51, 0x101) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000000)={'nat\x00', 0x0, 0xff00, 0xfffffffffffffed7, [], 0x1000000000000084, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000001280)=0x108) [ 983.292054][ T8993] binder: BINDER_SET_CONTEXT_MGR already set [ 983.336356][ T9035] binder: 8888:9035 unknown command 0 [ 983.388046][ T9035] binder: 8888:9035 ioctl c0306201 20000200 returned -22 [ 983.441449][ T8993] binder: 8888:8993 ioctl 40046207 0 returned -16 [ 983.470601][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 07:17:11 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(r0, 0x40004580, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200000, 0x0) ioctl$VT_RELDISP(r1, 0x5605) 07:17:11 executing program 1: socket$pptp(0x18, 0x1, 0x2) bind$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) recvmmsg(0xffffffffffffffff, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) 07:17:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0xffffffffff600000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:11 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xf9, 0x0, 0x150) 07:17:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x40046302}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 983.624514][ T8698] syz-executor.2 (8698) used greatest stack depth: 22120 bytes left [ 983.695386][ T9086] binder: 9084:9086 ioctl c0306201 20000200 returned -14 07:17:11 executing program 1: socket$pptp(0x18, 0x1, 0x2) bind$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) recvmmsg(0xffffffffffffffff, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) [ 983.736866][ T9115] binder: BC_ACQUIRE_RESULT not supported [ 983.766960][ T9115] binder: 9088:9115 ioctl c0306201 20000200 returned -22 07:17:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") prctl$PR_SET_TSC(0x1a, 0x1) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x17, &(0x7f0000001200)=""/145, &(0x7f0000000040)=0x91) [ 983.856316][ T9115] binder: BINDER_SET_CONTEXT_MGR already set [ 983.896106][ T9115] binder: 9088:9115 ioctl 40046207 0 returned -16 07:17:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000005680)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000a00)=@nl=@proc={0x10, 0x0, 0x25dfdbfe}, 0x80, 0x0}}], 0x2, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) bind$bt_sco(r2, &(0x7f0000000000)={0x1f, {0x401, 0xe29a, 0x1f, 0x9d, 0xffffffffffffff7f, 0x8001}}, 0x8) [ 983.931947][ T9260] binder: BC_ACQUIRE_RESULT not supported 07:17:11 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xfa, 0x0, 0x150) [ 984.012020][ T9260] binder: 9088:9260 ioctl c0306201 20000200 returned -22 07:17:11 executing program 1: socket$pptp(0x18, 0x1, 0x2) bind$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) recvmmsg(0xffffffffffffffff, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) [ 984.115922][ T9358] binder: 9271:9358 ioctl c0306201 20000200 returned -14 07:17:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x40046304}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:11 executing program 0: r0 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000, 0x80) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)="b1050000004858921b454dd42edd20a0bb450a45a9442e1524e8fd5d469f63858473bb66fbd38d3d4191c5c662cb64d9c59fbf69456b81d0c61a5d07c7", 0x3d, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r2, r2}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x15}}}) 07:17:11 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xfb, 0x0, 0x150) 07:17:11 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) 07:17:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 984.320751][ T9493] binder: 9469:9493 unknown command 0 [ 984.331936][ T9493] binder: 9469:9493 ioctl c0306201 20000200 returned -22 [ 984.382112][ T9498] binder: 9469:9498 unknown command 0 [ 984.429902][ T9498] binder: 9469:9498 ioctl c0306201 20000200 returned -22 [ 984.451848][ C0] net_ratelimit: 18 callbacks suppressed [ 984.451856][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 984.455133][ T9494] could not allocate digest TFM handle xcbc(anubis-generic) [ 984.457659][ C0] protocol 88fb is buggy, dev hsr_slave_1 07:17:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x40046307}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:12 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) [ 984.555379][ T9612] binder: 9611:9612 ioctl c0306201 20000200 returned -14 07:17:12 executing program 0: r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x820000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x20, 0x70bd29, 0x25dfdbfe, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0xc880) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="287474dae6badf3ab85f04000000d2eb", 0x10) r3 = accept(r2, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000d00)="08eddaff9278e859a0", 0x9}, {&(0x7f0000000d40)="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", 0x23a}], 0x2}}], 0x1, 0x0) [ 984.611869][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 984.611909][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 984.617683][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 984.623498][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 984.634922][ C0] protocol 88fb is buggy, dev hsr_slave_1 07:17:12 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xfc, 0x0, 0x150) [ 984.746174][ T9716] binder: 9704:9716 unknown command 0 [ 984.746190][ T9716] binder: 9704:9716 ioctl c0306201 20000200 returned -22 07:17:12 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x400, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000080)={0x40, [0x7, 0x1ff, 0x5, 0x3, 0x1a67, 0x3, 0x7ff, 0x100, 0x3, 0x5, 0x4, 0x8000, 0x9, 0x51, 0x3ff, 0x6ca, 0xf0, 0x3, 0x1ff, 0xc3d, 0x3, 0x401, 0x2, 0x8001, 0x3, 0x9, 0x4, 0x4c, 0x200, 0x4, 0x80, 0x4, 0x8001, 0x8000, 0x85, 0x80000001, 0x0, 0x200000000000000, 0x0, 0x2, 0x4, 0xfffffffffffffffd, 0x100000001, 0x7, 0x0, 0x5, 0xffff, 0x2], 0xa}) 07:17:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:12 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) [ 984.855945][ T9830] binder: 9704:9830 unknown command 0 [ 984.891932][ T9830] binder: 9704:9830 ioctl c0306201 20000200 returned -22 07:17:12 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev\ffuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="001d20b3488c83655a6eb5458facb351528e855b6601c850aa09f7d6bd0b2d5b3b44b069f51df762aca922f0787363ce9f08e317aa89d9ef7dc75fd655cb0c72227f42f88ff33200000000", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001840)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000001940)=0xe8) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f00000001c0)='./file0\x00', 0x101, 0x9, &(0x7f0000001740)=[{&(0x7f0000000300)="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", 0x1000, 0x200}, {&(0x7f0000001300)="65a89a3ffccd0dd657d2e4d6fa6250278900832d7315abfb344cf9df30a4665b5ba420db39573e814fc5ca7c9906f035bd65d529346b62827d45caa0f2f4d516a72abeb72b68c24b85913eaaade8f43928395758015e126e3adb6ad263e448f7d5f3f9c9f9a68533124ed79628207ee276bf3db1b49b037522ecec5be969a1a43792babcd1fb3e86d4df3bc7ab1d8f47d67c478eb5848ebd107c7d0865a34b7b1b4101dd9dfe22922f78ec15a834318b8530c027aea48db0f473d640682cb1a445", 0xc1, 0x180000000}, {&(0x7f0000001400)="b67c594407dd7809c5c9107347ca2025fa119912ebfbf2edfcb50251a7a654beb7d35e36b4d5703962e7761c53c5c9ac945e56cd2202779e7cdf253db7243ed120513c77e7735a7e56d6b5f6159f14294cda861e65890226a27e336cc332ef91cf081eaa39117cd03929e7621852b019a6d5c3a8ec752b9491b7f090a95de7014ff2b76a7220b40acce8bae2be64321961f474a2cfb675883c519934b05efd8437c117d8c4d9184d4d77363409e77b9d27b5bc42b0", 0xb5, 0x6}, {&(0x7f0000000280)="c84d9116ab443d0514c08e6ca0f913ace7c38bbdf387a1ec832e72cf10073ac836b07e7b7b178718aeb46f13995c2634d9", 0x31, 0x7f}, {&(0x7f00000014c0)="bf4eb9f467783c0871949ad2d599cf9fdf7a23f39d476f5f0cd8ceca9d0691eb1731ee513ba10e11cd27cfc9977fcc6c196b0bf11a324d962d72ac802d2aa3ae9f1bfed09129a3a338d84b607430118d6810e5cb287b4fd3e04bd3bf92260b024224053e9a9411389d6f2485c1bdfc89ca748d20b8fd2c005502ac8bba17330e89108281bd469bcaeb249db0e0c109b8973090b51901a5b48c80975f72412cd8c94e4ac8b5c7b9153716f05c", 0xac, 0xfff8000000000000}, {&(0x7f0000001580)="e4abf76468667e33207e382887ce74b558ad461ac1bcad786dd73dd52f6dd0b445935bb79e38131cbcea4d23cc61d6", 0x2f, 0xf2}, {&(0x7f00000015c0)="ab68c92712664d36718ce84edefbcf0f83a869dd9203ac67eb06fe8568d19626c16bfd006d", 0x25}, {&(0x7f0000001600)="843c763e06319937f4efdbce443f489f79e82c4d68685fc0a4d5ca5f1f8d4b2f346ce2fbe8ad1b49a9ef3dc47d0f198855b45eb529df6043ac751ed997160f19b48d26d556179a784e853ea5468996c72d049904830c07ee16b2e25e325e9781be97adb9ef76c62990725fa380be0cd50bc26feda347ecf8f99e110b65778082f37d02c38157140fb6f3d126e485add1d4d65ab586561f2400bfca66ce3e84f0767abc4ecc805877e91c2b771f767a0082139f8fb0f0b76210e9e6c76572531bdd69a822a30168f4c5c0172d9c47e24d6f08ab34d0c6b735ddaf203b2986b7bedc433f4c9b34a51bc14616ab34f5c3aa", 0xf0, 0x100}, {&(0x7f0000001700)="c60c93e2892eb342ab82098d6c66006e9f57b8", 0x13, 0x8}], 0x1008024, &(0x7f0000001980)={[{@resize_auto='resize=auto'}, {@balloc_border='block-allocator=border'}], [{@euid_gt={'euid>', r3}}, {@fsmagic={'fsmagic', 0x3d, 0x10001}}, {@hash='hash'}, {@dont_hash='dont_hash'}]}) r4 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0) name_to_handle_at(r4, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)=ANY=[], 0x0, 0x0) [ 984.964272][ T9845] binder: 9838:9845 ioctl c0306201 20000200 returned -14 07:17:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x40086303}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:12 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) recvmmsg(0xffffffffffffffff, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) 07:17:12 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mISDNtimer\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$apparmor_current(r0, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000400)=ANY=[], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:inetd_var_run_t:s0\x00', 0xffffffffffffff1d, 0x1) sendfile(r0, r1, 0x0, 0x8000fffffffe) socket$inet(0x2, 0x6, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000280)) creat(&(0x7f0000000140)='./bus\x00', 0x100000010) r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) readv(r3, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r4 = dup2(r3, 0xffffffffffffffff) ioctl$VT_DISALLOCATE(r4, 0x5608) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x12) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000240)={@initdev={0xac, 0x1e, 0x9, 0x0}, @multicast2}, 0x8) 07:17:12 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xfd, 0x0, 0x150) 07:17:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 985.257995][T10001] binder: 9962:10001 unknown command 0 [ 985.287316][T10001] binder: 9962:10001 ioctl c0306201 20000200 returned -22 [ 985.324782][ T26] audit: type=1804 audit(1567754232.927:72): pid=9967 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir522353450/syzkaller.hTFUbK/2519/bus" dev="sda1" ino=17228 res=1 [ 985.341597][T10067] binder: 9962:10067 unknown command 0 07:17:13 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) recvmmsg(0xffffffffffffffff, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) [ 985.377130][T10078] binder: 10039:10078 ioctl c0306201 20000200 returned -14 [ 985.414399][T10067] binder: 9962:10067 ioctl c0306201 20000200 returned -22 [ 985.449231][ T26] audit: type=1804 audit(1567754233.037:73): pid=9972 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir522353450/syzkaller.hTFUbK/2519/bus" dev="sda1" ino=17228 res=1 07:17:13 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xfe, 0x0, 0x150) 07:17:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x4008630a}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 985.571850][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 985.577778][ C0] protocol 88fb is buggy, dev hsr_slave_1 07:17:13 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) recvmmsg(0xffffffffffffffff, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) [ 985.641195][T10162] binder: BC_ATTEMPT_ACQUIRE not supported [ 985.651874][ C1] protocol 88fb is buggy, dev hsr_slave_0 07:17:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 985.732385][T10162] binder: 10102:10162 ioctl c0306201 20000200 returned -22 [ 985.783801][T10200] binder: BC_ATTEMPT_ACQUIRE not supported [ 985.790022][T10200] binder: 10102:10200 ioctl c0306201 20000200 returned -22 07:17:13 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev}}, 0x1e) recvmmsg(0xffffffffffffffff, &(0x7f00000069c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/252, 0xfc}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001680)=""/68, 0x44}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/205, 0xcd}], 0x6, &(0x7f0000002900)=""/167, 0xa7}, 0x1}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/129, 0x81}, {&(0x7f0000002bc0)=""/253, 0xfd}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/212, 0xd4}, {&(0x7f0000002e40)=""/132, 0x84}], 0x6}, 0x20}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/74, 0x4a}, {&(0x7f0000003180)=""/70, 0x46}, {&(0x7f0000003200)=""/245, 0xf5}], 0x5, &(0x7f0000003380)=""/140, 0x8c}, 0x8}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003440)=""/85, 0x55}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, &(0x7f0000004540)=""/243, 0xf3}, 0x4}, {{&(0x7f0000004640)=@vsock, 0x80, &(0x7f00000046c0)}}, {{&(0x7f0000004700)=@isdn, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/147, 0x93}], 0x1, &(0x7f0000004880)=""/168, 0xa8}, 0xe70}, {{&(0x7f0000004940)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/176, 0xb0}], 0x1, &(0x7f0000004ac0)=""/162, 0xa2}, 0x9}, {{&(0x7f0000004b80)=@pppol2tpv3in6, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004c00)=""/109, 0x6d}, {&(0x7f0000004c80)=""/101, 0x65}, {&(0x7f0000004d00)=""/60, 0x3c}, {&(0x7f0000004d40)=""/138, 0x8a}, {&(0x7f0000004e00)=""/207, 0xcf}, {&(0x7f0000004f00)=""/206, 0xce}, {&(0x7f0000005000)=""/2, 0x2}, {&(0x7f0000005040)=""/194, 0xc2}, {&(0x7f0000005140)=""/44, 0x2c}, {&(0x7f0000005180)=""/43, 0x2b}], 0xa, &(0x7f0000005280)=""/191, 0xbf}, 0x9}, {{&(0x7f0000005340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/102, 0x66}, {&(0x7f0000005440)=""/7, 0x7}, {&(0x7f0000005480)=""/146, 0x92}], 0x3, &(0x7f0000005580)=""/133, 0x85}, 0x8}, {{&(0x7f0000005640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000005980)=[{&(0x7f00000056c0)=""/212, 0xd4}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)=""/247, 0xf7}], 0x3, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}], 0xa, 0x40, 0x0) 07:17:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x40086310}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 985.904204][T10205] binder: 10204:10205 ioctl c0306201 20000200 returned -14 07:17:13 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x12f) [ 985.979916][ T26] audit: type=1804 audit(1567754233.577:74): pid=10144 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir522353450/syzkaller.hTFUbK/2519/bus" dev="sda1" ino=17228 res=1 [ 986.017087][T10213] binder: 10209:10213 unknown command 0 [ 986.064002][T10213] binder: 10209:10213 ioctl c0306201 20000200 returned -22 07:17:13 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev}}, 0x1e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) [ 986.105214][ T26] audit: type=1804 audit(1567754233.627:75): pid=10210 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir522353450/syzkaller.hTFUbK/2519/bus" dev="sda1" ino=17228 res=1 [ 986.133047][T10325] binder: 10209:10325 unknown command 0 [ 986.199194][T10325] binder: 10209:10325 ioctl c0306201 20000200 returned -22 07:17:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630f}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:13 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) prctl$PR_SET_KEEPCAPS(0x8, 0x0) readv(r2, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000b40), 0x106, 0x3}}, 0x20) write$binfmt_elf32(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x85, 0x4, 0x4, 0x101, 0x5, 0x3, 0x71a6658eded2e04f, 0x4, 0x1bf, 0x38, 0x33f, 0x2, 0x0, 0x20, 0x2, 0x5, 0xd4, 0x4}, [{0x70000000, 0x5f00, 0x3, 0x100000001, 0x100000001, 0x5, 0x6403f3b9, 0x930f}], "731b8fd16efb04ea83309fdf82b4f78d5020aec17120899fde32da8f64198b6967b26b98275eebff41edc65e6995702702d551cfa0d5d3637a2beb0af6b659e821bf63146e5b5df77f0a121e15e4f8c837f836766426e4e8fed452d643be9b6aefb7798ed280bc389ba03c47d94b0fa54358c79c5c346417f3b7b67a7c1e363d23aae38a888a2cb517972497a58f3c5ffbf61fc8520f92cd0a5dec3385edb7c03888fdd86fe571f6aca4cbebbf310d6d55ba8ffeb70df5a9be2b5b9b3da0defe7da12ebe3315319e0a8e91e36519b072690e84bfe14d292e12acdf", [[], [], [], [], [], [], [], [], [], []]}, 0xb33) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/sequencer\x00', 0x20000, 0x0) read$char_usb(r3, &(0x7f0000000c00)=""/141, 0x8d) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x9, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x30}]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 986.331263][T10332] binder: 10331:10332 ioctl c0306201 20000200 returned -14 07:17:14 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev}}, 0x1e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 986.465224][T10382] binder: 10336:10382 unknown command 0 [ 986.498468][T10382] binder: 10336:10382 ioctl c0306201 20000200 returned -22 07:17:14 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) pause() ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xff, 0x80) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r3, 0x800, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x100}, 0x6662ffb7318682f4) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) 07:17:14 executing program 1 (fault-call:1 fault-nth:0): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev}}, 0x1e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 986.557521][T10449] binder: 10336:10449 unknown command 0 07:17:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 986.637949][T10449] binder: 10336:10449 ioctl c0306201 20000200 returned -22 07:17:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c6312}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 986.774815][T10459] binder: 10458:10459 ioctl c0306201 20000200 returned -14 07:17:14 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev}}, 0x1e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 986.879286][T10545] binder: 10469:10545 unknown command 1074553618 [ 986.909558][T10545] binder: 10469:10545 ioctl c0306201 20000200 returned -22 07:17:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 986.952983][T10567] binder: 10469:10567 unknown command 1074553618 [ 986.983467][T10567] binder: 10469:10567 ioctl c0306201 20000200 returned -22 07:17:14 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x2, 0x2, {0xffffffffffffffff, @dev}}, 0x1e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 07:17:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c633d}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 987.055785][T10570] binder: 10569:10570 ioctl c0306201 20000200 returned -14 [ 987.240072][T10681] binder: 10659:10681 unknown command 1074553661 07:17:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:14 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101002, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0xffffffffffffff96, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000540)="31bbba062b06c9937f013feadd82d89b2c93f2e9ae73fc5f71bc96558d880086fea8d8620e4497cabfcf7e", 0x2b, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(0xffffffffffffffff, 0x9ed) syz_genetlink_get_family_id$tipc2(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000d40)={0xb, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0, 0x2, 0x1}}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000000)={0x0, @aes128, 0x2, "62e03fa9c382aa1b"}) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) [ 987.292564][T10681] binder: 10659:10681 ioctl c0306201 20000200 returned -22 07:17:14 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0xa, 0x2, {0xffffffffffffffff, @dev}}, 0x1e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 987.362889][T10687] binder: 10659:10687 unknown command 1074553661 [ 987.383192][T10687] binder: 10659:10687 ioctl c0306201 20000200 returned -22 [ 987.437732][T10691] binder: 10683:10691 ioctl c0306201 20000200 returned -14 07:17:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c6350}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 987.635960][T10797] binder: 10796:10797 unknown command 1074553680 07:17:15 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xffffffffffffffff, 0x20000) 07:17:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:15 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev}}, 0x1d) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 987.682617][T10797] binder: 10796:10797 ioctl c0306201 20000200 returned -22 [ 987.772871][T10804] binder: 10796:10804 unknown command 1074553680 [ 987.801187][T10804] binder: 10796:10804 ioctl c0306201 20000200 returned -22 [ 987.818485][T10803] binder: 10802:10803 ioctl c0306201 20000200 returned -14 07:17:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c635d}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:15 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev}}, 0x2000009e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 07:17:15 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x0, 0xe0, 0x0, 0x0) 07:17:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 988.101595][T10920] binder: 10918:10920 unknown command 1074553693 [ 988.142036][T10920] binder: 10918:10920 ioctl c0306201 20000200 returned -22 [ 988.178449][T10926] binder: 10918:10926 unknown command 1074553693 [ 988.222901][T10926] binder: 10918:10926 ioctl c0306201 20000200 returned -22 07:17:15 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @remote}}, 0xfffffffffffffe3d) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) readv(r3, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000040)={r3}) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000540)={0x6, @win={{0x1f, 0x9, 0x39}, 0x0, 0x1f, &(0x7f00000000c0)={{0x78e, 0x7f, 0x1ecb, 0xffffffff7fffffff}}, 0x6, &(0x7f0000000100)="5710de630a635656ce8d53f201427a3611fa5fa17d6353b606ecb9d06f6dcc4dfc3c664833869183de7711229a415ea3897d92657c2bc50f673ac32b78f9a8e5b1fccaf69ce7820cb42f", 0x1}}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 988.273688][T10931] binder: 10928:10931 ioctl c0306201 20000200 returned -14 07:17:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x40106308}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 988.452434][T11034] binder: 10981:11034 unknown command 0 [ 988.481929][T11034] binder: 10981:11034 ioctl c0306201 20000200 returned -22 [ 988.512399][T11045] binder: 10981:11045 unknown command 0 [ 988.522065][T11045] binder: 10981:11045 ioctl c0306201 20000200 returned -22 07:17:16 executing program 2: syz_open_dev$loop(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="8500000007000000250000000000000095000000ebffffff79c0aa0e000000000000b159d1063b3a25c0075206cfc36a7fd5bfd95200869da2b08d09020091945e405e11061b5132ee8223bb269eb6c26229a613337bf6e95a9cc67ed0431b9941f786a1287ca7b87ecce5b33a1d0651439bac0695c2aff6404b47"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f00000001c0)={0x8}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x16401, 0x0) 07:17:16 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) readv(r3, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x9a, 0xf1, 0x4, {0xc, @vbi={0x6, 0x9, 0x80000000, 0xb5315241, [0x3, 0x1], [0x200, 0x8], 0x246}}}) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x1, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000140)) 07:17:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x40106309}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:16 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) [ 988.971010][T11060] binder: 11056:11060 unknown command 0 [ 988.977953][T11058] binder: 11055:11058 ioctl c0306201 20000200 returned -14 [ 989.011860][T11060] binder: 11056:11060 ioctl c0306201 20000200 returned -22 [ 989.042939][T11063] binder: 11056:11063 unknown command 0 [ 989.048590][T11063] binder: 11056:11063 ioctl c0306201 20000200 returned -22 07:17:16 executing program 1: syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x80000000, 0x40) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fremovexattr(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x8c010) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000, 0x102) bind$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x0, @rand_addr=0x4}}, 0x1e) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev}}, 0x1e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 07:17:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x40406300}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008910, &(0x7f0000000000)="119c375e5e0b43b5bbb370") bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x13, 0x3, &(0x7f0000000100)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x75}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xcf, &(0x7f0000000200)=""/207, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x70) [ 989.232491][T11179] binder: 11175:11179 ioctl c0306201 20000200 returned -14 07:17:16 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) r2 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fremovexattr(r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(r1, r2) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f0000000040)={0x3, 0xffffffffffffffc9}) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev}}, 0x1e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x0) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f00000000c0)) 07:17:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x40406301}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:17 executing program 2: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$VIDIOC_S_EDID(r0, 0xc0485619, &(0x7f0000000140)={0x0, 0x4000, 0x72cd, [], 0x0}) 07:17:17 executing program 3: r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000000240)="db409511", 0x4) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r2 = semget(0x3, 0x0, 0x80) semctl$IPC_INFO(r2, 0x7, 0x3, &(0x7f0000000540)=""/175) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) keyctl$get_security(0x11, r1, &(0x7f0000000140)=""/81, 0x51) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r4, 0xab00, r3) r5 = fcntl$dupfd(r4, 0x27b323d8253ce3db, 0xffffffffffffffff) ioctl$RTC_AIE_ON(r5, 0x7001) r6 = socket$inet(0x2, 0x800, 0xfffffffffffffffe) r7 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) getsockopt$XDP_MMAP_OFFSETS(r7, 0x11b, 0x1, &(0x7f0000000340), &(0x7f0000000040)=0x60) r8 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r8, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r9, 0x800000c004500a, &(0x7f0000000300)) readv(r9, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r9, 0xab00, r8) getsockopt$bt_BT_VOICE(r9, 0x112, 0xb, &(0x7f00000001c0)=0x7, &(0x7f0000000400)=0x2) sendto$inet(r6, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r10, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r6, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) 07:17:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x40486311}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 989.687159][T11313] binder: 11309:11313 ioctl c0306201 20000200 returned -14 [ 989.731879][ C0] net_ratelimit: 21 callbacks suppressed [ 989.731887][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 989.743678][ C0] protocol 88fb is buggy, dev hsr_slave_1 07:17:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x40486312}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 989.811858][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 989.817773][ C1] protocol 88fb is buggy, dev hsr_slave_1 07:17:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x2}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 989.984318][T11423] binder: 11422:11423 ioctl c0306201 20000200 returned -14 [ 990.096105][T11493] binder: 11458:11493 unknown command 0 [ 990.110295][T11493] binder: 11458:11493 ioctl c0306201 20000200 returned -22 07:17:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x3}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 990.155989][T11528] binder: 11458:11528 unknown command 0 [ 990.175634][T11528] binder: 11458:11528 ioctl c0306201 20000200 returned -22 07:17:17 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000080)={0x8, 0x5, 0x80000000, 0x6, &(0x7f0000000200)=[{}, {}, {}, {}, {}]}) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getflags(r2, 0x1) r3 = dup(r1) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551b, &(0x7f0000000000)={0x9, 0x8, [0x0, 0x0]}) [ 990.305982][T11532] binder: 11531:11532 ioctl c0306201 20000200 returned -14 [ 990.333723][T11535] binder: 11534:11535 unknown command 0 [ 990.399712][T11535] binder: 11534:11535 ioctl c0306201 20000200 returned -22 [ 990.451067][T11631] binder: 11534:11631 unknown command 0 [ 990.471672][T11631] binder: 11534:11631 ioctl c0306201 20000200 returned -22 07:17:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x4}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 990.603962][T11644] binder: 11643:11644 ioctl c0306201 20000200 returned -14 [ 990.701875][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 990.707759][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 990.729663][T11733] binder: 11712:11733 unknown command 0 07:17:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 990.764284][T11733] binder: 11712:11733 ioctl c0306201 20000200 returned -22 [ 990.815356][T11753] binder: 11712:11753 unknown command 0 [ 990.830117][T11753] binder: 11712:11753 ioctl c0306201 20000200 returned -22 [ 990.848410][T11752] binder: 11751:11752 ioctl c0306201 20000200 returned -14 [ 990.856024][ C1] protocol 88fb is buggy, dev hsr_slave_0 07:17:18 executing program 1: socket$pptp(0x18, 0x1, 0x2) r0 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x81, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f00000002c0), 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) readv(r3, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) r4 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000340)=""/94) r5 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x370f38f199b392dc}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c0000009b7ee1952d5367d9453866994d11ead95a63fd5d49392913c8f86dfc1394f89d60b4fe9d7cff97bf002e5b7281ab8fca6cc2f4fb9e55b58937c35d64a729a207bfd783c49f09000000f7f009a8bfb1356bd16f013b8e526b061bb38adf05d7458d7ca5ed37cc51b6d30daf50e2ed10f509000000f34e77a08fc9c6e1b79416a96b472d4c30cc6aa2201cc7bebf6194e9dea5277daf7eeb", @ANYRES16=r6, @ANYBLOB="080028bd7000fcdbdf2503000000080002000300000008000300500f0000140001000000000000000000000000000000000114000100fe8000000000000000000000000000bb"], 0x4c}, 0x1, 0x0, 0x0, 0x404}, 0x810) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r7, 0x800000c004500a, &(0x7f0000000300)) readv(r7, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r7, 0xab00, r4) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e24, 0x2b9a, @rand_addr="61b163c95822f079f2fdd8f497dc1ae1", 0x4}, 0x1c) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r8 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r8, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) recvmmsg(r8, 0x0, 0x0, 0x0, 0x0) 07:17:18 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000080)={0x8, 0x5, 0x80000000, 0x6, &(0x7f0000000200)=[{}, {}, {}, {}, {}]}) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getflags(r2, 0x1) r3 = dup(r1) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551b, &(0x7f0000000000)={0x9, 0x8, [0x0, 0x0]}) [ 990.856073][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 990.861852][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 990.875496][ C0] protocol 88fb is buggy, dev hsr_slave_1 07:17:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x5}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:18 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000080)={0x8, 0x5, 0x80000000, 0x6, &(0x7f0000000200)=[{}, {}, {}, {}, {}]}) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getflags(r2, 0x1) r3 = dup(r1) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551b, &(0x7f0000000000)={0x9, 0x8, [0x0, 0x0]}) 07:17:18 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000001240)) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000340)=""/94) ioctl$sock_ifreq(r1, 0x891f, &(0x7f00000011c0)={'veth0_to_team\x00', @ifru_addrs=@l2={0x1f, 0x1000, {0x800, 0x21, 0x4, 0x6, 0x29e, 0xc6a}, 0x18, 0x7}}) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) readv(r3, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001180)={0x9}, 0x4) r4 = syz_open_dev$media(&(0x7f0000002600)='/dev/media#\x00', 0x97, 0x20000) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000002640)={'ah\x00'}, &(0x7f0000002680)=0x1e) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r5 = syz_open_dev$sndpcmc(&(0x7f0000001140)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) tee(r5, r0, 0x7fffffff, 0x0) sendto$llc(r2, &(0x7f0000000140)="7803f1d10010673edd2764a7dc67d1f05f733e51020d7adad1ff09972d59b96bda3ee430e569ae8ad9f851b27b8201f08c007b19c679572c23cdadb4472a7c46282610d1d99f7440be98f9e0b3f27d5497599134b2e8ec9c8c1bfa4c213736e5bc8231b1df628e2bd0233a1e51398c6aa0557dba7a8a91e6e087bc68942d47b38e3343f0d93374d5e69270877217f4217d831b5a8730d409f7dcc2caeffe2d54c0938563f802532a36a11415a9828ab634e2f6ad5e2f60450a7e9ea0941ea7155295eff3d2f56ed934a5f8b7a9a86bce373d3ff55f328b1ec267dccc7bb5deb005c2e6f8aa8c846de2be271521e19b6a1afe7cb589ed89c0b07aad54c5f2ccbc1cd177f804e7cebde1bdfda66ec4c9db24c6c2306bc70ec17cc5d60e2a623621aac52c8d4540385ca2e57d51e4b490867d0e16e69bc01f09febd68393f8305736e2160fc6a8070df9f0e2f3685fb9eff6423a6b910a373212fcaf7ee3da3a4bba0c369fe445b4b733e204da16ebeb864e1935262635c3d5a900b1861ed87af3fd68c0c2d1d6d6f3186e81399791ee90db09ee0db8c05369f50c5d954ca9ff43536e6e0ca09c3729bce51f83d90742ff7b6576a1b5cbde2289f9c2be8ffaf5e85b05aa1bc8ec50d0871d2fc2c1528862d6ff858ee99f91a4adabb9c0af1778a40bbc2f2aaacfd3732f71bfcb214fa73ff97d09a071f8716e919704f0750322b31f47a3a670c097dcc759f71f3508fd4975a283054df645ab649887c91806d26adbc17daacd66fb85cbd4b55a0400c8cd9206f96e88a28371a58b7dcd3e0e7d83eb5ffb6147c86dcab2ecc4182cdd771ed7d2fde085273b2ee7cacb6ef10c487170355f5a7c977e250489471d4550e94042ede156c0bbf361c7348b87bfa282a93a3c6c438cb12e71652e1bd94e3ee773b3f52a5d2a7759a93fe349c5ac3f5651134c16fba7b0046f43849a68d4648f38b8fc81a93b2f65fffb6c99e1a74c65aeb79e7094a7deae8b34bd9ba7c218c19ffdb2e141b4720aced8f2e3b915a5ddb1561b3e831210ecf00dd4a420e22e59907c3d61c7ada80062f0ebae5ebb1414f33921c34920a73b14c8b2d86f98adae96014eb2798966d4e884a13400512f7a4262d491c034a4d3e8e5b413f2639eb3c5eebfb0d39df628e7ac49a18d1551fbc929c066841750f951ad880ccfdb47b52f23d31b4400206478c26db20077599948dbef528e2f0213094ac795325b3daa0acddc585616ed8385e161fa39c368c303eca5b6c5aad441bd802f1999c308baea7a1baac5ff8eb1ce6d4ba1bfd17e962e65ca04f0f53185439a12e6b225662f5c935db7a7f5dee2275bf2f38e331eb03934ff8c65feefd6a9e1f046a0dd92d2b3b7ecc4a6ca7bb4479be643aa703d1cbef8be75b3288b75132d6a2c7b4af436b8cb4418e753758ad1fc6b79f0dad161bd0eea3a0263d4c1bd58107f77660e038058bfd389050ec9c50e8b61686a8e9609abab5a7b65ea475c05a4740552d9925141f8538b6fc64981849f84c319ec42bf720dda6b93717948695c04c2cccc91e5462360e87c88bf8ae8a27871d30dfad466c7798c14980d2bc2b97cf70974931eeb6ef4a07474ad7791c290ad393da875cc4b8725cd12635f5aa6cbfe3a8c26650ae6143f782e45e7490dfc47a8408c963a657ce29e6d5974ab2153de8d488d6e0153aa8a1820607d1e6581d7be7de79f81f2a8244f63f3f6a0a31048ef2c5f032726465d21f241adde6d77f653503c0cf024304157f8ed1975b7cf81d967b0c0a4231ba02a7224a506773fd8ba91455a04d23fc09757d4ce5696d44e556a1a2aa980836531d9d4bd29e20226b3cbacbb2ed9447b57a39a0e72aa3333812c1e83bc8cfd0efd60a9205ef96d99ab309ae87c808b759c4cc6575638c076e1637cceece3d5880393e47a3407bacfd6e1bfcb07197c818fb7ad783db112012f81a3fc13294102f2f98081dd06b9de1683c705e38d3f3945585d833ba5c5044bfcf387258d1f251be5fa1f98fc23d15026454025716a2b80618fe37f45cdd78f5d6fb06955b98d12f2d61bd26d31db282681595d53e1d98c2b39ab34a397ed155878a57bea48bf11c2e9d558aadcd3a1a2303ba8ddebf12173afc1dce8073aff0e3aa6189afa2fd019b75a65276791006f96169ab91410e1afc5cec7ed29654ed9ede8b7bc7a359f897f30c15a15175d15a35f1a35f682451873b6bd6092dfb9868f64a7f3701ee70bfb25f4c644b3609ddb17423230159a6283d68a7b74a89de1f9562c9567deeb172ec2c2c029ab5843208ba926f6496cd5513c8aa37f10cdea72187aea927190497cbc03af297c8fb58b4fa76da4b6ed4a459636510c1ca7a8e5090e37089eff9ed9d222b078dee09eac75950ff8a296953e536badcef0ade21b9b738659e6b44fec6895e7c7a0d58a31c687e2e1de15102ea8d55f544b4fcb357cb85204564e39a2cb7dc550d11acdce44f0f31015c18522448c24a9075fd8173b11cd1d542f676af8cfc93faf7b7ba4650b958d889d298e627bb8f5f4e98ddd977a35333c41421cd42449c4d7d326796fdb5fe0c9a983702fd3d192f433ac18ca755083287486c642242566e62fe5937f98d834d807d42560edb4481e1b216e8f3a6dd26a97bf079a4dba542f49e34bfe286c560f36cfe58559971e7f15726dca0c2c8c381331928b2e9cca22ec7a9590e1bf55fa252a57ff5636d2aa989e3937cc947c9227966a948f93eab75d3291519989bca4ebc5f6300af3375a426d5d99696a880c468b0f625b167d95e25dbd12b4e017d99e51b82a29b7f8e722898644ffc8f5e4c795a1fbaf8f2d7adf06c118f9e78b59aeabbcde7142d9acce1e44e3d200183c0bcb94cb40a005f93da5183cbc8be89db5af5ada4e9d90bf0cdb2c1dcac512907b734550cfbd942e1b6ae72aeb5c1ecf577aed5187cc36da305bdbe55a241ef29c9368d8daa0b544a663e7c1a85141a49c1458933a3b6055f46a8bac0a830814f1cf2e9a984555488db137f9384e7eb41a5d7dcf77671f930927cbf3ba9291e588b600b6df7eae6b84b8c1880ff2aed14086f84ffbc16c73b96bdf4d8461ce4d0610504cb59aea434873a58b6a0cba06f4bb7cf510044c78a94688cdf70168a7bc0a88b900349e8fad72e8f6c06fa3e4d1a7b78a15da273b805476280d4761b8231b0dbbd94324789cadc92db2947fe32f1d3bd84cbbabc513b41fdf5002868ae8888def9eea21ba3b7a93d9e3dab2bec13a2ef0690fa0a3eb59409bc306729ceda207f0c2063e76493ea1a400ac9337b0aa1c1ab013f8d3e940d7af7cefa26cf90a466b26d8ad41a7fea0cce86a39e087bed7e4fd73b8151cbdaf098eb5b5711c071d285c69daebc1a8df9741880b954e7031aa539e3a3ed65b48b23e7b7ab0063721a2193c4ef2b98297a7539b6c3b7908e5d4987272e217ad8336e8831b136806d92c7552b79c594cdb6825c939d6213b813df10db90564a702efe94c7741c60c45baaf6433866bf544a12a4d00af67a19fd2401ea3b3f20b4cf5234c97c7267422e616d00d03b615e557e7534186d27b0a63f2bbfdbd16d5e595c23f36a77989a1bb7c37730907b515a9691ca77240eeb888e2d63464278913fd447bd70939c0ac8a16d6a58301987bf58bead000fea5dc31a8bafd510fcf83a17cf6816add5295cba9dd9ec7daba69d196f8495108b5e8b7adf0756b6fece282dd009635bc2c7a1895037cf5ca34fa5b8577537b1076d15bc5fd28e7c6fdc69a5c5428871883d0f157e7bc55a9cd86340e4d3ad23ae388b97e40167f5e9567f1cb729df8cee1d1b0854db719560f6f2b983a37b737c09a0357d5a8bbf6d4f8e5fb2dee2ba55fc61983565646b6ac903b3e580081af43dbcd21cf073cbe37f8ff43cc22995568586f50fe8a386cc3934ce7d22dd84e1ec42ea78353b66f856379b9b5a0479732c7c00edcff3630cc615fa28c363b52e68ec1bfb8b01c4f90730caac1b4638cc997c8bd8155d1e7108fd46cf850b8a0f15ab2543e1225e777c0794ced92f32c0c51b584dd338a0ed8fd4645fcd9a078093ae27745a2a28bea89c9d42d7331e9869587a1cfbab0e5f3c6d65d8fbf577fdb1ce32845a7584f0ac0bd61f814311d28779361f473622668a1c736ff8bd921249e811550bba596817cf323b0aa23ec715ebf821b91ce7e0f62505c056315b7a6d6df244d62c3d70508ede15dab53be54e8f67d22b17a54c67c3a7df6c33cabd6fa19b7cd853ca1ff6eceb6b91806b8d0f5f50970c1c0cf55df5c8ab007ab924b4ce0e1c3d0a1e5e00a7bd002f585ef173b39716f1facf34afd8942f39bd1732860c8cdb7e263dd33bc4a9c19de0c3798a12e35e34f1c118431ad49ab612c051cabe7e7613557ed2405b320f4bf772cd3e771925141c84bcccfa7dc8e74757e26605461729a5a6fe47ecf757c94533a29b4b719ea4eaa679183e2d68bafc410a21f785de633d239f9f11b423488f9182c5533c9cdd8a8f0baf05c98320902d6f95a205e5f558331aa1a1ecdc85a693bc6e0485ea418865ff05303fb6d11b2d9c5390ca0078701bb60923f50e24b1f3221cf7bd2a1432cf8c1509e5534c8bbda9fa0aef3a61a88782b50c89e968ddbc07cd851f164133efa28236d1be18b42fa418a64352fe020563747aacf18a8d68d63fbd23e98ed26a1451b92a607ca3d56892a831f1a1b0681fc30e8b7212f31213941f41f240e99107d7eeaa29c9b7d400355d2fd3d200d440a7385797c44c6946d8bfce661a9922b8060ed854edd0d95f0f29ef4e607b15daf46895d7cc61ba835f66f2150b8cb16c134114bbbb7f749b8eb747fca069e3adaae2eb48aef2c8db86adcf9b3c81ae2c9de5e13a2ed39fa72dea971dbe3b010b1243d3a3b35350f38aeeefd81e9645c3ef0501ba778c26276a9678df1569470d9ca37317e9efb397f4cdacc5ab87cf58236efbf1049baea5f04e7b179f99227c98ec2866965e5d4423302a3770830e119e297c82a7fbf005f0deda2ad09a9b0772b472db61577c448f11c8fd6ee6e3fb88793a0223e507d5443201f916cb42baa32fce0416b78823f7fa7b5d0946fccfe26aeef8a5dcb182b52f9b1a450a0987f3c2593caa3544e35f85f43cf0dff5323570e357127d701d14e6db0b7038f8225fc30f07ad4bc14c12a63fe04930b0c5b38898cf94e493418fec42703c495fec31bd03b19b7ef8ffae72167bee618227c87f7da15b6f44939a0424e3f1bb53ee87cff52c32a1a0dd1e4710ab3a43f8ce058f0bbbea0b36b7f8d105187dc4948cafe65dcbffaa2ec272db351dcabbe35f4cc90b2d132af9d58f79ac1003cf276f69d8924380961e73f82cea58a22ea4d281626f49f7c4cef3e62815208fa49eb0b38b0501283bb75f0a75c91cb3369aa138b26a43f68ff3cfd45a11416d899cec1e7d885eb3160824cd015c162be65858c389831b8fd360822ee734dc0590c8b2dc6b5356d661e37e07d446dd4d35ac8cbdc58172f0d9da5c8aa3d8f33ff64269ace2616ee57a54b0db38d069dedb4d4adb89248baa82b354f54498e091b14f73d33ffbaac2a7f82760d0de835acd5036dadbe7cc686f7f2e5cde45e97bc2a229601f1641eec4b51c52686b3f7c13735afd5f24e2fc0b00b0060e957127501dec379b67d81ca48e951eebe611a42f31a8cdc3a2184a7446bd79b9d8d686ad698d423712ba20dc0580825f14e892b1fbc4554a12c0171f3d4c5e904aa994a43ab7155505239c48b758e1d50134b6d4678db5b545", 0x1000, 0x4004000, &(0x7f0000000040)={0x1a, 0x7fd47faba6202d32, 0x5f, 0x2e8, 0x5, 0x81, @local}, 0x10) r6 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r6, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r7, 0x800000c004500a, &(0x7f0000000300)) readv(r7, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r7, 0xab00, r6) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="ffd722dce20f92597102784bad12b4ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r9}}, 0x48) pread64(r8, &(0x7f00000004c0)=""/232, 0xe8, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r8, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r9}}, 0x18) write$RDMA_USER_CM_CMD_CONNECT(r7, &(0x7f0000001280)={0x6, 0x118, 0xfa00, {{0x9, 0xebcd, "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", 0xe3, 0x9, 0x2, 0xfe1, 0x1b4, 0x81, 0x7039, 0x1}, r9}}, 0x120) r10 = openat$cgroup_ro(r5, &(0x7f0000001200)='cpu.stat\x00', 0x0, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r10, 0x10f, 0x86) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) 07:17:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 991.094844][T11862] binder: 11861:11862 unknown command 0 [ 991.123717][T11862] binder: 11861:11862 ioctl c0306201 20000200 returned -22 [ 991.190118][T11869] binder: 11861:11869 unknown command 0 [ 991.201985][T11869] binder: 11861:11869 ioctl c0306201 20000200 returned -22 07:17:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x6}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 991.304548][T11874] binder: 11870:11874 ioctl c0306201 20000200 returned -14 [ 991.445713][T11977] binder: 11917:11977 unknown command 0 07:17:19 executing program 2: mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0420eb673afdbb990f785575192e2d0d83538c57b4f1a09301363a8520a54a95a0a13f4aea47f126d4a9e0a1e40656b37c0d183212629269c8c45420de69b142e25d2d06"]) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x1, 0x1, 0x1800000000, 0x3e, '\x00', 0x2}, 0x6, 0x4, 0x8, r1, 0x3, 0x7, 'syz0\x00', &(0x7f0000000100)=['cpuset\x00', 'selinux$&\x00', '\x00'], 0x12, [], [0x7, 0x401, 0x4, 0xff]}) r2 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="15000000180081f7ffffffecff191f151d01e2c8e3", 0x15}], 0x1}, 0x0) 07:17:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 991.494013][T11977] binder: 11917:11977 ioctl c0306201 20000200 returned -22 [ 991.548207][T11978] binder: 11917:11978 unknown command 0 [ 991.576611][T11978] binder: 11917:11978 ioctl c0306201 20000200 returned -22 [ 991.594364][T11983] PKCS7: Unknown OID: [5] (bad) [ 991.617700][T11983] PKCS7: Only support pkcs7_signedData type [ 991.629976][T11984] binder: 11982:11984 ioctl c0306201 20000200 returned -14 07:17:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x7}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 991.648073][T11983] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 991.716009][T12080] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. 07:17:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 991.805956][T12094] binder: 12089:12094 unknown command 0 [ 991.815153][T12094] binder: 12089:12094 ioctl c0306201 20000200 returned -22 [ 991.846090][T12094] binder: 12089:12094 unknown command 0 [ 991.859882][T12094] binder: 12089:12094 ioctl c0306201 20000200 returned -22 07:17:19 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev}}, 0x1e) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x0, 0x401, 0x6, 0x8001, 0x3, 0x3, 0xd602, 0x2be, 0x38, 0x371, 0x101, 0x80, 0x20, 0x1, 0x8, 0x1000, 0x3}, [{0x7, 0x7, 0x7, 0xe604, 0x7, 0x1, 0x4}, {0x7, 0x80000001, 0x8000, 0x6, 0x2, 0x7, 0xe3, 0x100000000}], "cbda8bab61a0c3622e70b0224a4005a611c70226940ef2e715d4c17d64b79468f4c7bf1536f5ce7a24d1d033f811bf04ce23dc0db99d225039eed5a470cf04f71e8e6a0400164f89b939e63632afd52eb7d7e6d62be2862d5207e75a75b717649a5f3d282fed0b58ecf321c0d123f4dddb3efd602c3650dfeed3d05733f21214eab22cee20ee722491da44f33f96327f11e789576f2813b5b47574049936542f4a1f664c3c4b97c6e474840fa4d1b37cdcf750500308d03ae16a748630f24cc3a12cec31b385b0543558", [[], [], [], []]}, 0x542) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 07:17:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0xa}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:19 executing program 2: sysfs$1(0x1, &(0x7f0000000000)='%\x00') setreuid(0x0, 0xee00) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x200080, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000e00)={0x20, r3, 0x505, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) r4 = syz_open_dev$mice(0x0, 0x0, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000840)={@dev, @remote, 0x0}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000940)={0x1d, r5}, 0x10, &(0x7f0000000a80)={&(0x7f0000000a00)={0x5, 0x1, 0x0, {0x77359400}, {0x77359400}, {0x0, 0x0, 0xffffffff, 0x2}, 0x1, @can={{0x0, 0x9, 0xd891, 0x51c}, 0x0, 0x2, 0x0, 0x0, "2f776d8ffd71e2cd"}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r6 = syz_open_dev$mice(0x0, 0x0, 0x0) getsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f0000000840)={@dev, @remote, 0x0}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000940)={0x1d, r7}, 0x10, &(0x7f0000000a80)={&(0x7f0000000a00)={0x5, 0x1, 0x0, {0x77359400}, {0x77359400}, {0x0, 0x0, 0xffffffff, 0x2}, 0x1, @can={{0x0, 0x9, 0xd891, 0x51c}, 0x0, 0x2, 0x0, 0x0, "2f776d8ffd71e2cd"}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x118, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8, 0x1, r7}, {0xb8, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}]}}]}, 0x118}, 0x1, 0x0, 0x0, 0x20010}, 0x80) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) [ 991.977742][T12100] binder: 12098:12100 ioctl c0306201 20000200 returned -14 07:17:19 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x5) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000140)=@caif=@dbg, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/81, 0x51}, {&(0x7f0000000240)=""/153, 0x99}, {&(0x7f0000000300)=""/86, 0x56}, {&(0x7f0000000380)=""/86, 0x56}, {&(0x7f0000000400)=""/113, 0x71}, {&(0x7f0000000480)=""/137, 0x89}, {&(0x7f0000000540)=""/113, 0x71}, {&(0x7f0000000040)=""/38, 0x26}, {&(0x7f00000005c0)=""/196, 0xc4}, {&(0x7f00000006c0)=""/240, 0xf0}], 0xa, &(0x7f0000000880)=""/26, 0x1a}, 0x80) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) [ 992.090658][T12117] binder: 12109:12117 unknown command 0 07:17:19 executing program 2: socket$pptp(0x18, 0x1, 0x2) r0 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x81, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f00000002c0), 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) readv(r3, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) r4 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000340)=""/94) r5 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x370f38f199b392dc}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c0000009b7ee1952d5367d9453866994d11ead95a63fd5d49392913c8f86dfc1394f89d60b4fe9d7cff97bf002e5b7281ab8fca6cc2f4fb9e55b58937c35d64a729a207bfd783c49f09000000f7f009a8bfb1356bd16f013b8e526b061bb38adf05d7458d7ca5ed37cc51b6d30daf50e2ed10f509000000f34e77a08fc9c6e1b79416a96b472d4c30cc6aa2201cc7bebf6194e9dea5277daf7eeb", @ANYRES16=r6, @ANYBLOB="080028bd7000fcdbdf2503000000080002000300000008000300500f0000140001000000000000000000000000000000000114000100fe8000000000000000000000000000bb"], 0x4c}, 0x1, 0x0, 0x0, 0x404}, 0x810) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r7, 0x800000c004500a, &(0x7f0000000300)) readv(r7, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r7, 0xab00, r4) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e24, 0x2b9a, @rand_addr="61b163c95822f079f2fdd8f497dc1ae1", 0x4}, 0x1c) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r8 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r8, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) recvmmsg(r8, 0x0, 0x0, 0x0, 0x0) [ 992.131955][T12117] binder: 12109:12117 ioctl c0306201 20000200 returned -22 07:17:19 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev}}, 0x1e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r4, 0xab00, r3) signalfd4(r4, &(0x7f00000001c0)={0x2}, 0x8, 0x800) r5 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x2) r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, &(0x7f0000000240)) readv(r5, &(0x7f0000395000), 0x1000000000000121) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3, 0x6, [0x5, 0xfff, 0xfffffffffffffffc, 0x7, 0x80, 0x80000001]}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000000c0)={r7, @in={{0x2, 0x4e23, @multicast1}}}, 0x84) 07:17:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 992.203412][T12215] binder: 12109:12215 unknown command 0 [ 992.237500][T12215] binder: 12109:12215 ioctl c0306201 20000200 returned -22 07:17:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x12}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 992.370149][T12225] binder: 12224:12225 ioctl c0306201 20000200 returned -14 07:17:20 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) sendto$inet(r0, 0x0, 0x0, 0x20000040, &(0x7f0000000140)={0x2, 0x4e23}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80, 0x0) ioctl$PIO_FONT(r5, 0x4b61, &(0x7f00000001c0)="7ff74d9df56791adee24803b884041d3d38cb217b72becca87e333f30d7ac44b52e68923eef2cb2b47cb8cd7caa4330ff9a16598963a6ca4") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) [ 992.444002][T12242] binder: 12229:12242 unknown command 0 [ 992.474997][T12242] binder: 12229:12242 ioctl c0306201 20000200 returned -22 07:17:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 992.513372][T12330] binder: 12229:12330 unknown command 0 [ 992.529566][T12330] binder: 12229:12330 ioctl c0306201 20000200 returned -22 07:17:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x48}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 992.705687][T12343] binder: 12341:12343 ioctl c0306201 20000200 returned -14 [ 992.728453][T12347] binder: 12344:12347 unknown command 0 [ 992.741708][T12347] binder: 12344:12347 ioctl c0306201 20000200 returned -22 07:17:20 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="77000000fa2df371496e7d396432c0a5186ce6eee89322de94aafb839b4d6e47d1c7eff49fa63380273d6b0f9b9218dc415fd1027b80d152a6d384cf49fd05507b26dd5abcdea418e835b6c5f2453e67b99752a45c245d89bc55dbcf547b7ed4f0a3431ebe331cc1ef4fba9f80a0d200"/123], &(0x7f0000000200)=0x7f) r1 = socket(0x10, 0x2, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x71, &(0x7f0000000040)={r3}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x5, 0xfffffe0000000000, 0x202, 0x7, 0x1fffc000000, 0x89c, 0x3ff, 0xfc, r3}, 0x20) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x40, 0x0) ioctl$BLKRAGET(r6, 0x1263, &(0x7f0000000140)) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x101200, 0x0) ioctl$UI_END_FF_ERASE(r7, 0x400c55cb, &(0x7f00000002c0)={0x0, 0x3f, 0x101}) sendto$inet(r4, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) [ 992.778616][T12392] binder: 12344:12392 unknown command 0 [ 992.793771][T12392] binder: 12344:12392 ioctl c0306201 20000200 returned -22 07:17:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x4c}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60ff, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 993.033391][T12457] binder: 12455:12457 unknown command 0 [ 993.044134][T12459] binder: 12456:12459 ioctl c0306201 20000200 returned -14 [ 993.049723][T12457] binder: 12455:12457 ioctl c0306201 20000200 returned -22 07:17:20 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev}}, 0x1e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) lseek(r3, 0x0, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) readv(r5, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r5, 0xab00, r4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r6, 0x6609) r7 = fcntl$dupfd(r6, 0x406, r3) write$P9_RFLUSH(r7, &(0x7f0000000000)={0x7, 0x6d, 0x2}, 0x7) [ 993.080527][T12478] binder: 12455:12478 unknown command 0 [ 993.108657][T12478] binder: 12455:12478 ioctl c0306201 20000200 returned -22 07:17:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x60}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6800, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 993.323879][T12570] binder: 12569:12570 unknown command 0 [ 993.341109][T12570] binder: 12569:12570 ioctl c0306201 20000200 returned -22 07:17:20 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x4, 0xd4) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x0, 0x4040880, 0x0, 0x0) [ 993.384049][T12575] binder: 12574:12575 ioctl c0306201 20000200 returned -14 [ 993.432816][T12580] binder: 12569:12580 unknown command 0 [ 993.458519][T12580] binder: 12569:12580 ioctl c0306201 20000200 returned -22 07:17:21 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000002, 0x400002172, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x3, &(0x7f0000000100)=0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000100)=@keyring={'key_or_keyring:', 0x0, 0x2}) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000100)=@keyring={'key_or_keyring:', 0x0, 0x2}) r5 = request_key(&(0x7f00000001c0)='rxrpc\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)='&\\-nodev$\x00', r4) r6 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r3, r5, r6, 0x1) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r5) 07:17:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x68}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 993.683363][T12694] binder: 12690:12694 unknown command 0 [ 993.708903][T12694] binder: 12690:12694 ioctl c0306201 20000200 returned -22 [ 993.738238][T12696] binder: 12693:12696 ioctl c0306201 20000200 returned -14 [ 993.757071][T12697] binder: 12690:12697 unknown command 0 [ 993.806687][T12697] binder: 12690:12697 ioctl c0306201 20000200 returned -22 07:17:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7400, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x6c}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 993.971409][T12803] binder: 12802:12803 ioctl c0306201 20000200 returned -14 [ 993.993860][T12806] binder: 12805:12806 unknown command 0 [ 994.014445][T12806] binder: 12805:12806 ioctl c0306201 20000200 returned -22 07:17:21 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0xfffffffffffffeb4) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000140)=""/211, &(0x7f0000000040)=0xd3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) readv(r3, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r4 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) readv(r5, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r5, 0xab00, r4) accept4$vsock_stream(r4, &(0x7f0000000540)={0x28, 0x0, 0x2710}, 0x10, 0x81800) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000580)='ip_vti0\x00', 0xe) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) r7 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r8, 0x0, &(0x7f0000000300)) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r9, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r9, 0x0) lseek(r9, 0x0, 0x0) r10 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fremovexattr(r10, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) readv(r10, &(0x7f0000395000), 0x144) ioctl$NBD_SET_SOCK(r8, 0xab00, r7) r11 = socket(0x10, 0x2, 0x0) close(r11) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r11, 0x84, 0x71, &(0x7f0000000040)={r13}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r7, 0x84, 0x78, &(0x7f00000002c0)=r13, 0x4) r14 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cachefiles\x00', 0x200000, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r14, 0x89e7, &(0x7f0000000280)={0xd}) [ 994.050623][T12809] binder: 12805:12809 unknown command 0 [ 994.095612][T12809] binder: 12805:12809 ioctl c0306201 20000200 returned -22 07:17:21 executing program 1: socket$pptp(0x18, 0x1, 0x2) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x100, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x949e0f540272b5aa) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 07:17:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x74}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7600, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:21 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x108}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x100, 0x70bd28, 0x25dfdbfd, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0xf839}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x33df96786ed4f9b2}, 0x4000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) [ 994.320594][T12921] binder: 12917:12921 unknown command 0 [ 994.336873][T12921] binder: 12917:12921 ioctl c0306201 20000200 returned -22 [ 994.348926][T12924] binder: 12920:12924 ioctl c0306201 20000200 returned -14 07:17:22 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80000, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x11, @initdev, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) [ 994.401315][T12925] binder: 12917:12925 unknown command 0 [ 994.431894][T12925] binder: 12917:12925 ioctl c0306201 20000200 returned -22 07:17:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x7a}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:22 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev}}, 0x1e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x7d8c, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f00000000c0)) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) r4 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r6 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r6, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r7, 0x800000c004500a, &(0x7f0000000300)) r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/capi/capi20\x00', 0x2, 0x0) readv(r8, &(0x7f0000000240), 0x0) ioctl$NBD_SET_SOCK(r7, 0xab00, r6) r9 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x800, 0x2000) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r9, 0x81785501, &(0x7f00000003c0)=""/172) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) readv(r5, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r5, 0xab00, r4) ioctl$TIOCCONS(r5, 0x541d) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r10, 0x800000c004500a, &(0x7f0000000300)) readv(r10, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r10, 0xab00, r3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000000600)="c195262c76ad4d9fccaad4a4cfba0100000000000000000045f9751819ad964103b91cd70bc2afab7631db77968844424e89eb7a44c52140017771118f14ca83848de721b03467538100cdd31f1c51ccab4595d8c998626d380d1384aefccc73d39ae60a669d6a5fefa9c64e03a3887c75de74e3d10e6de887b7b156d0eb307535caad2b51f9a88fff0c0be737a082a38390bbd2942cb3929bc9c218188d6305f59e0ef6e080135717a3db7994bcb00e34e0f34dc2ed30f43f13994f732b53d9daa5ee6d8c5fed8cc67608e1c9005838e8", 0xd1, r3}, 0x68) readv(r2, &(0x7f0000395000), 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$VIDIOC_RESERVED(r1, 0x5601, 0x0) [ 994.675379][T13038] binder: 13036:13038 unknown command 0 [ 994.706219][T13038] binder: 13036:13038 ioctl c0306201 20000200 returned -22 [ 994.716764][T13041] binder: 13040:13041 ioctl c0306201 20000200 returned -14 [ 994.730523][T13042] binder: 13036:13042 unknown command 0 [ 994.753846][T13042] binder: 13036:13042 ioctl c0306201 20000200 returned -22 07:17:22 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000440)='/dev/audio\x00', 0x200a82, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) readv(r3, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r4 = openat(r2, &(0x7f0000000040)='./file0\x00', 0x80, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1d, 0x0, 0x80000000, 0xfffffffffffffffc, 0x9, r0, 0x9, [], 0x0, r4, 0x4, 0x5}, 0x3c) bpf$PROG_LOAD(0x14, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="a9008400000000004cfb6c1d3653cd05009500000000000000ed0000c19576b82a94431fd3791b5b2350017c3627fd024a6e27408619e42e46ea4b40859f713913b7d881097179c7f4d5a5efb3b8"], &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x0, 0xfd13, &(0x7f0000000240)=""/195}, 0x26) 07:17:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x1a0}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 994.851868][ C0] net_ratelimit: 17 callbacks suppressed [ 994.851877][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 994.863485][ C0] protocol 88fb is buggy, dev hsr_slave_1 07:17:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9600, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 995.011846][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 995.011851][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 995.011927][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 995.017703][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 995.025083][T13152] binder: 13151:13152 unknown command 0 [ 995.029315][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 995.046404][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 995.070692][T13155] binder: 13154:13155 ioctl c0306201 20000200 returned -14 [ 995.111907][T13152] binder: 13151:13152 ioctl c0306201 20000200 returned -22 07:17:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff00, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 995.170505][T13258] binder: 13151:13258 unknown command 0 [ 995.187687][T13258] binder: 13151:13258 ioctl c0306201 20000200 returned -22 07:17:22 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000140)={0xffffffffffffffff, 0x9, 0x8, "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"}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000540)="53407167dd84444d7e07629a12e656a5b00e9dc129bd304a6b59e69784688581895b9252a334cf6b63a5c35e4983c9ad1ce0f58f4ebc3bafceba7d34c6911fa0ddfe24b44debd9c714571f677742f8db95e0668e6f8655bd456ba62e1be7ea2598e1cbf1095c214ea3afa0678fecea946506115469513b04f7c7d6ae6466009c7f68eddb402dde3cdfc692d1f16d026080c5ecc0341928680bdf971f5a7f1d6886c6858fe08b8e8ffd752ad8bb5d6c8bb04ae9deb425371fda94f45f329b0d19fc83189437aef17a", 0xc8, 0x8000, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r2, &(0x7f0000000040), 0x7564c14c40b01f30, 0xe0, 0x0, 0x150) 07:17:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x300}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 995.272431][T13261] binder: 13259:13261 ioctl c0306201 20000200 returned -14 07:17:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 995.459408][T13368] binder: 13355:13368 unknown command 0 [ 995.472749][T13368] binder: 13355:13368 ioctl c0306201 20000200 returned -22 [ 995.483840][T13369] binder: 13355:13369 unknown command 0 [ 995.490912][T13369] binder: 13355:13369 ioctl c0306201 20000200 returned -22 07:17:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x500}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 995.569787][T13376] binder: 13374:13376 ioctl c0306201 20000200 returned -14 07:17:23 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev}}, 0x1e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000000)={0x1, 0x5}) [ 995.659823][T13392] binder: 13377:13392 unknown command 0 [ 995.679603][T13392] binder: 13377:13392 ioctl c0306201 20000200 returned -22 [ 995.712648][T13444] binder: 13377:13444 unknown command 0 [ 995.730306][T13444] binder: 13377:13444 ioctl c0306201 20000200 returned -22 07:17:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x50f000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x600}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 995.971307][T13492] binder: 13487:13492 ioctl c0306201 20000200 returned -14 [ 995.982217][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 995.988071][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 996.006586][T13493] binder: 13491:13493 unknown command 0 [ 996.020420][T13493] binder: 13491:13493 ioctl c0306201 20000200 returned -22 [ 996.039941][T13537] binder: 13491:13537 unknown command 0 07:17:23 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0xff) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setxattr$security_smack_entry(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='security.SMACK64EXEC\x00', &(0x7f0000000180)='sit0\x00', 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) [ 996.071247][T13537] binder: 13491:13537 ioctl c0306201 20000200 returned -22 07:17:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x700}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x707100, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 996.306563][T13608] binder: 13605:13608 unknown command 0 [ 996.321959][T13608] binder: 13605:13608 ioctl c0306201 20000200 returned -22 [ 996.356540][T13612] binder: 13605:13612 unknown command 0 [ 996.367830][T13611] binder: 13609:13611 ioctl c0306201 20000200 returned -14 [ 996.407327][T13612] binder: 13605:13612 ioctl c0306201 20000200 returned -22 07:17:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0xa00}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:24 executing program 1: socket$pptp(0x18, 0x1, 0x2) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x20002, 0x0) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0xfffffffffffffd5b) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4e128, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x1) 07:17:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x70e000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 996.609633][T13719] binder: 13718:13719 unknown command 0 [ 996.631841][T13719] binder: 13718:13719 ioctl c0306201 20000200 returned -22 [ 996.667997][T13722] binder: 13718:13722 unknown command 0 [ 996.678064][T13722] binder: 13718:13722 ioctl c0306201 20000200 returned -22 [ 996.716536][T13724] binder: 13721:13724 ioctl c0306201 20000200 returned -14 07:17:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0xb63}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 996.860135][T13780] binder: 13778:13780 unknown command 0 [ 996.879809][T13780] binder: 13778:13780 ioctl c0306201 20000200 returned -22 07:17:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x717000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 996.907719][T13829] binder: 13778:13829 unknown command 0 [ 996.925159][T13829] binder: 13778:13829 ioctl c0306201 20000200 returned -22 07:17:24 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x1008100000000a}}}, 0x1e) pipe(&(0x7f0000000000)={0xffffffffffffffff}) connect$x25(0xffffffffffffffff, &(0x7f0000000180)={0x9, @remote={[], 0x1}}, 0x12) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f00000001c0)={'nlmon0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) read$rfkill(r3, &(0x7f0000000380), 0x8) r4 = socket(0x10, 0x2, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x71, &(0x7f0000000040)={r6}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000000c0)={r6, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x401, 0x3, 0x10001, 0x0, 0x9}, &(0x7f0000000040)=0x98) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 997.008141][T13832] binder: 13831:13832 ioctl c0306201 20000200 returned -14 07:17:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0xc63}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 997.120233][T13897] binder: 13883:13897 unknown command 0 [ 997.139368][T13897] binder: 13883:13897 ioctl c0306201 20000200 returned -22 [ 997.161445][T13941] binder: 13883:13941 unknown command 0 07:17:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x760000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 997.189400][T13941] binder: 13883:13941 ioctl c0306201 20000200 returned -22 [ 997.273670][T13946] binder: 13944:13946 ioctl c0306201 20000200 returned -14 07:17:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0xd63}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x960000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 997.410163][T14051] binder: 14050:14051 unknown command 0 [ 997.437199][T14051] binder: 14050:14051 ioctl c0306201 20000200 returned -22 [ 997.466132][T14054] binder: 14053:14054 ioctl c0306201 20000200 returned -14 [ 997.470656][T14055] binder: 14050:14055 unknown command 0 [ 997.491122][T14055] binder: 14050:14055 ioctl c0306201 20000200 returned -22 07:17:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x1200}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe07000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 997.691166][T14162] binder: 14159:14162 unknown command 0 [ 997.714487][T14162] binder: 14159:14162 ioctl c0306201 20000200 returned -22 [ 997.739619][T14163] binder: 14161:14163 ioctl c0306201 20000200 returned -14 [ 997.760286][T14164] binder: 14159:14164 unknown command 0 [ 997.779719][T14164] binder: 14159:14164 ioctl c0306201 20000200 returned -22 07:17:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf05000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x2000}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:25 executing program 2: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x1000)=nil) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000001400bfa30000000000000703000000feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000811e6403000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)=r1, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)='numa_maps\x00', r1}, 0x30) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000001400bfa30000000000000703000000feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000811e6403000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)=r4, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r2, 0x0, 0xa, &(0x7f0000000100)='numa_maps\x00', r4}, 0x30) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) r5 = syz_open_dev$mice(0x0, 0x0, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000840)={@dev, @remote}, 0x0) write$FUSE_ATTR(r5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000640)={0x0, 0xc70}, &(0x7f0000000680)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000800)={r6, 0x3, 0x4, [0x40, 0xac6f, 0x3f, 0x401]}, 0x10) fstat(r5, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000d40)={0x0}, &(0x7f0000000d80)=0xc) lstat(&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000fc0)=0x0) sendmsg$unix(r5, &(0x7f0000001280)={&(0x7f0000000b00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000b80)="6a5a89e487465d7d3c6d059d253a953641c6c11fca2f352b11bc10f36b1b9ebb028573aff77526a64723", 0x2a}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000002640)="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", 0x1000}], 0x3, &(0x7f0000001200)=[@cred={{0x1c, 0x1, 0x2, {0x0, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, 0x0, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11}}}], 0x60, 0x4080}, 0x4000) r12 = syz_open_procfs(r9, &(0x7f0000000380)='attr\x00(F\x9d\xc2\xe2\x9aF\xe3`1Dh~\xa4\xb2d\xcbQ\xcd\x15\xe2\x92k-5\x04\x8e=\xa5\xe0\xdb\xae\nn8\x96[\\\xb4e\xbb\xc4@\x9a/0\xe6\xf0\x85\x9c?\xb7\xf7\xa4\x83S\x8d\xfc3\x10\xc9s\xedsT\xd0\x1c\xc1G\x14!T\xd9~EK\x06-K\xd5u\xce\x06\x841#\xa9s\x1d\x1c\f\xc3l\x10M\x1e\xbc5:K\xc1\x129\x1bB\x044/uU\xd0<\xa9e]g\xcbW\xf8\x82\n{\t|\\\xe0\xbaT\x9f:H\x94\x8e\xa5a2\xd0\xccD\x1e\xc7\xcf\xa2\xa3\xfa\xcdoS\xe1\x96\xc7\xf2#\xe1\x16*B\x92Y\xd2A5)\xc0\x89\x00\xa4l\xcb\x80R\xde]\x15\xbd\x17\xfb\x0fVe\xb1\x11\x8aiJ\n\x8b\x89\xd8\xeb_\x12\x90s\xd61\xc3\xe3\x9dk\x88M\x15/\x84\xc9\xbbUYI~\xca7t\xed?\x19\xb1\xe2\xd3r/}\xa9N\x80\x8b\x90\x17\xd9;\x7f\x10\x16\xda\xf9\x16bm\xa6h\xfb\x86\xdc\x10\x045i\xd1\x90\xf08 v\xbc\xbeZ;\xc1,\xa4\xae\xc0\xa17w8\xd5\xf6\x8b\xd2\xaa7\x8cK\xc0$\xbf>7g\x96![\xacR\xcac\xcc02\xc9\xde-\'8\xa4\xa2\\$i\xaaC\xf4\x93\xaa\xbc\xb3\xee/Mv\xa3\x9a\x1e\x93\xeb.w\r/E\xab\x91\xc9\xe0\xca\x01\xbc\xc7e\xad\xcan\xbc#\x02c2\xb1\x10\xf4\xf7\xbf\xf95\xca\xc2\x00\xbc\xa8s\x81\xa9\x1c\x93\x81\xfe\f\xb7[K\xf2\xacdan\x857\\\x95\x80\xfb\xaf\x19\xd7>n\xb6f,\x8c\x9co\xf4\x18#X1hot\xcd\x1d\xebv\xff\x15\xac\xa1\r') preadv(r12, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) [ 997.951559][T14270] binder: 14269:14270 ioctl c0306201 20000200 returned -14 07:17:25 executing program 1: socket$pptp(0x18, 0x1, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x2, @dev}}, 0x10d) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 07:17:25 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x2f4, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x6, @empty, 0x2}], 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000001400bfa30000000000000703000000feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000811e6403000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xc0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x3) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)=r4, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)=r4, 0x4) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) socket$bt_cmtp(0x1f, 0x3, 0x5) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0xc5, 0x2, 0x10001, 0x9}, &(0x7f0000000200)=0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) [ 998.017935][T14274] binder: 14272:14274 unknown command 0 [ 998.056100][T14274] binder: 14272:14274 ioctl c0306201 20000200 returned -22 07:17:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 998.128719][T14384] binder: 14272:14384 unknown command 0 07:17:25 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @rand_addr=0x1}}, 0x1e) recvmmsg(0xffffffffffffffff, 0x0, 0x7b, 0x0, 0x0) [ 998.184134][T14384] binder: 14272:14384 ioctl c0306201 20000200 returned -22 07:17:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x4000}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:25 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) recvmmsg(0xffffffffffffffff, &(0x7f0000006680)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/164, 0xa4}, {&(0x7f0000000300)=""/172, 0xac}], 0x2, &(0x7f00000000c0)=""/71, 0x47}, 0x1ff}, {{&(0x7f00000003c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/100, 0x64}, {&(0x7f0000000180)=""/38, 0x26}, {&(0x7f00000004c0)=""/197, 0xc5}], 0x3, &(0x7f0000000600)=""/246, 0xf6}, 0xd}, {{&(0x7f0000000700)=@isdn, 0x80, &(0x7f0000000940)=[{&(0x7f0000000780)=""/203, 0xcb}, {&(0x7f0000000880)=""/150, 0x96}], 0x2, &(0x7f0000000980)=""/186, 0xba}, 0x506}, {{&(0x7f0000000a40)=@ipx, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000ac0)=""/178, 0xb2}, {&(0x7f0000000b80)=""/37, 0x25}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/247, 0xf7}, {&(0x7f0000001cc0)=""/223, 0xdf}, {&(0x7f0000001dc0)=""/223, 0xdf}, {&(0x7f0000001ec0)=""/57, 0x39}, {&(0x7f0000001f00)=""/157, 0x9d}], 0x8, 0xfffffffffffffffd}, 0x7fff}, {{&(0x7f0000002040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000002200)=[{&(0x7f00000020c0)=""/110, 0x6e}, {&(0x7f0000002140)=""/148, 0x94}], 0x2, &(0x7f0000002240)=""/226, 0xe2}}, {{&(0x7f0000002340)=@pppoe, 0x80, &(0x7f0000003540)=[{&(0x7f00000023c0)=""/82, 0x52}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/221, 0xdd}], 0x3}, 0x9}, {{&(0x7f0000003580)=@hci, 0x80, &(0x7f0000003740)=[{&(0x7f0000003600)=""/64, 0x40}, {&(0x7f0000003640)=""/129, 0x81}, {&(0x7f0000003700)=""/18, 0x12}], 0x3, &(0x7f0000003780)=""/4096, 0x1000}, 0x20}, {{&(0x7f0000004780)=@l2, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000004800)=""/121, 0x79}, {&(0x7f0000004880)=""/4096, 0x1000}, {&(0x7f0000005880)=""/227, 0xe3}, {&(0x7f0000005980)=""/167, 0xa7}, {&(0x7f0000005a40)=""/255, 0xff}, {&(0x7f0000005b40)=""/108, 0x6c}], 0x6, &(0x7f0000005c40)=""/106, 0x6a}, 0x3}, {{&(0x7f0000005cc0)=@caif=@dbg, 0x80, &(0x7f0000005fc0)=[{&(0x7f0000005d40)=""/28, 0x1c}, {&(0x7f0000005d80)=""/204, 0xcc}, {&(0x7f0000005e80)=""/161, 0xa1}, {&(0x7f0000005f40)=""/79, 0x4f}], 0x4, &(0x7f0000006000)=""/81, 0x51}, 0x1a1d}, {{&(0x7f0000006080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000065c0)=[{&(0x7f0000006100)=""/212, 0xd4}, {&(0x7f0000006200)=""/27, 0x1b}, {&(0x7f0000006240)=""/140, 0x8c}, {&(0x7f0000006300)=""/218, 0xda}, {&(0x7f0000006400)=""/181, 0xb5}, {&(0x7f00000064c0)=""/71, 0x47}, {&(0x7f0000006540)=""/78, 0x4e}], 0x7, &(0x7f0000006640)=""/33, 0x21}, 0x8001}], 0xa, 0x80002160, &(0x7f0000006900)={0x0, 0x989680}) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r4, 0x0) lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0xee00) [ 998.325508][T14392] binder: 14389:14392 ioctl c0306201 20000200 returned -14 07:17:26 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e28, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r4, &(0x7f0000ffa000/0x3000)=nil, 0x0) r5 = shmat(r4, &(0x7f0000fef000/0x10000)=nil, 0x4000) shmdt(r5) 07:17:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:26 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @empty}}, 0x1e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 998.480226][T14503] binder: 14467:14503 unknown command 0 [ 998.531980][T14503] binder: 14467:14503 ioctl c0306201 20000200 returned -22 [ 998.557013][T14507] binder: 14467:14507 unknown command 0 07:17:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x4800}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 998.610254][T14507] binder: 14467:14507 ioctl c0306201 20000200 returned -22 [ 998.636249][T14513] binder: 14511:14513 ioctl c0306201 20000200 returned -14 07:17:26 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) eventfd(0x0) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev}}, 0x1e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 07:17:26 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="13bca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x0, 0xd0, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000040)={0x100, 0x5, [0x0, 0x100000000, 0x9, 0xe51, 0x5], 0x4}) 07:17:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 998.837720][T14622] binder: 14620:14622 unknown command 0 [ 998.862292][T14622] binder: 14620:14622 ioctl c0306201 20000200 returned -22 [ 998.904760][T14629] binder: 14620:14629 unknown command 0 [ 998.916708][T14630] binder: 14626:14630 ioctl c0306201 20000200 returned -14 [ 998.936802][T14629] binder: 14620:14629 ioctl c0306201 20000200 returned -22 07:17:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x4c00}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:26 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev}}, 0x1e) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x6, 0x0, 0x4, 0x40070000, {0x77359400}, {0x1, 0x8, 0x81, 0x2cbe, 0xd23, 0x63, "0b35f646"}, 0x484, 0x0, @userptr=0x3, 0x4}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000040)=ANY=[@ANYBLOB="0100deaadbef000005dc105200000004000000"]) [ 999.203504][T14739] binder: 14738:14739 unknown command 0 07:17:26 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffeda, 0x200c4844, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x286) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) write$P9_RAUTH(0xffffffffffffffff, &(0x7f00000003c0)={0x14, 0x67, 0x1, {0x40, 0x4}}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x8, 0x80) ioctl$DRM_IOCTL_AGP_INFO(r4, 0x80386433, &(0x7f0000000500)=""/219) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="00000000a949af85018ee3554fd460f4dc8a9bca878edfbe32b55d371d3df3eae88d87a693efab5118815fadab946c699d9645b65d4504159e82a9f6fcfd3ec3af30dbe59b8edc9f055ff014b638c242b7aa52cc632d31ceda5b751c6a4e21043b04ee0c1cd5aabd2deb436e59c87316df0566de9238005002d22c13dad51ca46f61d4af7c", @ANYRES16=r5, @ANYBLOB="f794000000000000000004000000140001001000010069623a677265746170300000"], 0x28}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x120, r5, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x0, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5ed03095}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800000000089}]}, @TIPC_NLA_NET={0x25d, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffe}]}, @TIPC_NLA_MEDIA_NAME={0x0, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x108}, 0x4000) 07:17:26 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300)) readv(0xffffffffffffffff, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) bind$ax25(r1, &(0x7f00000002c0)={{0x3, @default, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default]}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x10000000006, 0x4, 0x42, 0x3, 0x0, 0xffffffffffffff9c}, 0x3c) r3 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r2, &(0x7f00000001c0)='I', 0x0}, 0x18) futex(&(0x7f0000000080)=0x7, 0x8b, 0x0, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000100)=0x2, 0x2) [ 999.254105][T14739] binder: 14738:14739 ioctl c0306201 20000200 returned -22 [ 999.279193][T14746] binder: 14742:14746 ioctl c0306201 20000200 returned -14 [ 999.299394][T14747] binder: 14738:14747 unknown command 0 [ 999.305337][T14747] binder: 14738:14747 ioctl c0306201 20000200 returned -22 07:17:27 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) readv(r3, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000000040)={0xffffffff, "47fdfc2d354196edb3ee9dab6c5da83cc0ffacca5506b85e3ffba373c0bdb747", 0x2}) 07:17:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x6000}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 999.543150][T14862] binder: 14860:14862 unknown command 0 [ 999.572007][T14862] binder: 14860:14862 ioctl c0306201 20000200 returned -22 07:17:27 executing program 2: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2b4f21060000000000003167e56791533d5231af6715e62ad7f68a964e8e0000000000ef000000000000000000000000000000000000000087ccee801d604a6e801e4945573e4224f1f3b644513cf9ec66970000000076c045161c69c9019831a354889a20000000656c14f10bd3dad7ef63a68d4b91cc9e1a5cfda2292ff490f1d771044d0092143495ff57b4e544632809d79d46d7f9b8a9d97ea98c1664172bd2175b55e7f25b308b23c6e73060e85f9a75a88a06e1efae98e5c11a7dfe0008b8eb8c06a6844350"], 0xfdef) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 999.602987][T14865] binder: 14863:14865 ioctl c0306201 20000200 returned -14 [ 999.611649][T14867] binder: 14860:14867 unknown command 0 [ 999.634885][T14867] binder: 14860:14867 ioctl c0306201 20000200 returned -22 07:17:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x630b}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 999.869409][T14977] binder: 14976:14977 unknown command 0 [ 999.884294][T14977] binder: 14976:14977 ioctl c0306201 20000200 returned -22 07:17:27 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000791000000000000095000000000000005d91b9d39e8f5d31d68e69480a712ffbe51e256e5744de9367452ce2e60d9201d11769e92909b9322208e57ac5b8bc5c75cbd1b5beb8ad3b221d8e3b5d846f2332eacdde238cc5bb242014d3364a6d79e295c9956342"], &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r4, 0xab00, r3) ioctl$NBD_CLEAR_QUE(r4, 0xab05) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000140)) [ 999.924307][T14982] binder: 14976:14982 unknown command 0 [ 999.947451][T14982] binder: 14976:14982 ioctl c0306201 20000200 returned -22 [ 999.957994][T14981] binder: 14980:14981 ioctl c0306201 20000200 returned -14 07:17:27 executing program 1: socket$pptp(0x18, 0x1, 0x2) r0 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x10000000000001, @loopback}}, 0xfffffffffffffc8d) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 07:17:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x630c}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 1000.131864][ C0] net_ratelimit: 20 callbacks suppressed [ 1000.131872][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1000.143469][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1000.200450][T15094] binder: 15073:15094 unknown command 0 [ 1000.211845][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1000.217721][ C1] protocol 88fb is buggy, dev hsr_slave_1 07:17:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x802, 0x73) socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet6(r1, &(0x7f0000001700)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x6, 0x0}}, {{&(0x7f0000000140)={0xa, 0x3, 0x0, @rand_addr="cd8ef121113a46fb9cae1dd06f49fcfc"}, 0x1c, 0x0}}], 0x2, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) r4 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) readv(r5, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r5, 0xab00, r4) ioctl$SG_SET_DEBUG(r5, 0x227e, &(0x7f00000001c0)=0x1) readv(r3, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x2, 0x2, [0xffffffff, 0x400]}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={r6, 0x4}, &(0x7f0000000180)=0x8) 07:17:27 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000140)={0x0, {{0x2, 0x4e24, @local}}, 0x0, 0x4, [{{0x2, 0x4e21, @rand_addr=0x4d52}}, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e24, @loopback}}]}, 0x290) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) [ 1000.304313][T15094] binder: 15073:15094 ioctl c0306201 20000200 returned -22 [ 1000.381491][T15102] binder: 15073:15102 unknown command 0 [ 1000.384891][T15099] binder: 15097:15099 ioctl c0306201 20000200 returned -14 [ 1000.415439][T15102] binder: 15073:15102 ioctl c0306201 20000200 returned -22 07:17:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x630d}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:28 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) r2 = shmget(0x3, 0x1000, 0x5400001a, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_LOCK(r2, 0xb) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x125000, 0x0) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) [ 1000.594609][T15213] binder: 15209:15213 unknown command 0 [ 1000.641956][T15213] binder: 15209:15213 ioctl c0306201 20000200 returned -22 [ 1000.700499][T15218] binder: 15209:15218 unknown command 0 [ 1000.725138][T15219] binder: 15215:15219 ioctl c0306201 20000200 returned -14 [ 1000.735936][T15218] binder: 15209:15218 ioctl c0306201 20000200 returned -22 07:17:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x6800}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 1000.979244][T15332] binder: 15330:15332 unknown command 0 [ 1000.993087][T15333] binder: 15329:15333 ioctl c0306201 20000200 returned -14 07:17:28 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040)=0x301000, 0x4) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) 07:17:28 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x28a000, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @rand_addr="5e58d88eed06525192a3ccde9b51b79d", 0x10000}, 0x1c) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev}}, 0x1e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r4, 0xab00, r3) r5 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f00000003c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000280), r6, 0x8}}, 0x18) ioctl$TIOCSCTTY(r2, 0x540e, 0x5) r7 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0xc, 0x1, 0x2, 0xf, 0x0, 0x70bd29, 0x25dfdbfd, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e23}, @sadb_address={0x5, 0x0, 0xff, 0x80, 0x0, @in6={0xa, 0x4e23, 0x7c, @local, 0x7fff}}, @sadb_x_nat_t_type={0x1, 0x14, 0x1f}, @sadb_ident={0x2, 0xb, 0x7, 0x0, 0x7}, @sadb_lifetime={0x4, 0x3, 0x3f, 0x400, 0x6, 0x4}]}, 0x78}}, 0x4000) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) ioctl$VHOST_RESET_OWNER(r7, 0xaf02, 0x0) [ 1001.021910][T15332] binder: 15330:15332 ioctl c0306201 20000200 returned -22 [ 1001.053575][T15336] binder: 15330:15336 unknown command 0 [ 1001.077162][T15336] binder: 15330:15336 ioctl c0306201 20000200 returned -22 [ 1001.091902][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1001.097790][ C0] protocol 88fb is buggy, dev hsr_slave_1 07:17:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0xb10cc2ea0) read(r0, &(0x7f0000000100)=""/251, 0xfb) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40086602, &(0x7f0000000040)) 07:17:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x6c00}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 1001.251838][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1001.251870][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1001.257706][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1001.269230][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1001.318365][T15449] binder: 15447:15449 ioctl c0306201 20000200 returned -14 [ 1001.373601][T15453] binder: 15451:15453 unknown command 0 [ 1001.415570][ T26] audit: type=1800 audit(1567754249.017:76): pid=15450 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17273 res=0 [ 1001.415849][T15453] binder: 15451:15453 ioctl c0306201 20000200 returned -22 07:17:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:29 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r4, 0xab00, r3) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000040)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000180)={r5, 0x1000, "75e3dbcac70eb609763fd1c5d1674e73011d88fa54e723e1b1cdd89130d365f1bc2ee4ccd75164cd4a200d1ce1c6150ce1bcb35d89608e0d23224b7c0ff70ae1d6fdec8647c6b05fbfede1d6b2862961dff141bbd7364c7e3c67221139767283c2150e5a3eb531b42eeaeae9a92ed4792ef30f1c62e783f7c88dab69fc6f12f1fa6274640a27dc6e53d17ccc6376200ff6708361787138026f1bcd26a65b859dacd302fac32f167cbb27693ef7a5fb65cdb11443242d87318e047e2d61823518a36cbca525c687fc137641467bbd59f7dee122eac8e29230338f4d83a865c6d01442c6567051bfea6b381f1774eaf77f1efc5697b1e055c30f494c2d7d73f87d5455751a501da1efcf136e99c3ab6001a5c971faa716674f1241b80e0d18a0aae933271fe9144e71f2726b5c6fb736f6fb88590f8bc36a200536e619bb226e1aba748712e377fd052728ce6267af50666460ca2258bb89d3c9a66db713f555b806abded93850b681d83f306a329a3a8c8a207d84a03c836d7cecd5d7ca4a7cf44718afd5b38d235cadf25297d9d1bee2281c8d7d83fc899b05f4dd6a83661e84acb65c3178e623c4b8365bfed8799ca7439304c8012e7b90986dac70a40154a0469bda9d0bcc347bc59e5fbf176e18bb06a454552344623c46a43ca5d1ca04fd8adc2aca7967c29184dc53083a7308f70cf6f0206f5dd277e5861918a2008234ecf983e2057f0b72cab8ea9233ff05518c5454c289ebad1d0e7aa9c20d623bd3acb95c7b3dddfaa4157c390d6d0de84d84e8c8a2d1087424d9a0d02184522645220340148e9856ad80ef5a313cdc4c3ca4fb93946f7e168d33bc4876d0cc33c5493f2b91300fc5ff129b6c3f1e616857d68fa532c05b32674eb0d1613d978bf7ba6fec55d50409ce8e8908b79de0565eb0fa763936419b477ef86e618fe3b395e014a2d544345c4888e7ca8ff1adc8fd76ee723368c564602bdb4795744bfd5fbc52ed437d33e2a97b8257569e787a839455b83d848fc4fc0871085c2f2960121d7b095e7d00b2b60dc370a01bf1dafb6d0e3ea23bb16a32ac5102f964bf10b4cb0ff1b44f85d98e9f4ec511bd9e6650e5013da7108cb09a7749e64c146817a8be48f97a8810e7c09450c02580675a19b5cea4245dd00d2d336300e27333defd904b3f39f390f2df5cf8b8450c7cd14442789af1f5e35c66f6cc1dd7a53459a0921a15e3b2106ee5a1a2550c2130ced98fbb39d3a7985ed741caa97a57bf0c518bfdae8f470fcd24daba0d4118748e8680147e77183f250f0574a2c4d90bfa11d2370d5ab13446c36f4d5bd610df4a17f5aa37fa91cd0725eff69ede854666cea954c7ab841f473d9f5b46792fafd7877f3ad68e7f01a15e96505a21a11b6dc29b432b6bcba8eb72ee5a08e12eed0b882eabf88c5b069bb8aaea2df4073a7686b2c940b7895f7523680850db7301675348cfd7f2e2ca1672fc4bbe6912123eacebc09f487444087639d708fdbb2c241e4d129d1cbeeb4c2e65d1f591ef8564e5f6df981d8c20619209866c3b557b2bebf3806cae96c608d86675105a458fb0be3dc65a9f710156261ee15e51d7aa86e5f4e6dd9ece5f2e7d604b65626e5c047a93eb3677b0a13c74547ad816873f0d913a54a07f97bb33a6c5abdc92933ebab089c0280d0f6feca5fe5fa5dfa025489f0c65cc7cd8c7c17a7fb8c32ba244a59457213b680956cd1ac05b35bd40ed9e3c5d4f878707b68695ee71bd8411bba692f76b8fab9389cf2fe89f08f702f7791dbc127d62ac66f06a6a5dbc98c5e182eb9dd1813cc1b74f239f757a1ea1cf38ec7424fda97dedbfa1feaf9dc426706024a636125426c47491f554a25de28d95d202a4fd23d8384011e7413337261b3f429956711a1d71a15af1d6721183ca80d2f43582d4cff6520ee30c80d0fa662ff6fae534bb347055a7272b86cef8abdf96c07b6e6a2c229bce6f042d73b9ee52442ded6066afb620c2cd2070e5cac976b948370f9447becf70d7545c4b4a653d9ddc7a8d93108a9b8f9f7df0e80e6582fc2923b21ef16bd5e3721c374b13fac5dab922497e8d47ad631cd4c4e55c701e344f91f4e300682e0ee56ad58c7d4c3f2a3a0cdecf96d4da6150fbb2d5f8a04126a675e3a8ebb998d5a38a63e103fc084c55c96c2e96f22960b7c633cd780ff97896d4cb130ac9dd3e193e53ff65089ee1413cd081c8c42b5ffd4529cd74fdf8df5f7cc49255c7230ae24f7643794f4f31162e0fc9ccc3aa2f6cf023622532a36eed91e2cc21b8294c451fca794bf950339b34ed0b33451aba1633e7f3d162ba77c5d2d816864be252f3e69599e13758cb565fc4e2ae3498d5a57802e89fde0c9f56cb0a1e51fce48593c3b2606b2fae6d99e1559cb5a950d9f74390b2c67550301e4829235a18630105b0d83678bf23c0c283c3241f4892f4c5d16d0ef59ae0b9c097c117ddbbc40dae8137334260eab1208608a5853ddc8289bd815dcc8add797eda8b768aca7ba00c2d8e4614b351cae7cf82f317d85e9734496a04064b9b15b1214645f5586ca9187af1d6121da3509ad13dd569d8e39e9a4efb93ed0444fc31c8c3d7374f5a19d0bac93a881a90ef4bef27581b25f70ba9ea46783af26d0c439391bc2fbc2e158c2888e843a81e413f6fcea48370dbc9c1c03e6c4983e6c55899de6af9f3e6196ab4f80d64318760add826fedbfbddd7a69544772777095b6f54839c1bef468016d9b02804df20a5f5c8e6278ff357d55b05d4352aeb01a2a21bb6249207b734e577148b18f66b4b1652045d94b0c08a2d8c7fd1e15755e43b30eeef47bb1602f8f24427fd48de0da620fd70cefd7d912d1f6701fdb81a33e8301b506355adb4d7e609cbc30927baf40b6d9c00265a1a1dfc169cac97b07aee9aed745fedbbd0b46c947efecc265538faa0d38ca2bc897ddd604d463052f3e18fb53d3d98e6c90970db78e02c2e7e080f975aab12b0ab158390c2dbca4136652f971211b4fb9a960dcc4975433fc3d5b0c228ae591de5dcc0f600f73d21b4150b82d96d61aff50715c0a474e8652701281aa62e2452e35e94826c0a5c11e6dc726a7cc6fe05bf271dd8bdc677a81f8a7f1d4f60c61eb2703a3bd65aa84d0e37d89407dfb83f9cf5267f202e7b1f9dd78f27ea69acc2ce68cc6be5edd26e311dee698aa97603b370c22660083a23ac43ff139d24df90bc7bfbdbe40509e735d9b13e4e6db2831155df80d230ac25b3153eccd0f9b42ea4f86798cf41133a45021d2fc8b463285fcaf6328e5cd05772feb1be0cbcf1e180a2217a8a18de86e6ecf9127d8e50b06b0bb511a2ae31e17379ea343a7b1a1a6f868acda802bea6ad589485222426b2bcd8a3caa4752c952905e722afea704c2fe40011d3951159f0e41bf6b7801b033660cd96081e9b8ebc8652e0ecb151ff494403a8ada8b9e496efc5ff51f5893d239e27cf0b879b4c5cd504cb86a2bd09afaa6d9513b03384ecb31b3b4d0c8edcaadaf8227f7f79e98c7d067d1878bb82005c3393c9a314417736b6f920dd50c62d8360d9d01774331c0a44ec4485864ea948b4394dd811969201c69c2e8c6a60a7962b23e0c326afddfdbfd8ce41c488df172a14aabe324fc8cfcb625fd7b1e8141c0cf2b1c6ad5f5098077bc37974ee55eb49c714e6b1b493a3eda105c8d3f4da73e64977d2f6ec2d07e96ae17b0ce2dd8a72b60f5bc965c9a3943a988f29cff2568f5690b22a789ab9c63086487e41d0b8ee40763c25a683c3f35c819ca641009b797e109fbb6692eb85ef825a3da58013c01bdd38718e6f4b3b901e84971a08b9207c89dad737eca58720ab64a63452a72eeaaad6c8d1b18b6c17dd3a9d589fbd77b70a57eff6599d7543eaa72973b86bd1f91abda12dff9800dfeb7928b189161cd807b1093b439f505c28452f3324c106cde42c285b0f8f74c1b3428b4675c7217200c5813120111e16fcf5aa1cd0e1d2027e881034e7b691c7b88780607d05974a4326ddcf2757f7b5cc0c9a8050e087f1e08334de7d3f0191243a7c275f1811aad04f095ef793b78ac5e5588f6fd54fca4f81ba2bc5de4638d793fe1d37bd0a45e7bb807c7a076f65344cbecec75aee5f97a4ec707bb7e98fe4ea71de0bc6eb7c9c479398a435820018737e27e322160396ef25a2538cfe027dd20ba8b0352562ca0f19e4085a7f760c399f07a19387c87f47808490802ba945d116620cf571d35fd66bf2d799ae1c014d87cd3c9fcf4a4d1cb1e0db75932dc406aa5fd48502d917b54b5db35278ed913c7971f58cbfca80c0959f2b089ea252b28253d14c90115580798530135afb64704c3bf0e35c352234496de43b4d6c228ad155f7c9035181f7719db2ed33a940730981bdb19860ee58675406dd5118931cd2c703b1ba570955b750e9c12b4617aa88267014525f82e2e59c5fbd2fe617304500259af92f8e7531972985b614799c1cdd3561d2b504190a494c456ace3de534d2ead34d9f2544033d088232ad0859d9c7c9558eff624efb273c91d687c8eb67589bc96b8dd68ddb52a93df6df7e8ab4e93223ec35be9374e3879d9418053508925d31e9177aa9bf1b3e57b1b2f2c413e71bfa35e80f857defb5cbf52fb8a88f8769b51edfe9088243cb6065158801ab2b7394a1e0118843bba8efe397722857812b150848a458f88245b2294906f8e6d5fa00363ae71d512a119d2a383602c8ebf9679a678d122ba30b597e37144cfd89c1c8c21d0e22257135b3cd1e2368249297da89a011f794aaf456397a5dc250f689097e9f8432b1c6df5e83de89a3f0feed92865225031305ae7ed32bdbc24c15e1f79c78b89eaa184dba4d6f9bfafc9ae3ccac15dbe1e931a044fb37dad76585b372c52d235a23807c0a1457e7848138dfdb005f4e6bacf2baf31c9c6d217bd62eea94ba0f90b9a131ef75ce737ca8eca63d69d4f03f10eeebf702c864c303cfec4c9180bc67193bd327e6959d64a21fae0777d12fa31d212437cb0da336cf72a97fb9b5cf0faad6cfca63e3e893a95c6199f76bef2b6c4c152865efd11230f914b3dd879025dd8903715c6e1b1d5bf2ca6cd39511531029c3bfba2c86bdcf048bc8b2e7833ef207199f87433dbeacd10fc3a2dad3597fd8c3aea05e5b9cda1a1f56a50a61a796bfb392f98c2cdf162242191bd31ffeb7e2da3a59e74fd5dfe1e14ac7a9866f71f840fbebf6b5ac1744dfe5491e702a3c5c0680648de2a47cba4c7c2d9a6e4336ef0ef25c8e53ad9f69366ecace83daaa0c42a8512c0170aaf24c323b834133070cb0ead933ccb221a171271a22304028e227e804ef6a8f5add4e78f36deefb885d3456c53fae9996eea339ecb7c5c0a422bd06d4efef762b6c743d06d9202bca5ab3fbbf94f90b8f6a3c150d8f42aa625413c6aae16d9d7cdc7f4eceb5ff630ef4e9a9406a25d9a48e2bfeca583150411be0b4234f322e0576ed0054e21b8e42c5f4b9ef72d4154439baaaa89cf00682be687eb40f44e8ea2066b0a3b363171428c7a6461387b21d0630289f4963592adb72dcdc008512b41022785402f17128c87f04728fe917c1d9497cb154bbb2127d52bf32ff43b336d80da1035840959b720fd39f87f607371495d51c3f9202ee2a46486db951a4a32872b50d4f0034a18a6ac587dad0f26e9784d28460875438b68b8416b5f519c803980e9fd2c1da58759c74579fe9672a3daafa8ecf4fd72d29a12f8da017131e496168671011e840212dd25dbc7370af0b48759c5545cc1d854e"}, &(0x7f00000011c0)=0x1008) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) 07:17:29 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040), 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x303, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x90) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x100, 0x0) write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2d, 'io'}, {0x2b, 'memory'}]}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x800002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) [ 1001.616756][T15565] binder: 15560:15565 ioctl c0306201 20000200 returned -14 [ 1001.642799][T15566] binder: 15451:15566 unknown command 0 [ 1001.670290][T15566] binder: 15451:15566 ioctl c0306201 20000200 returned -22 07:17:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x7400}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 1001.892886][T15682] binder: 15680:15682 unknown command 0 [ 1001.898541][T15682] binder: 15680:15682 ioctl c0306201 20000200 returned -22 [ 1001.961316][T15686] binder: 15684:15686 ioctl c0306201 20000200 returned -14 [ 1001.984714][T15688] binder: 15680:15688 unknown command 0 [ 1001.990372][T15688] binder: 15680:15688 ioctl c0306201 20000200 returned -22 07:17:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:29 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev}}, 0x1e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 07:17:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x7a00}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 1002.223064][T15794] binder: 15793:15794 ioctl c0306201 20000200 returned -14 [ 1002.354917][T15880] binder: 15824:15880 unknown command 0 [ 1002.368866][T15880] binder: 15824:15880 ioctl c0306201 20000200 returned -22 07:17:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 1002.404647][T15908] binder: 15824:15908 unknown command 0 [ 1002.422486][T15639] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1002.439290][T15908] binder: 15824:15908 ioctl c0306201 20000200 returned -22 07:17:30 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3bf, 0x200200) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000140)=@ccm_128={{0x304}, "bc7f87bf4b8b1443", "b3d44db37d64d2848538b066fcc0c792", "eeb9735f", "dc5289cb619da2ee"}, 0x28) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) [ 1002.454391][T15639] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1002.492195][T15639] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 07:17:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x634040}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 1002.570783][T15911] binder: 15910:15911 ioctl c0306201 20000200 returned -14 [ 1002.641397][T15639] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 07:17:30 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) ioctl(r1, 0x1000008912, &(0x7f0000000140)="e8fb4d4dd928e1a524b2fa2b777294434bf8cd7d0a96686b893d46fc179878e93b74454cbbbccf25badbee615fcd41492101aa4ff0e66c41113f7665b492e6ac2775eb330b9e01f82e6df8aa7fd29e4ffb01b283642c6d9c381e77424dea17fd3d80a373356f6870b2fbb5f1d6b0c298f21682d98f5de606e6d6d596c26072d7b3f70c127a901e306dab6749bd9fc5702b496edfdfda4f212bf5685494fd9326b0744833fa640319d9c6d38f726e758ecadc559c3a92d13df93929e883df375ae92e9a648bf8ef39abeb591535e03802dba73f75253f92ab9ee718243d950b7f4015e888486898c7a4b8") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) [ 1002.778881][T15959] binder: 15953:15959 unknown command 0 07:17:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 1002.820525][T15959] binder: 15953:15959 ioctl c0306201 20000200 returned -22 [ 1002.859694][T16032] binder: 15953:16032 unknown command 0 [ 1002.914721][T16032] binder: 15953:16032 ioctl c0306201 20000200 returned -22 [ 1002.953962][T16035] binder: 16033:16035 ioctl c0306201 20000200 returned -14 07:17:30 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") listen(r0, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac1414e0}]}, &(0x7f0000000080)=0x10) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 07:17:30 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x1000000}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:30 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev}}, 0x1e) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/\x84ev/dsp\x00', 0x698c40, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) pipe(&(0x7f00000001c0)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) write$P9_RGETLOCK(r1, &(0x7f0000000140)={0x25, 0x37, 0x2, {0x1, 0x8, 0x800, r3, 0x7, 'ns/net\x00'}}, 0x25) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = getpgrp(0x0) syz_open_procfs$namespace(r4, &(0x7f0000000000)='ns/net\x00') [ 1003.166088][T16117] binder: 16093:16117 unknown command 0 [ 1003.225437][T16117] binder: 16093:16117 ioctl c0306201 20000200 returned -22 [ 1003.270968][T16149] binder: 16093:16149 unknown command 0 07:17:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 1003.313568][T16149] binder: 16093:16149 ioctl c0306201 20000200 returned -22 07:17:31 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x200, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xffffffffffffffed) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000180)=0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0xf, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x98) [ 1003.418951][T16157] binder: 16154:16157 ioctl c0306201 20000200 returned -14 07:17:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x1634040}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:31 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev}}, 0x1e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x2040, 0x80) [ 1003.630129][T16268] binder: 16249:16268 unknown command 0 07:17:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 1003.672785][T16268] binder: 16249:16268 ioctl c0306201 20000200 returned -22 [ 1003.736931][T16273] binder: 16249:16273 unknown command 0 [ 1003.804565][T16273] binder: 16249:16273 ioctl c0306201 20000200 returned -22 [ 1003.911734][T16278] binder: 16277:16278 ioctl c0306201 20000200 returned -14 07:17:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x2000000}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 1004.074736][T16350] binder: 16341:16350 unknown command 0 [ 1004.080503][T16350] binder: 16341:16350 ioctl c0306201 20000200 returned -22 [ 1004.094142][T16388] binder: 16341:16388 unknown command 0 07:17:31 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev}}, 0x1e) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 07:17:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 1004.121526][T16388] binder: 16341:16388 ioctl c0306201 20000200 returned -22 07:17:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x2630440}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:31 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x200) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) readv(r3, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) ioctl$VIDIOC_SUBDEV_G_SELECTION(r3, 0xc040563d, &(0x7f00000001c0)={0x1, 0x0, 0x1, 0x2, {0x8, 0x9, 0x6, 0x3}}) r4 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) readv(r5, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r5, 0xab00, r4) r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0xa) r8 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r8, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r9, 0x800000c004500a, &(0x7f0000000300)) readv(r9, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r9, 0xab00, r8) ioctl$KVM_SIGNAL_MSI(r9, 0x4020aea5, &(0x7f00000002c0)={0x1000, 0x2, 0x1000, 0x400, 0x80}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r7, 0x0) lseek(r7, 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0x8041}, {r0, 0x8000}, {r4, 0x8320}, {r6, 0x2000}, {r7, 0x2740}], 0x5, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180)={0x1}, 0x8) [ 1004.233491][T16394] binder: 16392:16394 ioctl c0306201 20000200 returned -14 [ 1004.338117][T16412] binder: 16398:16412 unknown command 0 [ 1004.348909][T16412] binder: 16398:16412 ioctl c0306201 20000200 returned -22 [ 1004.377287][T16464] binder: 16398:16464 unknown command 0 [ 1004.407499][T16464] binder: 16398:16464 ioctl c0306201 20000200 returned -22 07:17:32 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) ioctl(r1, 0x1000008912, &(0x7f0000000140)="e8fb4d4dd928e1a524b2fa2b777294434bf8cd7d0a96686b893d46fc179878e93b74454cbbbccf25badbee615fcd41492101aa4ff0e66c41113f7665b492e6ac2775eb330b9e01f82e6df8aa7fd29e4ffb01b283642c6d9c381e77424dea17fd3d80a373356f6870b2fbb5f1d6b0c298f21682d98f5de606e6d6d596c26072d7b3f70c127a901e306dab6749bd9fc5702b496edfdfda4f212bf5685494fd9326b0744833fa640319d9c6d38f726e758ecadc559c3a92d13df93929e883df375ae92e9a648bf8ef39abeb591535e03802dba73f75253f92ab9ee718243d950b7f4015e888486898c7a4b8") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) 07:17:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff600000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x3000000}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 1004.606039][T16516] binder: 16513:16516 ioctl c0306201 20000200 returned -14 [ 1004.711108][T16578] binder: 16548:16578 unknown command 0 [ 1004.731399][T16578] binder: 16548:16578 ioctl c0306201 20000200 returned -22 [ 1004.770602][T16622] binder: 16548:16622 unknown command 0 [ 1004.791465][T16622] binder: 16548:16622 ioctl c0306201 20000200 returned -22 07:17:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x3630840}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:32 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev}}, 0x1e) semget$private(0x0, 0x3, 0x20) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x8, 0x80) epoll_pwait(r1, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x8, &(0x7f0000000140)={0x10000}, 0x8) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb9b, 0x0, 0x1000000000007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xe) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) kcmp(0xffffffffffffffff, r2, 0x3, r0, r3) [ 1005.027506][T16630] binder: 16623:16630 ioctl c0306201 20000200 returned -14 [ 1005.082937][T16632] binder: 16628:16632 unknown command 0 [ 1005.104508][T16632] binder: 16628:16632 ioctl c0306201 20000200 returned -22 07:17:32 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) ioctl(r1, 0x1000008912, &(0x7f0000000140)="e8fb4d4dd928e1a524b2fa2b777294434bf8cd7d0a96686b893d46fc179878e93b74454cbbbccf25badbee615fcd41492101aa4ff0e66c41113f7665b492e6ac2775eb330b9e01f82e6df8aa7fd29e4ffb01b283642c6d9c381e77424dea17fd3d80a373356f6870b2fbb5f1d6b0c298f21682d98f5de606e6d6d596c26072d7b3f70c127a901e306dab6749bd9fc5702b496edfdfda4f212bf5685494fd9326b0744833fa640319d9c6d38f726e758ecadc559c3a92d13df93929e883df375ae92e9a648bf8ef39abeb591535e03802dba73f75253f92ab9ee718243d950b7f4015e888486898c7a4b8") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) 07:17:32 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x12b040, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev}}, 0x1e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 1005.195735][T16649] binder: 16628:16649 unknown command 0 [ 1005.221746][T16649] binder: 16628:16649 ioctl c0306201 20000200 returned -22 [ 1005.251852][ C0] net_ratelimit: 16 callbacks suppressed [ 1005.251861][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1005.263411][ C0] protocol 88fb is buggy, dev hsr_slave_1 07:17:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x4000000}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 1005.411848][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1005.411933][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1005.417703][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1005.423401][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1005.429149][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1005.440580][ C0] protocol 88fb is buggy, dev hsr_slave_1 07:17:33 executing program 3: r0 = socket$inet(0x2, 0x3, 0x8000) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) readv(r3, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='hsr0\x00', 0x10) sendto$inet(r3, &(0x7f0000000480), 0x315, 0xe0, 0x0, 0x0) 07:17:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x555555a43000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 1005.509293][T16744] binder: 16743:16744 unknown command 0 07:17:33 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) ioctl(r1, 0x1000008912, &(0x7f0000000140)="e8fb4d4dd928e1a524b2fa2b777294434bf8cd7d0a96686b893d46fc179878e93b74454cbbbccf25badbee615fcd41492101aa4ff0e66c41113f7665b492e6ac2775eb330b9e01f82e6df8aa7fd29e4ffb01b283642c6d9c381e77424dea17fd3d80a373356f6870b2fbb5f1d6b0c298f21682d98f5de606e6d6d596c26072d7b3f70c127a901e306dab6749bd9fc5702b496edfdfda4f212bf5685494fd9326b0744833fa640319d9c6d38f726e758ecadc559c3a92d13df93929e883df375ae92e9a648bf8ef39abeb591535e03802dba73f75253f92ab9ee718243d950b7f4015e888486898c7a4b8") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) [ 1005.587815][T16744] binder: 16743:16744 ioctl c0306201 20000200 returned -22 [ 1005.598645][T16750] binder: 16749:16750 ioctl c0306201 20000200 returned -14 [ 1005.627342][T16755] binder: 16743:16755 unknown command 0 [ 1005.652022][T16755] binder: 16743:16755 ioctl c0306201 20000200 returned -22 07:17:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x555555a65000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x4630440}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:33 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @multicast2}}, 0x1e) fstat(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file0\x00', r1, r2) socket$pptp(0x18, 0x1, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) r4 = syz_open_dev$mice(0x0, 0x0, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000840)={@dev, @remote}, 0x0) write$FUSE_ATTR(r4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000640)={0x0, 0xc70}, &(0x7f0000000680)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000800)={r5, 0x3, 0x4, [0x40, 0xac6f, 0x3f, 0x401]}, 0x10) fstat(r4, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000d40)={0x0}, &(0x7f0000000d80)=0xc) lstat(&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000fc0)=0x0) sendmsg$unix(r4, &(0x7f0000001280)={&(0x7f0000000b00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000b80)="6a5a89e487465d7d3c6d059d253a953641c6c11fca2f352b11bc10f36b1b9ebb028573aff77526a64723", 0x2a}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000002640)="e7af96d13cb78605ce2d59d2a05b04489d41079f295711ce35002ac2a86ef0c59e49f0149296fcced9099b041e0e20e37a23e5c0f50a656e823c8802331e6c7846786fe5a9f88475b10bc1d7d47c4824e19ff1fda1be567a1dc7ca0320b7a4eeed38f2245d99f14d6a7627e385be85e42e83c6b821cd1a71f1406de25b961d1c1ea0acba8644b911ddaf300281d166ff398d38010de4c9598d55f616fcef1528d599087d73b2102e67939d1f02a520846e937a684b1e0154e0d4d37af711feaf9d2dab746bdd2d89603203cdae9b247b4293dadced5bb6b45640fd5eaa5392fc34facb369907e3af8fc497520581713c6a439998442f39d605bba56a08e0cb1bf9ed5e4a21bdcd82328a8e9dbf2cbff41efe204aaf062e6660f7f6a10a6fedb4eb05165518556f1d74a07ad39b33f394bb152ca21838033c68a84b5a4265991b633ee24e368ba2e59fbf9b2f9e0fd5e45f2636c59b7e50675529c20b0c3fafd2637a72552991f2025a91da8b427927046c2089aa2c871a285a67393091b2bec091363d058c3b99a31f05326a0379b8ea2212d23ceb43bc25480053ae1599dc98468151507ad4f4f28d517aff9c547a3f343e1ddc6cb79eb545bc10ab69406aa82c1246b5b636f06083702036e6cd49b71a696d30c8326b19335599e03e039e3c1a55e3843e8cd957e2717c5f37b6e718f2df5d7283b0798ac88d22adfd1aaf4f53c912e0eb027c55754a1c417821ad64820ac106c734ab84c22503014dbd6299894fab5467326230e7be81560ed3bdcd052c2b3522e77a29fb0336bcd7176b353db2edce160d8b535db72aaee30cf6f466c364dc031f49236c37dbe24a2e9ebc93f5f7737c21841f95affb626611874d136a199cac3b5f2703845483fa333fc54d5c351b412855f431f56c583fb29639e476f63210f1a91cdfa807658970f2ff6392f77b3570b86e3009d7282a5dbdbe38377ef30ed14e12ba57549ab64142677726627b765e04082b6da09669ee24992bf3cb6782d0a7e1a0f0527ccc03e96858c623f474814448c963581bb2a503d8ca5357f16807e667add887794f4cdfbcb2fa5cd02594dee11d66ac25521e9e1ee3cd325dffed575d2948c4145276d04b912d7e2ce3f5bd0bb7c5f3b29d7238a42c632b98af1ee6b971e51d2caaa0d0f2c8d163c43c059609ee92563b3d4854d578d64b32fd50e3900e0221338eaf28f0e2c50e859ad1a27caefad59b0e0a23bdbbb440a67aab88e4168b5105d154c572532ac031f11c59d3c77d57efb6edc7fadb79ff4d544565be9c7d50aebdd8cdf978c7c42dbeb3d648dc7ad7a6745e5451259a5792fa86d70e97f214e467d92f2038ab8ca88400d3a9a394e29614dd45af8700d18f0290865f70659e314928aeb6cf68f957a31c73c7e6d35b56f685ed0c7a2a030e3831a78c491d116db48e3e495a1ba3d1c55dfa73b827d723cec98c13fbd0d6c888c349249d2d121665bdc6cb312a82e894ef4ddacd4a7fabe19c2eeab4ff5e465f4e0ef06150a531b63baf53fa10e86a258975c82aee4554e291b9c2d12543e775b58f5f97113f5456ed98a89e8bb736357aa558db2b449a543c14aafaa3cbd5b9465564a1b2fc225871a3ac0c6608a8d8dcdb6fa398e25fd98f21ca9f7e5fe2196c4654d7fe392f07222304adc848155adf98c275c62b34bab4cc33bcdca3c84d08d74380b75d22d4131be8471c0dd4b47ea56dbe92557bf6ef27438b514839e4e328d62df818ddc953a3930cbd1c12b75884b854dcbedde3df62922cc69b0a484d39536fee38e4c6e985519e72a6387ef09fd79621453ccb714d7781d90eb2a2136fb4ca0dc28d651130033a5e4b4d278ccc75913dc37b048956f2bffc9105b93cd1eecb20c74caeca0487b1d8f4d2c8a397d854b96c57d7b91479a7510150720bf122a1b16794a1c24e6cbd2ef6687b5496acc544369272f50c7c75d0e8b6238dd7cfa1a03f97112487a6d879cfafca77520c29946499959116d01038ffb8c6bf964d55c0c58c00a982e99b02439be7af7535e72d3977775bf79bdbf8fb45663d70a7c597fabae3e2a4aff9cb623e99ef84863d55526c2df7d0d69c87c3887f3c63bbf9109727cfbb617a6d4b8339553db6f05385e7cecb914e7e0d0b0a70571c162135a58b7bb5b1d9da59f1f35abd1f9515ce4795ad431b3aaaebf505a0be56ff36caab05ad16fb9285230e8193b376bc1349ada4d76baac0b8040bed4ddeadec3cdb306f0ca4b33f265bb85335222c03b7c12676bdd29cd67fb1b4e72c036f30e0f5662720e615036f944b22c6ad6c7faa4a78d5365e2dd64a3c94f77e2bc57834dad75a9c4f39c03da6f8b97da67067a419214b21333f0f3ba536c02efdd968b35dcec61bd544e410e0f8a225423b88c03b9a14a81eba6c540fdfe9b951770e0d462782906410039627922f30bf0b964bd209314ef6f78d9f52c4a01c84ee5326383a78abddd0a4dd3da42f9c655aac0654db7070b6f18600f9cc2e9ca59c918eee8db4eef0ee96fb4755216450f0df8ce761d9462f82e596b7fdba4062946216cc2b696ac15e0381c7f8c9b91e64c4bec91f26fc9c3d3f1dd76b476576db4cea0b618b6e2b0f3dcc75201ea5a663654019990d52ec06466cecf6c29c825b8073a6fa0a3da657ed75f257ed651da347c6013ba3f292338d8448a3fdc5da1d214ab70d063a478e3110a887e11e0bf83b0a719e535e26a62b7f3938fe72b9775f33c4e16dfaec38c6c014990988d295b1bd6dc9269dd4eabd8b62e2491531345e2972a22fb66a6d2629820547650de823d4517db9f585708c79670f4952be97db38ec12a042737d9d661822736b94d6fa7cba9dd30d3cf3a1b4153d5df55bfba702c61a68711a39db21033c68154b1bd179bb28042c4ae88a71f4429a87a1c197a424e11bbc29d431de61193b532fe71aa06c1f97966292359f098b8148f68120bdce6146f6b7feb7ad695aa59da32dcba070f33056ff798e4bd87f9176c2bd849be6a515c304c5e1a05ee05180bb18704eba3ba84d58e102d86af7f7acbc1cda117207e9b9ee24b9b093c937b03b96306bf75ce472e50747351c96d5bfcbf734173ae1aaf81266cc87388d6d209fbc2f20593b9e4097c3b87875fbc60df80275a72394ea0cb3d75952d685a8f781b0dea9a247d88de440b762bd7983732b851dfdacab19082e45ae3371208cefc3253bf5593734d48282b9439dd8517144fc8a584b81b8a951200482acb8629f31e4bbe29ddbc2872b878dea00edf5ba8c5a2817a03eb8683d4e7eb10424735a93380c6aae553011b4b67384a30136c042830d53dae4ca7567066f72443827e6a3a38874993fd2fde73dffb07a97f74b3a35bbba2d25e221449675d5a0f9e3e266a1496cfcbfeb4545e95b989d1920b4141d2e3d7924a669ac5c63c9d134b1161080dba331990386f72d42901bdb2fae8c88813ccd82ca0f8123d4bc563b3c7c2230384eb1483397ff58d3b97efb29ef7b1f30d51b637945978538aacf6261e3b13fc977e3c7877c40405ca1f6d44a8214a3fa96b6a982201c155160ea9f978f6b66908f9b000a3faf5ac5e76b6f934666225900d6c732200d4943cddda6612306f6b9f721721e8d930fac6664f5cd93d4900d2d85cc912cf552b00fef485203a3b02f7a9559333dd9cac8e6c14e7632f16e70f87d4f98a38f521d8ca7166cca963d00c8f1aef1066808ba85b0a22e83e14aa64e8e01b0ec36c25f03ede2ad42660bae77e232522c0ace086a183b8185a3fe466e4e187c141977c8bdb2d96c509c2fbd9a5d11ba08fbe1fc6c54537ca898303eaa04778fbb84aedaabebc178d2db5828f130fed9c989106eac3ce8b1fe39a6cc1ef3c60b385ce0f8319acf7be508ec6dea11c3b1d227995da2a2c70e1d008b513b7ecc8075a1faf1ef6a2d858619450ff2f29a1b6827634b6ef7bf5e6286a07eca7046f81ca67be1fe75d89032039543b23c7507c9e3c5c1b8c9a3b459267c9ddd8c0b7ed265ec6183eb0ded4f44b239b0755e59766dacb46e8873bc7e88c0aedb25ae62628387fd39074e3d3a572d63c930b1231b264995ba64f887b1c720954b49aa5743276d8a673d124260679d2d43295189db74c4ad60f0e39d399d8f224eb69b9a8f7b89800c8e8c9514bdb068f4c37e2a31cb8dfc6bbee89aaed3a983987f2786220e6a5440a57c391f4c20a5d7e9d67577f8845f5442e20cb20797125616121f1d5ffee50ea620ca18a08313c9ddde0c5121b879964aba849002372ae70eb72c5d2e8a632fd654de1e9edb2e82d5825277a3e38a0dca9adb110e9a82dc75bcaa9d8bfc20a2aa333b8193beef2f13a3ddf87579355ff99ec80c52336b5e15b5ba9f4e1b70911a2a866599f0f380a41488bf13c18d5857369001f33e49ef59f87e758cbf0d9f0d1f0228e4194f4adc2fee11bd496f69a99a94a35db12d3a9162d130646a167361c61c8ea78118b6bd6837eb52d4d3ef5d0ba616f075cbb30fbb7e7e2d24d39da943e640eacc09b7a8e9d8745a436f415a05be87832da9e5435c22b983e819a3822bb330ecd3717446702eef2ac9f004e2d4ff1a6af26f33d899c3ac3958874d37ef2573beb50ff588683e2aec6768fe4a27a66d16e6f161e15af325c9ea752b70b70b20c0c0d187f9c9c0283e2af6b88353fc764fdc8633fa643dd7267d8e76ce436cb76a368bb2da4e8633adf9a95c8a5b3175285fdde2f61edc3ad86eabcf2f7584d1f8c01d7c21c787e139acbe1259294887f0ea2b724d258929b905b1f885ddbca94702313b8a7560a6d9d82e045f6c8289c863e4bf91d54c948d9f48e4423acc9739a1636aaf982cb5f62622df16151f430a455fa4c23c3a9cd8b458befc4a5aeac8292540116832eb2be2935c1165c16f0099a82f660b4c5cfc587d768f984016b4e7f7d9966777480319a27e9c09dd7b50811fbb1f9eb3565cb5312d16253467b89835998561753770e7b87830d429c202e104c59023f8bab36c74f78bdf3c631d7fdbb5df0b8bbeb2c55534140a66dfc9435951af80ebce93926b9c34bc734897f4b36f0a6fdb365b86d1d058daf6744e7d8ca2c4fa6be63193084f7d5474d2f83b28bbc10270fdf35104f68ab305870823a72c344e24b66c9cdc95663748e6621f6c00f4a09d2d0c44127c9361eeca44c9dea6f83412eba3f97ad8389aed1548b892f7636fcdc10dc3fe41830a461ecaa4ff791f6a387ad066b83d0a9d7bb833fdc604b94afc4e5e650cb0f48c4c4e2811197f3890debeab3882a17b148ea68850e3845f551c09a66bc12610233c9dc7e221883c6897dcb3198c0344b89885fc6937dd23568a062b30a48f39bc3b25dc834b445403dfa35c438462bb1715138f0c99acae699752fd22aecffc4966bf91c7641f1202c50ea7cc69d760c73b52b33bb8a0c1de6f169883974e7033d7dd3a06288c09ce1b158ee3d409bf7d4db52a5d72140a0324584e9a92527723c28bb9ea9c0a15b42839e8687d75ad95d3c548daaaa1f5f47763e062555fe863ae97c3e85367653277c4aa9abae1c0ff185901d07bb9f47f67c0e54c5605336a101675259a88163fa9a62fb9922eb708dc3fdee8212140a74b72278f79116752246ba35f7014294373b5530f5e928db1369350594da3f49937b796d93de10dfd9d57096c0f755aabe9aaa8ee500360ddbb753f2a4cd021691d8e02d5f9a31964fba2ca5b0dfa1a5df362ba83efa1da94a7034f02c35dad87ef0a86ef9f95c77d8716ac373bffb8fac593ab7b983d", 0x1000}], 0x3, &(0x7f0000001200)=[@cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0x0, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10}}}], 0x60, 0x4080}, 0x4000) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x10, &(0x7f0000000640)={0x7ff}) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) r11 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r11, 0x4, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1c, r11, 0x1, 0x70bd25, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r12 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r12, 0x800000c004500a, &(0x7f0000000300)=0x77186fee) readv(r12, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) r13 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r13, 0x81785501, &(0x7f0000000340)=""/94) r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='numa_maps\x00') ioctl$VIDIOC_G_MODULATOR(r14, 0xc0445636, &(0x7f00000005c0)={0x2, "a56d6948805527503cd9c8dd2139d927ee5a5a5e5abb72be29d11cccdded4b0e", 0x80, 0x6d7, 0x1ff, 0x4, 0x2}) setsockopt$inet_MCAST_JOIN_GROUP(r13, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r15 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r15, 0x800000c004500a, &(0x7f0000000300)) readv(r15, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r15, 0xab00, r13) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r15, 0x894b, &(0x7f0000000140)) ioctl$NBD_SET_SOCK(r12, 0xab00, r3) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000200)=0x4) [ 1005.944774][T16864] binder: 16861:16864 unknown command 0 [ 1005.980472][T16865] binder: 16862:16865 ioctl c0306201 20000200 returned -14 [ 1005.994302][T16864] binder: 16861:16864 ioctl c0306201 20000200 returned -22 07:17:33 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f00000003c0)='/dev/admmidi#\x00', 0x10001, 0x101002) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x4000, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f00000002c0)=""/185, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) clock_gettime(0x0, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) readv(r5, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r5, 0xab00, r4) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000008, 0x30, r4, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0xfffffffffffffd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9c000000, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1c}}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000040)={0x2, 0x1c00000}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'}) select(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xfff}, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0x2710}) sendto$isdn(r3, &(0x7f0000000540)={0x10001, 0x100, "608cbe0a394393a57b8a8d7f2fa2a60931b9b740e8abe60542c19783aec7e264c1ee50dc8a69c72221d63840e9e77ace1cb9813ed51753768f2ceb32e753c59029283c52c889c6ad977e450a1d3cc2d9fd07d61ed7e23646278408a6797e5161a52a501efe0377a44ce11c2c45a94ec3d021bc95f437235dbcbead1024ac9ace447a19c1aabed980d13c1077810af2331432db09652c"}, 0x9e, 0x4000, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @loopback}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(0x0, &(0x7f00000008c0)) getgroups(0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x2e424, &(0x7f0000000140)=ANY=[@ANYPTR]) [ 1006.046899][T16869] binder: 16861:16869 unknown command 0 [ 1006.078614][T16869] binder: 16861:16869 ioctl c0306201 20000200 returned -22 07:17:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x5000000}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60ffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:33 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mISDNtimer\x00', 0x111940, 0x0) close(r2) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r3 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000040)='veth1\x00') setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) r4 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) readv(r5, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r5, 0xab00, r4) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000180)={0x0, 0xd967}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r6, 0xffff, 0x2, 0xc000, 0x7, 0x3ff}, &(0x7f0000000240)=0x14) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000140)={0x7, 'syzkaller0\x00'}, 0x18) [ 1006.299698][T16975] binder: 16974:16975 unknown command 0 [ 1006.328857][T16975] binder: 16974:16975 ioctl c0306201 20000200 returned -22 [ 1006.371838][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1006.377711][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1006.398186][T16986] binder: 16974:16986 unknown command 0 [ 1006.413901][T16984] binder: 16980:16984 ioctl c0306201 20000200 returned -14 [ 1006.421851][T16986] binder: 16974:16986 ioctl c0306201 20000200 returned -22 07:17:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x6000000}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x760000000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 1006.657958][T17092] binder: 17090:17092 unknown command 0 [ 1006.680073][T17092] binder: 17090:17092 ioctl c0306201 20000200 returned -22 [ 1006.730801][T17098] binder: 17093:17098 ioctl c0306201 20000200 returned -14 [ 1006.746219][T17099] binder: 17090:17099 unknown command 0 [ 1006.756152][T17099] binder: 17090:17099 ioctl c0306201 20000200 returned -22 07:17:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x7000000}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:34 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x492800, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000040)=0x6c9) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev}}, 0x1e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 07:17:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffefff, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 1006.972017][T17208] binder: 17203:17208 unknown command 0 [ 1007.003967][T17208] binder: 17203:17208 ioctl c0306201 20000200 returned -22 07:17:34 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev}}, 0x1e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = geteuid() mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='fuse\x00', 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d303036313331373735343037363433373033320200303221757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r3, @ANYBLOB="2c616c6c6f775f6f746865722c6673636f6e746578743d756e636f6e66696e65645f752c6f626a5f726f6c653d2c646f6e745f686173682c657569643cc8f3602575fdae7aafd972abb259c8e584ab11fc025fd47a4efb374cf42e480268f74b2192b0f80a95125e4ea38d432c98eadfb4c2f6f18653244a7dfc2b84ed4f6e49a2c2890987f551deb913b80000", @ANYRESDEC=r4, @ANYBLOB=',uid=', @ANYRESDEC=r5, @ANYBLOB=',\x00']) chown(&(0x7f0000000000)='./file0\x00', r1, r3) 07:17:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x68}}, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0xffffffffffffff68) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={r2, 0x1, 0x6, @local}, 0x10) [ 1007.133501][T17208] binder: 17203:17208 unknown command 0 [ 1007.155645][T17208] binder: 17203:17208 ioctl c0306201 20000200 returned -22 07:17:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x7630440}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x960000000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:35 executing program 3: r0 = socket$inet(0x2, 0x3, 0xfbfffffffffffffd) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x100000000, &(0x7f0000000100)="11dca50d5e0bcfe47b7b78") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) semget(0x3, 0x3, 0x22) [ 1007.385587][T17328] binder: 17326:17328 unknown command 0 [ 1007.409246][T17329] binder: 17327:17329 ioctl c0306201 20000200 returned -14 07:17:35 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x9) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x995, 0x44000) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r4, 0xab00, r3) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f00000000c0)={0x0, 0x0, @ioapic={0x3000, 0x7, 0x2, 0x0, 0x0, [{0x100000000, 0x0, 0x96, [], 0x9}, {0x5, 0xb7b, 0x1, [], 0x6}, {0x7ff, 0x1000, 0x7fffffff, [], 0x520c}, {0x400, 0xfe9, 0x80000000, [], 0x2}, {0x8, 0x8, 0x10000, [], 0x2}, {0x8, 0x0, 0x10000, [], 0x4}, {0x2, 0xfff0000, 0x7, [], 0x7}, {0x10001, 0x8, 0x3}, {0x7, 0x6, 0x8, [], 0xffffffffffffffff}, {0x1, 0x401, 0xffff, [], 0xaa}, {0x100, 0x800, 0x5, [], 0x1}, {0x10001, 0x58, 0x9d, [], 0x2}, {0x3ff, 0x8, 0x10000, [], 0x10b}, {0x7, 0x8, 0x80, [], 0xfffffffffffffffb}, {0x0, 0x3, 0x6, [], 0x3}, {0x3, 0x6, 0xffff, [], 0x4}, {0x80, 0x3, 0x4, [], 0x157}, {0xffffffff, 0xdf60, 0x3, [], 0x9}, {0x8, 0x7, 0xe570, [], 0x200}, {0x8001, 0x2, 0xfff, [], 0x1c0}, {0xffffffffffffff81, 0x1, 0x0, [], 0x80000001}, {0x7, 0x81, 0xffffffff7fffffff, [], 0x9}, {0xd, 0x81, 0x7, [], 0x6}, {0x4, 0x5, 0x6, [], 0x3}]}}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x109180, 0x0) [ 1007.438380][T17328] binder: 17326:17328 ioctl c0306201 20000200 returned -22 [ 1007.479145][T17336] binder: 17326:17336 unknown command 0 [ 1007.514754][T17336] binder: 17326:17336 ioctl c0306201 20000200 returned -22 07:17:35 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x8) socket$inet_udplite(0x2, 0x2, 0x88) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x10) ioctl(r1, 0x3, &(0x7f0000000040)="dfaf000000000000000272") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) r3 = openat(r2, &(0x7f0000000100)='./file0\x00', 0x40102, 0x28) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={r3, 0x3, 0x1, 0x7ff, &(0x7f0000000240)=[0x0, 0x0], 0x2}, 0x20) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', 0x800, 0x17cf7fdf8077c2f9) r5 = socket(0x10, 0x2, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x71, &(0x7f0000000040)={r7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000300)={r7, 0x100000001, 0x8000}, &(0x7f0000000340)=0x8) 07:17:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x7000000}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x8631040}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x30a45555550000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:35 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) r1 = gettid() ptrace$setregs(0xf, r1, 0xffffffff, &(0x7f0000000140)="0b91c9cee541c46dc3906894b177663f385848f0f64f1c9489ac674aafc1dece6343fbc573537a9994d19f4ff39c1f9568964d2375ffefacc707885e37148f6b937c59d8d2994065de4c4c8c2cd61935e575b6fc894e7f09f839a69fe067632af965fb47c4b73349a7316b68e8e8c0561e3a26f304f1313b33b0a3c207da412519dfc1174cc0c89efe5f0e98448663ca88bbd1b3558a2f65aa26f1491a998be76d01a5161905b9e4414c72a5332c4deb220dcb5000b44ec1ca6aba30b704bb984496e862414a3a63ac8cd554e439969b79dc2dd7bdd10e5e70107deda3a6ed344fa295f81808fb1ad05433a275fc36564d62b6d535a4e1556493e529801821a28b1a513c899add65eee34a54cb749232acf7291f2d3a5a65a61d791bc7ad46913d67de61c29e1744bda5dcd67c64f4dfa0803fa6c418e71035252c4731e6929bfc00ae2e7834a7f882690389e22b2ae8896f955e7bd57f2679fce606366c19d16dee4492d356f71c771eec0eac6fd199075954b732ed261d0878ac367876d60f72dc498c5e5635a0a0995003509ad8c8df524959706f2ae5d331334ef60a233ef81f667b7121d68ec25bec1bcc4341c7261fcc8d84b9408ed72b0e84a831f5d48dc6f0f6a62109ebc49dc5c2f5b8d3f3bcaff74c302ab87914caf7c78df43dfc0f73facf43238a3027ecc098c6d0add673da6462d68e58afd0eab670c12453e6b344db1088423b1cced4b6c2369ee510dc302e9da4c00eeacab53a220bf028b79e8c63c9f1b4b7ad730318c04711f6de8605961ba173aef035f54f5b7784d22459e11105f3007c83cf408370e60f734e6b2f61d9be1a4a6566237e51389e553579533d7b9f404342b6e290977d9cac5129b6de3ae1f0ea80c9df699ccf8b3e34dd031ec70aac86bbefa7c79fd3970b3fa5c000be8c4d03fca729f78818e0066c45382b1cf2b1d5083120be5f240f4009b3ae1cf0caf12acfc768fbcd822f6e3a2d22669045b702e8c04393f76c6988130fb4baf5e7d75c3c9c6760cc9c36deecd27ec6440cf8c9b7d823633c4df0bec6b7e027505a738834571935da3151b81bd818f17e6890739afc438fea9c0e0f75f37e95dbc5d703068789046ec7f23729a6c59370e8de23ba77a0091f5ba18ca193cc64209b001228bdf0f0bb67354646801cfeaf249d8e7e446898c457addb20870fb646aad456e116b46a048907b2ff68bd6ceb739b7f3849b07749c5cad1022da2726ab6f9a5ea6030fd5744c32eeab80818a1d9f934a825a5b6e500c46adeb51da9e2dff2bdbce01beff9866533073f54ee78f234468566abb2dab342c88fdbdb97a6f272d84f041826f4cc3ee0aef7f741ef46c10da2eeb477a73c54c9769481da997d6cd50a606c7a0b6d4378faf05840184c1c78fdd6ec6bb16775ffbd3f1cd737b436de9de80c715947712fb7e51e5c997131014b904434011e7219df3aa4a57537a81e4ac50bc7371c91e29d3ce4743bfccec3c7a44c4bfa269be5f4d99e11c39aa05738856f679613999d9c158e9ca74425303a147d88b78c140cb921e47ed53d7d4d5e68fbd859e9aa938e6463203f88e6f124b5cc76a1a36e188e30975a10ab81854aed84d3823aed826f8f916c641f6da618ed78f045693ba1b5f04f23b91587e9699d75012d6ad3e9c3bfc6229de35c758cfd648cd508fab39e36a12dac923d99aca9e5fcea78097842e3195636e635b48e3195b0a391798f0965d63223e03142d781575047337a88a77ab248e5460427c4b2270c4da379821dbaf016cd664f191f26cd7483916de144f66b38cae98a3f10bda66c9568887ae265010e278a9c00c9b48b11b7318cad4601a134eb2d3a90de8d580334a0a4a5f151f7d95b12590b5f2f0419e8310487b872a0e31ebc6457305be8abb587d25f547c3cdef71bcd5a88534958b909442fe4d11263e665b01749a1f8e67567f920870dfa3ee5168cec78aeba3a3e93da98be53c40743eecf3cfdeaf7a32e24c68e163cf3b2076432956409dd34577baf8222d1effe4857a3062ed2353a59da45f370d3760ccd71393d8c40676915ddbbfa1c5ba38da0481275e35d212ec2b5490ca5e455830c308b1f14bf2fedf567bf6448127d780b1d14da687c373c500b9e593ec4239528d703c008e0a12192b2d781c272a9690901acd580cbd9a727c65afdbc208d112a3cc1d94328e39a38d4493772daa7f155e9983eee7d2b334e0bfb0241c8dc3ab2570244f14a07647177199f964a921025788a56e14b9ab5805d30c1c7d449d897559a013f3ccc42f326b6894572d9d550281d19ebcc884b762c22246a8877879a8f83fbdc55682f02064a965d6b82353bb4da5390c5fab561d978cf715d6587a2e34607c26c528eb7c8c162a4a4d89bf62d956ca9e19195c16c8768a30750c43cc5a4016e2aaa8e23036ed358d3f4b595b3625ef359b7090c84f5492bb3b6b33822ce5d636730a468af37b99c3650b9a37ad7a40c8daf7456300975549835378d93077d77dd7d64a724f4611804e7c079844d8fbe6c6d772a8d6676b8639f56fc469b597e65c7c420313e9ce0d577c4f860f0500ad9d8872cb263539c480dcbd1872b6fbf46cd7367c894a37df410c180b67ec7f718575408eafa375987615f767592aa7dafbf1e47ee3e75b8320c13c12194aabfe6a862ab7ba199ef47810060ec29e6cd76de3f7d02da69260bbd62b5d520618835589cd0a7ac3ce85544de4894bf398395dee2e66561314111408344063a7663ab170715892715dfe083cfb6c4881dc0f3394b9e069c6b39b56a3629eddceea3671020f61c24f5e15212dacc21a0db0cad94f69ce71cb49defbaf9a1085ecb475a0b5fc82f3e4df58fe8581dd50f3badeac207ef05b22b4643977d8e30993550ad17d63fec1765358f10b432b2c2d9d026d58354e58883d25bf0409e0fbc7eb6a0938a796a3ee381365984f5847f050f39c6ceefec16ac651ac119e8e66193ecf7831e7e0522d267a08a3999837786a8983aea07df6bbca903f06a61234a12755656e7e4a1ebfb964544374f83fbd8d3a281e136f4b213749739d7e9f92b1863f9aa2c4a78051b3102466fb9b71a11ac909aca14e94642877a656a56d3eba1851e4a5e3f172729058be9d8d8df087ab22fed0b2ecc136d88b9b6d3f8d3dd73ea483fb078c02a06f4b03d05c6ace8b9430c96122741b3826063884d8ea67531a00662f5cf15b68e1102775cdde71021379ae9c2278992e2f2ce2adf86b342b91c3f7f8373776d56339608d3433332085ffa3c3bdaadc070382944a6689410b532882fe2074a2fb336880e29626c6c1fe6e644fc39b024da1ad2effcfecc298c93bfae1cfef8616b449b514eadef64d971695b2a4373663bd64f6103bee61335f3150f64776e5623204859edb1fc7cc9773d1a7719233eccd00d0a3c9740d306b1ac2aad939a474f5c82620b5e1568eb5e316c11f5df1c821042c4c626387f112a04e5a3b40e20a0cae8d9dbdfe87d6850443c924c7e8ddf5b129fabf96c8ac7605b929886cf6602b40aba17c021baabeac887bcb352295012b213f2dae60e71ef9ca967b9d37e9bd7a541d0e24ee0f8c67ee9495b3146f8a05286bb63175e73cc4fa1ff4b4f9f71c3759ee1a30ed002ad568a1d8a0fe3a60c9dcd31c01f22d56f701b3358ffa2a1c24b0311c8096f1d63c67fcbc924fecca2f182af32c137b47af2450c2c78fe1a69022a0dd20e07d67755c69e21b124a7afdb18e07e4625b48689409b175bd89ccae70393b580bfe45bc998644afff1287f1188f7fc6e7b33690bc794e25706bf022a91ffc11746e340777a1999aa46ac6a1d9c4af1c0a954e2e250eb1617b183239a7b5d4a9dbf27aa64eeed8320cac9a3ba523bff2afbf3bfa72c213338792325a049ef2ef5445d6ae13cc98c39e3db99eee2a410ec391ea594f4d235b96e5a535822cdaaf4f7bb018966bd50001605153c1098a4cdef651611dc2960835a4c838a2a5e9a6c9211a3b95ad0cb5ebc282b794996b48082ba4aec0603deb416d75749a393dea8d965e2058242750b8103054b9892b83d3a0f24c6bc4ee17fb310cf194e609742e26f4e63b46d96be5af0e994e2b1c014c82416f6d93a158f08583eb8af5c14b14e85afc3c41b48d7cb11c50f8e6c28c636f26d8aaba0ae79b228b18d3aeb64688d6219ad08014407312191f2278fcbeaa4d9a2ee947912fa168b47bb6c493955991abe3e0c935e7d5288d3859d39435ed2b33dbac9665bd944ea12fca704377cf37231da1f4544720549302fdce12f02fbf60a958fd063d3893f5efbf941b979d7984f11a6e9b1513c7e9c171e48062a0622bfe62c1bcc71a0e0edef18f08122363faa53a329a7ed63b55e223524cb2433f36c3651e19f32617132e5910ab76f2c6c83d2a8b956080528896a3c7d7aed19c8028b6d3c15f3a759a9461c7ae09836018e0e10177f2877536255d4b277f6b6aebef06200bc35301e66877585c09117757ba1146349f83614f50ce96f7b3687bef5caf61c1aeb798e5cc920567598e49ab8ec5675c5ac46551a343d6dac9b1c08545fba357942219b23bc00f99ed3c11b2f698db62b37a2c667609cea8f5f0a20a4ffd923ee37191c6fd61952ba03422d7cd61e13654d01c3fc9af4a472b3af5d7ef86e019d4b310874c12f9ef976e53b6e84af287baa80f35dfa46ea0163ceba7aa0fdbd0163d55f18187469e5c551b086add3b03b963a449b402b181b7c16f6e6d775d76220108855a811641910829ed5a9ffde1b820efb5f1489a1f6f18dd10177a5de73c4625880ab38e77272a81b526849bd3c2cf9bc95badec048d0fe4d126a37709ada74fbde8cb46f1e0a075a6819c02e5f795e5b98af1d2a06424c616282a4f31760d08d5e999fc818559c69c4770c6b289cef7ed9f55bd893afa80961743b37f578bc166e6894d5b08f0b6a6c08cc50f3d4330a30056dc00e66f8d71208a3a245338fe17e16bcb09cdee4b9e3681a22fbb949df2cfe434219f1f5afb72876cc8d1876b2503786580c0016c90a86fab308cf6cc2fa9b51fa889d4f882902fec1239236c7afc94380409b7e8cf887335c3b53eba8e5b652b8c7b8798f6a50132f8980814d40434462940eef47d0061db949676a41b8328a416614068c33647a63b2a5c26cf65956421ace89dde3a861572faf43ff709ff43e11799468027f83152fdd0de7acaeaa5fe27e10a9a0b694de5efd90d21e13b0809452fd7391bafa5f61c0eb904029bad59a32afcf340a3cfafb1d885af89a171ab5321d9ef431b4225fcff599c5f5703c71c9b13617728cbb606dcc1f6b431b0ccb663eca5bce09898624f29991a58b2e5225db7378266ced9b7b4785ed688638e7239cd983d985350e7448a6a84c54b8dafe8cae9c0e9e3c79d36e90e68ea432f428086a29c5bc73f62a6a907ffa94efce49b87ff1b6b829f9c6599d284cb4d3df4abb228cd2ab229454705b7fff090dbb0ae5f6658864797d8a437ee735e7b716446c6d403f07ba047a6fde02e7d183b74b4f7411e38df50d329820663d4457a5e888047de06662ba040f5c18e509d90462291b15d52fbfac6a21a827d7c6c5dcf875f780158ef6fe6f86e67b2f77c99117f0d21c909816e26fbb4ba5c9cab0c62703b146d9e9afbf5e7509063081898c5d4d6f073deff14e588c8b53a4b6b80d7016c4a14ee22695d468aaab20b33916d2c1a6e31bfd6803e47f8a48afd091709e863df51c1a844d6c08a61e8d309e8d838c60509045add1fef3219b") sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) [ 1007.788453][T17447] binder: 17444:17447 unknown command 0 [ 1007.811490][T17451] binder: 17448:17451 ioctl c0306201 20000200 returned -14 [ 1007.817952][T17452] binder: 17450:17452 unknown command 0 [ 1007.837311][T17447] binder: 17444:17447 ioctl c0306201 20000200 returned -22 [ 1007.852742][T17452] binder: 17450:17452 ioctl c0306201 20000200 returned -22 07:17:35 executing program 2: dup(0xffffffffffffffff) r0 = syz_open_dev$loop(&(0x7f0000000040)='\x19vCv/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_SET_STATUS64(r0, 0x1277, 0x0) [ 1007.880628][T17456] binder: 17450:17456 unknown command 0 [ 1007.915551][T17456] binder: 17450:17456 ioctl c0306201 20000200 returned -22 07:17:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x9631040}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:35 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ftruncate(r1, 0x3f) r2 = socket$inet_udplite(0x2, 0x2, 0x88) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) 07:17:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x50a65555550000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 1008.137431][T17571] binder: 17570:17571 unknown command 0 [ 1008.142031][T17569] binder: 17567:17569 ioctl c0306201 20000200 returned -14 [ 1008.159900][T17571] binder: 17570:17571 ioctl c0306201 20000200 returned -22 07:17:35 executing program 2: socket$kcm(0x10, 0x6, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x31, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x10}, 0x10) [ 1008.184805][T17572] binder: 17570:17572 unknown command 0 [ 1008.207895][T17572] binder: 17570:17572 ioctl c0306201 20000200 returned -22 07:17:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0xa000000}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:36 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev}}, 0x1e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1008.566990][T17683] binder: 17682:17683 unknown command 0 07:17:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x70710000000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:36 executing program 2: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000000000)={0x9, 0xfffffffffffffffd, 0x8, 0x0, 0x4202}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) [ 1008.631570][T17683] binder: 17682:17683 ioctl c0306201 20000200 returned -22 [ 1008.723131][T17692] binder: 17682:17692 unknown command 0 [ 1008.726398][T17689] binder: 17686:17689 ioctl c0306201 20000200 returned -14 [ 1008.743314][T17692] binder: 17682:17692 ioctl c0306201 20000200 returned -22 07:17:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0xa630840}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:36 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev}}, 0x1e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x2c0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0x7fff, 0x80000001}, {0x9, 0x8e}, 0xfffffffffffffffe, 0x0, 0xff}) 07:17:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe0700000000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:36 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x100, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f0000000140)={0x0, 0x4, 0xa, "238e0a02d159468b04a27b535e8f83a4d92fada33fc091624dc0ec82bbfeddc54f37ab119db7e38898e7c3f96471757b1f04baae057078ead7f0ec78", 0x35, "77fb814c004630f8f9fed41bb689ad9e4531bea4ad29e0121716cc940246bdcba378725f2395e3ff88de84800164cf7ee0ff9e67e8ac4868dc25fb55", 0x68}) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0xffffffffffffffed) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) [ 1009.038868][T17767] binder: 17755:17767 unknown command 0 [ 1009.074832][T17767] binder: 17755:17767 ioctl c0306201 20000200 returned -22 [ 1009.134968][T17804] binder: 17755:17804 unknown command 0 [ 1009.162222][T17804] binder: 17755:17804 ioctl c0306201 20000200 returned -22 07:17:36 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x2, @dev}}, 0x1e) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) readv(r3, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) sendmsg$nl_route_sched(r3, 0x0, 0x40) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x20) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000340)=""/94) fsetxattr$security_selinux(r1, &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:crash_Mevice_t:s0\x00', 0xffffff8f, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000480)={0x3f, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) readv(r5, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r5, 0xab00, r4) connect$vsock_stream(r4, &(0x7f00000000c0)={0x28, 0x0, 0xffff96cd, @host}, 0x10) 07:17:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0xb630000}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 1009.293509][T17812] binder: 17810:17812 ioctl c0306201 20000200 returned -14 07:17:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0500000000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 1009.455125][T17922] binder: 17886:17922 unknown command 0 [ 1009.490300][T17922] binder: 17886:17922 ioctl c0306201 20000200 returned -22 [ 1009.546155][T17926] binder: 17886:17926 unknown command 0 [ 1009.587151][T17926] binder: 17886:17926 ioctl c0306201 20000200 returned -22 [ 1009.601841][T17928] binder: 17927:17928 ioctl c0306201 20000200 returned -14 07:17:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0xc630000}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:37 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x4) io_setup(0x9b7, &(0x7f00000001c0)=0x0) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) r3 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r4, 0xab00, r3) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x880, 0x0) r6 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r6, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r7, 0x800000c004500a, &(0x7f0000000300)) readv(r7, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r7, 0xab00, r6) r8 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r8, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r9, 0x800000c004500a, &(0x7f0000000300)) readv(r9, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r9, 0xab00, r8) r10 = openat(r9, &(0x7f0000000780)='./file0\x00', 0x0, 0x149) io_submit(r1, 0x3, &(0x7f0000000800)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x80000000, r0, &(0x7f00000003c0)="d4b4ac89883f617d628a7229b40c8d1303b3763dd0812b5e7ad1f8f659e049f83c44bfa9bdfb594629b4b816265c1a76ea516752d4f2369836a2f6f2", 0x3c, 0x5198, 0x0, 0x2, r2}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0xc, 0x0, r3, &(0x7f0000000540)="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", 0xfb, 0x1, 0x0, 0x2, r5}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x7, r6, &(0x7f0000000680)="2ebb525f0f5c3e7418e4d8f9b7ee9da5cbaeb09ead3989e3c280fc26da0602ec160bcd21f214c145a922cfb7626b9372e4080a87a94999f83f87c0a26f053b5ce4e29102ca85977b1c9c3cb44712ab8edbd3e813a1b50e75c1e9a3f23b18d6c22e4c33e7c307529f5a16a9397f3c473c4ec8a5784327e28c863b7e6f4c804e0c850159541c7688755cf6329dcea9be402b002d14460a7c0ed98aa33a1d3d3d83786c93218b40a4d5380d6be911a3345d7f74d8ef290c51f81e754896bd43c95f1d4b0ff5730e00f8484d78284c0884066d82a7a2", 0xd4, 0x2adbecbd, 0x0, 0x0, r10}]) r11 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r11, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) ioctl$KVM_DIRTY_TLB(r11, 0x4010aeaa, &(0x7f0000000180)={0x6668, 0x4a}) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) r12 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r12, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r12, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r13 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r13, 0x800000c004500a, &(0x7f0000000300)) readv(r13, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x0) ioctl$NBD_SET_SOCK(r13, 0xab00, r12) sendto$inet(r13, &(0x7f0000000280)="241656bbc142fa6d3d02ff39d99a33003a33dc89668f3e1ee707485c0fd0019e61d9767a924ab8c3a39a138d1381ed3239ebf31d877eafb597129bcd5e9a797e662ace271903a9bd761edce462c8e3eea884fd034807381f87659cce", 0x4c3997d761411ee, 0xe0, 0x0, 0x536) getsockname$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000140)=0x10) 07:17:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dcab0d5e0be6e47bf070") r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) readv(r3, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) getsockopt$inet_tcp_int(r3, 0x6, 0xc, &(0x7f0000000140), &(0x7f00000001c0)=0x4) openat(r1, &(0x7f0000000080)='./file0\x00', 0x100040, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x24}, [@ldst={0x4}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) readv(r6, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000100)=r4, 0x4) ioctl$NBD_SET_SOCK(r6, 0xab00, r5) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000000c0)={'teql0\x00', 0x3d9}) [ 1009.755197][T18038] binder: 17997:18038 unknown command 0 07:17:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 1009.804808][T18038] binder: 17997:18038 ioctl c0306201 20000200 returned -22 [ 1009.852945][T18042] binder: 17997:18042 unknown command 0 [ 1009.881916][T18042] binder: 17997:18042 ioctl c0306201 20000200 returned -22 [ 1009.893964][T18045] binder: 18043:18045 ioctl c0306201 20000200 returned -14 07:17:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0xd630000}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 1010.117542][T18151] binder: 18148:18151 unknown command 0 [ 1010.136412][T18151] binder: 18148:18151 ioctl c0306201 20000200 returned -22 07:17:37 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev}}, 0x1e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xd673, 0x400) r2 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x40000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000040)={0x196a, 0x9, 0x1, 0x800, 0x4, 0x4}) [ 1010.178918][T18154] binder: 18148:18154 unknown command 0 [ 1010.189957][T18155] binder: 18153:18155 ioctl c0306201 20000200 returned -14 [ 1010.203928][T18154] binder: 18148:18154 ioctl c0306201 20000200 returned -22 07:17:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0xe630c40}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:38 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev}}, 0x1e) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000040)={{0x0, 0x2710}, {r3, r4/1000+30000}}, &(0x7f00000000c0)) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) recvmmsg(r2, 0x0, 0x0, 0xdef036f28687a21c, 0x0) [ 1010.395349][T18262] binder: 18261:18262 unknown command 0 [ 1010.414667][T18262] binder: 18261:18262 ioctl c0306201 20000200 returned -22 [ 1010.461161][T18266] binder: 18261:18266 unknown command 0 [ 1010.488862][T18266] binder: 18261:18266 ioctl c0306201 20000200 returned -22 [ 1010.522863][T18272] binder: 18265:18272 ioctl c0306201 20000200 returned -14 [ 1010.531841][ C0] net_ratelimit: 21 callbacks suppressed [ 1010.531850][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1010.543414][ C0] protocol 88fb is buggy, dev hsr_slave_1 07:17:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="1f0000000000000000000040050000a90000e7fc4b83bbb6a23b4b6942b7871001000000000000002560b700ff"]) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000042c0)={0x0, 0x0, 0x2080, {0x0, 0x0, 0x1}, [], "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", "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"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="52c94199506f7cd31a079f912bbf8eb5a8fe42e452eb891c930a334106ec90e43aa4780d21eaca949212d00becfbfaaeeb13b2f927d5b9f1b80df111e26281ecade85c45249a47ff9dd3d06b0e6f01d92c34f794b1d771405483b86d4d3ed189c021ba1c30e052b92880746a6dc30e2e3e5ce0e371662ddabe041055c0720f822ef607038ae175edba9a22f269c1b949cd9eb2e1190a8a055105f4b88abed97ce31e3a93d21fa8b4889ac7935390e2", 0xaf}], 0x1, &(0x7f0000000300)=[{0x110, 0x10f, 0x8000, "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"}, {0xa0, 0x17, 0x7f, "408a1d62c1ed8039175b8c5718f83157b733398afb8ce6aac4b61bd8b9a1d4761fbf1a7527a3c135e25ee8e2f5b2dc31a49095a52ee7527d90c3db1c7d7db8b520479978b312c38934d817e38092ca24350a1f957f5bcd3445bfc184899651c7c54d092c30a0f656defcd1c4a723c852f07ade3c33e9bf1d6d4b59d04021148b91eea6fc8cb4a138c7"}, {0xf0, 0x211, 0x7ff, "05c341c0f03737efb1fbb57831eeb75590687c5ac7c49991fb374ba65d3d7291732f4ae64c6630de366bcc53ab1091b217a96a797e28e23a8436178ddb3698ef5eea9234b07e56edfadc0c58bb805dfc86c422d19914dcc9dce952029b5434d5026aa840811c6132640f22932a605a11021af277fa2540552bae3a82e4fa3e393102bb5d09382e43864bbf27a8d5566c8bc17c2ba759e2097b33a4d0ebf655c860d6143962fcc24d20e38c77d12d1aabd09be39742d8d2b300ddb6f511e1e3514fad082bbaf5f152c1ffa3e6b69cbaa5baf4d27f4a034e52b16324488f"}], 0x2a0}, 0x40000) 07:17:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0xf630c40}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 1010.611867][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1010.617778][ C1] protocol 88fb is buggy, dev hsr_slave_1 07:17:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 1010.774954][T18383] binder: 18382:18383 unknown command 0 [ 1010.811192][T18383] binder: 18382:18383 ioctl c0306201 20000200 returned -22 07:17:38 executing program 3: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x200001, 0x0) r0 = socket$inet(0x2, 0x3, 0xffffffffffffffff) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x34bc00, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fremovexattr(r4, 0x0) syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0x8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) close(r3) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x71, &(0x7f0000000040)={r6}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000140)={r6, 0x80000001, 0x4}, 0x8) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) [ 1010.889580][T18390] binder: 18382:18390 unknown command 0 [ 1010.891176][T18388] binder: 18385:18388 ioctl c0306201 20000200 returned -14 [ 1010.905252][T18390] binder: 18382:18390 ioctl c0306201 20000200 returned -22 07:17:38 executing program 2: get_thread_area(&(0x7f0000000080)={0x2, 0x20000800, 0x400, 0x5, 0x2, 0x7, 0xc13b, 0x100, 0xffffffff, 0x7}) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) r3 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) ioctl$VT_ACTIVATE(r3, 0x5606, 0xee59) recvfrom$x25(r1, &(0x7f0000000140)=""/118, 0x76, 0x40, &(0x7f00000000c0)={0x9, @null=' \x00'}, 0x12) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/88, 0xc}, {0x0, 0x7fffeff4}], 0x2, 0x0) 07:17:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x10630840}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:38 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x0, 0x40000, 0x0, 0x0) 07:17:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 1011.138705][T18502] binder: 18498:18502 unknown command 0 [ 1011.171993][T18502] binder: 18498:18502 ioctl c0306201 20000200 returned -22 07:17:38 executing program 1: socket$pptp(0x18, 0x1, 0x2) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = geteuid() mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='fuse\x00', 0x1, &(0x7f0000000500)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x62cff60fa3e1a882}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@allow_other='allow_other'}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<', r5}}, {@uid_eq={'uid', 0x3d, r6}}]}}) chown(&(0x7f0000000600)='./file1\x00', r5, r2) geteuid() r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$kcm(0x29, 0x0, 0x0) sendmmsg$sock(r7, &(0x7f0000006bc0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="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", 0x1000}], 0x1, &(0x7f00000017c0)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x4318}}], 0x48}}, {{&(0x7f0000001840)=@caif=@dgm={0x25, 0x81, 0x10001}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000018c0)="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", 0x1000}], 0x1, &(0x7f0000002900)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x401}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x60f88864}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x400}}, @timestamping={{0x14, 0x1, 0x25, 0x7f}}], 0xf0}}, {{&(0x7f0000002a00)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x13}}, 0x3, 0x1, 0x3, 0x2}}, 0x80, &(0x7f0000003a80)=[{&(0x7f0000002a80)="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", 0x1000}], 0x1, &(0x7f0000003ac0)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x8001}}], 0x30}}, {{0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f0000003b00)="ef6680cdfeaf92125f1f0dbba82f03ad2cac905d928d6824f7758f8a4a107339652301585062e3200f268c4289f3ebbe2731b01b1bcf4f98c38048828f2bf26762b1c0d569cdfad7e9c2d606b50b1d97d506d0ec12815e983ba11cc96ec9e0a02606d439c0cdcea3472929eec65a6292bf4c8e9f153800e04a65a2e181d8ff92c92864b7a819e3f572ab36dae7a31cca470fb34304535dc858a0c4c8d228ed76c60bab1edc3b6cad1f68b109f8eb948505701c991d884d72288961e70b9ddc12a2d89a96e7350c44db5846f5a58f1958b98bc66abf17ee", 0xd7}, {&(0x7f0000003c00)="3dd1d133eefdca4324ac59e31a057143ed880b2dfb49173fa536caaeba843048f209aa651c0eb41b5dc0d71dc615e193d719ec1ac288b9b22ed5f14bd7e7aabdfca3b5512d73d054b6b153422627bd31471b9ef5a9215bd4e471de7f118ae1277f8eb37bd927d30c394e3c2abfb23ddfd0dc64d183fdfc09cb4e9c42d545349134afb46becc659f57e52d501bb4c28392bd3ccaf757db3c6fc4650c2b6f658fd775450aa79c5079e10be5954a36141e25a54b51627164ec4ff70b9f9d39898", 0xbf}, {&(0x7f0000003cc0)="9c1ab20559ff8c3f191e7ad827f3d7c2de5180b67f558df572886a01c5f62b3a6ca2ca791f912a455a8540efd6352a81a2428ee10669cf05aa69fcf0859e67e99086239c522f924138337b2e7c", 0x4d}, {&(0x7f0000003d40)="764f86b32a59cef614be3018fa47a4", 0xf}, {&(0x7f0000003d80)="8ec8feb906bf9645f609a9a3d21805fa9c52588638de13b884b58462efb3f44b2d6e98178fa52d9b92f8516ee63532d98ddb2249e10cbd8d62c110488f26e2fc73743bf9664ba46b17330e04776dd723215d951f1e5b9aa7fde955c91abd0b4ea972637cd6c9fd2f543564414cdcdfb8181873e95210e03e26b3c2b7c476e33fe8daa0b41e4ca933e2c51ce54001483c69a1f6b7ba2c8da9ec67e18965e97fa87e8ac80f99683db4d0bd5a6ff57359b9b1880c2aec9ec078b6b57a43bc458cbff2a6bd548e4ec3402cb22aefe5f294cf3489c5ad313f7e5a658a547916ac59a2", 0xe0}], 0x5, &(0x7f0000003f00)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x81}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x78}}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003f80)="78aa32816b4f81ac519c1ea36593391a532348e4b71e920a8bdeb5e20c3e2af31c201420fc5f0ecb5895420da4e7f95e824ebc1b1353b78e40b76921d7581f47f63bf0d792d305fed09a53dd458ab3e03031fa5eef487b010d21d2f332d678f3dff57960bcdf7d2ce206d7cdd662249252c815d416fff261e5022e0c2ce96c2a9ba5530665e3e409d3636b8d6044af8426fdccbbbdc3ed9c73f47d21633cae2f05f6564d5b2a47b265c9bb02a57a94945d36aa13f9044e8e1eaade457f0b7d8a7cc1a07cc4deeea51688f5023ca56db99bdf107936", 0xd5}, {&(0x7f0000004080)="43359c0e943b28d66c8a9421bca66dafcdccc281b8231c08dbda70f225f85e5a0a15693fb2ab6a38458cb50e6e23c7a604806db81a45a24ccbeb339d823146ade6bd3ee81c8524635fada888d38e53bd8b2d2044c312a8f9f8c68a111082fd76b4e91b66a9f6168c9fba82384a902d009eb606efd501b2ed3d0bf921f08d1ba930df7ae2a64343baa0c676f06799ec4e19121b6f468a5cb1d1f2aefd1640426ce0", 0xa1}, {&(0x7f0000004140)="3c6e7ab437", 0x5}], 0x3, &(0x7f00000041c0)=[@mark={{0x14, 0x1, 0x24, 0x80000000}}, @txtime={{0x18}}], 0x30}}, {{&(0x7f0000004200)=@nl=@unspec, 0x80, &(0x7f00000065c0)=[{&(0x7f0000004280)="b55fde019c3d15d0ca69e3eeccc864094b189e7ef95ccc8ba09d5436b0f3616f7017647508f76a5d5a66ff485e469b", 0x2f}, {&(0x7f00000042c0)="f75df3f5d09b5dffc6308696b21bfac8dddcdc5a8c064413f33f536af0a38c7105b08af3e202fa3380899d30d2984c74410c8132b670198e41af806753cd63ce1ac7bfd557d705056bc4e86783eb90405f5fd89a319b8e2b604fad202b9f7b8d7372", 0x62}, {&(0x7f0000004340)="a3de080e1228076a69e5cff59ccc7cc8711754e980ab3f77c541966cd156fc892333507f0c19d1cf1cd61acd3c94d72a97708d6571713a6c464e83e075df5d97dde8aa2e0ffaa3772ccef427ad707e79d1e612ab5d", 0x55}, {&(0x7f00000043c0)="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", 0x1000}, {&(0x7f00000053c0)="d09baa04a27bc2813654d3ef5d9e007f97fb388038467a11f4a231a6fbc1315cb7eeddb5903af27e071236ef9fb01f4e0175c67019e7100dccbbd2578b32a92a2f3c5918f918f9c575c854d579a7d79738e9fdd2113c2256c6c4081e895a491b", 0x60}, {&(0x7f0000005440)="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", 0x1000}, {&(0x7f0000006440)="bfb3904914d2a057e53859ca131000bc3fd7f5f7a965f12cff4d4c347cbe0db1df03f0fa2a35ff31bcec09575eec8f88babe49e9fb4d1963b3ca6588fbde1d5f5756ff4d58f76ac8b1b5a07072101e", 0x4f}, {&(0x7f00000064c0)="d184b9cfad8aa912bd254d98aca4b3c56bbd07ef92236409aebb5bd19847c156d31ec254f8d40880624e552f774b09e6df5628392b04b24c90d911b565c27ff80fb407a0371f526f83bc2b57e4c8e40118335efa14dbb272b2649a75121ba77ba1ff815329d248a10248f5ac6609117c45c8441f731207c4a7442c12b631a1f547761317221ed356f97ef2225cdb39ac15e7fe3192d1a3cf27d1f5539a147673cfdd76912b36b0f7dedc7df474df89ef85df64bb202dbce9179c388bd3050a6a350640afc32ed3ec26a6484d5cc31e2297608ea9fa7fc16ff84dfe922175d3db12", 0xe1}], 0x8, &(0x7f0000006640)=[@txtime={{0x18, 0x1, 0x3d, 0xffff}}], 0x18}}, {{&(0x7f0000006680)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x80, &(0x7f0000006ac0)=[{&(0x7f0000006700)="a02f19ab1955d4df570fef598e6fd331e9b7f63282b96672cae7be21b2f9870ab48b2f11eb89a4a3d4b2e9c54db218bdabba86b642e3f250dd100339f7a391dc233619491be1774555d1b972dc2d6dfbdf8481967ea07ffd9d54784d7575f1d53b7c8959ca7499", 0x67}, {&(0x7f0000006780)="eab3124c27f17cf0a9a100fb982c1e5db40bde7e791f94467b02b4ad6a71f7498caba69e351dfd14e19b2f5e7bfa47", 0x2f}, {&(0x7f00000067c0)="ae7edb43519f05b69b4f7b697e78f133036678302b5792540c392a491107b33741c8a2cf63d759715b3be4de8959dae9042576ec281aff6cc58a2dcb7b63394ff029138845f023b8cebe37018840c6d4f30a", 0x52}, {&(0x7f0000006840)="d4a730efc52ab401aaf1342cc162fb3cdda40dde1df302023edb6e1751c3d468924aeea4e0a59492e859042b2ec6b86942820a428376a549bfde6887a425865800bfabcff83a83a6c4ac13fa4ce3d4aab411e4a2d16bad0e27f9fe87100644a688be14273940ce9c551e116946f61eb07ff4f4a79c5decdf6ed8321d22009be8f8a2d6f277184c12a1ecf1a2a56f8bfa2bac057399425982f27b775fd75281a0f795d0312cf87458d69fb4e5d1a3e8698dedf2509420fbf356b9eef3e69e2eb3d45b310e7f18606a96ac502e18422ba3ddbc2dc9", 0xd4}, {&(0x7f0000006940)="c4b306348a6b9beb70651f4e1ec144f65bce221f0978377eb1d05e2c7f7bbccfc0c3da4c671247e6de3e6e15db2a9a71ad9e27c40686db1820fca59c838adaa127d18768c558f712f21bb9220153fc7df1881d4029387f80bd7f2e837a78e6affec8ee99b3ee5d9aa58fe9cb579f4694c7e1206d118123e7f5504dbd3ef06e0e5fb9767618e1685072ba228f5b425f547932264fe64578a773bf34d86afc1998de8caead813c78dfd6a7b177ae0d0f27d39e908b2ba42db426170a8d5f961aedfffc6639a3bb631b4681e2eee865e92069", 0xd1}, {&(0x7f0000006a40)="1af1b375b8b940b1b1a9724e4611487be252cc826ceb236c92d092bd4f6ba32f64e5bcd9aa3c2d25a5a7cc4e8f544abf9c5509bf1c4c7fbd29614a742e79bee5b2048b2f31ec68d4fb88333c3fe77ac8bd3f953592926b8d8afb7504d4a81689cb42569985e3f40a65569418ea9fd22b2b7f", 0x72}], 0x6, &(0x7f0000006b40)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x80000001}}], 0x60}}], 0x7, 0x40) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = geteuid() mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='fuse\x00', 0x1, &(0x7f0000000500)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x62cff60fa3e1a882}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r10}, 0x2c, {[{@allow_other='allow_other'}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<', r11}}, {@uid_eq={'uid', 0x3d, r12}}]}}) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000780)='fuse\x00', 0x1, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x62cff60fa3e1c882}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, '\x97\xd3H\xca,\x92T\xa8\x97jlFp\'\xe7U\x04\xd5\xbaL\xc7)\x95]\xe8\xb6\xdc\xd8>\x94\x1e\xbel7 \xa8\x8ed\xc4\xe4\xea\xfbTSS,V\xf3\x18\x0f\xcb.\x8d>\xd1'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<', r11}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}}) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x4, &(0x7f0000000280)=[{&(0x7f00000000c0)="3ded5102ed7a9c2125a2949b3e1accc7b16f3db53fb760949ab8d4e65599e037f64621f1799edcb7a0a6d0c6cfce497463deb4647fd6541159f25bc1300e62213efd4eee9e0db92cd191b05277ba2524ed351f0fd3c9ec3e283a88b6b7a4fdc8a1c95021c1", 0x65}, {&(0x7f0000000140)="9eef993d61a78b270774f2e8584d698913af5936c817d3cba7dd4b1f29deebe9b3cacbcb05d032ec3c9cb29095f7622f2f76731411e35399cbc470e19ee5c3944c35937fe65cbde6c1b0dd6e6ee2af3483e14ac2a6691a953833d3", 0x5b, 0x8}, {&(0x7f00000001c0)="ece1b64b03e3089210c674dc287a4de8bd7b29d501da82fb584731da98d736d5dc2f5c6ae965570479aca9270fa44b8f3bf7f9aef3b9c6f884ae8a8379e02d790d8b70cffc6de32890ce2be3b5249b4ce190e3e47873dea7c11aff1960", 0x5d, 0x3f}, {&(0x7f0000000240)="51fa36deabd396d87a0d8b06ed20c6f8eb668a03332c52c688102da8ee7e58f8ad420ab51d328b98d917147f", 0x2c, 0x4}], 0x300a000, &(0x7f0000000300)={[{@prjquota={'prjquota', 0x3d, ','}}], [{@dont_hash='dont_hash'}, {@euid_gt={'euid>', r1}}, {@permit_directio='permit_directio'}, {@appraise_type='appraise_type=imasig'}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@fsname={'fsname'}}, {@seclabel='seclabel'}, {@subj_user={'subj_user', 0x3d, '%])'}}, {@subj_user={'subj_user', 0x3d, 'uservmnet0[cgroupwlan1['}}]}) bind$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @rand_addr=0x10001}}, 0x1e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 1011.195052][T18505] dlm: non-version read from control device 2147479540 [ 1011.210156][T18508] binder: 18498:18508 unknown command 0 [ 1011.219294][T18508] binder: 18498:18508 ioctl c0306201 20000200 returned -22 07:17:38 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) 07:17:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x11634840}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 1011.303626][T18511] binder: 18509:18511 ioctl c0306201 20000200 returned -14 07:17:39 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000040)={0x8001003, 0x7, 0x3}) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev}}, 0x1e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 07:17:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 1011.492000][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1011.497887][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1011.527811][T18594] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=3, oom_score_adj=1000 [ 1011.541347][T18626] binder: 18620:18626 unknown command 0 [ 1011.567910][T18626] binder: 18620:18626 ioctl c0306201 20000200 returned -22 [ 1011.569577][T18594] CPU: 0 PID: 18594 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1011.584305][T18594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1011.589396][T18628] binder: 18627:18628 ioctl c0306201 20000200 returned -14 [ 1011.594394][T18594] Call Trace: [ 1011.594419][T18594] dump_stack+0x172/0x1f0 [ 1011.594440][T18594] dump_header+0x177/0x1152 [ 1011.594456][T18594] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1011.594466][T18594] ? ___ratelimit+0x2c8/0x595 [ 1011.594479][T18594] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1011.594494][T18594] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1011.594509][T18594] ? trace_hardirqs_on+0x67/0x240 [ 1011.594525][T18594] ? pagefault_out_of_memory+0x11c/0x11c [ 1011.594547][T18594] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1011.622631][T18629] binder: 18620:18629 unknown command 0 [ 1011.624360][T18594] ? ___ratelimit+0x60/0x595 [ 1011.624373][T18594] ? do_raw_spin_unlock+0x57/0x270 [ 1011.624397][T18594] oom_kill_process.cold+0x10/0x15 [ 1011.641663][T18629] binder: 18620:18629 ioctl c0306201 20000200 returned -22 [ 1011.646188][T18594] out_of_memory+0x334/0x1340 [ 1011.646204][T18594] ? lock_downgrade+0x920/0x920 [ 1011.646222][T18594] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1011.646237][T18594] ? oom_killer_disable+0x280/0x280 [ 1011.646265][T18594] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1011.646279][T18594] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1011.646383][T18594] ? do_raw_spin_unlock+0x57/0x270 [ 1011.646409][T18594] ? _raw_spin_unlock+0x2d/0x50 [ 1011.646433][T18594] try_charge+0xf4b/0x1440 [ 1011.652599][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1011.658027][T18594] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1011.662667][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1011.667838][T18594] ? mark_held_locks+0xa4/0xf0 [ 1011.667853][T18594] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 1011.667869][T18594] ? __sk_mem_raise_allocated+0x56e/0x13c0 [ 1011.667886][T18594] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 1011.765171][T18594] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1011.770482][T18594] ? trace_hardirqs_on+0x67/0x240 [ 1011.775512][T18594] mem_cgroup_charge_skmem+0x12f/0x280 [ 1011.775525][T18594] ? mem_cgroup_sk_free+0x90/0x90 [ 1011.775539][T18594] ? tcp_enter_memory_pressure+0x130/0x130 [ 1011.775556][T18594] ? __sk_mem_raise_allocated+0x63f/0x13c0 [ 1011.775576][T18594] __sk_mem_raise_allocated+0x56e/0x13c0 [ 1011.775591][T18594] ? alloc_pages_current+0x10f/0x210 [ 1011.775613][T18594] __sk_mem_schedule+0x6d/0xe0 07:17:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:39 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x12000000}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 1011.775634][T18594] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1011.786092][T18594] tcp_sendmsg_locked+0x16b6/0x3220 [ 1011.786125][T18594] ? tcp_sendpage+0x60/0x60 [ 1011.786140][T18594] ? trace_hardirqs_on+0x67/0x240 [ 1011.786155][T18594] ? lock_sock_nested+0x9a/0x120 [ 1011.786174][T18594] ? __local_bh_enable_ip+0x15a/0x270 [ 1011.786193][T18594] tcp_sendmsg+0x30/0x50 [ 1011.824875][T18594] inet_sendmsg+0x9e/0xe0 [ 1011.824889][T18594] ? inet_send_prepare+0x4f0/0x4f0 [ 1011.824903][T18594] sock_sendmsg+0xd7/0x130 [ 1011.824918][T18594] __sys_sendto+0x262/0x380 [ 1011.824933][T18594] ? __ia32_sys_getpeername+0xb0/0xb0 [ 1011.824965][T18594] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1011.824981][T18594] ? put_timespec64+0xda/0x140 [ 1011.824996][T18594] ? nsecs_to_jiffies+0x30/0x30 [ 1011.825022][T18594] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1011.825035][T18594] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1011.825052][T18594] ? do_syscall_64+0x26/0x760 [ 1011.858602][T18594] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1011.911068][T18594] __x64_sys_sendto+0xe1/0x1a0 [ 1011.915859][T18594] do_syscall_64+0xfa/0x760 [ 1011.920393][T18594] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1011.926309][T18594] RIP: 0033:0x459879 [ 1011.930219][T18594] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1011.949841][T18594] RSP: 002b:00007f400e5a2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1011.958267][T18594] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000459879 07:17:39 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 1011.966254][T18594] RDX: 7564c14c40b01eec RSI: 0000000020000480 RDI: 0000000000000003 [ 1011.974239][T18594] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000150 [ 1011.982454][T18594] R10: 00000000000000e0 R11: 0000000000000246 R12: 00007f400e5a36d4 [ 1011.990733][T18594] R13: 00000000004c783b R14: 00000000004dd0f0 R15: 00000000ffffffff [ 1011.999140][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1012.005073][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1012.028951][T18737] binder: 18735:18737 unknown command 0 [ 1012.034871][T18594] memory: usage 307192kB, limit 307200kB, failcnt 22 [ 1012.035980][T18738] binder: 18734:18738 ioctl c0306201 20000200 returned -14 [ 1012.057361][T18737] binder: 18735:18737 ioctl c0306201 20000200 returned -22 [ 1012.064480][T18594] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1012.076891][T18741] binder: 18735:18741 unknown command 0 [ 1012.093044][T18741] binder: 18735:18741 ioctl c0306201 20000200 returned -22 [ 1012.095451][T18594] Memory cgroup stats for /syz3: [ 1012.095723][T18594] anon 11034624 [ 1012.095723][T18594] file 217088 [ 1012.095723][T18594] kernel_stack 131072 [ 1012.095723][T18594] slab 4575232 [ 1012.095723][T18594] sock 298463232 [ 1012.095723][T18594] shmem 0 [ 1012.095723][T18594] file_mapped 0 [ 1012.095723][T18594] file_dirty 0 [ 1012.095723][T18594] file_writeback 0 [ 1012.095723][T18594] anon_thp 10485760 [ 1012.095723][T18594] inactive_anon 0 [ 1012.095723][T18594] active_anon 10956800 [ 1012.095723][T18594] inactive_file 135168 [ 1012.095723][T18594] active_file 0 [ 1012.095723][T18594] unevictable 0 [ 1012.095723][T18594] slab_reclaimable 1757184 [ 1012.095723][T18594] slab_unreclaimable 2818048 [ 1012.095723][T18594] pgfault 127413 [ 1012.095723][T18594] pgmajfault 0 [ 1012.095723][T18594] workingset_refault 0 [ 1012.095723][T18594] workingset_activate 0 [ 1012.095723][T18594] workingset_nodereclaim 0 [ 1012.095723][T18594] pgrefill 0 [ 1012.095723][T18594] pgscan 33 [ 1012.095723][T18594] pgsteal 0 [ 1012.095723][T18594] pgactivate 0 [ 1012.228986][T18594] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=8272,uid=0 [ 1012.253308][T18594] Memory cgroup out of memory: Killed process 8272 (syz-executor.3) total-vm:72840kB, anon-rss:6308kB, file-rss:35808kB, shmem-rss:0kB, UID:0 pgtables:151552kB oom_score_adj:1000 [ 1012.306986][ T1065] oom_reaper: reaped process 8272 (syz-executor.3), now anon-rss:0kB, file-rss:34848kB, shmem-rss:0kB [ 1012.326249][T18516] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 07:17:40 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x2de, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xbcb48f16202e8b46}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 07:17:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x12634840}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:40 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) r4 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) readv(r5, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r5, 0xab00, r4) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f00000000c0)) readv(r3, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @loopback}}}, 0x88) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) readv(r6, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev}}, 0x1e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 1012.370224][T18516] CPU: 0 PID: 18516 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1012.379391][T18516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1012.389453][T18516] Call Trace: [ 1012.392753][T18516] dump_stack+0x172/0x1f0 [ 1012.397107][T18516] dump_header+0x177/0x1152 [ 1012.401636][T18516] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1012.407451][T18516] ? ___ratelimit+0x2c8/0x595 [ 1012.412145][T18516] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1012.417983][T18516] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1012.423283][T18516] ? trace_hardirqs_on+0x67/0x240 [ 1012.428315][T18516] ? pagefault_out_of_memory+0x11c/0x11c [ 1012.433969][T18516] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1012.439795][T18516] ? ___ratelimit+0x60/0x595 [ 1012.444462][T18516] ? do_raw_spin_unlock+0x57/0x270 [ 1012.449635][T18516] oom_kill_process.cold+0x10/0x15 [ 1012.454772][T18516] out_of_memory+0x334/0x1340 [ 1012.459470][T18516] ? lock_downgrade+0x920/0x920 [ 1012.464337][T18516] ? oom_killer_disable+0x280/0x280 [ 1012.469561][T18516] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1012.475125][T18516] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1012.480760][T18516] ? do_raw_spin_unlock+0x57/0x270 [ 1012.485882][T18516] ? _raw_spin_unlock+0x2d/0x50 [ 1012.491007][T18516] try_charge+0xa2d/0x1440 [ 1012.495459][T18516] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1012.501023][T18516] ? find_held_lock+0x35/0x130 [ 1012.505816][T18516] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1012.511392][T18516] ? lock_downgrade+0x920/0x920 [ 1012.516260][T18516] ? percpu_ref_tryget_live+0x111/0x290 [ 1012.521856][T18516] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1012.527999][T18516] ? memcg_kmem_put_cache+0x50/0x50 [ 1012.533217][T18516] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1012.538784][T18516] __memcg_kmem_charge+0x13a/0x3a0 [ 1012.543920][T18516] __alloc_pages_nodemask+0x4f7/0x900 [ 1012.549313][T18516] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1012.554882][T18516] ? __alloc_pages_slowpath+0x2540/0x2540 [ 1012.560622][T18516] ? percpu_ref_put_many+0xb6/0x190 [ 1012.565845][T18516] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1012.571151][T18516] ? trace_hardirqs_on+0x67/0x240 [ 1012.576197][T18516] ? __kasan_check_read+0x11/0x20 [ 1012.581272][T18516] copy_process+0x3f8/0x6830 [ 1012.585891][T18516] ? psi_memstall_leave+0x12e/0x180 [ 1012.591126][T18516] ? __cleanup_sighand+0x60/0x60 [ 1012.596091][T18516] ? __kasan_check_read+0x11/0x20 [ 1012.601133][T18516] ? __lock_acquire+0x8a0/0x4a00 [ 1012.606095][T18516] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1012.611422][T18516] _do_fork+0x146/0xfa0 [ 1012.615605][T18516] ? copy_init_mm+0x20/0x20 [ 1012.620136][T18516] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1012.626399][T18516] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1012.632669][T18516] ? debug_smp_processor_id+0x3c/0x214 [ 1012.638166][T18516] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 1012.644361][T18516] __x64_sys_clone+0x1ab/0x270 [ 1012.649149][T18516] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1012.655328][T18516] ? __ia32_sys_vfork+0xd0/0xd0 [ 1012.660338][T18516] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1012.666607][T18516] ? do_syscall_64+0x26/0x760 [ 1012.667086][T18855] binder: 18850:18855 ioctl 8912 20000080 returned -22 [ 1012.671293][T18516] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1012.671309][T18516] ? trace_hardirqs_on+0x67/0x240 [ 1012.671331][T18516] do_syscall_64+0xfa/0x760 [ 1012.671358][T18516] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1012.698920][T18516] RIP: 0033:0x45c249 [ 1012.702839][T18516] Code: ff 48 85 f6 0f 84 27 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c fe 8d fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1012.709532][T18855] binder: 18850:18855 unknown command 0 [ 1012.722454][T18516] RSP: 002b:00007ffe1c3b1ee8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1012.722468][T18516] RAX: ffffffffffffffda RBX: 00007f400e582700 RCX: 000000000045c249 [ 1012.722474][T18516] RDX: 00007f400e5829d0 RSI: 00007f400e581db0 RDI: 00000000003d0f00 [ 1012.722481][T18516] RBP: 00007ffe1c3b2100 R08: 00007f400e582700 R09: 00007f400e582700 [ 1012.722488][T18516] R10: 00007f400e5829d0 R11: 0000000000000202 R12: 0000000000000000 [ 1012.722494][T18516] R13: 00007ffe1c3b1f9f R14: 00007f400e5829c0 R15: 000000000075bfd4 [ 1012.759631][T18861] binder: 18857:18861 ioctl c0306201 20000200 returned -14 07:17:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 1012.862472][T18855] binder: 18850:18855 ioctl c0306201 20000200 returned -22 [ 1013.001415][T18516] memory: usage 303396kB, limit 307200kB, failcnt 32 [ 1013.031358][T18965] binder: 18964:18965 ioctl c0306201 20000200 returned -14 [ 1013.057458][T18516] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1013.119246][T18516] Memory cgroup stats for /syz3: [ 1013.119533][T18516] anon 4517888 [ 1013.119533][T18516] file 217088 [ 1013.119533][T18516] kernel_stack 131072 [ 1013.119533][T18516] slab 4575232 [ 1013.119533][T18516] sock 300920832 [ 1013.119533][T18516] shmem 0 [ 1013.119533][T18516] file_mapped 0 [ 1013.119533][T18516] file_dirty 0 [ 1013.119533][T18516] file_writeback 0 [ 1013.119533][T18516] anon_thp 4194304 [ 1013.119533][T18516] inactive_anon 0 [ 1013.119533][T18516] active_anon 4579328 [ 1013.119533][T18516] inactive_file 135168 [ 1013.119533][T18516] active_file 0 [ 1013.119533][T18516] unevictable 0 [ 1013.119533][T18516] slab_reclaimable 1757184 [ 1013.119533][T18516] slab_unreclaimable 2818048 [ 1013.119533][T18516] pgfault 127413 [ 1013.119533][T18516] pgmajfault 0 [ 1013.119533][T18516] workingset_refault 0 [ 1013.119533][T18516] workingset_activate 0 [ 1013.119533][T18516] workingset_nodereclaim 0 [ 1013.119533][T18516] pgrefill 0 [ 1013.119533][T18516] pgscan 33 [ 1013.119533][T18516] pgsteal 0 [ 1013.119533][T18516] pgactivate 0 [ 1013.624987][T18516] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20229,uid=0 [ 1013.671224][T18516] Memory cgroup out of memory: Killed process 20229 (syz-executor.3) total-vm:72972kB, anon-rss:2220kB, file-rss:35824kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 07:17:41 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) readv(r3, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) connect$vsock_dgram(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @reserved}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f00000002c0)=0xc) ptrace$getsig(0x4202, r4, 0x100, &(0x7f00000003c0)) r5 = socket$inet_udplite(0x2, 0x2, 0x88) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl(r5, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) 07:17:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x20000000}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:41 executing program 0: prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xda) r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r1}) r4 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x6, 0x101202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) readv(r5, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r5, 0xab00, r4) ioctl$SIOCAX25NOUID(r5, 0x89e3, &(0x7f00000000c0)=0x1) r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) socket$inet(0x2, 0x4, 0x80000001) r7 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000340)=""/94) r8 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r8, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f00000003c0)={0x3a, {{0x2, 0x4e21, @multicast1}}}, 0xa30c608e9dd721a9) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r9, 0x800000c004500a, &(0x7f0000000300)) readv(r9, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0xffffffb3}], 0x1000000000000367) ioctl$NBD_SET_SOCK(r9, 0xab00, r7) r10 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0xffffffff00000001, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r10, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r10, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r11, 0x800000c004500a, &(0x7f0000000300)) ioctl$NBD_SET_SOCK(r11, 0xab00, r10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000100)={r2, 0x40000, r11}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000001c0)={r12, 0x0, r13}) 07:17:41 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev}}, 0x1e) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x7fffffff, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req={0xfffffffffffffffc, 0x1, 0x46, 0x3}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 07:17:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0xdfd, 0x0, 0x0, 0xff4f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1013.783865][T19075] binder: 19074:19075 unknown command 0 [ 1013.790994][T19080] binder: 19079:19080 ioctl c0306201 20000200 returned -14 [ 1013.798564][T19075] binder: 19074:19075 ioctl c0306201 20000200 returned -22 [ 1013.818121][T19105] binder: 19074:19105 unknown command 0 [ 1013.851667][T19105] binder: 19074:19105 ioctl c0306201 20000200 returned -22 07:17:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x40000000}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 1014.043977][T19296] binder: 19293:19296 ioctl c0306201 20000200 returned -14 [ 1014.065597][T19297] binder: 19294:19297 unknown command 0 [ 1014.083927][T19297] binder: 19294:19297 ioctl c0306201 20000200 returned -22 07:17:41 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000040)={'syz_tun\x00', 0xd148000000000000}) [ 1014.094952][T19299] binder: 19294:19299 unknown command 0 [ 1014.106060][T19299] binder: 19294:19299 ioctl c0306201 20000200 returned -22 07:17:41 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f0000000040)=r0, 0x4) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803]}, 0xd}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0) 07:17:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) timer_create(0x3, 0x0, &(0x7f0000000180)) ioctl(r0, 0x1000008912, &(0x7f0000000200)="11dca50d5e0bcfe47bf070") timer_getoverrun(0x0) 07:17:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x40046302}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:42 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close(r3) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x400000, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xd) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xe1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) 07:17:42 executing program 0: r0 = socket$inet(0x10, 0x3, 0x100000000000c) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="240000000d0607031dfffd946fa2830020200a000900016c071d85a2046e36ad2807eee6", 0x24}], 0x1}, 0x0) socket$inet(0x2, 0x5, 0x3) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) getsockopt$inet_int(r2, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x4) [ 1014.421574][T19515] binder: 19514:19515 unknown command 0 [ 1014.437152][T19515] binder: 19514:19515 ioctl c0306201 20000200 returned -22 [ 1014.460829][T19517] binder: 19514:19517 unknown command 0 [ 1014.533953][T19517] binder: 19514:19517 ioctl c0306201 20000200 returned -22 [ 1014.546959][T19524] binder: 19519:19524 ioctl c0306201 20000200 returned -14 07:17:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x3) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) r2 = eventfd(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x0, 0x0, 0xffffffffffffffff, [0x500000000000000]}) 07:17:42 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev}}, 0x1e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40000) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x9, 0xffffffff99922e58, 0x9, 0x0, 0xe, 0x100000000, 0x70, 0x3f, 0x3, 0x24}) [ 1014.577671][T19523] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 07:17:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x40046304}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 1014.778529][T19737] binder: 19695:19737 unknown command 0 [ 1014.826234][T19737] binder: 19695:19737 ioctl c0306201 20000200 returned -22 07:17:42 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}}) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/inpw\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000000)=0x51) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt(r2, 0x0, 0x6b, &(0x7f0000000380)="8b66", 0x2) listen(r1, 0xb046) r3 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fremovexattr(r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fremovexattr(r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = inotify_init() r6 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r6, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r7, 0x800000c004500a, &(0x7f0000000300)) readv(r7, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r7, 0xab00, r6) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000003c0)={0x4, 0xffff, 0x9, 0x0, 0x0, [{r4, 0x0, 0x67}, {r2}, {r0}, {r5, 0x0, 0x7}, {r2, 0x0, 0xe73}, {r7, 0x0, 0x3}, {0xffffffffffffffff, 0x0, 0x580}, {r1, 0x0, 0x1}, {r1, 0x0, 0x1}]}) 07:17:42 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x2, 0x2) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000100)=0x9, 0x4) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev}}, 0x1e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 07:17:42 executing program 2: clock_nanosleep(0x9, 0x2, &(0x7f0000000040)={0x0, 0x989680}, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x80000) [ 1014.929354][T19745] binder: 19695:19745 unknown command 0 [ 1014.942911][T19743] binder: 19742:19743 ioctl c0306201 20000200 returned -14 [ 1014.996467][T19745] binder: 19695:19745 ioctl c0306201 20000200 returned -22 [ 1015.008297][T19526] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=3, oom_score_adj=1000 [ 1015.055772][T19526] CPU: 1 PID: 19526 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1015.065316][T19526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1015.076003][T19526] Call Trace: [ 1015.079317][T19526] dump_stack+0x172/0x1f0 [ 1015.083688][T19526] dump_header+0x177/0x1152 [ 1015.083710][T19526] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1015.083722][T19526] ? ___ratelimit+0x2c8/0x595 [ 1015.083736][T19526] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1015.083753][T19526] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1015.083769][T19526] ? trace_hardirqs_on+0x67/0x240 [ 1015.083783][T19526] ? pagefault_out_of_memory+0x11c/0x11c [ 1015.083797][T19526] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1015.083808][T19526] ? ___ratelimit+0x60/0x595 [ 1015.083820][T19526] ? do_raw_spin_unlock+0x57/0x270 [ 1015.083835][T19526] oom_kill_process.cold+0x10/0x15 [ 1015.083854][T19526] out_of_memory+0x334/0x1340 [ 1015.094154][T19526] ? lock_downgrade+0x920/0x920 [ 1015.094175][T19526] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1015.094193][T19526] ? oom_killer_disable+0x280/0x280 [ 1015.094217][T19526] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1015.094232][T19526] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1015.094250][T19526] ? do_raw_spin_unlock+0x57/0x270 [ 1015.094267][T19526] ? _raw_spin_unlock+0x2d/0x50 [ 1015.094286][T19526] try_charge+0xf4b/0x1440 [ 1015.156589][T19526] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1015.167312][T19526] ? mark_held_locks+0xa4/0xf0 [ 1015.167329][T19526] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 1015.167345][T19526] ? __sk_mem_raise_allocated+0x56e/0x13c0 [ 1015.167361][T19526] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 1015.207818][T19856] binder: 19854:19856 ioctl c0306201 20000200 returned -14 [ 1015.209130][T19526] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1015.209148][T19526] ? trace_hardirqs_on+0x67/0x240 [ 1015.209166][T19526] mem_cgroup_charge_skmem+0x12f/0x280 [ 1015.209184][T19526] ? mem_cgroup_sk_free+0x90/0x90 [ 1015.242805][T19526] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1015.249071][T19526] ? __sk_mem_raise_allocated+0x63f/0x13c0 [ 1015.254912][T19526] __sk_mem_raise_allocated+0x56e/0x13c0 [ 1015.260579][T19526] ? alloc_pages_current+0x10f/0x210 [ 1015.265901][T19526] __sk_mem_schedule+0x6d/0xe0 [ 1015.270693][T19526] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1015.276974][T19526] tcp_sendmsg_locked+0x16b6/0x3220 [ 1015.282226][T19526] ? tcp_sendpage+0x60/0x60 [ 1015.286761][T19526] ? trace_hardirqs_on+0x67/0x240 [ 1015.291807][T19526] ? lock_sock_nested+0x9a/0x120 [ 1015.296759][T19526] ? __local_bh_enable_ip+0x15a/0x270 [ 1015.302150][T19526] tcp_sendmsg+0x30/0x50 [ 1015.306432][T19526] inet_sendmsg+0x9e/0xe0 [ 1015.310769][T19526] ? inet_send_prepare+0x4f0/0x4f0 [ 1015.315924][T19526] sock_sendmsg+0xd7/0x130 [ 1015.320352][T19526] __sys_sendto+0x262/0x380 [ 1015.325019][T19526] ? __ia32_sys_getpeername+0xb0/0xb0 [ 1015.330434][T19526] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1015.336690][T19526] ? put_timespec64+0xda/0x140 [ 1015.341459][T19526] ? nsecs_to_jiffies+0x30/0x30 [ 1015.341486][T19526] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1015.351781][T19526] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1015.357271][T19526] ? do_syscall_64+0x26/0x760 [ 1015.361965][T19526] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1015.361987][T19526] __x64_sys_sendto+0xe1/0x1a0 [ 1015.362008][T19526] do_syscall_64+0xfa/0x760 [ 1015.362028][T19526] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1015.362038][T19526] RIP: 0033:0x459879 [ 1015.362053][T19526] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 07:17:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:42 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = shmget$private(0x0, 0x1000, 0x1f91, &(0x7f0000ffc000/0x1000)=nil) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000000000)={0x4, 0x3}) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x1000) 07:17:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 1015.362060][T19526] RSP: 002b:00007f400e581c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1015.362073][T19526] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000459879 [ 1015.362081][T19526] RDX: 7564c14c40b01eec RSI: 0000000020000480 RDI: 0000000000000003 [ 1015.362089][T19526] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000150 [ 1015.362103][T19526] R10: 00000000000000e0 R11: 0000000000000246 R12: 00007f400e5826d4 [ 1015.410345][T19961] binder: 19959:19961 ioctl c0306201 20000200 returned -14 [ 1015.416379][T19526] R13: 00000000004c783b R14: 00000000004dd0f0 R15: 00000000ffffffff [ 1015.419842][T19526] memory: usage 307168kB, limit 307200kB, failcnt 68 [ 1015.473835][T19526] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1015.480896][T19526] Memory cgroup stats for /syz3: [ 1015.481119][T19526] anon 2330624 [ 1015.481119][T19526] file 217088 [ 1015.481119][T19526] kernel_stack 65536 [ 1015.481119][T19526] slab 5349376 [ 1015.481119][T19526] sock 306663424 [ 1015.481119][T19526] shmem 0 [ 1015.481119][T19526] file_mapped 0 [ 1015.481119][T19526] file_dirty 0 [ 1015.481119][T19526] file_writeback 0 [ 1015.481119][T19526] anon_thp 2097152 [ 1015.481119][T19526] inactive_anon 0 [ 1015.481119][T19526] active_anon 2252800 [ 1015.481119][T19526] inactive_file 135168 [ 1015.481119][T19526] active_file 0 [ 1015.481119][T19526] unevictable 0 [ 1015.481119][T19526] slab_reclaimable 1892352 [ 1015.481119][T19526] slab_unreclaimable 3457024 [ 1015.481119][T19526] pgfault 127677 [ 1015.481119][T19526] pgmajfault 0 [ 1015.481119][T19526] workingset_refault 0 [ 1015.481119][T19526] workingset_activate 0 [ 1015.481119][T19526] workingset_nodereclaim 0 [ 1015.481119][T19526] pgrefill 33 [ 1015.481119][T19526] pgscan 33 [ 1015.481119][T19526] pgsteal 0 [ 1015.481119][T19526] pgactivate 0 [ 1015.585716][T19526] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19520,uid=0 [ 1015.603115][T19526] Memory cgroup out of memory: Killed process 19526 (syz-executor.3) total-vm:72708kB, anon-rss:2240kB, file-rss:35908kB, shmem-rss:0kB, UID:0 pgtables:151552kB oom_score_adj:1000 [ 1015.641876][ T1065] [ 1015.644264][ T1065] ============================================ [ 1015.650406][ T1065] WARNING: possible recursive locking detected [ 1015.656579][ T1065] 5.3.0-rc6-next-20190830 #75 Not tainted [ 1015.662289][ T1065] -------------------------------------------- [ 1015.668573][ T1065] oom_reaper/1065 is trying to acquire lock: [ 1015.672920][ T3890] kobject: 'loop1' (0000000028a43f30): kobject_uevent_env [ 1015.674541][ T1065] ffffffff8904ff60 (mmu_notifier_invalidate_range_start){+.+.}, at: __mmu_notifier_invalidate_range_end+0x0/0x360 [ 1015.674575][ T1065] [ 1015.674575][ T1065] but task is already holding lock: [ 1015.681738][ T3890] kobject: 'loop1' (0000000028a43f30): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1015.693648][ T1065] ffffffff8904ff60 (mmu_notifier_invalidate_range_start){+.+.}, at: __oom_reap_task_mm+0x196/0x490 [ 1015.693677][ T1065] [ 1015.693677][ T1065] other info that might help us debug this: [ 1015.693680][ T1065] Possible unsafe locking scenario: [ 1015.693680][ T1065] [ 1015.693682][ T1065] CPU0 [ 1015.693684][ T1065] ---- [ 1015.693686][ T1065] lock(mmu_notifier_invalidate_range_start); [ 1015.693692][ T1065] lock(mmu_notifier_invalidate_range_start); [ 1015.693699][ T1065] [ 1015.693699][ T1065] *** DEADLOCK *** [ 1015.693699][ T1065] [ 1015.693701][ T1065] May be due to missing lock nesting notation [ 1015.693701][ T1065] [ 1015.693710][ T1065] 2 locks held by oom_reaper/1065: [ 1015.693720][ T1065] #0: ffff888057dcf910 (&mm->mmap_sem#2){++++}, at: oom_reaper+0x3a7/0x1320 [ 1015.720245][ T3890] kobject: 'loop0' (00000000afc35837): kobject_uevent_env [ 1015.721865][ T1065] #1: ffffffff8904ff60 (mmu_notifier_invalidate_range_start){+.+.}, at: __oom_reap_task_mm+0x196/0x490 [ 1015.721895][ T1065] [ 1015.721895][ T1065] stack backtrace: [ 1015.721908][ T1065] CPU: 1 PID: 1065 Comm: oom_reaper Not tainted 5.3.0-rc6-next-20190830 #75 [ 1015.721918][ T1065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1015.721928][ T1065] Call Trace: [ 1015.740052][ T3890] kobject: 'loop0' (00000000afc35837): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1015.740761][ T1065] dump_stack+0x172/0x1f0 [ 1015.740781][ T1065] __lock_acquire.cold+0x15d/0x385 [ 1015.852630][ T1065] ? mark_held_locks+0xf0/0xf0 [ 1015.857389][ T1065] ? unmap_page_range+0x1df4/0x2380 [ 1015.862579][ T1065] lock_acquire+0x190/0x410 [ 1015.867208][ T1065] ? __mmu_notifier_invalidate_range_start+0x210/0x210 [ 1015.874066][ T1065] __mmu_notifier_invalidate_range_end+0x3c/0x360 [ 1015.880487][ T1065] ? __mmu_notifier_invalidate_range_start+0x210/0x210 [ 1015.887345][ T1065] ? __mmu_notifier_invalidate_range_start+0x1a5/0x210 [ 1015.894202][ T1065] __oom_reap_task_mm+0x3fa/0x490 [ 1015.899217][ T1065] ? process_shares_mm+0x130/0x130 [ 1015.904317][ T1065] ? oom_reaper+0x3a7/0x1320 [ 1015.908947][ T1065] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1015.915184][ T1065] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1015.921148][ T1065] ? __kasan_check_read+0x11/0x20 [ 1015.926174][ T1065] ? do_raw_spin_unlock+0x57/0x270 [ 1015.931294][ T1065] oom_reaper+0x2b2/0x1320 [ 1015.935723][ T1065] ? __oom_reap_task_mm+0x490/0x490 [ 1015.940915][ T1065] ? trace_hardirqs_on+0x67/0x240 [ 1015.945942][ T1065] ? finish_wait+0x260/0x260 [ 1015.950532][ T1065] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1015.956782][ T1065] ? __kthread_parkme+0x108/0x1c0 [ 1015.961801][ T1065] ? __kasan_check_read+0x11/0x20 [ 1015.966810][ T1065] kthread+0x361/0x430 [ 1015.970864][ T1065] ? __oom_reap_task_mm+0x490/0x490 [ 1015.976049][ T1065] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1015.982283][ T1065] ret_from_fork+0x24/0x30 [ 1015.987412][ C1] net_ratelimit: 18 callbacks suppressed [ 1015.987422][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1015.991870][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1015.993153][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1015.998828][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1016.009580][ T1065] oom_reaper: reaped process 19526 (syz-executor.3), now anon-rss:0kB, file-rss:34948kB, shmem-rss:0kB [ 1016.016225][ T3890] kobject: 'loop4' (0000000011955a77): kobject_uevent_env [ 1016.035494][ T3890] kobject: 'loop4' (0000000011955a77): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1016.047966][T19526] kobject: 'kvm' (000000000aebb81d): kobject_uevent_env 07:17:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x40046307}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:43 executing program 2: openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x800, 0xc, 0x4, 0x4, {0x77359400}, {0x1, 0x0, 0x4, 0x5, 0x952121a, 0x0, '\t\r\x00J'}, 0x2351bc0c, 0x3, @userptr=0x14000000000, 0x4}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x80080, 0x0) ioctl$RTC_WIE_ON(r1, 0x700f) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video1\x00', 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x200, 0x0) write$capi20_data(r2, &(0x7f00000001c0)={{0x10, 0x386, 0x87, 0x81, 0x1, 0x40}, 0x29, "e693a4948f9c2c67c50b5f98929f8ad1f86adffdc1d738b398109200663317cba057f88ace543d7d60"}, 0x3b) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r3}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xf20) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$void(r4, 0x5450) r5 = syz_open_dev$sndpcmp(&(0x7f00000003c0)='/dev/snd/pcmC#D#p\x00', 0x9, 0x10200) connect$bt_sco(r5, &(0x7f0000000400)={0x1f, {0x8, 0x40, 0x7, 0x6, 0x800, 0x200}}, 0x8) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000440)={0x1, 0x0, {0x7fffffff, 0xf5, 0x0, 0x196b}}) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000480)={0xffff, 0x70ec00000, 0x3f, 0x0, 0x6, 0x4}) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000640)={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) r7 = dup3(0xffffffffffffffff, r5, 0x80000) ioctl$PPPIOCSNPMODE(r7, 0x4008744b, &(0x7f0000000680)={0xfd, 0x1}) r8 = epoll_create(0x2) fsetxattr$trusted_overlay_nlink(r8, &(0x7f00000006c0)='trusted.overlay.nlink\x00', &(0x7f0000000700)={'L-'}, 0x28, 0x2) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000740)) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000780)='/dev/dsp\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r9, 0x6, 0x21, &(0x7f00000007c0)="e878020abf7374fea30e0a5251eb9924", 0x10) ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0xc883) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r10 = syz_open_dev$mouse(&(0x7f0000000800)='/dev/input/mouse#\x00', 0x1, 0x210040) ioctl$SG_GET_REQUEST_TABLE(r10, 0x2286, &(0x7f0000000840)) 07:17:43 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000280)={{0x1, 0x7}, 0x1, 0x9, 0x6, {0x1, 0x10000}, 0x7fff, 0x3f16}) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @initdev={0xac, 0x1e, 0x4, 0x0}}}, 0xffef) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x40000, 0x0) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000000100)={0x3, 0xea91, 0x6, 0x8001, 0x4, 0x7, 0x2}) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r3 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000001c0)=0xc3dc88bd1a142e1f) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000040)=0x3, 0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x100) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000180)={'vcan0\x00', 0x20}) socket$can_bcm(0x1d, 0x2, 0x2) 07:17:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f00000000c0)) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) r5 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) readv(r3, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000080)={0x4, 'ip6gretap0\x00', 0x3}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0xe200, 0x0) write$char_usb(r6, &(0x7f0000000540)="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", 0x1000) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000040)) [ 1016.055151][T19526] kobject: 'kvm' (000000000aebb81d): fill_kobj_path: path = '/devices/virtual/misc/kvm' 07:17:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:43 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x0, 0x10000) recvfrom$rose(r1, &(0x7f0000000180)=""/4096, 0x1000, 0x100, &(0x7f0000001180)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x6400, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r3 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fremovexattr(r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) [ 1016.085904][ T3890] kobject: 'loop3' (000000006ca466ba): kobject_uevent_env [ 1016.097874][T20170] binder: 20168:20170 unknown command 0 [ 1016.119668][ T3890] kobject: 'loop3' (000000006ca466ba): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1016.131820][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1016.137320][T20170] binder: 20168:20170 ioctl c0306201 20000200 returned -22 [ 1016.137660][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1016.147094][T20177] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1016.150658][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1016.166314][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1016.171174][T20177] CPU: 1 PID: 20177 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 07:17:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x8000, 0x202) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100), 0x4) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x4) recvmmsg(r1, &(0x7f0000005b80)=[{{&(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, 0x0}}], 0x1, 0x0, 0x0) [ 1016.181153][T20177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1016.191217][T20177] Call Trace: [ 1016.194524][T20177] dump_stack+0x172/0x1f0 [ 1016.198862][T20177] dump_header+0x177/0x1152 [ 1016.203369][T20177] ? ___ratelimit+0xf8/0x595 [ 1016.205807][T20175] binder: 20172:20175 ioctl c0306201 20000200 returned -14 [ 1016.207963][T20177] ? trace_hardirqs_on+0x67/0x240 [ 1016.207983][T20177] ? pagefault_out_of_memory+0x11c/0x11c [ 1016.225828][T20177] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1016.231646][T20177] ? ___ratelimit+0x60/0x595 07:17:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 1016.236243][T20177] ? do_raw_spin_unlock+0x57/0x270 [ 1016.241380][T20177] oom_kill_process.cold+0x10/0x15 [ 1016.246940][T20177] out_of_memory+0x334/0x1340 [ 1016.251632][T20177] ? lock_downgrade+0x920/0x920 [ 1016.256496][T20177] ? oom_killer_disable+0x280/0x280 [ 1016.261969][T20177] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1016.267524][T20177] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1016.273168][T20177] ? do_raw_spin_unlock+0x57/0x270 [ 1016.278293][T20177] ? _raw_spin_unlock+0x2d/0x50 [ 1016.283161][T20177] try_charge+0xf4b/0x1440 [ 1016.287595][T20177] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1016.288120][T20285] binder: 20284:20285 ioctl c0306201 20000200 returned -14 [ 1016.293143][T20177] ? percpu_ref_tryget_live+0x111/0x290 [ 1016.293159][T20177] ? get_mem_cgroup_from_mm+0x16/0x320 [ 1016.293176][T20177] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1016.293189][T20177] mem_cgroup_try_charge+0x136/0x590 [ 1016.293204][T20177] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1016.293217][T20177] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1016.293238][T20177] wp_page_copy+0x41e/0x1590 [ 1016.322342][ T3890] kobject: 'loop2' (000000005098bf03): kobject_uevent_env [ 1016.328442][T20177] ? page_trans_huge_mapcount+0x166/0x450 [ 1016.328464][T20177] ? pmd_pfn+0x1d0/0x1d0 [ 1016.334484][ T3890] kobject: 'loop2' (000000005098bf03): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1016.338650][T20177] ? lock_downgrade+0x920/0x920 [ 1016.338667][T20177] ? swp_swapcount+0x540/0x540 [ 1016.338679][T20177] ? psi_memstall_leave+0x12e/0x180 [ 1016.338692][T20177] ? __kasan_check_read+0x11/0x20 07:17:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 1016.338703][T20177] ? do_raw_spin_unlock+0x57/0x270 [ 1016.338721][T20177] do_wp_page+0x499/0x14d0 [ 1016.350768][ T3890] kobject: 'loop4' (0000000011955a77): kobject_uevent_env [ 1016.351518][T20177] ? finish_mkwrite_fault+0x570/0x570 [ 1016.351538][T20177] __handle_mm_fault+0x22f1/0x3f20 [ 1016.356390][ T3890] kobject: 'loop4' (0000000011955a77): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1016.366074][T20177] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1016.366088][T20177] ? __kasan_check_read+0x11/0x20 [ 1016.366108][T20177] ? trace_hardirqs_on+0x67/0x240 [ 1016.366123][T20177] handle_mm_fault+0x1b5/0x6c0 [ 1016.366141][T20177] __do_page_fault+0x536/0xdd0 [ 1016.366157][T20177] do_page_fault+0x38/0x590 [ 1016.366170][T20177] page_fault+0x39/0x40 [ 1016.366179][T20177] RIP: 0033:0x457e7e [ 1016.366193][T20177] Code: 00 00 85 c0 41 89 c5 0f 85 fc 00 00 00 64 8b 04 25 d0 02 00 00 41 39 c4 0f 84 12 02 00 00 48 8b 05 c7 e8 61 00 48 85 c0 74 04 <48> 83 00 04 64 8b 04 25 d0 02 00 00 64 89 04 25 d4 02 00 00 0f 31 [ 1016.366199][T20177] RSP: 002b:00007ffe1c3b2180 EFLAGS: 00010206 [ 1016.366208][T20177] RAX: 0000000000a76248 RBX: 00007ffe1c3b2180 RCX: 0000000000457e4a [ 1016.366215][T20177] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1016.366220][T20177] RBP: 00007ffe1c3b21c0 R08: 0000000000000001 R09: 000055555709c940 [ 1016.366235][T20177] R10: 000055555709cc10 R11: 0000000000000246 R12: 0000000000000001 [ 1016.428635][T20389] binder: 20388:20389 ioctl c0306201 20000200 returned -14 [ 1016.429527][T20177] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe1c3b2210 07:17:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x40086303}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 1016.431363][T20170] binder: BINDER_SET_CONTEXT_MGR already set [ 1016.436377][T20177] memory: usage 307200kB, limit 307200kB, failcnt 273 [ 1016.445236][T20390] binder: 20168:20390 unknown command 0 [ 1016.449991][T20177] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1016.479607][T20170] binder: 20168:20170 ioctl 40046207 0 returned -16 [ 1016.486471][T20177] Memory cgroup stats for /syz3: [ 1016.486687][T20177] anon 217088 [ 1016.486687][T20177] file 217088 [ 1016.486687][T20177] kernel_stack 0 [ 1016.486687][T20177] slab 5349376 [ 1016.486687][T20177] sock 308977664 [ 1016.486687][T20177] shmem 0 [ 1016.486687][T20177] file_mapped 0 [ 1016.486687][T20177] file_dirty 0 [ 1016.486687][T20177] file_writeback 0 [ 1016.486687][T20177] anon_thp 0 [ 1016.486687][T20177] inactive_anon 0 [ 1016.486687][T20177] active_anon 139264 [ 1016.486687][T20177] inactive_file 135168 [ 1016.486687][T20177] active_file 0 [ 1016.486687][T20177] unevictable 0 [ 1016.486687][T20177] slab_reclaimable 1892352 [ 1016.486687][T20177] slab_unreclaimable 3457024 [ 1016.486687][T20177] pgfault 127710 [ 1016.486687][T20177] pgmajfault 0 [ 1016.486687][T20177] workingset_refault 0 [ 1016.486687][T20177] workingset_activate 0 [ 1016.486687][T20177] workingset_nodereclaim 0 [ 1016.486687][T20177] pgrefill 33 [ 1016.486687][T20177] pgscan 33 [ 1016.486687][T20177] pgsteal 0 [ 1016.486687][T20177] pgactivate 0 [ 1016.487989][T20390] binder: 20168:20390 ioctl c0306201 20000200 returned -22 [ 1016.504290][T20177] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=8922,uid=0 [ 1016.579989][ T3890] kobject: 'loop5' (000000006c593d29): kobject_uevent_env [ 1016.671081][T20177] Memory cgroup out of memory: Killed process 8922 (syz-executor.3) total-vm:72444kB, anon-rss:104kB, file-rss:35776kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:0 [ 1016.692679][T20556] binder: 20553:20556 unknown command 0 [ 1016.716123][T20556] binder: 20553:20556 ioctl c0306201 20000200 returned -22 07:17:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffffff7f0000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 1016.737150][T20593] binder: 20553:20593 unknown command 0 [ 1016.740790][ T3890] kobject: 'loop5' (000000006c593d29): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1016.747067][T20593] binder: 20553:20593 ioctl c0306201 20000200 returned -22 [ 1016.773961][ T3890] kobject: 'loop4' (0000000011955a77): kobject_uevent_env 07:17:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x4008630a}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) 07:17:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f00000000c0)) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) r5 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) readv(r3, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000080)={0x4, 'ip6gretap0\x00', 0x3}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0xe200, 0x0) write$char_usb(r6, &(0x7f0000000540)="d611914b136fc66a8ba0c0205c77492defa95d094c5d8902a90de05c43bbeb42aa1c50d4f5d916df76e225b97a8ae47ce84426dc0b96e88f6254a6a718705ecbda145f64439f407fa3ef6b5222c53b739c95506ba507bb8d238da24d98d9563aa06c462fe69ce4e3c3cc863270916f9069e66264ebbd466c8c55f0bc055e2395eff53be7ffd96fcb921688a8b629df778d6844fbe58d9a76bd995d14eb28c5f0e8520e9485dc500a9f3b9edfb45312face81b25e6ccf94bf6d5b9a952451794f1c97e47765cc8104dffeed679ef4638b140c5cbc8f66332028a46fae86475dad106199c8441e7d26d115839e6ef8009c2bb9a2a6dac0e044a2e9c50c338eabbb48f5433234ba9788b3da5e62a83db3c593987796b63ecf289e8f4198ee12f67955a3904382529b1806b8b79a32e3b936c021ac30877a04ca4ab9b9eaec19ebbce67aabfb691abdfed22c570432024ff61b133c177905f95658bc7d0dfaacaa797a4e204452976194f90125d05c8ec3715caecd1bd059e8d34c810ff720a5da839ae8e92f104e58f8b29270389c8e394d0cb7bf3117b89602d56a985acf1d646eaea060228884b3a1b1023623442afc5d8c6833f7a097760dee1d0ca18c72ac5bac118d553f38a30bcab691c83f7316a39b8f1aef15007e5f4d386a64a25d38ed553b7b04cb3263df5d7af85934587e1ecb6bd86a302bd642ea1b49000e2e149d6143ff4230f79240b90707a5f9d3f3b343f07b6b3d97cace5503e50fe66b5fa97520be14c05c51d6ba2dbc1a452eda732f18cc8ac57bd2f591d7e64fcceff68a9a1a398c83308e36f32457cb8691983f791df06c153bbdddf2d0a0fdd41fe82608ad5f5087407084f619dcd98543da9923d8586ca2dc9a0aa1d95e698c47d06e8dac83c2f4e7385fb6713b89810421c2c7c0c5f4c6f8ddbb4c583988a9fb5a13616c1b02d058373af240bcba200b910004ff0c05294312d62f5350cefd9a659dcad3971a93847b39da75507c33fb0215420e75791386a53061bb73972763090599d6761ac885cb1176d5e1218e81d4c6569a36609265a82179bb8fe482f9496670d9005e478136767e89fafe542129e21f13a16c12c5b7ff9b549d2bf673230f4a2867e038be9baacc426a830349f773b6d2dc4d7af47d7a7a29dc4361a2dcebd4c8e111a942a1a40b15755547cc8c21443cc0144c63753020b8318b5a314ce135bd4f2426adc371b85133483a87e47cbf7f43158f56680f1338b2cbec7bbd2f3db31bdabf3ef4a0c35974904c467e918f3add0a3df9b182186f5b27a36dc1073d73bb2e0f83f7b0e7a45d6c8bf8f276279e839507c9ae90f76f4eb667ca850b4f24435f9d8ad80bd85424ac5cc00cc14b98ee67737c58c7bbe96d70220d7f9dfe2b3e86c76b7e57c2d1f40f2660b016bd58088ed35f88a17b0e30b03ff2ef8366b7bcbee546065924afdfd30e7f56d6cfa4d1a0f5bd8f25948a2b8771017dd6f3ad69e1a5b6d181b62d1cdc9f0c17be9f65187de1b61ee8e237a70de13c374cae31d6a77fded3dbf57383109be0c0a857ad33123c80848cbf551584845c6aed64437ff10cdfa42f38275d2a5e4de490d1b0298cbcf17b18749d6019b499315a9c7d930471e02d233cd053f7fac6efec480a3ee05591348678a9a8408042d118abc9c7613acb30a5a6703ae1b93cac3b252edfd169cc61e98187a1318c731ffa2386ee0ad5784da5aad449d3fa4164a9e3a890e63b389579e536beb0f32d2f9a6ece5be34fabdc0e38f673ef7544d0465ec320047fa526cbaffc5a9d0b80741182d85bd8e60b9a7ae138c950bcd0f3f38273bce501f81d36ad747ddc6e741c21a967be652471f76a9ae4075e827417bfe569267c674ae6323d29c54440a812b0951680e102adc894bec358358eb5028ee6e592690d28004d968458050ae5473182570b7b9472f60315b9536aa6ae3e8a0106b091b6c3de4083d552539e825d2fb83991614b579c485bdf206463ab0de72c78cb0ef8ef5ba74c1913b49ad7b1c4b5291be722f636409bedfff00d0d6415556cde14c4b0fc505dd7fb9413051de2f87553067f2d3d193ab4d0dcb970f0df7a679b7e613e8761de5c9f354fb770a15dfe824f2430d858d359c70bf771bfbfd44cd998dd002df57d931d175c374b0db919f12f8876550e6f0d68e596fdf69bb0066e63a2959b91ea30ee301b41db4318c6d25a70d903f58bd121da9c7a3568b998cf31e17d38b25407552a6b011115eb24efeee8e6a1a9033139eba4f0becf099da553418a4e44a3ee7497287e396945a2a378af138224fc7558668561bb16d553f7013924978a8e4041c46b238532376ae755478744956ea0b2f260b540fc95d1b7721869407f7f02ec01a09bf8bb1903204bedccca501bd02aaf945b7f0871e93c5867a783f595b172844c78fbc859d45deaf369df3477bb0259e2f896ef9221010ff8fa46b2b69bce8475eacb8c5d0e6b0d5e8e61c43231549afc3fa3b9ac9bded8e158b751027c9a484dc98a6a899bad14630da5d465b875d6530972713c99eb5bfbea5fd696113ef459b5f719229e1143dbf03a46653403e9727feabfeba9ac0e920653e92c49821408cc14a436147b1edcbe8b70a8c7f6cb6e3b486fd90b296e930fb151a55ece446c190241a864768b5edb052f7c6d3f30681b72bcdc0288a570cc492f997a51c6daa182657d93b91c72308e326f959fc33982e36a9b5ee74f9f2eba82be34e4f39a7266d51315b2ba20e0fdfe43d8387bb7a229dfa0ac6c2d73ed1961d573d63495db8d015f7d64d0cb5eab98afe81b18328b02fcce096614add2aa630aca0fa1db3f274e2923824d679442a192d700323083d1f804281c64fdba36aedd46e5ef71ae0359e3c88301cf1898523e026ca856b1dedfd767af72c45f5d03ab604c88dc70eb6ae68fa06a8939049a8b67edf76549957281bd1d7282625219a2056a53a0e32147bd6ef8d13f6b5e2643f3547986c78be9f010ad591e0ab30904c6de5202ba490289cb3bb2e4e81e215e0e44644162b4b24716c71921fa6cef5f6b9e5a71435f8a82ae5df97f74c2d501ba55ee4110093cfd4cc59a99aae3e239c4c00ac54a98ce8f8a4dcf3541d7beb3f81f89e359427073b868f3456e24a1edb77060faf10b6f8244241c41f61216d62dda5b9550f26255577e9ef463e939d9f0ad863bb8bd3a67b65fad9cf2671803bdbc6f561c3cbd1fe0969bb6a713c1a47fd9a0ce293eebfb25730931c70a527e08f57a4af1b675421f20eaa9520d2e04b186b820517a38b43452a3dba394d5beaeba2e8172607d8ce79f9865d0ebba3659eb63e230d5f280eccb7b00e326844af79f6692439ccde29c46da29f6bc61a3de3ca243113214849e241066c4de18c17a9d315b742b859b7426379c44bfb5329d029d1a397cd651585aa2095b40d223635410da5c024b332fbdefffd25eee1e83cf5ebb55b44051796aa158251b8ba9308f2e460eb971dab8f9e0dfe6937d1c813c8ca2e69bebd4e944c7ce4a9ea10e2de8d87c6cade8710aea94e88b26ab9128f4b5fc18b66ff60e74f1cf839558cf78b4e6091e2259994f05fedc5674264ce8b057e2bdf24fd2d29bb67cb4a6569adcfa9143f708df976753e7f74a29dfc5553d8a56d8f216f2a7f0eb4954ebbd161fc9b944234e49421a49007586069ea0ce4f966da9c189a10f35062da8717e92378c1ce6b328da1b9c51c936379203ca30e61114969c7f96669e16f2c249fb640f86925421f1097c3410e870c4c88a780d0379a247df11153bdfb070a0df4a1c209568e7afabfd946ecbdd045b74e3d78db7f4f3fba3c0b92c00fc5b5ef9a1e273fd5526463ea550fed289ac0c2e1f51888391e89010433c156adec9fd08f28c60e67eef5799e3019c0365c13b3afe0cac875a1bdcf73097ce036909ab602765e71735c60654b3bcbba90d9bb265cf1c8f837a31a1edb2e4e61e3a40b414281e6c7294b1252d65083bc5e025a155930e0a3df4824f678a24bb8494de0961ff0da0b1d3db483a486e7145e54e328ec5aec4a60571015eb6ffa1c8e5f3dc9e0a5c5c3ea6b2aa66e16a38aaebae416a16fd6bd75a45259f24008fa682904089110cc0aa3102cb0cdf9fb751476800f04dacebc8a7e3ce5aa53ecfd7ec8c04998738323c84ec02c56bf9b4d444805c5b16a408837798bda22bea60eaccc02ae0bfda77f44a3890c9865c00072af218bf9c7f1e154067585bc343740e394e8a24ef9aeebade061315abb7634d072389b23b8f8efe00b76b2eea3b5c3e0cc1020d5d6260bc62b61e272a5f54be033b67997fab3445d28b7b46a52d275d0232b63d0fffacbdca88ea12c76addc7fe21d33131aa5bf8147a4c10024f4c03942ac34263c0f6e2b9613037d9950e506d2004b4f3280156aeeb91b83157e2621468e48a5d3e62abaf24945bf70504a0a43b6802ebf30cb42064a4f939b305ef279f549704f2f8fd1b524e05368c53769dcdba204f66494b0009f5e2fe868fa29a9c54be076d76a40cca32189cc087cf4c7293a3395588c8aa2dad8c667b2ebb01ecf2daed4d30246a2bc198bdc83b292003532eaaefc18908e1d5105fecfb16f9ec3c1324ac06b169625862d8f7545d7ffd17149dfd9d685d26e5252be79714bea702d3cf5b25f6e6b06369c2590739436836e5e5eb1955b05d5adfe1575f51196135087cf2a88a6b18ca2096a4ffb1090e61d68f98823da55a992e4fddd5bb90fb29c5bd9290d9e76c142f129e52b2c4cf65c14e0f4851fe955860cea799775918812c1ada3f371cb4404574ed00f0fec7cdb3a7ecc1dddc5011463fde243fe0585090205865a16546910a017579e514c8f4e8a60e2fec806bb9d829f110e854a72eb92df0171d2749443e5070cc74f1cc2a196ccb137b160e29e8173e886dc228119eff96942f7b54938ff69f261969425608d859258b6a8fcae5984d6fbdba618d643b6a9af28bd4edb4af163d427ffadd89c00f74ad9438bcfda1a7cf40ea83969f4dcf39215460eb511edfbbdb941a031978d7df9c8fa3528e532343d3fa6e48f5bf5ce0648e4026e13ce25e8a443120d2889b07e9f1c4748d640bb33800943350707e526144b96f44e6b32adcde1aae65554c909191539afe6b6edc5f73c6ddc223afccaa071dbd83bf23669cb3c0b200d74f1f11c297fae6729c4b0323b405ddb253aa8b66c763d9b11ca52261b48a823a7b51791cb25694594d780d10d70a58a89df0e94eb0a3926d38417d08595b21e22f46c509b801769533d2e1ddd6578857cf76c39fab6921ed1cde2ca82a2bfd910c4ab593204dcd42fb8e4db9beda5afbd05741ddb8940072ebc30c8a7481dccb84b69bfb81b6ec3b3fb9d8dfd3b8e5f736b38178c75059be29761bb37e27d0f5d598e34f02ec52cd4d9abdc886f5f166a9fc49c7513b10578f4c64d64d9cf3e580e5e845635086cd37f958768045457e8f4c714c4a274c85b869323617a8d04d0ee6af872ade9a2c7dc7e884e1ed7dc07a437641f4bd5d5872a820c7a9acc2ae3d057c0862fc9eda1f7480fde9c92ef280d98b2a8cb8918a724d5511848b9475349150e6fff5b2b686d8361e8a7a4814cb5539e530e26932abff3cdd75995968f1eeee7ea611713a07af9b958a8576fb2166627a49fe76639623d0a8aa89fe7519ac5314b1f2a8ff115cbf85f9bb4c55f6adb0fb252a4f42bce1a215aea680682abdd7ac9791bef282d418b4b92eafcce2a2dde540c0075c07b4aba409ec25b00bb2ca90a2af6897", 0x1000) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000040)) [ 1016.788807][ T3890] kobject: 'loop4' (0000000011955a77): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1016.794719][T20596] binder: 20595:20596 ioctl c0306201 20000200 returned -14 [ 1016.821483][ T3890] kobject: 'loop5' (000000006c593d29): kobject_uevent_env [ 1016.830942][ T3890] kobject: 'loop5' (000000006c593d29): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1016.851818][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1016.852067][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1016.859177][ T3890] kobject: 'loop0' (00000000afc35837): kobject_uevent_env [ 1016.874036][ T3890] kobject: 'loop0' (00000000afc35837): fill_kobj_path: path = '/devices/virtual/block/loop0' 07:17:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffff600000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 1016.922258][T20709] binder: 20619:20709 unknown command 0 [ 1016.936733][T20709] binder: 20619:20709 ioctl c0306201 20000200 returned -22 [ 1016.972182][ T3890] kobject: 'loop4' (0000000011955a77): kobject_uevent_env [ 1016.979399][ T3890] kobject: 'loop4' (0000000011955a77): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1017.040837][T20177] kobject: 'batman_adv' (000000000d31be5f): kobject_uevent_env [ 1017.049384][T20177] kobject: 'batman_adv' (000000000d31be5f): kobject_uevent_env: filter function caused the event to drop! [ 1017.061077][T20177] kobject: 'batman_adv' (000000000d31be5f): kobject_cleanup, parent 00000000475b4b3b [ 1017.071439][T20177] kobject: 'batman_adv' (000000000d31be5f): calling ktype release [ 1017.080355][T20177] kobject: (000000000d31be5f): dynamic_kobj_release [ 1017.087445][T20177] kobject: 'batman_adv': free name [ 1017.094303][ T3890] kobject: 'loop0' (00000000afc35837): kobject_uevent_env [ 1017.101500][ T3890] kobject: 'loop0' (00000000afc35837): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1017.111975][T20177] kobject: 'rx-0' (00000000777b0b85): kobject_cleanup, parent 00000000521ee8e3 [ 1017.120942][T20177] kobject: 'rx-0' (00000000777b0b85): auto cleanup 'remove' event [ 1017.143097][T20177] kobject: 'rx-0' (00000000777b0b85): kobject_uevent_env [ 1017.150237][T20177] kobject: 'rx-0' (00000000777b0b85): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/rx-0' [ 1017.161441][T20177] kobject: 'rx-0' (00000000777b0b85): auto cleanup kobject_del [ 1017.169184][T20177] kobject: 'rx-0' (00000000777b0b85): calling ktype release [ 1017.176910][T20177] kobject: 'rx-0': free name [ 1017.181553][T20177] kobject: 'tx-0' (000000006faf590d): kobject_cleanup, parent 00000000521ee8e3 [ 1017.190655][T20177] kobject: 'tx-0' (000000006faf590d): auto cleanup 'remove' event [ 1017.198525][T20177] kobject: 'tx-0' (000000006faf590d): kobject_uevent_env [ 1017.205643][T20177] kobject: 'tx-0' (000000006faf590d): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/tx-0' [ 1017.217004][T20177] kobject: 'tx-0' (000000006faf590d): auto cleanup kobject_del [ 1017.224630][T20177] kobject: 'tx-0' (000000006faf590d): calling ktype release [ 1017.231974][T20177] kobject: 'tx-0': free name [ 1017.236609][T20177] kobject: 'queues' (00000000521ee8e3): kobject_cleanup, parent 00000000475b4b3b [ 1017.245864][T20177] kobject: 'queues' (00000000521ee8e3): calling ktype release [ 1017.253492][T20177] kobject: 'queues' (00000000521ee8e3): kset_release [ 1017.260308][T20177] kobject: 'queues': free name [ 1017.265436][T20177] kobject: 'syz_tun' (0000000092c07490): kobject_uevent_env [ 1017.272890][T20177] kobject: 'syz_tun' (0000000092c07490): fill_kobj_path: path = '/devices/virtual/net/syz_tun' [ 1017.295060][T20709] binder: 20619:20709 unknown command 0 [ 1017.300783][T20709] binder: 20619:20709 ioctl c0306201 20000200 returned -22 [ 1017.309149][ T3890] kobject: 'loop4' (0000000011955a77): kobject_uevent_env [ 1017.317708][T20177] kobject: 'syz_tun' (0000000092c07490): kobject_cleanup, parent 00000000475b4b3b [ 1017.318342][ T3890] kobject: 'loop4' (0000000011955a77): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1017.334601][T20177] kobject: 'syz_tun' (0000000092c07490): calling ktype release [ 1017.345251][T20177] kobject: 'syz_tun': free name [ 1017.384094][ T3890] kobject: 'loop2' (000000005098bf03): kobject_uevent_env [ 1017.395394][ T3890] kobject: 'loop2' (000000005098bf03): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1017.407045][ T3890] kobject: 'loop5' (000000006c593d29): kobject_uevent_env [ 1017.414630][ T3890] kobject: 'loop5' (000000006c593d29): fill_kobj_path: path = '/devices/virtual/block/loop5' 07:17:45 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xffffffffffffffff, @dev}}, 0x1e) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) readv(r3, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r3, 0x28, &(0x7f0000000100)}, 0x10) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r5 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) readv(r6, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r6, 0xab00, r5) ioctl$FICLONE(r2, 0x40049409, r6) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) readv(r4, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r4, 0xab00, r1) r7 = ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) syncfs(r7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000000040)=""/3) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x100) 07:17:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f00000000c0)) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) r5 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) readv(r3, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000080)={0x4, 'ip6gretap0\x00', 0x3}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0xe200, 0x0) write$char_usb(r6, &(0x7f0000000540)="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", 0x1000) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000040)) 07:17:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:45 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x3, 0x2) recvfrom$rxrpc(r0, &(0x7f00000001c0)=""/124, 0x7c, 0x40, &(0x7f0000000240)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @rand_addr=0x4001f}}, 0xfffffffffffffe36) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000280)={0x0, 'syz0\x00'}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20004004, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000003c0)={0x3, 0xbf, &(0x7f00000002c0)="527ad1fd9f859e955642b4f4d986d5f93d12210ed21d3506f004d777448fa4fc13ed23d0360ef413670e3be1a06c6535b7c3e409e31e5fc38173f4eb39e28f19a391f473538c6a566193c668f74a12f6d59a56018fd9b1b273925c7bc146f9f4f82b3429446010aaf41d425ffc94594db55039053b27899675acbff6572bb3017a19ed4623a4bf3061c90f2553f2db52dbcdfec0c2a9b95e359b5ab220d97df8dc4d1adddb60327bbe4fa179c7327ea2a11f01079014d55582a9fd0c7ece24"}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xa24, 0x8462bd1681195e46) ioctl$TIOCLINUX6(r3, 0x541c, &(0x7f0000000140)={0x6, 0x3}) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) r4 = socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$midi(&(0x7f0000000400)='/dev/midi#\x00', 0x4e2, 0x2) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, 0xffffffffffffffff) r7 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) fanotify_mark(r7, 0xb6, 0x1, r3, &(0x7f0000000440)='./file0\x00') ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r8 = dup2(r1, 0xffffffffffffffff) r9 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r9, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r10, 0x800000c004500a, &(0x7f0000000300)) readv(r10, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r10, 0xab00, r9) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r10, 0x28, 0x1, &(0x7f00000004c0)=0x1, 0x8) ioctl$SG_GET_SCSI_ID(r8, 0x2276, &(0x7f0000000480)) sendmsg(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe80390008000800080000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x28a}], 0x1}, 0x0) sendto$inet(r1, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) 07:17:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x40086310}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 1017.485946][ T3890] kobject: 'loop1' (0000000028a43f30): kobject_uevent_env [ 1017.496599][ T3890] kobject: 'loop1' (0000000028a43f30): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1017.543600][T20925] binder: 20924:20925 unknown command 0 [ 1017.546499][T20929] binder: 20923:20929 ioctl c0306201 20000200 returned -14 [ 1017.549217][T20925] binder: 20924:20925 ioctl c0306201 20000200 returned -22 [ 1017.551272][T20927] binder: 20922:20927 ioctl c0306201 20000200 returned -14 [ 1017.583458][T20933] binder: 20924:20933 unknown command 0 07:17:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 1017.607156][T20933] binder: 20924:20933 ioctl c0306201 20000200 returned -22 07:17:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x400c630e}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 1017.665453][ T3890] kobject: 'loop2' (000000005098bf03): kobject_uevent_env [ 1017.689112][ T3890] kobject: 'loop2' (000000005098bf03): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1017.739426][ T3890] kobject: 'loop4' (0000000011955a77): kobject_uevent_env [ 1017.756154][T21138] binder: 21121:21138 ioctl c0306201 20000200 returned -14 [ 1017.770549][T21142] binder: 21139:21142 ioctl c0306201 20000200 returned -14 [ 1017.777914][ T3890] kobject: 'loop4' (0000000011955a77): fill_kobj_path: path = '/devices/virtual/block/loop4' 07:17:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000, 0x0, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 1017.794551][T21143] binder: 21137:21143 unknown command 0 [ 1017.808596][ T3890] kobject: 'loop5' (000000006c593d29): kobject_uevent_env [ 1017.825398][T21143] binder: 21137:21143 ioctl c0306201 20000200 returned -22 [ 1017.826506][ T3890] kobject: 'loop5' (000000006c593d29): fill_kobj_path: path = '/devices/virtual/block/loop5' 07:17:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f00000000c0)) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) r5 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) readv(r3, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000080)={0x4, 'ip6gretap0\x00', 0x3}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0xe200, 0x0) write$char_usb(r6, &(0x7f0000000540)="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", 0x1000) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000040)) [ 1017.892152][ T3890] kobject: 'loop0' (00000000afc35837): kobject_uevent_env [ 1017.904917][T21228] binder: 21137:21228 unknown command 0 [ 1017.918665][ T3890] kobject: 'loop0' (00000000afc35837): fill_kobj_path: path = '/devices/virtual/block/loop0' 07:17:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) [ 1017.944311][T21228] binder: 21137:21228 ioctl c0306201 20000200 returned -22 [ 1017.976294][T21251] binder: 21248:21251 ioctl c0306201 20000200 returned -14 [ 1017.992332][ T3890] kobject: 'loop2' (000000005098bf03): kobject_uevent_env [ 1018.017145][ T3890] kobject: 'loop2' (000000005098bf03): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1018.046042][ T3890] kobject: 'loop4' (0000000011955a77): kobject_uevent_env [ 1018.061870][ T3890] kobject: 'loop4' (0000000011955a77): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1018.067942][T21254] binder: 21253:21254 ioctl c0306201 20000200 returned -14 [ 1018.098804][ T3890] kobject: 'loop5' (000000006c593d29): kobject_uevent_env [ 1018.131101][ T3890] kobject: 'loop5' (000000006c593d29): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1018.280975][ T3890] kobject: 'loop0' (00000000afc35837): kobject_uevent_env [ 1018.295914][ T3890] kobject: 'loop0' (00000000afc35837): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1018.520680][ T3890] kobject: 'loop1' (0000000028a43f30): kobject_uevent_env [ 1018.529524][ T3890] kobject: 'loop1' (0000000028a43f30): fill_kobj_path: path = '/devices/virtual/block/loop1' 07:17:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 07:17:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000340)=""/94) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000480)={0x80000000, {{0x2, 0x4e22, @multicast1}}}, 0x88) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f00000000c0)) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) r5 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000200)=""/81, &(0x7f0000000080)=0x51) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) readv(r3, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000080)={0x4, 'ip6gretap0\x00', 0x3}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0xe200, 0x0) write$char_usb(r6, &(0x7f0000000540)="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", 0x1000) 07:17:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x189, 0x0, &(0x7f0000000400)=[@increfs, @decrefs, @acquire_done={0x40106309, 0x0, 0x2}, @increfs, @release, @increfs, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/212}, @flat=@handle, @fda}, &(0x7f00000003c0)}}], 0xf0, 0x0, 0x0}) 07:17:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000400)=[@increfs, @release={0x400c630e, 0x400c630f}, @increfs, @clear_death={0x40046307}], 0x0, 0x0, 0x0}) [ 1018.615499][T21469] binder: 21467:21469 unknown command 0 [ 1018.621646][T21469] binder: 21467:21469 ioctl c0306201 20000200 returned -22 [ 1018.634503][T21465] binder: 21463:21465 ioctl c0306201 20000200 returned -14 [ 1018.640595][ T3890] kobject: 'loop2' (000000005098bf03): kobject_uevent_env [ 1018.647384][T21473] binder: 21467:21473 unknown command 0 [ 1018.649065][ T3890] kobject: 'loop2' (000000005098bf03): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1018.654653][T21473] binder: 21467:21473 ioctl c0306201 20000200 returned -22 [ 1018.692552][ T3890] kobject: 'loop5' (000000006c593d29): kobject_uevent_env [ 1018.699767][ T3890] kobject: 'loop5' (000000006c593d29): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1018.738574][ T3890] kobject: 'loop4' (0000000011955a77): kobject_uevent_env [ 1018.748593][ T3890] kobject: 'loop4' (0000000011955a77): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1018.847828][ T3890] kobject: 'loop0' (00000000afc35837): kobject_uevent_env [ 1018.856520][ T3890] kobject: 'loop0' (00000000afc35837): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1019.635029][T21677] kobject: 'nfs_client' (00000000fb4f74ae): kobject_add_internal: parent: 'net', set: 'nfs' [ 1019.645221][T21677] kobject: 'nfs_client' (00000000fb4f74ae): kobject_uevent_env [ 1019.652841][T21677] kobject: 'nfs_client' (00000000fb4f74ae): fill_kobj_path: path = '/fs/nfs/net/nfs_client' [ 1019.664610][T21677] IPVS: ftp: loaded support on port[0] = 21 [ 1019.672893][T21677] kobject: 'lo' (00000000ad2a807a): kobject_add_internal: parent: 'net', set: 'devices' [ 1019.683747][T21677] kobject: 'lo' (00000000ad2a807a): kobject_uevent_env [ 1019.690649][T21677] kobject: 'lo' (00000000ad2a807a): fill_kobj_path: path = '/devices/virtual/net/lo' [ 1019.700376][T21677] kobject: 'queues' (000000006e902b99): kobject_add_internal: parent: 'lo', set: '' [ 1019.710343][T21677] kobject: 'queues' (000000006e902b99): kobject_uevent_env [ 1019.717588][T21677] kobject: 'queues' (000000006e902b99): kobject_uevent_env: filter function caused the event to drop! [ 1019.728605][T21677] kobject: 'rx-0' (000000008064e20d): kobject_add_internal: parent: 'queues', set: 'queues' [ 1019.738976][T21677] kobject: 'rx-0' (000000008064e20d): kobject_uevent_env [ 1019.747067][T21677] kobject: 'rx-0' (000000008064e20d): fill_kobj_path: path = '/devices/virtual/net/lo/queues/rx-0' [ 1019.757972][T21677] kobject: 'tx-0' (00000000a173d1b3): kobject_add_internal: parent: 'queues', set: 'queues' [ 1019.768221][T21677] kobject: 'tx-0' (00000000a173d1b3): kobject_uevent_env [ 1019.775420][T21677] kobject: 'tx-0' (00000000a173d1b3): fill_kobj_path: path = '/devices/virtual/net/lo/queues/tx-0' [ 1019.788037][T21677] kobject: 'tunl0' (00000000d96f0fdc): kobject_add_internal: parent: 'net', set: 'devices' [ 1019.798450][T21677] kobject: 'tunl0' (00000000d96f0fdc): kobject_uevent_env [ 1019.805662][T21677] kobject: 'tunl0' (00000000d96f0fdc): fill_kobj_path: path = '/devices/virtual/net/tunl0' [ 1019.815768][T21677] kobject: 'queues' (000000007b07ae8f): kobject_add_internal: parent: 'tunl0', set: '' [ 1019.825978][T21677] kobject: 'queues' (000000007b07ae8f): kobject_uevent_env [ 1019.833198][T21677] kobject: 'queues' (000000007b07ae8f): kobject_uevent_env: filter function caused the event to drop! [ 1019.844175][T21677] kobject: 'rx-0' (00000000d596035c): kobject_add_internal: parent: 'queues', set: 'queues' [ 1019.854316][T21677] kobject: 'rx-0' (00000000d596035c): kobject_uevent_env [ 1019.862855][T21677] kobject: 'rx-0' (00000000d596035c): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/rx-0' [ 1019.874031][T21677] kobject: 'tx-0' (000000004eb98c4e): kobject_add_internal: parent: 'queues', set: 'queues' [ 1019.884425][T21677] kobject: 'tx-0' (000000004eb98c4e): kobject_uevent_env [ 1019.891495][T21677] kobject: 'tx-0' (000000004eb98c4e): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/tx-0' [ 1019.903060][T21677] kobject: 'gre0' (0000000041c60061): kobject_add_internal: parent: 'net', set: 'devices' [ 1019.913921][T21677] kobject: 'gre0' (0000000041c60061): kobject_uevent_env [ 1019.921985][T21677] kobject: 'gre0' (0000000041c60061): fill_kobj_path: path = '/devices/virtual/net/gre0' [ 1019.932046][T21677] kobject: 'queues' (000000002abb8efd): kobject_add_internal: parent: 'gre0', set: '' [ 1019.942446][T21677] kobject: 'queues' (000000002abb8efd): kobject_uevent_env [ 1019.949657][T21677] kobject: 'queues' (000000002abb8efd): kobject_uevent_env: filter function caused the event to drop! [ 1019.961314][T21677] kobject: 'rx-0' (00000000483b1870): kobject_add_internal: parent: 'queues', set: 'queues' [ 1019.971451][T21677] kobject: 'rx-0' (00000000483b1870): kobject_uevent_env [ 1019.978853][T21677] kobject: 'rx-0' (00000000483b1870): fill_kobj_path: path = '/devices/virtual/net/gre0/queues/rx-0' [ 1019.989802][T21677] kobject: 'tx-0' (00000000e4924d4b): kobject_add_internal: parent: 'queues', set: 'queues' [ 1020.001037][T21677] kobject: 'tx-0' (00000000e4924d4b): kobject_uevent_env [ 1020.008141][T21677] kobject: 'tx-0' (00000000e4924d4b): fill_kobj_path: path = '/devices/virtual/net/gre0/queues/tx-0' [ 1020.019803][T21677] kobject: 'gretap0' (000000009e7a971f): kobject_add_internal: parent: 'net', set: 'devices' [ 1020.030418][T21677] kobject: 'gretap0' (000000009e7a971f): kobject_uevent_env [ 1020.037830][T21677] kobject: 'gretap0' (000000009e7a971f): fill_kobj_path: path = '/devices/virtual/net/gretap0' [ 1020.048271][T21677] kobject: 'queues' (00000000a27e3e46): kobject_add_internal: parent: 'gretap0', set: '' [ 1020.058698][T21677] kobject: 'queues' (00000000a27e3e46): kobject_uevent_env [ 1020.066040][T21677] kobject: 'queues' (00000000a27e3e46): kobject_uevent_env: filter function caused the event to drop! [ 1020.077127][T21677] kobject: 'rx-0' (00000000efaeb9ee): kobject_add_internal: parent: 'queues', set: 'queues' [ 1020.087307][T21677] kobject: 'rx-0' (00000000efaeb9ee): kobject_uevent_env [ 1020.094500][T21677] kobject: 'rx-0' (00000000efaeb9ee): fill_kobj_path: path = '/devices/virtual/net/gretap0/queues/rx-0' [ 1020.105698][T21677] kobject: 'tx-0' (0000000051c0fca1): kobject_add_internal: parent: 'queues', set: 'queues' [ 1020.115899][T21677] kobject: 'tx-0' (0000000051c0fca1): kobject_uevent_env [ 1020.122990][T21677] kobject: 'tx-0' (0000000051c0fca1): fill_kobj_path: path = '/devices/virtual/net/gretap0/queues/tx-0' [ 1020.135231][T21677] kobject: 'batman_adv' (00000000c10bc418): kobject_add_internal: parent: 'gretap0', set: '' [ 1020.146460][T21677] kobject: 'erspan0' (00000000dd411f3a): kobject_add_internal: parent: 'net', set: 'devices' [ 1020.157038][T21677] kobject: 'erspan0' (00000000dd411f3a): kobject_uevent_env [ 1020.164383][T21677] kobject: 'erspan0' (00000000dd411f3a): fill_kobj_path: path = '/devices/virtual/net/erspan0' [ 1020.174869][T21677] kobject: 'queues' (000000004a5f971b): kobject_add_internal: parent: 'erspan0', set: '' [ 1020.185363][T21677] kobject: 'queues' (000000004a5f971b): kobject_uevent_env [ 1020.192754][T21677] kobject: 'queues' (000000004a5f971b): kobject_uevent_env: filter function caused the event to drop! [ 1020.203766][T21677] kobject: 'rx-0' (000000001c3f9a73): kobject_add_internal: parent: 'queues', set: 'queues' [ 1020.213912][T21677] kobject: 'rx-0' (000000001c3f9a73): kobject_uevent_env [ 1020.221026][T21677] kobject: 'rx-0' (000000001c3f9a73): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/rx-0' [ 1020.232257][T21677] kobject: 'tx-0' (00000000100a1ca0): kobject_add_internal: parent: 'queues', set: 'queues' [ 1020.242497][T21677] kobject: 'tx-0' (00000000100a1ca0): kobject_uevent_env [ 1020.249573][T21677] kobject: 'tx-0' (00000000100a1ca0): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/tx-0' [ 1020.261534][T21677] kobject: 'batman_adv' (00000000bc8ca895): kobject_add_internal: parent: 'erspan0', set: '' [ 1020.272604][T21677] kobject: 'ip_vti0' (0000000054f34872): kobject_add_internal: parent: 'net', set: 'devices' [ 1020.283411][T21677] kobject: 'ip_vti0' (0000000054f34872): kobject_uevent_env [ 1020.290730][T21677] kobject: 'ip_vti0' (0000000054f34872): fill_kobj_path: path = '/devices/virtual/net/ip_vti0' [ 1020.301219][T21677] kobject: 'queues' (000000001f248411): kobject_add_internal: parent: 'ip_vti0', set: '' [ 1020.311658][T21677] kobject: 'queues' (000000001f248411): kobject_uevent_env [ 1020.319130][T21677] kobject: 'queues' (000000001f248411): kobject_uevent_env: filter function caused the event to drop! [ 1020.330136][T21677] kobject: 'rx-0' (00000000e4466c63): kobject_add_internal: parent: 'queues', set: 'queues' [ 1020.340297][T21677] kobject: 'rx-0' (00000000e4466c63): kobject_uevent_env [ 1020.347456][T21677] kobject: 'rx-0' (00000000e4466c63): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/rx-0' [ 1020.359120][T21677] kobject: 'tx-0' (000000002d472273): kobject_add_internal: parent: 'queues', set: 'queues' [ 1020.369331][T21677] kobject: 'tx-0' (000000002d472273): kobject_uevent_env [ 1020.376741][T21677] kobject: 'tx-0' (000000002d472273): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/tx-0' [ 1020.388541][T21677] kobject: 'ip6_vti0' (00000000b97f1794): kobject_add_internal: parent: 'net', set: 'devices' [ 1020.399281][T21677] kobject: 'ip6_vti0' (00000000b97f1794): kobject_uevent_env [ 1020.406710][T21677] kobject: 'ip6_vti0' (00000000b97f1794): fill_kobj_path: path = '/devices/virtual/net/ip6_vti0' [ 1020.417317][T21677] kobject: 'queues' (000000007ae60b5f): kobject_add_internal: parent: 'ip6_vti0', set: '' [ 1020.427778][T21677] kobject: 'queues' (000000007ae60b5f): kobject_uevent_env [ 1020.434996][T21677] kobject: 'queues' (000000007ae60b5f): kobject_uevent_env: filter function caused the event to drop! [ 1020.445985][T21677] kobject: 'rx-0' (00000000e157d0cf): kobject_add_internal: parent: 'queues', set: 'queues' [ 1020.456251][T21677] kobject: 'rx-0' (00000000e157d0cf): kobject_uevent_env [ 1020.463342][T21677] kobject: 'rx-0' (00000000e157d0cf): fill_kobj_path: path = '/devices/virtual/net/ip6_vti0/queues/rx-0' [ 1020.474648][T21677] kobject: 'tx-0' (0000000034caeb2f): kobject_add_internal: parent: 'queues', set: 'queues' [ 1020.485412][T21677] kobject: 'tx-0' (0000000034caeb2f): kobject_uevent_env [ 1020.492521][T21677] kobject: 'tx-0' (0000000034caeb2f): fill_kobj_path: path = '/devices/virtual/net/ip6_vti0/queues/tx-0' [ 1020.504459][T21677] kobject: 'sit0' (000000009ad60474): kobject_add_internal: parent: 'net', set: 'devices' [ 1020.515071][T21677] kobject: 'sit0' (000000009ad60474): kobject_uevent_env [ 1020.522316][T21677] kobject: 'sit0' (000000009ad60474): fill_kobj_path: path = '/devices/virtual/net/sit0' [ 1020.532240][T21677] kobject: 'queues' (00000000d05241df): kobject_add_internal: parent: 'sit0', set: '' [ 1020.542358][T21677] kobject: 'queues' (00000000d05241df): kobject_uevent_env [ 1020.549549][T21677] kobject: 'queues' (00000000d05241df): kobject_uevent_env: filter function caused the event to drop! [ 1020.560551][T21677] kobject: 'rx-0' (0000000079a1490c): kobject_add_internal: parent: 'queues', set: 'queues' [ 1020.570685][T21677] kobject: 'rx-0' (0000000079a1490c): kobject_uevent_env [ 1020.577769][T21677] kobject: 'rx-0' (0000000079a1490c): fill_kobj_path: path = '/devices/virtual/net/sit0/queues/rx-0' [ 1020.588698][T21677] kobject: 'tx-0' (0000000055c32b09): kobject_add_internal: parent: 'queues', set: 'queues' [ 1020.598911][T21677] kobject: 'tx-0' (0000000055c32b09): kobject_uevent_env [ 1020.605986][T21677] kobject: 'tx-0' (0000000055c32b09): fill_kobj_path: path = '/devices/virtual/net/sit0/queues/tx-0' [ 1020.617992][T21677] kobject: 'ip6tnl0' (00000000d119ee7a): kobject_add_internal: parent: 'net', set: 'devices' [ 1020.629087][T21677] kobject: 'ip6tnl0' (00000000d119ee7a): kobject_uevent_env [ 1020.636433][T21677] kobject: 'ip6tnl0' (00000000d119ee7a): fill_kobj_path: path = '/devices/virtual/net/ip6tnl0' [ 1020.646879][T21677] kobject: 'queues' (00000000684ba174): kobject_add_internal: parent: 'ip6tnl0', set: '' [ 1020.657293][T21677] kobject: 'queues' (00000000684ba174): kobject_uevent_env [ 1020.664530][T21677] kobject: 'queues' (00000000684ba174): kobject_uevent_env: filter function caused the event to drop! [ 1020.675530][T21677] kobject: 'rx-0' (000000004c5a45ca): kobject_add_internal: parent: 'queues', set: 'queues' [ 1020.685694][T21677] kobject: 'rx-0' (000000004c5a45ca): kobject_uevent_env [ 1020.694020][T21677] kobject: 'rx-0' (000000004c5a45ca): fill_kobj_path: path = '/devices/virtual/net/ip6tnl0/queues/rx-0' [ 1020.705840][T21677] kobject: 'tx-0' (000000004c201bf4): kobject_add_internal: parent: 'queues', set: 'queues' [ 1020.716944][T21677] kobject: 'tx-0' (000000004c201bf4): kobject_uevent_env [ 1020.724601][T21677] kobject: 'tx-0' (000000004c201bf4): fill_kobj_path: path = '/devices/virtual/net/ip6tnl0/queues/tx-0' [ 1020.737467][T21677] kobject: 'ip6gre0' (00000000f13e2e2c): kobject_add_internal: parent: 'net', set: 'devices' [ 1020.748558][T21677] kobject: 'ip6gre0' (00000000f13e2e2c): kobject_uevent_env [ 1020.756831][T21677] kobject: 'ip6gre0' (00000000f13e2e2c): fill_kobj_path: path = '/devices/virtual/net/ip6gre0' [ 1020.767796][T21677] kobject: 'queues' (000000002c82d7e7): kobject_add_internal: parent: 'ip6gre0', set: '' [ 1020.780176][T21677] kobject: 'queues' (000000002c82d7e7): kobject_uevent_env [ 1020.787955][T21677] kobject: 'queues' (000000002c82d7e7): kobject_uevent_env: filter function caused the event to drop! [ 1020.799963][T21677] kobject: 'rx-0' (00000000a969f6d8): kobject_add_internal: parent: 'queues', set: 'queues' [ 1020.810642][T21677] kobject: 'rx-0' (00000000a969f6d8): kobject_uevent_env [ 1020.818835][T21677] kobject: 'rx-0' (00000000a969f6d8): fill_kobj_path: path = '/devices/virtual/net/ip6gre0/queues/rx-0' [ 1020.830555][T21677] kobject: 'tx-0' (0000000052f56e16): kobject_add_internal: parent: 'queues', set: 'queues' [ 1020.841782][T21677] kobject: 'tx-0' (0000000052f56e16): kobject_uevent_env [ 1020.848853][T21677] kobject: 'tx-0' (0000000052f56e16): fill_kobj_path: path = '/devices/virtual/net/ip6gre0/queues/tx-0' [ 1020.863127][T21677] kobject: 'syz_tun' (00000000e2ccc37e): kobject_add_internal: parent: 'net', set: 'devices' [ 1020.874005][T21677] kobject: 'syz_tun' (00000000e2ccc37e): kobject_uevent_env [ 1020.881307][T21677] kobject: 'syz_tun' (00000000e2ccc37e): fill_kobj_path: path = '/devices/virtual/net/syz_tun' [ 1020.891744][T21677] kobject: 'queues' (00000000adbd5bb7): kobject_add_internal: parent: 'syz_tun', set: '' [ 1020.902221][T21677] kobject: 'queues' (00000000adbd5bb7): kobject_uevent_env [ 1020.909429][T21677] kobject: 'queues' (00000000adbd5bb7): kobject_uevent_env: filter function caused the event to drop! [ 1020.920433][T21677] kobject: 'rx-0' (00000000b25be95c): kobject_add_internal: parent: 'queues', set: 'queues' [ 1020.930579][T21677] kobject: 'rx-0' (00000000b25be95c): kobject_uevent_env [ 1020.937706][T21677] kobject: 'rx-0' (00000000b25be95c): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/rx-0' [ 1020.949132][T21677] kobject: 'tx-0' (0000000022d3ca24): kobject_add_internal: parent: 'queues', set: 'queues' [ 1020.959339][T21677] kobject: 'tx-0' (0000000022d3ca24): kobject_uevent_env [ 1020.966425][T21677] kobject: 'tx-0' (0000000022d3ca24): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/tx-0' [ 1020.978209][T21677] kobject: 'batman_adv' (000000001e602634): kobject_add_internal: parent: 'syz_tun', set: '' [ 1020.993154][T21677] kobject: 'ip6gretap0' (0000000085ff5da9): kobject_add_internal: parent: 'net', set: 'devices' [ 1021.003989][T21677] kobject: 'ip6gretap0' (0000000085ff5da9): kobject_uevent_env [ 1021.011541][T21677] kobject: 'ip6gretap0' (0000000085ff5da9): fill_kobj_path: path = '/devices/virtual/net/ip6gretap0' [ 1021.012059][ C1] net_ratelimit: 22 callbacks suppressed [ 1021.012066][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1021.022883][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1021.028060][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1021.033789][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1021.051239][T21677] kobject: 'queues' (00000000a69fcf42): kobject_add_internal: parent: 'ip6gretap0', set: '' [ 1021.061896][T21677] kobject: 'queues' (00000000a69fcf42): kobject_uevent_env [ 1021.069122][T21677] kobject: 'queues' (00000000a69fcf42): kobject_uevent_env: filter function caused the event to drop! [ 1021.080563][T21677] kobject: 'rx-0' (0000000002a38a73): kobject_add_internal: parent: 'queues', set: 'queues' [ 1021.090766][T21677] kobject: 'rx-0' (0000000002a38a73): kobject_uevent_env [ 1021.097884][T21677] kobject: 'rx-0' (0000000002a38a73): fill_kobj_path: path = '/devices/virtual/net/ip6gretap0/queues/rx-0' [ 1021.109355][T21677] kobject: 'tx-0' (00000000d0787f4b): kobject_add_internal: parent: 'queues', set: 'queues' [ 1021.119563][T21677] kobject: 'tx-0' (00000000d0787f4b): kobject_uevent_env [ 1021.126677][T21677] kobject: 'tx-0' (00000000d0787f4b): fill_kobj_path: path = '/devices/virtual/net/ip6gretap0/queues/tx-0' [ 1021.140139][T21677] kobject: 'batman_adv' (0000000051ca9f9d): kobject_add_internal: parent: 'ip6gretap0', set: '' [ 1021.151836][T21677] kobject: 'bridge0' (000000004479b269): kobject_add_internal: parent: 'net', set: 'devices' [ 1021.162761][T21677] kobject: 'bridge0' (000000004479b269): kobject_uevent_env [ 1021.170072][T21677] kobject: 'bridge0' (000000004479b269): fill_kobj_path: path = '/devices/virtual/net/bridge0' [ 1021.180589][T21677] kobject: 'queues' (000000002969a7ec): kobject_add_internal: parent: 'bridge0', set: '' [ 1021.190982][T21677] kobject: 'queues' (000000002969a7ec): kobject_uevent_env [ 1021.198195][T21677] kobject: 'queues' (000000002969a7ec): kobject_uevent_env: filter function caused the event to drop! [ 1021.209381][T21677] kobject: 'rx-0' (000000007fc5339a): kobject_add_internal: parent: 'queues', set: 'queues' [ 1021.219509][T21677] kobject: 'rx-0' (000000007fc5339a): kobject_uevent_env [ 1021.226580][T21677] kobject: 'rx-0' (000000007fc5339a): fill_kobj_path: path = '/devices/virtual/net/bridge0/queues/rx-0' [ 1021.237791][T21677] kobject: 'tx-0' (000000009393bf8c): kobject_add_internal: parent: 'queues', set: 'queues' [ 1021.247991][T21677] kobject: 'tx-0' (000000009393bf8c): kobject_uevent_env [ 1021.255066][T21677] kobject: 'tx-0' (000000009393bf8c): fill_kobj_path: path = '/devices/virtual/net/bridge0/queues/tx-0' [ 1021.267064][T21677] kobject: 'brif' (000000001eca746d): kobject_add_internal: parent: 'bridge0', set: '' [ 1021.277490][T21677] kobject: 'batman_adv' (000000001b4882f4): kobject_add_internal: parent: 'bridge0', set: '' [ 1021.288738][T21677] kobject: 'vcan0' (0000000011fb0449): kobject_add_internal: parent: 'net', set: 'devices' [ 1021.299221][T21677] kobject: 'vcan0' (0000000011fb0449): kobject_uevent_env [ 1021.306453][T21677] kobject: 'vcan0' (0000000011fb0449): fill_kobj_path: path = '/devices/virtual/net/vcan0' [ 1021.317188][T21677] kobject: 'queues' (000000002def813c): kobject_add_internal: parent: 'vcan0', set: '' [ 1021.327512][T21677] kobject: 'queues' (000000002def813c): kobject_uevent_env [ 1021.334919][T21677] kobject: 'queues' (000000002def813c): kobject_uevent_env: filter function caused the event to drop! [ 1021.345904][T21677] kobject: 'rx-0' (00000000ac60d525): kobject_add_internal: parent: 'queues', set: 'queues' [ 1021.356043][T21677] kobject: 'rx-0' (00000000ac60d525): kobject_uevent_env [ 1021.363136][T21677] kobject: 'rx-0' (00000000ac60d525): fill_kobj_path: path = '/devices/virtual/net/vcan0/queues/rx-0' [ 1021.374145][T21677] kobject: 'tx-0' (00000000728b1b8c): kobject_add_internal: parent: 'queues', set: 'queues' [ 1021.384340][T21677] kobject: 'tx-0' (00000000728b1b8c): kobject_uevent_env [ 1021.391400][T21677] kobject: 'tx-0' (00000000728b1b8c): fill_kobj_path: path = '/devices/virtual/net/vcan0/queues/tx-0' [ 1021.413792][T21677] kobject: 'bond0' (00000000f470c651): kobject_add_internal: parent: 'net', set: 'devices' [ 1021.424444][T21677] kobject: 'bond0' (00000000f470c651): kobject_uevent_env [ 1021.431608][T21677] kobject: 'bond0' (00000000f470c651): fill_kobj_path: path = '/devices/virtual/net/bond0' [ 1021.441698][T21677] kobject: 'queues' (0000000011b7e384): kobject_add_internal: parent: 'bond0', set: '' [ 1021.451892][T21677] kobject: 'queues' (0000000011b7e384): kobject_uevent_env [ 1021.459077][T21677] kobject: 'queues' (0000000011b7e384): kobject_uevent_env: filter function caused the event to drop! [ 1021.470304][T21677] kobject: 'rx-0' (000000005affdda9): kobject_add_internal: parent: 'queues', set: 'queues' [ 1021.480455][T21677] kobject: 'rx-0' (000000005affdda9): kobject_uevent_env [ 1021.487520][T21677] kobject: 'rx-0' (000000005affdda9): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-0' [ 1021.498581][T21677] kobject: 'rx-1' (00000000d6c0c62a): kobject_add_internal: parent: 'queues', set: 'queues' [ 1021.508699][T21677] kobject: 'rx-1' (00000000d6c0c62a): kobject_uevent_env [ 1021.515776][T21677] kobject: 'rx-1' (00000000d6c0c62a): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-1' [ 1021.526817][T21677] kobject: 'rx-2' (00000000c7d0a53d): kobject_add_internal: parent: 'queues', set: 'queues' [ 1021.536976][T21677] kobject: 'rx-2' (00000000c7d0a53d): kobject_uevent_env [ 1021.544101][T21677] kobject: 'rx-2' (00000000c7d0a53d): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-2' [ 1021.555162][T21677] kobject: 'rx-3' (000000003664a740): kobject_add_internal: parent: 'queues', set: 'queues' [ 1021.565319][T21677] kobject: 'rx-3' (000000003664a740): kobject_uevent_env [ 1021.572444][T21677] kobject: 'rx-3' (000000003664a740): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-3' [ 1021.583528][T21677] kobject: 'rx-4' (00000000d4b345b6): kobject_add_internal: parent: 'queues', set: 'queues' [ 1021.593963][T21677] kobject: 'rx-4' (00000000d4b345b6): kobject_uevent_env [ 1021.601072][T21677] kobject: 'rx-4' (00000000d4b345b6): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-4' [ 1021.612184][T21677] kobject: 'rx-5' (00000000bca06489): kobject_add_internal: parent: 'queues', set: 'queues' [ 1021.622346][T21677] kobject: 'rx-5' (00000000bca06489): kobject_uevent_env [ 1021.629397][T21677] kobject: 'rx-5' (00000000bca06489): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-5' [ 1021.640624][T21677] kobject: 'rx-6' (00000000b700f013): kobject_add_internal: parent: 'queues', set: 'queues' [ 1021.650811][T21677] kobject: 'rx-6' (00000000b700f013): kobject_uevent_env [ 1021.658359][T21677] kobject: 'rx-6' (00000000b700f013): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-6' [ 1021.669493][T21677] kobject: 'rx-7' (000000009cb6dc65): kobject_add_internal: parent: 'queues', set: 'queues' [ 1021.679659][T21677] kobject: 'rx-7' (000000009cb6dc65): kobject_uevent_env [ 1021.686765][T21677] kobject: 'rx-7' (000000009cb6dc65): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-7' [ 1021.697921][T21677] kobject: 'rx-8' (000000002a0b4230): kobject_add_internal: parent: 'queues', set: 'queues' [ 1021.708079][T21677] kobject: 'rx-8' (000000002a0b4230): kobject_uevent_env [ 1021.715190][T21677] kobject: 'rx-8' (000000002a0b4230): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-8' [ 1021.726680][T21677] kobject: 'rx-9' (000000005504db5d): kobject_add_internal: parent: 'queues', set: 'queues' [ 1021.736957][T21677] kobject: 'rx-9' (000000005504db5d): kobject_uevent_env [ 1021.744047][T21677] kobject: 'rx-9' (000000005504db5d): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-9' [ 1021.755092][T21677] kobject: 'rx-10' (00000000de52a80e): kobject_add_internal: parent: 'queues', set: 'queues' [ 1021.766058][T21677] kobject: 'rx-10' (00000000de52a80e): kobject_uevent_env [ 1021.773303][T21677] kobject: 'rx-10' (00000000de52a80e): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-10' [ 1021.784551][T21677] kobject: 'rx-11' (00000000fd3593ad): kobject_add_internal: parent: 'queues', set: 'queues' [ 1021.795214][T21677] kobject: 'rx-11' (00000000fd3593ad): kobject_uevent_env [ 1021.802417][T21677] kobject: 'rx-11' (00000000fd3593ad): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-11' [ 1021.814706][T21677] kobject: 'rx-12' (000000005d3bf387): kobject_add_internal: parent: 'queues', set: 'queues' [ 1021.825113][T21677] kobject: 'rx-12' (000000005d3bf387): kobject_uevent_env [ 1021.832285][T21677] kobject: 'rx-12' (000000005d3bf387): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-12' [ 1021.843524][T21677] kobject: 'rx-13' (000000002802d357): kobject_add_internal: parent: 'queues', set: 'queues' [ 1021.853969][T21677] kobject: 'rx-13' (000000002802d357): kobject_uevent_env [ 1021.861112][T21677] kobject: 'rx-13' (000000002802d357): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-13' [ 1021.872886][T21677] kobject: 'rx-14' (00000000202e555d): kobject_add_internal: parent: 'queues', set: 'queues' [ 1021.883167][T21677] kobject: 'rx-14' (00000000202e555d): kobject_uevent_env [ 1021.890329][T21677] kobject: 'rx-14' (00000000202e555d): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-14' [ 1021.901615][T21677] kobject: 'rx-15' (0000000087136e6b): kobject_add_internal: parent: 'queues', set: 'queues' [ 1021.911942][T21677] kobject: 'rx-15' (0000000087136e6b): kobject_uevent_env [ 1021.919079][T21677] kobject: 'rx-15' (0000000087136e6b): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/rx-15' [ 1021.930314][T21677] kobject: 'tx-0' (00000000072271e1): kobject_add_internal: parent: 'queues', set: 'queues' [ 1021.940533][T21677] kobject: 'tx-0' (00000000072271e1): kobject_uevent_env [ 1021.947616][T21677] kobject: 'tx-0' (00000000072271e1): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/tx-0' [ 1021.959806][T21677] kobject: 'tx-1' (0000000079aa6e01): kobject_add_internal: parent: 'queues', set: 'queues' [ 1021.970022][T21677] kobject: 'tx-1' (0000000079aa6e01): kobject_uevent_env [ 1021.977417][T21677] kobject: 'tx-1' (0000000079aa6e01): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/tx-1' [ 1021.988640][T21677] kobject: 'tx-2' (0000000061dbdb0b): kobject_add_internal: parent: 'queues', set: 'queues' [ 1021.998898][T21677] kobject: 'tx-2' (0000000061dbdb0b): kobject_uevent_env [ 1022.005971][T21677] kobject: 'tx-2' (0000000061dbdb0b): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/tx-2' [ 1022.017020][T21677] kobject: 'tx-3' (0000000000c8009a): kobject_add_internal: parent: 'queues', set: 'queues' [ 1022.027370][T21677] kobject: 'tx-3' (0000000000c8009a): kobject_uevent_env [ 1022.034853][T21677] kobject: 'tx-3' (0000000000c8009a): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/tx-3' [ 1022.045960][T21677] kobject: 'tx-4' (00000000416ae05f): kobject_add_internal: parent: 'queues', set: 'queues' [ 1022.056376][T21677] kobject: 'tx-4' (00000000416ae05f): kobject_uevent_env [ 1022.063468][T21677] kobject: 'tx-4' (00000000416ae05f): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/tx-4' [ 1022.075322][T21677] kobject: 'tx-5' (000000006c0ee49e): kobject_add_internal: parent: 'queues', set: 'queues' [ 1022.085720][T21677] kobject: 'tx-5' (000000006c0ee49e): kobject_uevent_env [ 1022.092808][T21677] kobject: 'tx-5' (000000006c0ee49e): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/tx-5' [ 1022.103862][T21677] kobject: 'tx-6' (00000000a1fac97a): kobject_add_internal: parent: 'queues', set: 'queues' [ 1022.114233][T21677] kobject: 'tx-6' (00000000a1fac97a): kobject_uevent_env [ 1022.121291][T21677] kobject: 'tx-6' (00000000a1fac97a): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/tx-6' [ 1022.132399][T21677] kobject: 'tx-7' (00000000f05113ba): kobject_add_internal: parent: 'queues', set: 'queues' [ 1022.142673][T21677] kobject: 'tx-7' (00000000f05113ba): kobject_uevent_env [ 1022.149734][T21677] kobject: 'tx-7' (00000000f05113ba): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/tx-7' [ 1022.160782][T21677] kobject: 'tx-8' (00000000bddc6094): kobject_add_internal: parent: 'queues', set: 'queues' [ 1022.170967][T21677] kobject: 'tx-8' (00000000bddc6094): kobject_uevent_env [ 1022.178046][T21677] kobject: 'tx-8' (00000000bddc6094): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/tx-8' [ 1022.189073][T21677] kobject: 'tx-9' (000000002e1d3e7c): kobject_add_internal: parent: 'queues', set: 'queues' [ 1022.199333][T21677] kobject: 'tx-9' (000000002e1d3e7c): kobject_uevent_env [ 1022.206418][T21677] kobject: 'tx-9' (000000002e1d3e7c): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/tx-9' [ 1022.211879][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1022.217421][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1022.223107][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1022.228811][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1022.240363][T21677] kobject: 'tx-10' (00000000ed506c32): kobject_add_internal: parent: 'queues', set: 'queues' [ 1022.251179][T21677] kobject: 'tx-10' (00000000ed506c32): kobject_uevent_env [ 1022.258388][T21677] kobject: 'tx-10' (00000000ed506c32): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/tx-10' [ 1022.269596][T21677] kobject: 'tx-11' (000000008608eb00): kobject_add_internal: parent: 'queues', set: 'queues' [ 1022.279904][T21677] kobject: 'tx-11' (000000008608eb00): kobject_uevent_env [ 1022.287092][T21677] kobject: 'tx-11' (000000008608eb00): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/tx-11' [ 1022.298343][T21677] kobject: 'tx-12' (00000000d623698c): kobject_add_internal: parent: 'queues', set: 'queues' [ 1022.308611][T21677] kobject: 'tx-12' (00000000d623698c): kobject_uevent_env [ 1022.315785][T21677] kobject: 'tx-12' (00000000d623698c): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/tx-12' [ 1022.326993][T21677] kobject: 'tx-13' (00000000a8cbeef1): kobject_add_internal: parent: 'queues', set: 'queues' [ 1022.337341][T21677] kobject: 'tx-13' (00000000a8cbeef1): kobject_uevent_env [ 1022.344500][T21677] kobject: 'tx-13' (00000000a8cbeef1): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/tx-13' [ 1022.355737][T21677] kobject: 'tx-14' (000000001ca621d9): kobject_add_internal: parent: 'queues', set: 'queues' [ 1022.366012][T21677] kobject: 'tx-14' (000000001ca621d9): kobject_uevent_env [ 1022.373217][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1022.373266][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1022.385367][T21677] kobject: 'tx-14' (000000001ca621d9): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/tx-14' [ 1022.398063][T21677] kobject: 'tx-15' (00000000bf22bf99): kobject_add_internal: parent: 'queues', set: 'queues' [ 1022.408422][T21677] kobject: 'tx-15' (00000000bf22bf99): kobject_uevent_env [ 1022.415648][T21677] kobject: 'tx-15' (00000000bf22bf99): fill_kobj_path: path = '/devices/virtual/net/bond0/queues/tx-15' [ 1022.427481][T21677] kobject: 'batman_adv' (00000000625d0513): kobject_add_internal: parent: 'bond0', set: '' [ 1022.438682][T21677] kobject: 'team0' (0000000028b03401): kobject_add_internal: parent: 'net', set: 'devices' [ 1022.449194][T21677] kobject: 'team0' (0000000028b03401): kobject_uevent_env [ 1022.456529][T21677] kobject: 'team0' (0000000028b03401): fill_kobj_path: path = '/devices/virtual/net/team0' [ 1022.466685][T21677] kobject: 'queues' (0000000023e70a37): kobject_add_internal: parent: 'team0', set: '' [ 1022.476893][T21677] kobject: 'queues' (0000000023e70a37): kobject_uevent_env [ 1022.484113][T21677] kobject: 'queues' (0000000023e70a37): kobject_uevent_env: filter function caused the event to drop! [ 1022.495090][T21677] kobject: 'rx-0' (00000000a92496e1): kobject_add_internal: parent: 'queues', set: 'queues' [ 1022.505370][T21677] kobject: 'rx-0' (00000000a92496e1): kobject_uevent_env [ 1022.512452][T21677] kobject: 'rx-0' (00000000a92496e1): fill_kobj_path: path = '/devices/virtual/net/team0/queues/rx-0' [ 1022.523666][T21677] kobject: 'rx-1' (00000000ce3c7b3a): kobject_add_internal: parent: 'queues', set: 'queues' [ 1022.533912][T21677] kobject: 'rx-1' (00000000ce3c7b3a): kobject_uevent_env [ 1022.540956][T21677] kobject: 'rx-1' (00000000ce3c7b3a): fill_kobj_path: path = '/devices/virtual/net/team0/queues/rx-1' [ 1022.552008][T21677] kobject: 'rx-2' (000000004b3396db): kobject_add_internal: parent: 'queues', set: 'queues' [ 1022.562187][T21677] kobject: 'rx-2' (000000004b3396db): kobject_uevent_env [ 1022.569240][T21677] kobject: 'rx-2' (000000004b3396db): fill_kobj_path: path = '/devices/virtual/net/team0/queues/rx-2' [ 1022.580303][T21677] kobject: 'rx-3' (000000004a7d4d75): kobject_add_internal: parent: 'queues', set: 'queues' [ 1022.590457][T21677] kobject: 'rx-3' (000000004a7d4d75): kobject_uevent_env [ 1022.597550][T21677] kobject: 'rx-3' (000000004a7d4d75): fill_kobj_path: path = '/devices/virtual/net/team0/queues/rx-3' [ 1022.608587][T21677] kobject: 'rx-4' (00000000593a17a6): kobject_add_internal: parent: 'queues', set: 'queues' [ 1022.618739][T21677] kobject: 'rx-4' (00000000593a17a6): kobject_uevent_env [ 1022.625827][T21677] kobject: 'rx-4' (00000000593a17a6): fill_kobj_path: path = '/devices/virtual/net/team0/queues/rx-4' [ 1022.636879][T21677] kobject: 'rx-5' (0000000070939619): kobject_add_internal: parent: 'queues', set: 'queues' [ 1022.647059][T21677] kobject: 'rx-5' (0000000070939619): kobject_uevent_env [ 1022.654190][T21677] kobject: 'rx-5' (0000000070939619): fill_kobj_path: path = '/devices/virtual/net/team0/queues/rx-5' [ 1022.665246][T21677] kobject: 'rx-6' (0000000036cf88f7): kobject_add_internal: parent: 'queues', set: 'queues' [ 1022.675426][T21677] kobject: 'rx-6' (0000000036cf88f7): kobject_uevent_env [ 1022.682607][T21677] kobject: 'rx-6' (0000000036cf88f7): fill_kobj_path: path = '/devices/virtual/net/team0/queues/rx-6' [ 1022.694511][T21677] kobject: 'rx-7' (0000000071c43ac2): kobject_add_internal: parent: 'queues', set: 'queues' [ 1022.705942][T21677] kobject: 'rx-7' (0000000071c43ac2): kobject_uevent_env [ 1022.713516][T21677] kobject: 'rx-7' (0000000071c43ac2): fill_kobj_path: path = '/devices/virtual/net/team0/queues/rx-7' [ 1022.725811][T21677] kobject: 'rx-8' (000000001f59e32a): kobject_add_internal: parent: 'queues', set: 'queues' [ 1022.736307][T21677] kobject: 'rx-8' (000000001f59e32a): kobject_uevent_env [ 1022.744555][T21677] kobject: 'rx-8' (000000001f59e32a): fill_kobj_path: path = '/devices/virtual/net/team0/queues/rx-8' [ 1022.755894][T21677] kobject: 'rx-9' (000000006874dcc0): kobject_add_internal: parent: 'queues', set: 'queues' [ 1022.767179][T21677] kobject: 'rx-9' (000000006874dcc0): kobject_uevent_env [ 1022.776616][T21677] kobject: 'rx-9' (000000006874dcc0): fill_kobj_path: path = '/devices/virtual/net/team0/queues/rx-9' [ 1022.788908][T21677] kobject: 'rx-10' (0000000013abbf68): kobject_add_internal: parent: 'queues', set: 'queues' [ 1022.799466][T21677] kobject: 'rx-10' (0000000013abbf68): kobject_uevent_env [ 1022.807781][T21677] kobject: 'rx-10' (0000000013abbf68): fill_kobj_path: path = '/devices/virtual/net/team0/queues/rx-10' [ 1022.819543][T21677] kobject: 'rx-11' (000000007cc65e30): kobject_add_internal: parent: 'queues', set: 'queues' [ 1022.830931][T21677] kobject: 'rx-11' (000000007cc65e30): kobject_uevent_env [ 1022.838451][T21677] kobject: 'rx-11' (000000007cc65e30): fill_kobj_path: path = '/devices/virtual/net/team0/queues/rx-11' [ 1022.850865][T21677] kobject: 'rx-12' (0000000074e1456e): kobject_add_internal: parent: 'queues', set: 'queues' [ 1022.861468][T21677] kobject: 'rx-12' (0000000074e1456e): kobject_uevent_env [ 1022.869909][T21677] kobject: 'rx-12' (0000000074e1456e): fill_kobj_path: path = '/devices/virtual/net/team0/queues/rx-12' [ 1022.881466][T21677] kobject: 'rx-13' (00000000db1a6cf8): kobject_add_internal: parent: 'queues', set: 'queues' [ 1022.892855][T21677] kobject: 'rx-13' (00000000db1a6cf8): kobject_uevent_env [ 1022.899996][T21677] kobject: 'rx-13' (00000000db1a6cf8): fill_kobj_path: path = '/devices/virtual/net/team0/queues/rx-13' [ 1022.911799][T21677] kobject: 'rx-14' (00000000b59a350d): kobject_add_internal: parent: 'queues', set: 'queues' [ 1022.922116][T21677] kobject: 'rx-14' (00000000b59a350d): kobject_uevent_env [ 1022.929294][T21677] kobject: 'rx-14' (00000000b59a350d): fill_kobj_path: path = '/devices/virtual/net/team0/queues/rx-14' [ 1022.940894][T21677] kobject: 'rx-15' (000000002b8c414e): kobject_add_internal: parent: 'queues', set: 'queues' [ 1022.951164][T21677] kobject: 'rx-15' (000000002b8c414e): kobject_uevent_env [ 1022.958344][T21677] kobject: 'rx-15' (000000002b8c414e): fill_kobj_path: path = '/devices/virtual/net/team0/queues/rx-15' [ 1022.969583][T21677] kobject: 'tx-0' (00000000aa345691): kobject_add_internal: parent: 'queues', set: 'queues' [ 1022.979792][T21677] kobject: 'tx-0' (00000000aa345691): kobject_uevent_env [ 1022.986938][T21677] kobject: 'tx-0' (00000000aa345691): fill_kobj_path: path = '/devices/virtual/net/team0/queues/tx-0' [ 1022.997986][T21677] kobject: 'tx-1' (00000000fcd6cc77): kobject_add_internal: parent: 'queues', set: 'queues' [ 1023.008235][T21677] kobject: 'tx-1' (00000000fcd6cc77): kobject_uevent_env [ 1023.015325][T21677] kobject: 'tx-1' (00000000fcd6cc77): fill_kobj_path: path = '/devices/virtual/net/team0/queues/tx-1' [ 1023.026374][T21677] kobject: 'tx-2' (000000005728c6de): kobject_add_internal: parent: 'queues', set: 'queues' [ 1023.036771][T21677] kobject: 'tx-2' (000000005728c6de): kobject_uevent_env [ 1023.043873][T21677] kobject: 'tx-2' (000000005728c6de): fill_kobj_path: path = '/devices/virtual/net/team0/queues/tx-2' [ 1023.054906][T21677] kobject: 'tx-3' (000000001f262c5b): kobject_add_internal: parent: 'queues', set: 'queues' [ 1023.065822][T21677] kobject: 'tx-3' (000000001f262c5b): kobject_uevent_env [ 1023.072879][T21677] kobject: 'tx-3' (000000001f262c5b): fill_kobj_path: path = '/devices/virtual/net/team0/queues/tx-3' [ 1023.083950][T21677] kobject: 'tx-4' (00000000b7e2f042): kobject_add_internal: parent: 'queues', set: 'queues' [ 1023.094285][T21677] kobject: 'tx-4' (00000000b7e2f042): kobject_uevent_env [ 1023.101325][T21677] kobject: 'tx-4' (00000000b7e2f042): fill_kobj_path: path = '/devices/virtual/net/team0/queues/tx-4' [ 1023.112402][T21677] kobject: 'tx-5' (00000000a2f821e6): kobject_add_internal: parent: 'queues', set: 'queues' [ 1023.122662][T21677] kobject: 'tx-5' (00000000a2f821e6): kobject_uevent_env [ 1023.129704][T21677] kobject: 'tx-5' (00000000a2f821e6): fill_kobj_path: path = '/devices/virtual/net/team0/queues/tx-5' [ 1023.140774][T21677] kobject: 'tx-6' (00000000fdb92b7c): kobject_add_internal: parent: 'queues', set: 'queues' [ 1023.150965][T21677] kobject: 'tx-6' (00000000fdb92b7c): kobject_uevent_env [ 1023.158057][T21677] kobject: 'tx-6' (00000000fdb92b7c): fill_kobj_path: path = '/devices/virtual/net/team0/queues/tx-6' [ 1023.169392][T21677] kobject: 'tx-7' (00000000107790db): kobject_add_internal: parent: 'queues', set: 'queues' [ 1023.179647][T21677] kobject: 'tx-7' (00000000107790db): kobject_uevent_env [ 1023.186725][T21677] kobject: 'tx-7' (00000000107790db): fill_kobj_path: path = '/devices/virtual/net/team0/queues/tx-7' [ 1023.197766][T21677] kobject: 'tx-8' (0000000023a669d0): kobject_add_internal: parent: 'queues', set: 'queues' [ 1023.208048][T21677] kobject: 'tx-8' (0000000023a669d0): kobject_uevent_env [ 1023.215203][T21677] kobject: 'tx-8' (0000000023a669d0): fill_kobj_path: path = '/devices/virtual/net/team0/queues/tx-8' [ 1023.226231][T21677] kobject: 'tx-9' (00000000f8c6962c): kobject_add_internal: parent: 'queues', set: 'queues' [ 1023.236457][T21677] kobject: 'tx-9' (00000000f8c6962c): kobject_uevent_env [ 1023.243543][T21677] kobject: 'tx-9' (00000000f8c6962c): fill_kobj_path: path = '/devices/virtual/net/team0/queues/tx-9' [ 1023.254604][T21677] kobject: 'tx-10' (00000000b0a90b8b): kobject_add_internal: parent: 'queues', set: 'queues' [ 1023.264925][T21677] kobject: 'tx-10' (00000000b0a90b8b): kobject_uevent_env [ 1023.272098][T21677] kobject: 'tx-10' (00000000b0a90b8b): fill_kobj_path: path = '/devices/virtual/net/team0/queues/tx-10' [ 1023.283522][T21677] kobject: 'tx-11' (0000000051c878b7): kobject_add_internal: parent: 'queues', set: 'queues'