octl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r6, 0x402c5342, &(0x7f0000000380)={0x401, 0x5, 0x1, {0x7, 0x9}, 0x8, 0x1}) accept$inet6(r5, &(0x7f0000000e00)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000e40)=0x1c) preadv(r5, &(0x7f00000017c0), 0xf2, 0x0) 17:11:01 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x4c) 17:11:01 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0xf2, 0x3) 17:11:01 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000480)=""/52, 0x34}], 0x1, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r2, r1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000000)) [ 2179.835231][T19914] binder: BINDER_SET_CONTEXT_MGR already set [ 2179.845183][T19914] binder: 19908:19914 ioctl 40046207 0 returned -16 [ 2179.969955][T19914] binder: BINDER_SET_CONTEXT_MGR already set [ 2179.976778][T19914] binder: 19908:19914 ioctl 40046207 0 returned -16 17:11:01 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/netlink\x00') preadv(r1, &(0x7f00000017c0), 0xf2, 0x3) 17:11:01 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x68) 17:11:01 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0xa) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1a, &(0x7f00000001c0), 0x4) preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x400) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) r4 = openat2(r3, &(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)={0x40000, 0x40, 0x2}, 0x18) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000500), &(0x7f0000000540)=0x14) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x3) 17:11:01 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80a041, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000040)={0xfffffffffffffffa, 0x0, 0x8, 0x3}) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000480)=""/52, 0x34}], 0x1, 0x0) [ 2180.327514][T19928] binder: BINDER_SET_CONTEXT_MGR already set [ 2180.351305][T19928] binder: 19926:19928 ioctl 40046207 0 returned -16 17:11:01 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x6c) 17:11:01 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000480)=""/52, 0x34}], 0x1, 0x0) 17:11:02 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x74) 17:11:02 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x28, r2, 0xf20aaac1f6a2385f, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x28}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x3]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xa7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x3, 0xfffffff7, 0x3f]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xffff]}]}, 0x68}}, 0x8000000) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x3) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r5, r4) preadv(r4, &(0x7f0000000440)=[{&(0x7f0000000000)=""/83, 0x53}, {&(0x7f0000000100)=""/215, 0xd7}, {&(0x7f0000000200)=""/156, 0x9c}, {&(0x7f00000002c0)=""/108, 0x6c}, {&(0x7f0000000340)=""/210, 0xd2}], 0x5, 0x100) [ 2181.287322][T19956] binder: BINDER_SET_CONTEXT_MGR already set [ 2181.308369][T19956] binder: 19953:19956 ioctl 40046207 0 returned -16 [ 2181.359647][T19955] binder: BINDER_SET_CONTEXT_MGR already set [ 2181.372163][T19955] binder: 19953:19955 ioctl 40046207 0 returned -16 17:11:06 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf250700000008000400ac1e0001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c801) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r2, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}]}, 0x28}}, 0x80440c0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="df000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x38}}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x56}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008001}, 0x800) 17:11:06 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000480)=""/52, 0x34}], 0x1, 0x0) 17:11:06 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x7a) 17:11:06 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) fchdir(r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0xf2, 0x0) 17:11:06 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='coredump_filter\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x3) [ 2184.750320][T19968] binder: BINDER_SET_CONTEXT_MGR already set [ 2184.798683][T19968] binder: 19965:19968 ioctl 40046207 0 returned -16 17:11:06 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/raw6\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x3) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000000480)=0xe8) mount$9p_xen(&(0x7f0000000180)='syz\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x82980c, &(0x7f0000000580)={'trans=xen,', {[{@privport='privport'}, {@dfltuid={'dfltuid', 0x3d, r4}}, {@uname={'uname', 0x3d, '/sys/kernel/debug/binder/state\x00'}}, {@mmap='mmap'}], [{@dont_appraise='dont_appraise'}, {@smackfshat={'smackfshat', 0x3d, '/dev/binder#\x00'}}]}}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 2184.887481][T19973] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 17:11:06 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x300) [ 2185.029705][T19973] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2185.097723][T19990] binder: BINDER_SET_CONTEXT_MGR already set 17:11:06 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r0, 0x4122, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$HIDIOCGSTRING(r3, 0x81044804, &(0x7f0000000000)=ANY=[@ANYBLOB="520000004cb9a3c312e00c760c53ea2c1c5e9b5967a78af7b077831aa7194015cba4dc59f9de5e176d6fc225ebbd945d843454e856e27c31061333c8fa93b6db6e6f8f6f3e187b2edf025c598dc6bc297dd42ad2ff26"]) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000480)=""/52, 0x34}], 0x1, 0x0) [ 2185.158182][T19990] binder: 19974:19990 ioctl 40046207 0 returned -16 [ 2185.181025][T20018] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2185.242766][T19990] binder: BINDER_SET_CONTEXT_MGR already set [ 2185.270110][T20021] binder: BINDER_SET_CONTEXT_MGR already set [ 2185.276441][T19990] binder: 19974:19990 ioctl 40046207 0 returned -16 [ 2185.300370][T20021] binder: 19974:20021 ioctl 40046207 0 returned -16 17:11:06 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x500) 17:11:06 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r4, 0x0) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@file_umask={'file_umask'}}, {@part={'part'}}, {@type={'type', 0x3d, "ae4bf3ae"}}, {@gid={'gid', 0x3d, r6}}]}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000100)={0xb8, 0x0, 0x6, [{{0x2, 0x0, 0xfffffffffffffbff, 0x18, 0xffffffff, 0x4, {0x3, 0x2, 0x7, 0x2, 0x2, 0x9, 0x3, 0x3, 0x8000, 0x4, 0x7f, r4, r6, 0xeb57, 0x81}}, {0x1, 0x80, 0x9, 0x4, '-%!-*$)$-'}}]}, 0xb8) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0xf2, 0x2) [ 2185.613654][T20035] binder: BINDER_SET_CONTEXT_MGR already set [ 2185.643200][T20035] binder: 20020:20035 ioctl 40046207 0 returned -16 [ 2185.656119][T20023] binder: 20020:20023 ioctl 81044804 20000000 returned -22 17:11:07 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x600) 17:11:07 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r2, r1) preadv(r2, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="df000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="df000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_MTU={0x8}]}, 0x4c}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xcc, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x3f}}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xd0c137396bde28b9}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r9, &(0x7f00000017c0), 0xf2, 0x3) 17:11:07 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x2) preadv(r0, &(0x7f00000017c0), 0xf2, 0x2) 17:11:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000000)=0x5) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000140)=0x1d, 0x4) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000400)=[{&(0x7f0000000480)=""/52, 0x34}], 0x1, 0x0) [ 2185.988372][T20043] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2185.999784][T20045] binder: BINDER_SET_CONTEXT_MGR already set [ 2186.017371][T20045] binder: 20044:20045 ioctl 40046207 0 returned -16 17:11:07 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x700) [ 2186.077595][T20043] 8021q: adding VLAN 0 to HW filter on device bond9 [ 2186.098401][T20047] bond9: (slave macvlan2): Opening slave failed [ 2186.114126][T20047] macvlan2: mtu less than device minimum [ 2186.400778][T20085] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 17:11:09 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$TUNGETIFF(r5, 0x800454d2, &(0x7f0000000000)) preadv(r2, &(0x7f00000017c0), 0xf2, 0x0) 17:11:09 executing program 4: time(&(0x7f0000000240)) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x3, 0x200000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x9) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000002400)=""/4096, 0x1000}], 0x1, 0x9) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4083, 0xff3}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/vlan/config\x00') preadv(r4, &(0x7f00000017c0), 0xf2, 0x2) 17:11:09 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="e80d08d268"], 0x0, 0x0, 0x0}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000000)={0x0, 0x1, [{r3}]}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0xf2, 0x3) 17:11:09 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x900) 17:11:09 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x6c, 0x3, [], [@pad1, @enc_lim={0x4, 0x1, 0x2}, @hao={0xc9, 0x10, @remote}]}, 0x20) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000480)=""/52, 0x34}], 0x1, 0x0) 17:11:09 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}}, 0x2000c8c5) r2 = syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r2, 0x100, 0x70bd28, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}}, 0x2000c8c5) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x51}, 0x4000011) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x2) [ 2188.636402][T20114] binder: BINDER_SET_CONTEXT_MGR already set [ 2188.651280][T20114] binder: 20109:20114 ioctl 40046207 0 returned -16 17:11:10 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x40) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000010000003fc7e7803e4e6902c2b5ea4ffee1f4a235ce3deb099e76796a3f3d63bfabd352f4e38e3abef0dbd617ffcf502a56fa7ea62d10fa1da4ff1b27f54f09c1141a17e100b67e0aa97430f991ba43428514d549c5f5a6a4a719b184", @ANYRES32=r1, @ANYBLOB="0000000000f0ffffffffffff0000010000000000"]) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000100)=""/16, 0x10}, {&(0x7f0000000200)=""/229, 0xe5}], 0x2, 0x0) [ 2188.682992][T20114] binder: BINDER_SET_CONTEXT_MGR already set [ 2188.696008][T20114] binder: 20109:20114 ioctl 40046207 0 returned -16 [ 2188.696711][T20113] binder: BINDER_SET_CONTEXT_MGR already set [ 2188.739252][T20113] binder: 20108:20113 ioctl 40046207 0 returned -16 17:11:10 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x2) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00030000b9a36d66ebf69559abb58043914796d6df247c4fc765d354127e860e618dd8f2fabb5a405ace21c0f0d681170b53f307cf134f8b740579885d8704194be3c686106797b832aaf938c789dd71e9cee35151eb0a2121641479030dc5"], 0x0, 0x0, 0x0}) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="040000005f7906782164fe8d2e44a06104000000000000005c4c71b569cded9a087f7bd35d6e4cd0cdb72954fd05c8f800047b41525fa0a1b8239537b2bee3bfce7c5bacccd818b8291c4ac164893bfd35c5e68a9f3e06e0932a"], 0x0, 0x0, 0x0}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000480)={[{0x70d, 0x101, 0x5, 0x0, 0x1, 0x6, 0x82, 0x0, 0x46, 0x58, 0x5, 0x48, 0x100000000}, {0x0, 0x2fb3, 0x8, 0x0, 0x3f, 0x40, 0x6, 0x2f, 0x14, 0x80, 0x8, 0x2, 0x1}, {0x200, 0x7, 0x0, 0x0, 0x8, 0x6, 0x7, 0x9a, 0x1f, 0x1f, 0x6, 0xff, 0x3ff}], 0x101}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x110a}, @ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/26, 0x1a, 0x0, 0x21}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x73c000, 0x0}) connect$ax25(r5, &(0x7f0000000140)={{0x3, @bcast, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) dup2(r4, r3) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000100)={0x2, 0x66}) 17:11:10 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xa00) 17:11:10 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00160900536f6c6c34ee9f1fedb5edbe08dbc19accbb196b275b9c8fe45046be78208460249819bf9416205ca2ad19d94af79700dc1ddbe2e309850309ca0d621ea476fc740790a12e2c5cd508f0a9ba1bfadf3dd3afe995f3530ff5798f94ad75397167e93270e8d0bd8a18476e2901a0d48cf82d8274b62f9d3c643bf9b670494dcc1064d4dff614f3c3007a64a3abdb63bba71cecb689dfc6"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x10001, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x1000}, @ptr={0x70742a85, 0x0, 0x0}, @flat=@handle}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x0, 0x73c000, 0x0}) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0xa8, @fixed={[], 0x10}, 0x1ff, 0x1}, 0xe) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='sessionid\x00') preadv(r5, &(0x7f0000000180), 0x0, 0x8000000000000000) [ 2188.972914][T20134] binder: 20129:20134 unknown command 768 [ 2188.986661][T20126] binder: BINDER_SET_CONTEXT_MGR already set [ 2189.003387][T20114] binder: BINDER_SET_CONTEXT_MGR already set [ 2189.011172][T20126] binder: 20109:20126 ioctl 40046207 0 returned -16 [ 2189.019574][T20134] binder: 20129:20134 ioctl c0306201 20000200 returned -22 [ 2189.021182][T20114] binder: 20109:20114 ioctl 40046207 0 returned -16 17:11:10 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x2) [ 2189.083578][T20144] binder: BINDER_SET_CONTEXT_MGR already set [ 2189.097179][T20144] binder: 20136:20144 ioctl 40046207 0 returned -16 17:11:10 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000480)=""/52, 0x34}], 0x1, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 17:11:10 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="001e0000"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x73c000, 0x0}) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x0) 17:11:10 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r2, 0x0) r3 = getuid() setresuid(0xee01, r2, r3) preadv(r0, &(0x7f00000017c0), 0xf2, 0x3) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000000)=0x2) 17:11:10 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="f3620401"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000000)=""/23, 0x17}, &(0x7f0000000040), 0x4}, 0x20) preadv(r0, &(0x7f00000017c0), 0xf2, 0x2) 17:11:10 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4108, 0x100c}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$MEDIA_REQUEST_IOC_QUEUE(r5, 0x7c80, 0x0) [ 2189.284194][T20155] binder: BINDER_SET_CONTEXT_MGR already set [ 2189.323184][T20155] binder: 20153:20155 ioctl 40046207 0 returned -16 17:11:10 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xb00) [ 2189.366112][T20165] binder: BINDER_SET_CONTEXT_MGR already set [ 2189.378920][T20165] binder: 20154:20165 ioctl 40046207 0 returned -16 17:11:10 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$VIDIOC_G_INPUT(r2, 0x80045626, &(0x7f0000000000)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x2) 17:11:11 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1800) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) preadv(r0, &(0x7f00000017c0), 0xf2, 0x3) 17:11:11 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xc00) 17:11:11 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000480)=""/52, 0x34}], 0x1, 0x0) [ 2189.813106][T20181] binder: BINDER_SET_CONTEXT_MGR already set [ 2189.834698][T20181] binder: 20179:20181 ioctl 40046207 0 returned -16 17:11:11 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$TCSETX(0xffffffffffffffff, 0x5433, &(0x7f0000000000)={0xff, 0xe4c3, [0x9, 0x7, 0x2, 0x3, 0x4], 0x101}) preadv(r0, &(0x7f00000017c0), 0xf2, 0x2) 17:11:11 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xd00) 17:11:11 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:11:13 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = gettid() connect$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x1, 0x1, 0x7, 0x1, 0x9, "82d69c34d9e0cd44f7f157678d99bce50f095df01f2efa108b4c0a6441c125c939e652a6b689ae1b74276ded7ca5437a21798d84e656a3876a519383b96471", 0x7}, 0x60) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x39) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x0) 17:11:13 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05d70000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0xf8, 0x1, 0x2, 0xe1, 0x0, 0x8001, 0x2, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4ebfb8ea, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x40000, 0x4, 0x800, 0x4, 0x0, 0x7, 0x7f}, 0xffffffffffffffff, 0xb, r2, 0x6) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x3) 17:11:13 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x141c80, 0x0) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000000c0)=0x677) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04f8acc8"], 0x0, 0x0, 0x0}) dup2(r1, r0) write$binfmt_elf64(r1, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0xff, 0x56, 0x44, 0x7, 0x3, 0x3, 0x6, 0x3b7, 0x40, 0x34a, 0x0, 0x7, 0x38, 0x2, 0x1000, 0x8, 0x4}, [{0x3, 0xfffffffc, 0x1, 0x5, 0x79, 0x2, 0x7, 0x3f}], "d0e5758b3357266a6693b5af56dd19919d229967e5bf1af8081816e96bbd67232a24c8c01e47671f12dbd7341180306de9764e42f19f633162d7bdf3e0fa06ba3c31ca31f555c9481b07f31dda611be7f21334f5aa233b8d9e31ff7d3554ce60818e6924ac2caebf50dc7ad4ddcf61afca78e4147cb416c42f12cb0c1630dea41e9e9264e83edb63f2455c819845792372489279528dd49d1f6c7a688464d27f8d1634dd9f8f7daac270967f8cc05fd0c0dbc7139e8ca1d0bbb22953b9301ccd97ed158fc98577f603b9e6ed89bee0aa96c2ea7f801b5e0c9d588d7eeb40b79fcf78e269c8e8a6f43f7c337f087a", [[], []]}, 0x366) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000400)=[{&(0x7f0000000480)=""/52, 0x34}], 0x1, 0x0) 17:11:13 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x80000001) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:11:13 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xe00) 17:11:13 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(r0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000140)=""/168) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000240)=""/2, 0x2}, {&(0x7f0000000380)=""/197, 0xc5}, {&(0x7f0000000480)=""/50, 0x32}, {&(0x7f00000004c0)=""/31, 0x1f}, {&(0x7f0000000580)=""/71, 0x47}, {&(0x7f0000000600)=""/173, 0xad}, {&(0x7f00000006c0)=""/253, 0xfd}, {&(0x7f00000007c0)=""/96, 0x60}, {&(0x7f0000000840)=""/73, 0x49}], 0x9, 0x800000000) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x2) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x200, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0), 0x0) sendto$inet(r5, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0xe, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000100)=0x4) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000040)={r6, 0x3ff}, 0x8) [ 2192.426672][T20210] binder: BINDER_SET_CONTEXT_MGR already set [ 2192.444881][T20214] binder: BINDER_SET_CONTEXT_MGR already set [ 2192.450965][T20210] binder: 20205:20210 ioctl 40046207 0 returned -16 17:11:13 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x5, 0x100000000, 0x1, 0xe52, 0x8, 0x7fff}) socket(0x21, 0x9, 0x7) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0xf2, 0x0) 17:11:13 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x1100) [ 2192.491243][T20214] binder: 20204:20214 ioctl 40046207 0 returned -16 [ 2192.494006][T20210] binder: 20205:20210 unknown command -928188412 [ 2192.513903][T20210] binder: 20205:20210 ioctl c0306201 20000200 returned -22 17:11:13 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000000)='oom_adj\x00') preadv(r4, &(0x7f00000017c0), 0xf2, 0x2) 17:11:14 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000000)) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0xf2, 0x2) [ 2192.746251][T20225] binder: 20223:20225 ioctl c0502100 200000c0 returned -22 [ 2192.774777][T20214] binder: BINDER_SET_CONTEXT_MGR already set [ 2192.787884][T20214] binder: 20204:20214 ioctl 40046207 0 returned -16 17:11:14 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0), 0x0) sendto$inet(r4, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0xe, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000040)={r5, 0x7}, 0x8) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0xf2, 0x2) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x7086d87961d36eab, 0x8, [@multicast, @local, @local, @multicast, @empty, @dev={[], 0x1f}, @link_local, @broadcast]}) [ 2192.896885][T20210] binder: BINDER_SET_CONTEXT_MGR already set [ 2192.906974][T20210] binder: 20205:20210 ioctl 40046207 0 returned -16 17:11:14 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)=0x6) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="0b01ff01270000001d030000030000006c00000000000100000000000000000053a08895b05c9732685457ff31a7fad8b8eaeb05c0517baa218bae2cf6c4ed22f3c5e9626b08e8f56bdfacd685d3715c5acecba5aa0d4da29d74067d3488af8bda00251d365d92a4589be45eb4b408bd902934d6b73bc3a3f5c6d3322b283aa2cea4f337a5975bfcd2c71644b3657b588aa3cb6582a8acaa06ca556eaab3c55ffecbf74e7fd95f5594098e56383a0aeb1cc5aefadaa8f1b0ce473033c6ea8fa9547ce9d95f98a5a1ca6f98685c2e496aaaae6ad1082bdddec3f8654b640e302e7620caaeb970543f0c8e25d8536002366718033d1455a3b83c88ede34a1f48c827a4db000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d7770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a46f3c1ee13aaaaf131094e39e52711be0d21989e4006bf0d3bfc647a69c516e659b7fcfdcad45"], 0x203) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x3) 17:11:14 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x1200) 17:11:14 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000480)=""/52, 0x34}], 0x1, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_MTU={0x8}]}, 0x4c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg2\x00', r1}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="df000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_MTU={0x8}]}, 0x4c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}, @IFLA_MTU={0x8}]}, 0x4c}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x398, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x3f}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x43}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x4}}, {{0x8, 0x1, r8}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x80}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7b364a61}}}]}}, {{0x8, 0x1, r12}, {0x4}}]}, 0x398}, 0x1, 0x0, 0x0, 0x40001}, 0x48044) [ 2193.373270][T20253] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 17:11:14 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x80) ioctl$LOOP_CLR_FD(r0, 0x4c01) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r5, r4) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000100)=""/166) preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x8) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000022c0)=[{&(0x7f0000003440)=""/4109, 0x100d}, {&(0x7f0000001100)=""/244, 0xf4}, {&(0x7f0000002340)=""/92, 0x5c}, {&(0x7f0000001200)=""/58, 0x3a}, {&(0x7f0000001240)=""/71, 0x47}], 0x5, 0x7fff) [ 2193.501209][T20253] 8021q: adding VLAN 0 to HW filter on device bond11 17:11:14 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630240"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x28, r3, 0xf20aaac1f6a2385f, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x28}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, r3, 0x60a, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffffffa}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffff7}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x81}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x20, 0xcc24, 0x1]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x200}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @remote}}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x3, 0x55, 0x6]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0xc040) r4 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x3ff) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x8440, 0x0) ioctl$CAPI_GET_FLAGS(r6, 0x80044323, &(0x7f0000000040)) preadv(r5, &(0x7f00000017c0), 0xf2, 0x2) 17:11:14 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x3) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001140)='/dev/rfkill\x00', 0x400400, 0x0) ioctl$HIDIOCGUSAGES(r3, 0xd01c4813, &(0x7f0000000100)={{0x2, 0x100, 0x0, 0x9, 0xff, 0x9}, 0x2c8, [0x0, 0x1, 0x3, 0x2000, 0x2, 0x0, 0x4, 0x7fff, 0x4, 0x1, 0x8, 0xff, 0x800, 0x4c0b, 0x101, 0x5, 0x100, 0x4, 0x28527379, 0xda66, 0x38, 0x4, 0x7, 0x3, 0xad, 0x7fff, 0x8, 0x80, 0x5, 0x7, 0x4, 0x5, 0x7fb41041, 0xff, 0x0, 0x7, 0xffff, 0x8, 0xfff, 0x0, 0x800, 0x101, 0x3, 0x0, 0x2, 0x3, 0x3, 0x5, 0x5, 0x1, 0x6, 0x8d, 0x9, 0xdc0d, 0x81, 0x98d, 0x1f, 0x45, 0xa8e1, 0x2, 0x7fff, 0x3, 0x3ff, 0x80000000, 0x1000, 0xfffffffd, 0x4, 0x7fffffff, 0x7, 0x2, 0x7fff, 0x800, 0x0, 0x3, 0x1, 0x0, 0x80000000, 0x0, 0x4, 0x1, 0x100, 0x8, 0x1, 0x1, 0x4, 0xffffff8e, 0x6, 0x6, 0x7ff, 0x0, 0x7fffffff, 0x9, 0xfffffffe, 0x8c3, 0x7, 0x1, 0x8, 0x3, 0x40, 0x80, 0xfffffff8, 0x20, 0xfffffffc, 0x1f, 0x3, 0x1, 0x2, 0x200, 0xd59a, 0x1ff, 0x8, 0x2, 0x8, 0x0, 0x2, 0x4, 0x9, 0x9, 0x800, 0x70, 0x3, 0x5220, 0x793, 0xce, 0x0, 0xdd, 0xffffffff, 0x10001, 0x2, 0x6, 0x1, 0x80, 0x80, 0x320, 0x7, 0x1bd68a3f, 0x8, 0xb2, 0x6, 0x5, 0x3, 0xfffffffc, 0x5, 0x2, 0xfdea, 0xffff670a, 0xdb9, 0x1, 0x8, 0x7fffffff, 0x1, 0x800, 0x3, 0x6, 0xfffffff7, 0x5, 0x1, 0x4eb, 0x7, 0x7ff, 0x9, 0x80000001, 0x3, 0x800, 0x4, 0x5, 0x8, 0x9, 0x8, 0xfffffff7, 0x1, 0x1000, 0x2, 0xdd25, 0x0, 0xffff0000, 0xc59, 0x9, 0x4, 0x5, 0x80000001, 0x400, 0x4c2, 0xd3d, 0x8, 0xa4, 0x1, 0x8, 0x3de, 0x7, 0xe959, 0x80000001, 0xb428, 0x4cf, 0x6, 0x3, 0x68f, 0x6, 0x8, 0x1000, 0xffff, 0x2, 0x3, 0x73d7, 0x6, 0x41, 0x1000, 0xffff, 0xafdb, 0x5, 0xffffffff, 0x4, 0x4, 0x6, 0x6a, 0x57b, 0x5, 0x7, 0x2, 0x8, 0x40, 0x7fff, 0xffffff81, 0x2, 0x0, 0xfffff001, 0x3, 0x5, 0x9, 0x0, 0x0, 0x5, 0xffffffe0, 0xfffff6c0, 0x10000, 0x4, 0x9, 0x0, 0xfffffff9, 0x7, 0x20, 0xc890, 0x4, 0x4, 0x40, 0x4, 0x8, 0x1a19, 0x5, 0x10000, 0xb3, 0x9, 0xa000, 0x5, 0x0, 0x3f, 0x200, 0x3, 0xfffffff7, 0x7, 0x8001, 0x7, 0x20, 0x0, 0x200, 0xf5092000, 0x4, 0xef, 0x8001, 0x3, 0x1000, 0x0, 0x26, 0x8, 0x3ff, 0x67, 0xffc, 0x101, 0x2, 0x2, 0x2, 0x9, 0x3, 0x7, 0xa4f1, 0x2, 0x200, 0x7, 0x80, 0x54b, 0x0, 0x7, 0x6, 0x8, 0x2, 0x822, 0x7ff, 0x5, 0x0, 0x7ff, 0x63, 0xf1, 0x1, 0x48, 0x2, 0x5, 0x9d2, 0x1f, 0x2, 0x7, 0xf1f9, 0x9f47, 0x5dbd, 0x3, 0x8956, 0x7, 0x4, 0xffffffff, 0x5, 0x8, 0x4, 0x48a6e179, 0x5, 0x3f, 0x8, 0x9, 0x1, 0x6, 0x8001, 0x8, 0x6, 0x1, 0x7f, 0x8, 0x7, 0x7ff, 0x9, 0xffff, 0x1, 0x2, 0x2, 0x7f, 0x4be, 0x2, 0x2f, 0x7, 0x80000000, 0x7, 0x7, 0xffffffff, 0x2, 0x29, 0x4, 0x3, 0xffff, 0x1, 0x1f, 0x7, 0x9, 0x1, 0x7ff, 0x10001, 0x2, 0x6, 0x7, 0x3, 0xffff, 0x1, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x1, 0xef1b, 0x20, 0x8, 0x1f, 0x96, 0x1, 0x2, 0x10001, 0x8000, 0x9, 0x6, 0x8, 0x5, 0x80000000, 0x6, 0x40, 0xffff, 0x64d, 0x8, 0x4, 0x1473, 0x8, 0x5, 0xffffffff, 0x4, 0xffff, 0x9f26, 0x8, 0x5, 0xbb, 0x2, 0xf47, 0x7, 0x3, 0x9, 0x20a, 0x100, 0x3ff, 0x1f, 0x80000001, 0xaf9, 0xfffffff9, 0x6f9, 0x0, 0x9, 0x0, 0x0, 0x9, 0x3, 0x169, 0x10001, 0x401, 0x0, 0x9, 0x0, 0xfff, 0x2, 0x4, 0x3, 0x0, 0x4cff, 0x1, 0x0, 0x1, 0x3, 0x7, 0x2, 0x2, 0x9, 0x80000000, 0xffff, 0xffff8001, 0x4a32a35d, 0x9, 0x2, 0x0, 0x18000000, 0x7, 0x7, 0x3, 0x6, 0x3, 0x0, 0x3c1d, 0x0, 0x0, 0x6b7, 0x136c, 0x11, 0x4, 0xffffffff, 0x59d4, 0x10000, 0x7, 0x4, 0x8000, 0x80000000, 0x80, 0x7, 0x1ff, 0x3, 0xfffffff7, 0x8, 0xcfc, 0x200, 0x2, 0x8, 0x101, 0x4, 0x4, 0x7, 0x1000, 0xe646, 0x1, 0xfff, 0x25, 0x8, 0x6, 0x644, 0x4ad, 0x62, 0x7, 0x81, 0x20, 0xffffffff, 0x200, 0xef1, 0x423d, 0x0, 0xfffffe00, 0x800, 0x0, 0x6, 0x8, 0x2, 0x9, 0x40, 0x7, 0x800, 0x8, 0x0, 0x1, 0xfffff774, 0x5, 0x3f, 0xfff, 0x8000, 0x8, 0x0, 0x9, 0x100, 0x5, 0x1, 0x6, 0x4, 0x7e, 0x5, 0x401, 0x1ff, 0x6, 0xff, 0x0, 0x2, 0x731465c6, 0x4, 0x5, 0x20, 0x1f, 0x9, 0x2, 0x7, 0x2, 0x1f37, 0x28cb06f2, 0xa140, 0x7f, 0x7f, 0x9, 0x7fff, 0x358, 0xfffffffe, 0x5, 0x9, 0x2, 0x7, 0x8, 0x5, 0x1, 0x3, 0x5fb, 0x401, 0x1000, 0x7, 0xffff, 0xfc, 0x9, 0x9, 0xac1d, 0x3, 0x93, 0x6, 0x1, 0x9, 0x8, 0x3c2b, 0x9, 0x80, 0x889, 0x11, 0xff, 0x5, 0xffff9a7f, 0x28, 0x9, 0x1, 0xffffffe1, 0x4, 0x6, 0x8, 0x101, 0xfffeffff, 0x0, 0x7aa, 0x0, 0x53880, 0x0, 0x7, 0x414, 0x7, 0x6, 0x7, 0xf7, 0xba84, 0x1, 0x94b, 0x8, 0x4, 0xf4e9a27, 0x80000001, 0x2, 0x8b, 0x0, 0x4, 0x10000, 0x6, 0x0, 0x3, 0x200, 0x4, 0x2, 0x1e, 0xbf4c, 0x6, 0x2, 0x35, 0x6, 0x6, 0x101, 0x7, 0x10000, 0x0, 0x6, 0x3ff, 0xacf4, 0x3, 0x7a5, 0x3ff, 0x40, 0x7f, 0x6, 0x6, 0x7, 0xbe, 0x89c2, 0x7177, 0xf6a, 0x1f, 0x0, 0xd954, 0x400, 0x1, 0x5240, 0x8001, 0x7, 0xf01, 0x1ff, 0x0, 0xffff, 0x8, 0x239, 0x3, 0x1ff, 0x9, 0x0, 0x3, 0x2, 0x7f, 0x3, 0x1ff, 0x7ff, 0xcfa, 0x5, 0x4b, 0x0, 0x89a8, 0x4, 0x40, 0xff00000, 0x8, 0x1, 0xffff, 0x80, 0x3, 0x100, 0x5, 0x80000001, 0x8, 0x2, 0x8, 0x20000, 0x6, 0x6ce3, 0xa858, 0x7, 0xb9, 0x2, 0x1, 0x9, 0x9, 0x7487, 0x3, 0x2a59, 0x1, 0x40, 0x4c2, 0x4, 0x9, 0x0, 0xfff, 0x81, 0xff, 0x2, 0x5, 0xffff, 0x3, 0xb46b, 0x80000000, 0x1ff, 0x6, 0x4, 0x3, 0x9, 0x0, 0x0, 0x20, 0x40, 0x87d, 0x4, 0x1f, 0x0, 0xdb, 0x8, 0x9, 0x7, 0x923d, 0xffff, 0x7fff, 0x8001, 0x3, 0x82c8, 0x4, 0x8, 0x6, 0x80000001, 0x3, 0x1ff, 0xabd, 0x1f, 0x1000, 0x400, 0x6, 0x5006, 0x3, 0x4, 0xe28, 0x1, 0xff, 0x1000, 0x83, 0x0, 0x2, 0x7, 0x1, 0x4, 0x2, 0x2, 0x10000, 0x4, 0x7ff, 0x846c, 0x3, 0x1f, 0x7ff, 0xffffffff, 0xd5ea, 0x1, 0x3f, 0x7fff, 0xb6, 0x6, 0x69, 0x80000000, 0x2, 0x80000001, 0xfffffe00, 0x3f, 0x29, 0xc6, 0x15, 0x3, 0xeac, 0x80000001, 0x80a5, 0x1, 0x3, 0x99d, 0x200, 0x6, 0x3f, 0xaa39, 0x8000, 0x8, 0x6, 0x3, 0x3, 0x4347, 0x7fff, 0x7, 0x7f, 0x4, 0x40, 0x4d9270f0, 0x9, 0x2, 0x92, 0x0, 0x1, 0x2, 0x100, 0x1, 0xffff, 0x0, 0xa7, 0xfffffff7, 0x2, 0xda, 0x5, 0x551, 0x5, 0x1, 0x400, 0x0, 0x9, 0xeae5, 0x80000001, 0x8000, 0x3f, 0x0, 0x1ff, 0x6, 0x40, 0x7fff, 0x5, 0x1, 0x3f35, 0x3ff, 0x2, 0x1, 0xce, 0x3ff, 0x9, 0x10000, 0x5, 0x7d2, 0x7, 0x33c, 0x8, 0x1000, 0xffff, 0x2e9e, 0xb2, 0xcf, 0x7, 0x9, 0x7, 0x4, 0x4, 0x6, 0xc3b, 0x1, 0x7, 0x40000000, 0x0, 0x0, 0x2, 0x7, 0x1, 0xfffffffb, 0xfffffc00, 0x9, 0x3, 0x9, 0x0, 0x5, 0x0, 0x20, 0x8, 0xac, 0x5, 0x3, 0x0, 0x0, 0x7f, 0xcee7, 0x7, 0x800, 0x0, 0xaa2, 0x3ff, 0x6, 0x6, 0x2, 0x1ff, 0x76bb, 0x8, 0x9, 0x7, 0xfff, 0x401, 0x7, 0x6, 0x0, 0x5, 0x1, 0xfffffc00, 0x5, 0x0, 0x400, 0x275, 0x4e31, 0x20, 0x4, 0x5, 0x1000, 0x4, 0xff, 0x80, 0x3ff, 0x2, 0x0, 0x1, 0x8001, 0xa1b, 0x1, 0x2fa2, 0x3, 0x1, 0x8, 0x4b52, 0x6, 0x4, 0x7, 0x4, 0xceb2, 0x8, 0x38, 0x2, 0x1000, 0x1, 0x1, 0x0, 0x1f, 0xffffffff, 0xfff, 0x3, 0x200, 0x777cb0f1, 0x5, 0x9, 0x6, 0x1, 0x8000, 0x2, 0x80000001, 0x4, 0x0, 0xee5a, 0x3, 0x6, 0xe4d6, 0x200, 0xe9c, 0x5e3, 0x81, 0xc72, 0xf77, 0x400, 0x5, 0x3, 0x0, 0x9, 0xffffff81, 0x0, 0xfffffff9, 0x80, 0x40, 0x9, 0x6f6, 0x2, 0x81, 0xd3c0, 0xc9ec, 0xb0, 0x20, 0x66aa, 0xfffffffe, 0x2, 0x6, 0x1, 0x2, 0x3, 0x6, 0x0, 0x590, 0x8, 0x8, 0x639, 0x8, 0x6, 0xff, 0x9, 0xf1f1, 0x800, 0x0, 0x8, 0x1, 0x85b, 0x5, 0x4]}) [ 2193.586032][T20257] bond11: (slave macvlan2): Opening slave failed 17:11:15 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x2500) [ 2193.641675][T20257] macvlan2: mtu less than device minimum [ 2193.753727][T20292] bond11: (slave macvlan2): Opening slave failed [ 2193.781738][T20292] macvlan2: mtu less than device minimum [ 2193.915513][T20253] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2193.948133][T20292] bond11: (slave macvlan2): Opening slave failed [ 2193.985361][T20292] macvlan2: mtu less than device minimum [ 2194.154191][T20305] binder: BINDER_SET_CONTEXT_MGR already set [ 2194.161788][T20305] binder: 20303:20305 ioctl 40046207 0 returned -16 [ 2194.215486][T20327] binder: BINDER_SET_CONTEXT_MGR already set [ 2194.230296][T20314] binder: 20303:20314 ioctl d01c4813 20000100 returned -22 [ 2194.241296][T20305] binder: 20303:20305 ioctl c0306201 20000280 returned -14 [ 2194.289020][T20327] binder: 20303:20327 ioctl 40046207 0 returned -16 17:11:17 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x800, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x0) 17:11:17 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) bind$nfc_llcp(r2, &(0x7f0000000000)={0x27, 0x1, 0x2, 0x7, 0x4c, 0xf8, "b530c2bd6b2d2385683c5ca0dadcd4d78999ae7f6ed534f6476adf3f33030ca486ddf3c343349c28fcf0aea64ceee3a813f8035676eacf8966e3abe6c0a8ca", 0x1}, 0x60) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x2) 17:11:17 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0xf2, 0x2) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0xe1, 0x80, 0x1f}, 0xc) 17:11:17 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000480)=""/52, 0x34}], 0x1, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$KVM_S390_VCPU_FAULT(r4, 0x4008ae52, &(0x7f0000000240)=0x3) sendto$netrom(r0, &(0x7f0000000140)="4a7d73067420230caaa443dcb523512370b8e2ce2a88dbf1875acdd3b19f72d259f01d46d1b331c63a8e7f9e003ec5c550cd4e6b9d2410048fb935931a7366cd1a34377ee87644cd433eafdf8dcd7cb030809ef6aeae190b1c4fe08756276a7733c847458fc607abc58b2f322dd58eff77aa4a1f7b35dbe340c3262924990e103e3d53f9a30f761bca1c6ff19562e4fd38ca", 0x92, 0x40, 0x0, 0x0) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f0000000000)={0x1f, 0x22c}) 17:11:17 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x3f00) 17:11:17 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="f3620401"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000000)=""/23, 0x17}, &(0x7f0000000040), 0x4}, 0x20) preadv(r0, &(0x7f00000017c0), 0xf2, 0x2) [ 2196.145107][T20345] binder: BINDER_SET_CONTEXT_MGR already set [ 2196.164778][T20345] binder: 20340:20345 ioctl 40046207 0 returned -16 17:11:17 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x4000) [ 2196.241960][T20345] binder: BINDER_SET_CONTEXT_MGR already set [ 2196.257419][T20345] binder: 20340:20345 ioctl 40046207 0 returned -16 17:11:17 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0xf2, 0x2) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x408800, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000040), &(0x7f0000000100)=0x4) readahead(r0, 0x8, 0x100) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) write$dsp(r5, &(0x7f0000000180)="2ae34c28572b4cfb337590240b403a49feb9895d224313e1646632943da34b035db6", 0x22) [ 2196.287557][T20354] binder: 20340:20354 unknown command 17064691 [ 2196.294483][T20354] binder: 20340:20354 ioctl c0306201 20000280 returned -22 17:11:17 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04638440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x2) 17:11:17 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000480)=""/52, 0x34}], 0x1, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r2, r1) signalfd4(r2, &(0x7f0000000000)={[0x5]}, 0x8, 0x800) [ 2196.536410][T20362] binder: 20359:20362 unknown command 0 [ 2196.538405][T20365] binder: 20364:20365 unknown command 1082417924 [ 2196.551100][T20365] binder: 20364:20365 ioctl c0306201 20000200 returned -22 [ 2196.564316][T20362] binder: 20359:20362 ioctl c0306201 20000280 returned -22 17:11:17 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x4800) 17:11:18 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) preadv(r2, &(0x7f00000023c0)=[{&(0x7f0000002400)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x2) [ 2196.898991][T20381] binder: BINDER_SET_CONTEXT_MGR already set [ 2196.906247][T20373] binder: BINDER_SET_CONTEXT_MGR already set [ 2196.917081][T20373] binder: 20368:20373 ioctl 40046207 0 returned -16 [ 2196.947629][T20381] binder: 20376:20381 ioctl 40046207 0 returned -16 17:11:22 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x0) 17:11:22 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x4c00) 17:11:22 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x402801, 0x0) write$FUSE_GETXATTR(r3, &(0x7f0000000080)={0x18, 0x0, 0x3, {0x8be}}, 0x18) preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:11:22 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x2) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) 17:11:22 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) setsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f0000000140), 0x4) r5 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) setsockopt$netrom_NETROM_IDLE(r5, 0x103, 0x7, &(0x7f0000000000)=0x9, 0x4) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000480)=""/52, 0x34}], 0x1, 0x0) 17:11:22 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="df000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_MTU={0x8}]}, 0x4c}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="df000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=@ipv4_delroute={0x144, 0x19, 0x300, 0x70bd2b, 0x25dfdbfc, {0x2, 0x14, 0x20, 0xf7, 0xfe, 0x2, 0xfd, 0xb}, [@RTA_METRICS={0xdb, 0x8, 0x0, 0x1, "74fa0ab605eaa0e47c373dc4c2a5ed318b3537b3723dfb0a3a200822a875b6df294985b50fb7eddf8c098158aee7d4b65672404b896061df9073a86091cbe57fd26e8db07d3a30f9affb6f42b7d41c7d9e0115cbf011b4cc5447b6a9ddd8009c9f2781030a033e2e9c52fea0c05f9917a547da729af4cdaa0fa479e524340b416027056db73ade75a724a740ed9bbc1f695c55381eb3fca9019a6335e4dc6215746b57a8d2ce825b0b9d1befefa44955c9a09896c592ea2ec3539e7e9a903877574a835084c060fc64b35c8a0ef219285a38c7c09b603f"}, @RTA_IIF={0x8, 0x3, r1}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x1, 0xff, r4}}, @RTA_MARK={0x8, 0x10, 0x1}, @RTA_UID={0x8, 0x19, r5}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_UID={0x8, 0x19, 0xee01}, @RTA_IIF={0x8, 0x3, r8}, @RTA_FLOW={0x8, 0xb, 0x6}, @RTA_SRC={0x8, 0x2, @private=0xa010102}]}, 0x144}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r9 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r10, &(0x7f00000017c0), 0xf2, 0x2) [ 2201.324573][T20397] binder: BINDER_SET_CONTEXT_MGR already set [ 2201.336817][T20397] binder: 20392:20397 ioctl 40046207 0 returned -16 [ 2201.340041][T20400] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2201.394593][T20397] binder: BINDER_SET_CONTEXT_MGR already set [ 2201.402524][T20402] binder: BINDER_SET_CONTEXT_MGR already set [ 2201.420145][T20397] binder: 20392:20397 ioctl 40046207 0 returned -16 [ 2201.436218][T20402] binder: 20399:20402 ioctl 40046207 0 returned -16 [ 2201.437381][T20400] 8021q: adding VLAN 0 to HW filter on device bond11 17:11:22 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x402801, 0x0) write$FUSE_GETXATTR(r3, &(0x7f0000000080)={0x18, 0x0, 0x3, {0x8be}}, 0x18) preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:11:22 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x6800) 17:11:23 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) r3 = openat(r2, &(0x7f0000000000)='./file0\x00', 0x701000, 0x6296bbb9476ba55e) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000140)=0x8, 0x4) ioctl$CAPI_GET_MANUFACTURER(r3, 0xc0044306, &(0x7f0000000040)=0x2) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0xf2, 0x2) 17:11:23 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = epoll_create1(0x80000) ftruncate(r2, 0x4) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="05630440fc093efd376d4d9bd50629eb93955b065445020b61159ae81e4c263ecd17e32246d2a7d14c51f4146525d7d2b1e780561f41516f7e85ab25ca07e2905ab0bc5a6090929b4adc7f387c586752ab1ecdb22f42a41762750440701417ab7ee77e04f00fe428875b62e986097e7112a5760a25fe23cf21913d"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$RTC_IRQP_READ(r6, 0x8008700b, &(0x7f0000000080)) preadv(r3, &(0x7f00000017c0), 0xf2, 0x2) 17:11:23 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x9) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) sendto$llc(r3, &(0x7f0000000380)="2aac834327", 0x5, 0x40000800, &(0x7f00000003c0)={0x1a, 0x30f, 0x6, 0xb0, 0xdd, 0x0, @dev={[], 0x37}}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) recvmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/62, 0x3e}, {&(0x7f0000000100)=""/42, 0x2a}, {&(0x7f0000000140)=""/44, 0x2c}], 0x3, &(0x7f00000001c0)=""/169, 0xa9}, 0x40002140) setsockopt$inet6_buf(r5, 0x29, 0x32, &(0x7f00000002c0)="854b8b6de65a63228e5d8121bad815077b8e561c9a6ef79a63e3cc4fca56fa4e0cce041550e962eb36068dda533972f94771b6270e34", 0x36) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000480)=""/52, 0x34}], 0x1, 0x0) 17:11:23 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) connect$ax25(r0, &(0x7f0000000180)={{0x3, @bcast}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default]}, 0x48) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000002400)=""/4098, 0x1002}], 0x5, 0x2) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) write$P9_RMKNOD(r5, &(0x7f0000000000)={0x14, 0x13, 0x2, {0x2, 0x1, 0x7}}, 0x14) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/207, 0xcf) preadv(r6, &(0x7f00000017c0), 0xf2, 0x2) 17:11:25 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x6c00) 17:11:25 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r3, r2) preadv(r3, &(0x7f0000000100), 0x0, 0x2) 17:11:25 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x402801, 0x0) write$FUSE_GETXATTR(r3, &(0x7f0000000080)={0x18, 0x0, 0x3, {0x8be}}, 0x18) preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:11:25 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000480)=""/52, 0x34}], 0x1, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000780)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000000)=0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) write$P9_RRENAME(r5, &(0x7f0000000440)={0x7, 0x15, 0x1}, 0x7) process_vm_writev(r4, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/158, 0x9e}, {&(0x7f0000000180)=""/116, 0x74}, {&(0x7f0000000200)=""/186, 0xba}, {&(0x7f0000000040)=""/44, 0x2c}, {&(0x7f00000002c0)=""/255, 0xff}], 0x5, &(0x7f00000003c0)=[{&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/149, 0x95}, {&(0x7f0000000700)=""/89, 0x59}], 0x3, 0x0) 17:11:25 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="e27927b5c4e262d624f675cc18321c95900440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') sendmsg$GTP_CMD_GETPDP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x50, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000000}, 0x40004) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0xf2, 0x2) 17:11:25 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000000)={0x0, 0x0, {0x2, 0xfffffffb, 0x8001, 0x7}}) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x0) [ 2204.323039][T20479] binder: BINDER_SET_CONTEXT_MGR already set [ 2204.331205][T20479] binder: 20473:20479 ioctl 40046207 0 returned -16 [ 2204.373489][T20485] binder: BINDER_SET_CONTEXT_MGR already set [ 2204.411790][T20485] binder: 20478:20485 ioctl 40046207 0 returned -16 17:11:25 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x7400) 17:11:25 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x402801, 0x0) preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) [ 2204.558263][T20487] binder: BINDER_SET_CONTEXT_MGR already set [ 2204.558928][T20479] binder: BINDER_SET_CONTEXT_MGR already set [ 2204.564946][T20487] binder: 20472:20487 ioctl 40046207 0 returned -16 [ 2204.636408][T20479] binder: 20473:20479 ioctl 40046207 0 returned -16 17:11:26 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1, 0x0) 17:11:26 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x2) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xb, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r7 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r7) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x95}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x2}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r4, @ANYRES16=r6, @ANYBLOB="000827bd7000fbdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x40046}, 0x4000) 17:11:26 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:11:26 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x7a00) 17:11:26 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x100000) 17:11:26 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/52, 0x34}, {&(0x7f0000000000)=""/70, 0x46}], 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x220000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x400, 0x70bd27, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x4, 0x9, 0x0, 0x7f}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4c10}, 0x8000) 17:11:26 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x1}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x408100, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="df000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="df726f6e64000000000000000000000000000000074fc56ea5f5c69ad368625e84f3c4c30e0c4819d98bb5f091a37caebc7738c791fbb13f79b0fea222e7120de46b066fefff555f6692674624e28c5b9085e8e4fe9e8574b6b59f9e408c19d04125577b60308404d90f7b79d9b5d86d6b077528553b0fad91e4379c844af627f3c7d005000000aedadd36ec2f1b20d4c3f797272570910c9f72c0f335b1cc79154169f3973f7a4618023dfe6c6a587881bd9441eaf21c5225c4489b8d0635baa7"], 0x3c}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa4, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x4}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004840) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r2, r1) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000040)={0x2, 0x8, 0x652, 0xfbfbfbfb}) preadv(r2, &(0x7f00000017c0), 0x0, 0xff) 17:11:26 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0xf2, 0x2) [ 2205.539829][T20525] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 17:11:26 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0xf2, 0x2) [ 2205.672512][T20532] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 17:11:31 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r3, r2) r4 = dup3(r2, r0, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1}) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x0) 17:11:31 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xe0ff7f) 17:11:31 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0xf2, 0x2) 17:11:31 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000580)=ANY=[@ANYRES16, @ANYRES32=r2, @ANYBLOB="58afee041a267e376369e43d0b695e467ffcd777db61bd2f92289c3d872381e5adbed2987a86ffcd37e318c9aad41caf1d3d1ef7437b04b5a6b3b1bcac3d7c2a40bcc96eb41bd6ecd93f", @ANYRESHEX, @ANYBLOB="590f45742f7ac52e1dcd2d0e058b51e3f3d8a771ac3c70cb0d58a73d3f6d23ad84725037d9179211eac4408a0293c477d4cb4cefd3c49110b0d803b16549369b4bb3c4877139afd83d9ccfddbe16a00104495ffa3ce1", @ANYRES32], 0x57, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:systemd_notify_exec_t:s0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000240), 0x4) preadv(r4, &(0x7f00000017c0), 0xf2, 0x2) 17:11:31 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000480)=""/52, 0x34}], 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x0, 0x0, 0x3, 0x1, 0xfffb, 0xfffc, 0x400000000}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r2, r3, &(0x7f00000001c0)=0x202, 0x4000000000dc) r4 = dup2(r2, 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000003800)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000037c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="2a4848e5dbdf25d60400000014f9390e72610002e80000000000"], 0x28}}, 0x4004800) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r5, 0x8, 0x70bd2d, 0x1, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x448c0) 17:11:31 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x101) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x0) 17:11:31 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) [ 2209.853746][T20555] binder: BINDER_SET_CONTEXT_MGR already set [ 2209.866965][T20555] binder: 20549:20555 ioctl 40046207 0 returned -16 [ 2209.867552][T20564] binder: BINDER_SET_CONTEXT_MGR already set 17:11:31 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xf0ff7f) 17:11:31 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) [ 2209.951771][T20564] binder: 20549:20564 ioctl 40046207 0 returned -16 17:11:31 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x400403, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0xf2, 0x2) write$P9_RLINK(r0, &(0x7f0000000000)={0x7, 0x47, 0x1}, 0x7) socket$nl_generic(0x10, 0x3, 0x10) 17:11:31 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:11:31 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000480)=""/52, 0x34}], 0x1, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x1, 0x2, [@local, @local]}) 17:11:31 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0xf2, 0x2) 17:11:31 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x1000000) 17:11:31 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="f7620440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') fcntl$lock(r3, 0x46825ec774e8a621, &(0x7f0000000000)={0x0, 0x3, 0x3d43, 0xbc81}) preadv(r0, &(0x7f00000017c0), 0xf2, 0x2) 17:11:31 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0xf2, 0x2) 17:11:31 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e22, @rand_addr=0x64010100}}, 0x0, 0x0, 0x14, 0x0, "46901ab2a0b18410f786de4fe520e98840f50ff889a2f88633e1e0f183bf98d7fe388bf826435c01b86c0c589cccd5fbded535c2569aff4b5c717af9fe69bc3837c3878df727c449a5dc988e5ec1ff00"}, 0xd8) [ 2210.786898][T20598] binder: BINDER_SET_CONTEXT_MGR already set [ 2210.793027][T20598] binder: 20596:20598 ioctl 40046207 0 returned -16 [ 2210.842378][T20606] binder: 20596:20606 unknown command 1074029303 [ 2210.852283][T20606] binder: 20596:20606 ioctl c0306201 20000280 returned -22 17:11:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x5) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000400)=[{&(0x7f0000000480)=""/52, 0x34}], 0x1, 0x0) 17:11:38 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x2000000) 17:11:38 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0xf2, 0x2) 17:11:38 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$HIDIOCSREPORT(r4, 0x400c4808, &(0x7f0000000680)={0x2, 0xfffffefc, 0xfffffffa}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x1f580e}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "70e096e87bab6d"}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x840) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f0000000180)={0x0, 0xa0cf, 0x100000001, &(0x7f0000000140)=0x1}) preadv(r1, &(0x7f00000017c0), 0xf2, 0x2) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x28) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x2148c2, 0x0) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000040)=0x9) recvmsg$kcm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f0000000440)=""/226, 0xe2}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/56, 0x38}, {&(0x7f0000000240)=""/47, 0x2f}], 0x5, &(0x7f0000000600)=""/52, 0x34}, 0x101) 17:11:38 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x5, 0x1, 0x70, 0x1}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mq_timedsend(0xffffffffffffffff, &(0x7f0000000180)="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", 0xfe, 0x1, &(0x7f0000000000)) preadv(r5, &(0x7f00000017c0), 0xf2, 0x2) 17:11:38 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000080)={0x2}) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0xf2, 0x0) [ 2217.040708][T20621] binder: BINDER_SET_CONTEXT_MGR already set [ 2217.049617][T20620] binder: 20615:20620 ioctl 400c4808 20000680 returned -22 [ 2217.061407][T20621] binder: 20616:20621 ioctl 40046207 0 returned -16 [ 2217.075191][T20620] binder: 20615:20620 ioctl 4018aee3 20000180 returned -22 [ 2217.093103][T20624] binder: BINDER_SET_CONTEXT_MGR already set [ 2217.105528][T20624] binder: 20619:20624 ioctl 40046207 0 returned -16 [ 2217.122295][T20627] binder: BINDER_SET_CONTEXT_MGR already set [ 2217.130972][T20627] binder: 20622:20627 ioctl 40046207 0 returned -16 [ 2217.149092][T20624] binder: BINDER_SET_CONTEXT_MGR already set [ 2217.156648][T20628] binder: 20615:20628 ioctl 4018aee3 20000180 returned -22 [ 2217.157824][T20624] binder: 20619:20624 ioctl 40046207 0 returned -16 17:11:38 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000040)=0x6) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r4, r1) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000000)) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x0, 0x2) 17:11:38 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x2) 17:11:38 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x3000000) [ 2217.235862][T20631] binder: 20619:20631 ioctl c02064b2 20000040 returned -22 [ 2217.313331][T20621] binder: BINDER_SET_CONTEXT_MGR already set [ 2217.325207][T20621] binder: 20616:20621 ioctl 40046207 0 returned -16 17:11:38 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000480)=""/52, 0x34}], 0x1, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$CAPI_NCCI_GETUNIT(r3, 0x80044327, &(0x7f0000000000)=0x1) 17:11:38 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x1, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x0, 0x73c000, 0x0}) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f0000000180)=0x4) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x2) 17:11:38 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') fcntl$getownex(r0, 0x10, &(0x7f0000000000)) preadv(r0, &(0x7f00000017c0), 0xf2, 0x2) 17:11:39 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x2) 17:11:39 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x4000000) [ 2217.727177][T20650] binder: BINDER_SET_CONTEXT_MGR already set [ 2217.736957][T20650] binder: 20644:20650 ioctl 40046207 0 returned -16 17:11:39 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x210000, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) preadv(r3, &(0x7f00000017c0), 0xf2, 0x2) 17:11:39 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$SOUND_MIXER_READ_RECMASK(0xffffffffffffffff, 0x80044dfd, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000000)={'broute\x00'}, &(0x7f0000000080)=0x78) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x2) 17:11:39 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x2) 17:11:41 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x1f14c0, 0x20) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0xf2, 0x2) 17:11:41 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630409"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0xc24, 0x4) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000480)=""/52, 0x34}], 0x1, 0x0) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000d6cff0), 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0xe, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000580)={r5, 0xd5, "287038480d4109e6713b83a791237404cedc3bfedbbaeb7af6c030460a6275b987d45279478cef8a2152b893ced9f88d07a644cbad31cbfcd914136c1b7cda2d88f1da4f5ac377d1772a5fc87c27e14fcc28529da4845cdb3e5536968b57b0dd4587d600f159795fe2ff82dfa367afabf33d7d77eba6740e2bd626a70b80cf7ef61fa376abab7e97e26c22219fbd26896ff7c6c01e1f270f7b7bc5cfb203c403faf4b0fb74e27f45a0bbd67e848a87f880d934c251ed82e9938e9dc8030eb9f195285ffebb8e5024c2b3b3521bad119e93dce2d0d3"}, &(0x7f00000001c0)=0xdd) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f0000000180)={{0x1, 0x0, @identifier="e8d44e2915ca2a2baf32ffdd9416afd2"}}) 17:11:41 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x5000000) 17:11:41 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0xf2, 0x2) 17:11:41 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(r0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') r4 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, r3, 0x536ae464467e3e0b, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x1c8, r3, 0x800, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x8000}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x100}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x7f}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x7fffffff}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x20}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x30cc324}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x80000000}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x5a5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xf1}, {0x8, 0x15, 0x5}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4040044}, 0x800) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0xf2, 0x2) [ 2220.445237][T20691] binder: BINDER_SET_CONTEXT_MGR already set 17:11:41 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x14, r3, 0x1, 0x0, 0x0, {0x11}}, 0x14}, 0x1, 0xa00000000000000}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x90, r3, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x25d}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x40}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9e0}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x200}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3d}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}]}, 0x90}, 0x1, 0x0, 0x0, 0xc800}, 0xc0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0xf2, 0x0) [ 2220.489950][T20691] binder: 20685:20691 ioctl 40046207 0 returned -16 17:11:41 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0xf2, 0x2) 17:11:42 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000400)={0x5, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0xf2, 0x2) recvmsg$can_j1939(r0, &(0x7f0000000380)={&(0x7f0000000000)=@generic, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000000180)=""/16, 0x10}, {&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000200)=""/249, 0xf9}], 0x4, &(0x7f0000000340)=""/33, 0x21}, 0x12020) 17:11:42 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x6000000) 17:11:42 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$BLKROTATIONAL(r4, 0x127e, &(0x7f0000000000)) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x2) [ 2220.897359][T20723] binder: BINDER_SET_CONTEXT_MGR already set [ 2220.922246][T20723] binder: 20716:20723 ioctl 40046207 0 returned -16 [ 2220.971007][T20727] binder: 20716:20727 ioctl c01064c8 20000400 returned -22 17:11:42 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0xf2, 0x2) 17:11:42 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @window={0x3, 0xf6b, 0x2}], 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x2) 17:11:42 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x7000000) [ 2221.157762][T20727] binder: BINDER_SET_CONTEXT_MGR already set [ 2221.164409][T20727] binder: 20716:20727 ioctl 40046207 0 returned -16 [ 2221.202777][T20723] binder: 20716:20723 ioctl c01064c8 20000400 returned -22 17:11:42 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x240, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x2) 17:11:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:11:42 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r3, r2) fcntl$setsig(r2, 0xa, 0x2d) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x20081, 0x0) syncfs(r4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f0000002480)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000180)=""/79, 0x4f}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/251, 0xfb}, {&(0x7f0000001200)=""/102, 0x66}, {&(0x7f0000002400)=""/104, 0x68}], 0x6, 0x2) 17:11:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:11:46 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x39) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x39) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000000)='ns\x00') preadv(r4, &(0x7f00000017c0), 0xf2, 0x0) 17:11:46 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000)={0x20}, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x2) 17:11:46 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x8000000) 17:11:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:11:46 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r2, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100)=0x0) write$FUSE_ENTRY(r0, &(0x7f0000000140)={0x90, 0x0, 0x7, {0x4, 0x3, 0x6, 0x2, 0x3a, 0x80000000, {0x4, 0x2, 0x1, 0x100, 0x57ba, 0x3, 0x100, 0x1, 0x3, 0x89, 0x8000, r2, r3, 0x2, 0xb5000000}}}, 0x90) 17:11:46 executing program 5: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:11:46 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = socket$isdn(0x22, 0x3, 0x3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f0000000b40)={0x7, 'bridge_slave_0\x00', {0xf8}, 0x6}) r5 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) sendmsg$rds(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/59, 0x3b}, {&(0x7f0000000040)=""/102, 0x66}, {&(0x7f0000000180)=""/115, 0x73}, {&(0x7f0000000200)=""/122, 0x7a}, {&(0x7f0000000100)=""/55, 0x37}, {&(0x7f0000000280)=""/250, 0xfa}, {&(0x7f0000000380)=""/62, 0x3e}], 0x7, &(0x7f0000000940)=[@mask_cswp={0x58, 0x114, 0x9, {{0xab66, 0x1}, &(0x7f0000000440)=0x6, &(0x7f0000000480)=0x100, 0x8056, 0x7, 0x1, 0x40, 0x6, 0x7}}, @rdma_args={0x48, 0x114, 0x1, {{0xd27, 0xffff9e3e}, {&(0x7f00000004c0)=""/3, 0x3}, &(0x7f0000000780)=[{&(0x7f0000000500)=""/215, 0xd7}, {&(0x7f0000000600)=""/121, 0x79}, {&(0x7f0000000680)=""/178, 0xb2}, {&(0x7f0000000740)=""/37, 0x25}], 0x4, 0x8, 0x3}}, @cswp={0x58, 0x114, 0x7, {{0x3, 0x3}, &(0x7f00000007c0)=0x1, &(0x7f0000000800)=0x8, 0x7f, 0x91, 0x25d7, 0x51, 0x8, 0x23d633b2}}, @fadd={0x58, 0x114, 0x6, {{0x7, 0x4}, &(0x7f0000000840)=0x6c9c, &(0x7f0000000880)=0x91, 0x0, 0x0, 0x9, 0x0, 0x24, 0x5}}, @rdma_dest={0x18, 0x114, 0x2, {0x9d6fe5d, 0x8}}, @cswp={0x58, 0x114, 0x7, {{0x1, 0x1000}, &(0x7f00000008c0)=0x8, &(0x7f0000000900)=0x3, 0x8791, 0x1ff, 0xffffffffeff461eb, 0x2, 0x4, 0x3ff}}], 0x1c0, 0x80}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0xf2, 0x0) 17:11:46 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x9000000) 17:11:46 executing program 5: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:11:46 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x288582) write$binfmt_elf64(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x9, 0x9, 0x86, 0x9, 0x2, 0x3e, 0x40, 0x4, 0x40, 0x184, 0x7, 0x6, 0x38, 0x2, 0x7, 0x4000, 0x3}, [{0x60000000, 0xd9f7, 0x1, 0xffffffffffffffc1, 0x5, 0x7a, 0x7f, 0x4}], "89afebccb19b8f6458bf150ee558793b7529f718df24490dea314feff66e2f4adf932f3fac839edd7d2f4f0b0db82935fd521254af37d8efebee5261175d3727b46c40b8abc5ac594bd6692430353e8d2d41853a0e14e2c06c42129402d8376f801d17998073d610e46621a74334a11569d6b8ad320935744ee6ae551b33aab83bdabfba", [[], [], [], [], [], [], [], [], []]}, 0x9fc) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0xf2, 0x2) 17:11:46 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x100000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) bind$tipc(r5, 0x0, 0x0) 17:11:46 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) exit_group(0x6) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000000)={[{0xffff, 0x7fff, 0xc9, 0x4, 0x2, 0x77, 0x4, 0x20, 0x8, 0x0, 0x3, 0x7, 0x8}, {0x7, 0x1, 0x0, 0x9, 0x1f, 0x80, 0x3f, 0x7d, 0xf4, 0xe6, 0x6, 0x49, 0xffffffffffffffff}, {0x0, 0xb72e, 0x8, 0x81, 0xdc, 0xfd, 0x81, 0x4, 0xb2, 0x3, 0x9, 0x4, 0x2}], 0x1}) 17:11:46 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xa000000) 17:11:46 executing program 5: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:11:47 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000000)=0xfffffffffffffdd8, 0x8) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x2) ioctl$TCGETX(r3, 0x5432, &(0x7f0000000040)) 17:11:47 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0xf2, 0x2) 17:11:47 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0700245fe147b32ab8116aecae3e84f7c5bee52f71b0d7e45c9fc20828b4a726c7555f0bb2dcc2d672f6b39b6c0a5a33895edfd6eab2beaf3679933675cd53b3d0ab90005023b993f3b7e51da61d15d130f7a501002ecd4ef5c48fd0d7048ca9a830a56378397beca6"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x90, 0x0, &(0x7f0000000640)=[@transaction={0x40406300, {0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0xb, &(0x7f0000000700)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/136, 0x88, 0x0, 0x5}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/112, 0x0, 0x0, 0x29}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x0, 0x2, 0x26}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x3}], 0x0, 0x73c000, 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x39) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x7, &(0x7f0000000380)="94558fc0eebe5616628b04071c01c944e6216fe2d3e77ca18420b4dfc377beb6940f1121ab697ddcfaf903830d971a588a964dd3cd82d6b6dc0254aba69d336e060aeab02a3728700538177e1188fa3a6e74cf8649b414d501e2f337e90df4b8adf1c3abf5756ebef6fdc10bce7163f5c484be1b8ae991d530161ed8fd670b8d2b76ebd9fac4fa844b6fe70695db18a2b0b8ed4f4a66af121de634bf0604c289f87d") ptrace$cont(0x9, r3, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000180)='mountstats\x00') preadv(r4, &(0x7f00000017c0), 0xf2, 0x2) 17:11:47 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xb000000) [ 2226.022007][T20816] binder: 20814:20816 unknown command 1596194823 [ 2226.059223][T20816] binder: 20814:20816 ioctl c0306201 20000280 returned -22 17:11:47 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0xf2, 0x2) [ 2226.086404][T20818] binder: 20814:20818 ioctl 8933 20000000 returned -22 17:11:47 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0xf2, 0x2) 17:11:47 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x850, r4, 0x10000000) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x2) 17:11:47 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xc000000) 17:11:47 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0xf2, 0x2) 17:11:51 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0304000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x8c, r1, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0x4c, 0x22, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x10001}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x20000051) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:11:51 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xd000000) 17:11:51 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0xf2, 0x2) 17:11:51 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="056304408633abf7237f70b5fb150f71e85bd3362332cc54b80fbb34193c9a4ed8a7d4c19a284eb7483920a431ab973ccc0de44b50851bf09c8cceae9cb649700db7a5ed501e5f27fc481511bcfc79c50809458e02b42f1617f30a289a5a4b59515f14d09d4924ae800aadf6bb36b3fb01047b4a44b62aa56974b63cc0b9eaa4adcf1dbe34a00d9de37513e462e622c8123569418a4ed0e329ed5d6bbcce5a39bcf3950f9079dd4dab49430f7b7473f16e9d7ca69072cb6f8f490c1d"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="04cec4ed712a831500"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0xa, 0x2, 0x3}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x20, 0x48}}}], 0x0, 0x73c000, 0x0}) r3 = openat(r2, &(0x7f0000000000)='./file0\x00', 0x440400, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x2, 0x0) bind$netrom(r3, &(0x7f0000000100)={{0x3, @null}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x2) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x80, 0x1) 17:11:51 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20010004}, 0xc, &(0x7f0000000040)={&(0x7f0000002400)=ANY=[@ANYBLOB="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"], 0x964}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x0) [ 2229.966492][T20853] binder: 20848:20853 unknown command -305869308 [ 2229.972958][T20853] binder: 20848:20853 ioctl c0306201 20000280 returned -22 17:11:51 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="66696c655f756d61736b3d30303030303030303030303030303030303030303030302c706172743d3078303030303030303030303030303030302c747970653dae4bf3ae2c6769643dcbf223af326e632ae56327fdbba9a4b0cdbe3bde351aacc7074659213082dc5de36ac328857fae193d774854f8648f98de03b3e858660d703e9ce6fd623062ca4242bbb7004d2aeeb340d95a311a68d8805010a19bc6bcebd941a8ff28217b04485d8064425f7427c8dd7bf68b3e890a8c9dc67af05e61f97d82d74c2505a3420d70f8b4", @ANYRESHEX=r5, @ANYBLOB=',\x00']) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r7 = dup2(r6, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05631e74414c080e82430440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x1407, 0x2, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40800) fchown(r0, 0xffffffffffffffff, r5) [ 2230.030596][T20853] binder: 20848:20853 ioctl 8912 400200 returned -22 17:11:51 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xe000000) 17:11:51 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x38c00, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x2, 0x0, 0x2, 0x8}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000000c0)={0x7, r2}) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000480)=""/52, 0x34}], 0x1, 0x0) [ 2230.119647][T20853] binder: BINDER_SET_CONTEXT_MGR already set [ 2230.137391][T20853] binder: 20848:20853 ioctl 40046207 0 returned -16 [ 2230.152009][T20856] binder: BINDER_SET_CONTEXT_MGR already set [ 2230.158164][T20856] binder: 20848:20856 ioctl 40046207 0 returned -16 17:11:51 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000c090}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x154, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}]}, 0x154}, 0x1, 0x0, 0x0, 0x2004010}, 0x22008090) 17:11:51 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0xf2, 0x2) [ 2230.188197][T20853] binder: 20848:20853 unknown command -305869308 [ 2230.210481][T20860] binder: 20848:20860 ioctl 8912 400200 returned -22 17:11:51 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') [ 2230.236909][T20853] binder: 20848:20853 ioctl c0306201 20000280 returned -22 17:11:51 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="df000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="df000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=@mpls_delroute={0x1ec, 0x19, 0x10, 0x70bd27, 0x25dfdbfb, {0x1c, 0x10, 0x80, 0x6, 0xfe, 0x0, 0xfe, 0xa, 0x400}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x6}, @RTA_NEWDST={0x84, 0x13, [{0xfffff, 0x0, 0x1}, {0x6f62}, {0x6, 0x0, 0x1}, {0x5, 0x0, 0x1}, {}, {0x5, 0x0, 0x1}, {0x40, 0x0, 0x1}, {0x6}, {0x7}, {0x1, 0x0, 0x1}, {0x36, 0x0, 0x1}, {0x1}, {0x0, 0x0, 0x1}, {0x6}, {0x8}, {0xff, 0x0, 0x1}, {0x5}, {0x9}, {0x101}, {}, {0x3}, {0x6328}, {0x3, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x9}, {0x6}, {0x3f, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xe7, 0x0, 0x1}, {0x8d1}, {0x2}, {0x4}]}, @RTA_OIF={0x8, 0x4, r4}, @RTA_DST={0x8, 0x1, {0x200, 0x0, 0x1}}, @RTA_NEWDST={0x84, 0x13, [{0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0xeac0, 0x0, 0x1}, {0xffffe, 0x0, 0x1}, {0x3}, {0x4}, {0x1}, {0x2, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xfff}, {0x20}, {0x5a, 0x0, 0x1}, {0x7dc}, {0x4, 0x0, 0x1}, {0x7}, {0x5}, {0x9, 0x0, 0x1}, {0x61, 0x0, 0x1}, {0x1}, {0xca2, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x73}, {0x8000, 0x0, 0x1}, {0x7}, {0x8001, 0x0, 0x1}, {0xb12}, {0x3}, {0x9, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x20, 0x0, 0x1}, {0xc3a5, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x7f}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x8}, @RTA_NEWDST={0x84, 0x13, [{0x7ff}, {0x100}, {0x5, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x2}, {0x2f9, 0x0, 0x1}, {0xfffff}, {0x8}, {0x3ff, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x15792}, {0x8, 0x0, 0x1}, {0x6}, {0x8, 0x0, 0x1}, {0x800, 0x0, 0x1}, {0x5}, {0x80}, {0x3}, {0x3, 0x0, 0x1}, {0x400, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x7f}, {}, {0x5, 0x0, 0x1}, {0x6}, {0x8, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x400, 0x0, 0x1}, {0x180}, {0x9}, {0x4}]}, @RTA_OIF={0x8, 0x4, r7}, @RTA_VIA={0x14, 0x12, {0x2b, "dcfe1eaad1f12eee220db5f9825a"}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4004081}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r8, &(0x7f00000017c0), 0xf2, 0x2) 17:11:51 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x10000000) 17:11:51 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4091, 0xffb}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x2) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000000000)="228dcf0d55b9a3c60da12d18258868b4b9fa7ee07e5afa2ed56c82835cb63c64d2b4c98255f4", 0x26}, {&(0x7f0000000100)="363808f89aac16aeda5e28bb12def4ccca9194575871b1e085af5c8858ea4912bffcc6a525012d57e5c8d3d409f2fbf312f58a4c531d7e06f6cffdc3194005c5e96ad68eba5a50bba60015ec852cb4bc3dbac565b8b54830a8bd38798228104e7afef4d409013a2bf9fed01a9de1f1bd9535f3dbb074233c6045182b3377e1a57155cc14bdbd959a56fb70537344704c2a1bfb9d1e7a906aaab470deed36646840f85835c1817800676dcbe53a580c6a92016c9035cbe21f93393b5b3e84eb73bbdf8928ace0925e338a4596c93822f1f231ec609b05bc218923af1d75a860c486932b9db15e8a0698e8ee8f16a8d69bae43de3e", 0xf4}, {&(0x7f0000000200)="daf524985523cc6522c70e1d7b5b5539ea4a53046650b147169427ef1ab60de9bae0b1c6f30cf19d5618422eeca5632808529f5fb44cf50e983938eea5b6fecedc3f93deb819a5b86c14bfcd9f0ecc0a1f692aefbd555fd4bf6dd1544ba944068cc6", 0x62}, {&(0x7f0000000280)="00d40e208ca451901c8a8a4bda90f99c70b622b988ff81c461206692f23032c46c1347c7887cfe266e8d92d9054696e81fcb163a57e46e0e63c4bca55ee6934d0147a8c88021aba7a475ed4e5cf5c602e3", 0x51}, {&(0x7f0000000300)="e0634a44c7bcac35c2e1b5c45c43990191fee6f1c5c09ed3775be443cfbd8bf0b5525d5b2b560b4fb82068162dd3e80a69a823f7474d49ba9b878ebe167a3204df0df4fa142bffc7261f10e50226bd45c9bf7098bb533dbb6f528e04d5f4e6ba9dc111e72bf96d340bda4da209aa492a88e91250c25c8a29", 0x78}], 0x5, 0x6) 17:11:51 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0xf2, 0x2) [ 2230.549763][T20881] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2230.771914][T20881] 8021q: adding VLAN 0 to HW filter on device bond12 [ 2230.812454][T20882] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2230.946411][T20882] 8021q: adding VLAN 0 to HW filter on device bond13 17:11:52 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x11000000) [ 2231.105102][T20882] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 17:11:52 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:11:52 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fstatfs(r1, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fstatfs(r2, &(0x7f0000000640)=""/236) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x2) [ 2231.195574][T20882] 8021q: adding VLAN 0 to HW filter on device bond14 [ 2231.214100][T20909] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 17:11:52 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x210000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x28, r2, 0xf20aaac1f6a2385f, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x28}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040800) preadv(r0, &(0x7f0000000400), 0x0, 0x6) 17:11:52 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000080)) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000180)={0x2}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$HIDIOCGFIELDINFO(r4, 0xc038480a, &(0x7f0000000000)={0x2, 0x2, 0x0, 0x0, 0x0, 0x7ff, 0x2, 0x4, 0x4, 0x1, 0x10000, 0x2, 0xffffff81}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet_sctp(0x2, 0x5, 0x84) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x2) [ 2231.699052][T21020] binder: BINDER_SET_CONTEXT_MGR already set [ 2231.712748][T21020] binder: 21017:21020 ioctl 40046207 0 returned -16 [ 2231.745140][T21024] binder: 21017:21024 ioctl c038480a 20000000 returned -22 17:11:57 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000080)={0xffdfffb, 0xffff, 0x7, r2, 0x0, &(0x7f0000000040)={0xa20001, 0x51f1, [], @p_u32}}) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0x80184132, &(0x7f0000000100)) preadv(r2, &(0x7f00000017c0), 0xf2, 0x0) 17:11:57 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4091, 0xffb}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x2) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000000000)="228dcf0d55b9a3c60da12d18258868b4b9fa7ee07e5afa2ed56c82835cb63c64d2b4c98255f4", 0x26}, {&(0x7f0000000100)="363808f89aac16aeda5e28bb12def4ccca9194575871b1e085af5c8858ea4912bffcc6a525012d57e5c8d3d409f2fbf312f58a4c531d7e06f6cffdc3194005c5e96ad68eba5a50bba60015ec852cb4bc3dbac565b8b54830a8bd38798228104e7afef4d409013a2bf9fed01a9de1f1bd9535f3dbb074233c6045182b3377e1a57155cc14bdbd959a56fb70537344704c2a1bfb9d1e7a906aaab470deed36646840f85835c1817800676dcbe53a580c6a92016c9035cbe21f93393b5b3e84eb73bbdf8928ace0925e338a4596c93822f1f231ec609b05bc218923af1d75a860c486932b9db15e8a0698e8ee8f16a8d69bae43de3e", 0xf4}, {&(0x7f0000000200)="daf524985523cc6522c70e1d7b5b5539ea4a53046650b147169427ef1ab60de9bae0b1c6f30cf19d5618422eeca5632808529f5fb44cf50e983938eea5b6fecedc3f93deb819a5b86c14bfcd9f0ecc0a1f692aefbd555fd4bf6dd1544ba944068cc6", 0x62}, {&(0x7f0000000280)="00d40e208ca451901c8a8a4bda90f99c70b622b988ff81c461206692f23032c46c1347c7887cfe266e8d92d9054696e81fcb163a57e46e0e63c4bca55ee6934d0147a8c88021aba7a475ed4e5cf5c602e3", 0x51}, {&(0x7f0000000300)="e0634a44c7bcac35c2e1b5c45c43990191fee6f1c5c09ed3775be443cfbd8bf0b5525d5b2b560b4fb82068162dd3e80a69a823f7474d49ba9b878ebe167a3204df0df4fa142bffc7261f10e50226bd45c9bf7098bb533dbb6f528e04d5f4e6ba9dc111e72bf96d340bda4da209aa492a88e91250c25c8a29", 0x78}], 0x5, 0x6) 17:11:57 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x12000000) 17:11:57 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:11:57 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xb, 0x90, 0xa, 0x5, 0x0, 0x70bd25, 0x25dfdbff, [@sadb_key={0x3, 0x9, 0x78, 0x0, "5bb2efda0778b037ecf91f407e1630"}]}, 0x28}}, 0x20000801) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000400)=[{&(0x7f0000000480)=""/52, 0x34}], 0x1, 0x0) 17:11:57 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4108, 0x100c}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x44100, 0x0) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f00000011c0)="ab931c3e4cffd02dbe7e376da07efea35601fedc4d110295dab7af6c814e820b635322c373f64ed39e9c83463834b702b034ab289d772fafd3457ba48ac3c16d848cd0a0c7d8062767ff3a3da079c152c5b2875f0261f2a5b7e5111723bf8c0d4f996125254efdac0130b96b03dc47b866e76eefd317b852e1833a199cce61c26e988b3d2245a221716810072c6a21ae9f56aeba16c52bacc3fb69fdeff11d38e9bd358dadd7112027b675cb7edb8f22499ea80cb6898243d3cb5108c2754d3fc5f3319ea28c14b7f15de37c63459ceab16ac9ad41a0969e84e031b01260") syz_open_procfs(r3, &(0x7f0000000040)='net/ip_tables_matches\x00') [ 2236.272880][T21038] binder: BINDER_SET_CONTEXT_MGR already set [ 2236.288256][T21038] binder: 21033:21038 ioctl 40046207 0 returned -16 17:11:57 executing program 4 (fault-call:3 fault-nth:0): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) 17:11:57 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) [ 2236.547125][T21049] FAULT_INJECTION: forcing a failure. [ 2236.547125][T21049] name failslab, interval 1, probability 0, space 0, times 0 [ 2236.616407][T21049] CPU: 0 PID: 21049 Comm: syz-executor.4 Not tainted 5.8.0-rc3-syzkaller #0 [ 2236.625114][T21049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2236.635174][T21049] Call Trace: [ 2236.638481][T21049] dump_stack+0x1f0/0x31e [ 2236.642836][T21049] should_fail+0x38a/0x4e0 [ 2236.647261][T21049] ? kmalloc_array+0x2b/0x50 [ 2236.651859][T21049] should_failslab+0x5/0x20 [ 2236.656374][T21049] __kmalloc+0x74/0x330 [ 2236.660540][T21049] kmalloc_array+0x2b/0x50 [ 2236.664990][T21049] rw_copy_check_uvector+0x95/0x380 [ 2236.670198][T21049] ? __fget_files+0x388/0x3c0 [ 2236.674887][T21049] import_iovec+0x8a/0x2c0 [ 2236.679313][T21049] ? __fdget+0x18f/0x210 [ 2236.683569][T21049] do_preadv+0x149/0x290 [ 2236.687814][T21049] ? ksys_write+0x1b1/0x220 [ 2236.692434][T21049] ? lock_is_held_type+0x87/0xe0 [ 2236.697402][T21049] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2236.703590][T21049] do_syscall_64+0x73/0xe0 [ 2236.708054][T21049] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2236.714048][T21049] RIP: 0033:0x45cb29 [ 2236.717941][T21049] Code: Bad RIP value. [ 2236.722011][T21049] RSP: 002b:00007f9b12261c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2236.730434][T21049] RAX: ffffffffffffffda RBX: 00000000004fb820 RCX: 000000000045cb29 [ 2236.738410][T21049] RDX: 00000000000000f2 RSI: 00000000200017c0 RDI: 0000000000000004 [ 2236.746390][T21049] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2236.754370][T21049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 17:11:58 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000380)=""/217, &(0x7f0000000080)=0xd9) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'dummy0\x00', @random="af7348093492"}) preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:11:58 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x25000000) [ 2236.762439][T21049] R13: 0000000000000886 R14: 00000000004cb816 R15: 00007f9b122626d4 17:11:58 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x200000, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000040)=""/55, 0x37}], 0x1, 0x0) 17:11:58 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$SIOCRSGL2CALL(r4, 0x89e5, &(0x7f0000000000)=@rose) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x1ff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x2) 17:12:03 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x3f000000) 17:12:03 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:12:03 executing program 4 (fault-call:3 fault-nth:1): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) 17:12:03 executing program 1: r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@ipx, &(0x7f0000000040)=0x80, 0x80800) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100)=0x3999, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000000)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000400)=[{&(0x7f0000000480)=""/52, 0x34}], 0x1, 0x0) 17:12:03 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000000)={{0x1, 0x81}, 0x0, 0xba, 0x1f, {0x9b, 0x20}, 0x1f, 0xd21}) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006e80)=[{&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x800}, {&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000480)="0f49f7c5a1a820eb84713ef11f4b3c5f10f3c228a04e5c8fec74f12759f9adc32fecb7e3c8", 0x25}, {&(0x7f0000000580)="3501f3c287c1295f6c22e05519e2b5d57ddd15a7275d8657ea37d75cee2c1fa132811e5d0cc32ece4828aa6e5e5cf9e08e324d32bb5fe386030697c2b3d477cbbe63451973c8fca2eacbf6db1e41e9ebcc935e42b88514509a59a2468c46a65acd75e9d1b3ccc9c6a099fbefd89b4b028f0d7dccf87e5f09d803c9e6a7268c4fcc7e942dff32c5164fca9b52fca9e59d2955d7559a76652ee4d8c95ee494ec1770c1c5301cfddb365e34d8440587af0ee241170d5bf21a915f3219a15e06b79b05a50a9342e85e46625b4f124a748405155593a84c8255409d1b5ba0180f91dda2f6fe", 0xe3}, {&(0x7f00000004c0)="4e678ed8cc143eb5e0b63a0f7a312ebf2ffe2107c7c26bd89767ee003dcb17c1a20a", 0x22}, {&(0x7f0000002400)="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", 0x1000}, {&(0x7f0000000500)="c2ca4a21552ac4ae41b30b1c03", 0xd}, {&(0x7f0000000680)="3b86e6558bac1171a453472e7978ca42877358f8b15baf39937c896a414c552110763ffcf246426bf3b9f52d929e7cf48e9149abf23c6edb0b0b831c255fabb7b82de2420cd4edbff4d80d23c0258b1fd7db2d0cdccc3c6355cfc96b39256fbe38fd7afe0fd4", 0x66}], 0x6, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, {&(0x7f0000000880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000900)}, {&(0x7f0000000940)="a7e075dd7aa1e9540638bb0da8eda89aae426d7f157b37a9bf8ebeca30ac31ff2c43bed7e30414707d2a955a2a0b2b78cc5cdf42cc849d32864d5e2292c0c08bb672333d6e68296a3a315b0409749fa11b30906f1309acb9239ef6a071ac573cd80017ba0f579d23a5a569038e05cd5eb1e3127f755fc2429a8e5cc6f4ca333f3075321ec2b088d8e93c8d38d48e7880ec3696748f8acae301be09f1d7a107991bea1b565df5981578d81149f4bd974d037a2114fa50c4861e55b757ba1f0f0974", 0xc1}, {&(0x7f0000000a40)="6b58c9007c09852f95ccb6194f25553e9e45f1cb816ba0764fc856972adff04326c2a1fc4e7d5b1bc06a9cf0abfeaec3c9b7f7f9baa768132bbfbf085439aca7c0f893b5276667f50738e88ee516ac85668919e0d5a7bee4e7701213142a99483e82b0b27c74696edb3633c8e5b693c558980e7324d46420b1b4d6e61b8a11731232e5ded7b0d32c1a278a6c5d9649813731ca7aed2dde3f1c87e339d2a193b3493197f993fcb75f9d50e5f1bbf5b597cacc7a48dd2f5ba7bdfa60e00fffc4caa4b012ee0f908c6867bac2a405a351fcafcde5ea69447c0cd93817033788", 0xde}, {&(0x7f0000000b40)="3562af6a6874a094f02a1e312c045e18914dfc8c87863557dc2adc6b425118b2f7aae254bd0602c974f5fbfbc09bea5a330fda4166d3", 0x36}, {&(0x7f0000000b80)="7ad4261123b24623d1c9e3b0dc", 0xd}, {&(0x7f0000000bc0)="1cc354b72ec0417bc56024d80148c66ceb1c4a14c4814be57e2c03aabcff0db12b3b33816ce3aaa033bf263ba759bad0d9c1d86a90e2a0f6142175716421a21785f41d51bb661b42959849ca240c0471a6ef7760dcea5c04aee959d5255fea7a4ea468f1ac13526899da9760f3d45ab6e9314cd373c423", 0x77}, {&(0x7f0000000c40)="b3a83b872cc422927c4020a92e81db568852c7e70bce4f11357acc999bde3df872728986b3e8722d3cef41904f42e2993c6eb31e282845791738e1c065d9381f1cc548868179da3334c8f71b05e2ee854e6008e54ceb2c031e49e714b6b6b5f3a2f58b153a243bdcbf7ec2c77775394470b183facdfcb326702edf5e9ae30bf917cf9fa74dc98d670bbd86b33c1106d287eda2b47e871038ae700d8cb5d9913e393521f5055eb9ef976b29bed20f6b9c82bb01761e1cbaa03f5c60d83b73a1b0c9ac6a3c2570ea28e62da92e2792c2968c", 0xd1}, {&(0x7f0000000d40)="e9f9afb0d30d94e229bd3ee316a4e5e576a16251ee2623a6a254fd6891c2e8501eaa82a2dd15986d0ce61dc140fe56fa0c4344ce48f859da4d3d015b78718d23f83fd836bd15885e2bdf3357caf2c0a21e3f9735c7c8402531aa5262ccd6923a3a89ce8eb74e6254c33420b9490f9acd46b394a31060ba19f12f54254dfb04640d65b3acd4c87b414c9cdc828206c0a63531dde8f8d3e0b1e030fe9222fd9c480f9b054adb844866778a6348d5fd19ebb490a1", 0xb3}], 0x8, &(0x7f0000001180)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58, 0x20044805}, {&(0x7f0000001200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004840)=[{&(0x7f00000022c0)="9fdb4fa566ea74f1a7c25d21fe9b8c5fc78f87021608f9cf75a0c7baccdb9d5fd7cb346c86186be0d3b3f1691efd6ee395a523161291adcc98f955f2d82323ebc6c5b6236449503ea33b154e21d58fa468f034f4bb3de0ff1b339d1153c2dc69fb5fe293", 0x64}, {&(0x7f0000003400)="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", 0x1000}, {&(0x7f0000004400)="3327a029a93742f5732f178e49953e23245e50b4bde5f166d85d4607cd6417daa20fc68048d12588c3e7ae1caa7d4a9ff1f7f27e7dade87588f2e348e45f1a1a8543533a5adf816fce3e17cbbb311800d79a99ae1e1586c3f6e66b03574f32da5d10cfef62afc5b2675ea03641e9ec28bbab1c57f1d05a16111093c581143ce04d01bfd70ef0e17c4c8e9491dd3ac631f7c2cb0cf2d51d9cf6556a3bdc", 0x9d}, {&(0x7f00000044c0)="2342237e9fc0926f1b2d6b972d31274c98df3bdd7c297cdc6d9550efd6d524dde20bae6977078068f8804d1d7e09e0b1c96e424b49ad7baac1f133573a130d98e7cc9725c282154ab034e8fc6ecd71e4305c877efb176e1da2acbaa5b38dc2689ea65fc9607a94bd2a40097546e01ef5bcac1fb52a1739f063ec94b779af436390c6744e8c9beb2fc285b9b6596e40f4bfffed6085cf93380d9569425e8a00d9f749eb09bb1d2143f4d874001d0936a5e5419945a94f738135b88e251c627608c48372345fa7297340b3cff97a850ae0ef18c701e3943d865e229379c6d3c47647f5f029cda2df736c9f1bfafb0b403ea379676c60fd69", 0xf7}, {&(0x7f0000001280)="de02c6c82f813f4c8352c81b1eac5413298db6daa38a38c70d", 0x19}, {&(0x7f00000045c0)="160b21474e75c96f9b9edb42c124f5ce9187e7330d0d6a4b2584b61c28e37404f8daa684036144a56190c16444788f65fab98ebd33ecb795895ed6fb396d004d7d330c49a4766937c04307d0af9a84183c20f4ece99c6613675f1be4471aa78e79966c2b0651cc9fe31afc8c5bfd1d2b0dce0210d6c12c9d008afca7e52f409a53b3d387c261a9fb9b5ef6d0246fc65ca19aece0a27d715e4a0bbd8993fa9e3077c506", 0xa3}, {&(0x7f0000004680)="89a5a76acc866b427cec45e6b14d47d7bb5b859b6714382f1a500d01d187bb9d5d9260acefb59810d3091c006d0c3e3ef71072b56e39736dd6b61868664fe800591626c581f7b3c14ce16c38ee46e49a33dec8071bd8faa1674edf1492bf1681dde9b4019a07b670ba3d567e69c27e8f5fb6985749f799b3f44fe5a3977af88f22a62c728676f336d4558045693b15e09c0bd759538d70364eac02f00ff9f80fd7138cada0fa79d82d92bc986077e0d2a791", 0xb2}, {&(0x7f0000002340)="43ad2bc301f4aab644dcc0718bf14a6bca4ebe2228f77217ba48855bac50ac883ed7a4", 0x23}, {&(0x7f0000004740)="cfc0366811d43a35e75793cca8b156e403e8bc84312f1bdfcbba7e4f1f86357a4446a785550a34c7e9b21d52f47433eea2060f57cf92a79b6316eb3b9659b5dca8d24504c187febf1662db62c4cb0580d0878b3d150b9d861fabdd161ee066422a95d74f9cc9f7ea69ff5a432f8bf8fa0c40da50050990bb0c061a3c5d10bf63a2f07c6c01fcaae68d8a8e0d594991c21fc862b99107e7c9a41962099a05f7c3b5a0fd3b4462232ddf4d3a206755d4c25143b374f49b62e5cfebeee253333d05b05e473ddba9cc8d16a5d7df39516c5956033986aeea", 0xd6}], 0x9, &(0x7f0000004a00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r4, r4, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}], 0xd8, 0x4}, {&(0x7f0000004b00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006dc0)=[{&(0x7f0000004b80)="a13e03768fa373efa0e51940df37972574ec1fba1a5134bdb4ba1dacf25ae6b545ab79aeeb1bbf2fbee74bc23e92cf054764b3a3fd0c916ccff9819b81300b189ad076b335b945e9a728d0b8839bbe13347159c67e14c7552bbdcd51df04ce49780d53eb462c1de87d2f4c73dd50f55d3495621a0628d574332237871343adc37d11cc4635199a21a0ac5c4fb01ecb913d61fcabe6447624f4546aaf96ed27846c53609b24708ebf2efe8bdb87d8d277a03b82c4392479d6f6ba373b891d4e7cb48b0866659aaf7162eb9bc2944e3b73bc3ea7bbbcafa49dbdab117267", 0xdd}, {&(0x7f0000004c80)="a973142b338ee190ae05a6f7cf72f41868321627abba3b041567c6f5de2ab1eba2855687c29ce0302e9adb92e0afa89b68c5d2fd8f548cf54b92cbfbf87fff00f8e1cab5e05272e0bf14be6755d8aba7ba81f1c6eae64224", 0x58}, {&(0x7f0000004d00)="e9d286baae5ff949055fc3bcc3616baad4cc4b09d20c14af0f4a5951e7ac38a57c451ec09b2cfc61f520df39f46b7baa0ad4c86dfce335f11889a8ed330aed666ce9e32a430ea6985837f88d9970a05c5879b914394bff60a8c419c6ab9359b69581254c4d064adc9ae95e2401d50bf616842aaadb84f5fa4a6138620ee9263ee009b7f0c3bffe37d7a8a9ca6c360a9dc0a64b8b87de450cb81c14d24d6f6615c035229eb7578663e9fc517be4c4a54b1611bf93c0dc05484e1736fee04b49449a2834c672e3b788ac04202fb825821b7a2e0a4044962d4a65065ad0c468e929ab86087a6ff1bf6f99abc31701ce993b17883c7928ef5558394b8f24b26fe1bc767c03732544ab545c12a2394646e7f27acfb0f495ee71376cb1b8499a529d615d0f4528ab11108a3fb3bd48f1ccc57985b3dd4334874cb67c47549deeae89279c64bb7db3a85ce3dc3349d8ab1a56b0a5feb9e872a8c1499564c9655c93f23cdd8985d2ae09c1b296610a026dd463113930403981be60105aaeb0b350bfa25cd61a537323e8d7e140777e21e03d359a1c30fe15255822183eff7e1efe8e6d92b104530e0898aa8b41d2b63672f9cbb5c6de00b4db1854314a2d72756f392f55e204394300133ca06cbea6f62cdfd725cc72fbac67ae657cc1d17ef626725cbda4987d86f4d09e94afffb6cb32af03abbdfac17b37ad997b2b494f60d4addf0ca22f2795229b03818cc72d1fd2b815d98be8701bdb585bd300164ea64fad0cddd1a4809b961a44f9fa0891e978352e30420cb7e09070e40d1a9440b3938498c17104b3dd3c15520196ceba355c026df17d75106238349a23cec2756dccc2233f832bb967476bf1c6a959218dc7c73dc608299358dfc2b9d0fdefb3f1aea57adf5758f0db667e2055313ae8a41fcb69ac319e884f5759d9ef6ae964b22ccda4a184ff5a4224ccf07a50368d188e9feac60c6b188d5907f953505a9862c9ccaf6037eb2b4ebb25f5ee1aa951744b7b2f45d90caf14c8f50e8601a521b4df531db72e8463be6b66e53c256a9bea2d30101d63ef23056539dc57b0c4d1033a98c5c3e1e09878d3bd1182777cc434257af9f61d61c2e77128e45298c3c60d6a1bfdaf01bfafe2ff93e007d8204606ccd1c9870bdbe4c532c465a90054d85551625edab64a8726d250df7db8ddab41812cbfaf49ad7edbcd916e8b4d25f36ca43dbee36d80e836a6e489f63570fbbcb4b3b59d0e33204e55b8a35d7862a3bcdf64299bd54e513e6aef4df884ba38a4be741eff92349c2462b2349c9d85d7d653a8f20611ed1c3bf7b43cb523b3c10fcc827e49a03de7cceae51686df199ceaac80dbc84f923dc6971aba8fb45a5d05362cdee9907725ad0d1b364f9dcb5ca134edd805602d80d2fd9fd64ffe80c701f214ee39e82c9a89168e7f233ca4889a799bc3c121b7fe2b9d0fc51d2966fa44fd054e8ba2e194749127ee5cb0eaf2346d54cfdbfa56a5c2fbadc850113eb9f2ec4240ca22fc6b1790640fa2d856176c79288e6d208862d995d05815a9b6200b05550e1cd478c6bed46bcc0bc7083e7fef613961de7143a177d113fa537a44c525b91749cbdd9bc48e01b8890d84174a6ac09186418fcfb6699ab29d660a4b1bf10d956ba78c2fe2ae4efc678dc46ecb2956358f044512d83ab4b4ca6b57ba33d8c1996f7b224f547092d70b7899208dd2f0c2017559a52f38dcacbfdf00a663b2ea47e3f1e3ea1c8850ebb77f674c0babb00c354281538b2b2d70678985707c6c9e9a0aa4e87cd82bd68f40386232f3cf97b57239436fbe550708cf5acabc17396461cf2c3945583397621678c1c8c310ad668677ce2f4f9986160905015f3daf9d9aa9e8a96a6db80934caf632f398460afa6e4e85bbd77d76a1340d7441449d8946f25d438dc712722708d97aba5aa4cb19effd6df1997be6ee43888b3c64f9e85756c3a158b4c95b23acbd1988afe0226818097bbf9b576f0990a9548be31c33489c612555017acf43b2f23f609c7d50e74cb62eb301338eccb5443806eff8e9067f3d8221df6aa84001f05ec45f7197a407ef6458f639f9880d7b7455d540888dd03595a8fae8db3a242182bd85c8db851c314322550bd6497072b70c0b7fc9af9e69dea5b53e60ca0ded605bc4245fa4acf7c024748c688cb3f4f972ff764de055b0210f5aa36b8de8e9f6b46897152cb1616a00dc73ee271770d5c7fff0ee96f6fd9d7c3c6bd0d6b3d561a3932b87a2fbd6697c670d8e59324abd33e6ad3544e29be80ed165fd99ded9960fbbe0604a68aa5c6f2bd7d890516fd4beb760f357bbd092e182c06a429e2e7bc0a9b9c9c451ac6964546191ac34eb760c75f121ec8a15759250006711e1e7c1c1040caaa16825c4ffead2d3e4ed68124a65f18b6dbcc47ced886dff9a93bd83b8f550314ae4f0802399b07da3937c3424e91888e070e48b28e7f7f182969193bec096d20ece60044c12949a79a02e6c9eae935e472da96025d0a3083dd734e0833661b559b3e47bb6e06af22a3665a8943485bece20ce461594066473044c158645ef384f56af55504836502a6de9905a6753def81d954c86892d5fa5a67fbde172affc24d8775128a86adb375f3846de1031c59147e35341a83e9dcf91947cb0037d62a77d250ba763d96ecdf4a995ad491f413077a2efb4a3c33aee08123897cf64c679ce8a00e27b09d77447a08db86f465373acfa17d71c5e955ba266de0f537fec8f3b10d04c10c6a29c1e5629055f8d539dffacb38c125dfadcbd67226def310a7b6a2ab616686e5c43231ff9e7b2dea7880e854934ecf4d32960ad04e3040c80a1eaeba426805600822ceb1c77dbf4de6e70f4b506c7e1d84c6bdf8e091cff7baafd5b5d62595f70bd820f3ad07c1f67349735065b2089aaf41b95290705cb2ac5bd84263c4e8d8f72ef78a2eac7cd7c0985ec584f392371744cf0a6162342d8fb2a61b7a1915f77cf185e8cc8603b5e9b8db71d07670835e924c0940a026fd671890708c8ce10cb50c38a077b27515db8579e35654bcf6656b6eb5efe455e4bf391e1a2cb2891ea525fded93788befabd776b073d4d4bdf8a49a94420e3f7e94e4a16777fe4abb7c7a65f9ac4bc88c3ce2b241ea2b20d608075b465e4e6c0d8bb485c1cdf63eaed4b4c9126d9cde288c64bfd0c39d6d3b1fa719edfa2a07ca2f93477e99d967ea00814d7b979d526f80bb65f7ef426e768e26aedad21848596479434f4a0d89ac5c5b57e2af4fba86c376f7948e5d058fa037a05c83021ae694c2418599f0b9e2c3e704fb9121f8dac9aaa49ad0e34401026048337628099db4b698a386ae4d39d11a3b98f55a9818a05a58b8688459a9d4e03f9e1c22a1595127f096dfd7159336c4fcd55c88fc13ef63fcf1d9cce3384d09dd9104c6b60a0b467adee7d9c9bfad43f4745c55124576989dd682bf8873790d11cbf4be684e2d335c894b0a829833fc38f875452a98930329d571fbd827a485c22109d411f3041f436cb827b20da542a0b61ae0328f0505d3710bfa29dd8f65e8429f63d945b56514cdf8742ae47f99bff564ee8f4ef4ff44b4e06fc2bd9426ff3e70df9c2b5331b87ac8ebbc883863893f30caed72395f448c006fdd276832dd7eb1a250623d761258fb1542c9c1d2273ed7a0ec83678d16d4d4593dfc88deb7433be1fa02f97864e6f2d6534c33d1121fa12575f074c401f90ff4cbd2008f132c3ab54242c876102eddfe8b5571f5d3ec95ee1924a2d4885648e871c4d4e0178d45a94ba87fb7b660c6b2a5ea574483fc3d81ae86926a0c0fd28a10d1046c4e55d69082a1f81ca407ffa8b6f564fee5de51f87451f708b52cffbb9dd13a8ff579a8ac4281a12383a65263089d33ed3649e37ee9fd788df2a9b1751e277913f8809a70d4f1b8232000239508cef38d438bcb1b43851d3c258892cd3213891a3df1f3a46d14339656bcb33b1b3f37fa20ab8a495bc91e1583a2a5e9c1b49f93a9d78dacc87936bf1102724f0eb1ec31554b1b9fcadcc6fd46e5e668505270ebb01168ef6b1c26befbb0ae3c334e7dd64a5ee09e417abe5f604439614cd172d2bbe427e98eda69c8034bf69991283d5861c26be53c15c9b01aae7bd38e2b8d125266feb0c4bde6e45a1256f2db35bbd9ebb8bf3e841543144287540ac3a85a9f780a24371f634d3b0d82ae2fb3f1eb300533a06eb9230c40c51c8c49428bd5a49d02010351d579f79f9504155ec4a627554202a4c021e5ae255d73459b4597017e4b10a978f543f35cea837b24cb6b6d8854e5bcb64b8a4609a2cfbc0881dc1559384a336970c869b570832565760fc212a3472e3d00276d7bd8a89b52cfc50a2b2a7fac3c6fe851723bca57e767073049c4c7c02bcd7f0a302d0cac2c9e27c473f4aef4d58041ebbb3f6a015ccffc20d1250fe83e600b6b73ec1070f9d7757d14cb3e7cb9a4bc66da293fe5e98534fc11fcbf156bc829ae4413abd3c1095b1ad72364cc47798bec1915b3ce9d5ffdb4513a07db343c4b0dc93e6b84ff5404732d27aaa9417d8db7fb455da756f7896cbf193f9a2794275f240d8779f1c4810e5c3ff8f2b171991c6fa31b07aeb471b98132f02a2804a9f25de88d75da23b4cda4aafb5e4d3fe9ac1efc10193ff29a2b0dbbccbf201b5f4ff32f64a45c2937b9c36ee5686ebe583e5df94b76b16d80c1f3ab30ce8550897d96b53c11069ff6054bbb5f99afee33ab13ce3ba12896bd0b541ea969a9b4eddb0b33b0e88f608affc0e4359cb1e3f09f1a63b2157b201b7b504f0ff289f2cc77645e0c9c24d5ea2a22d4c97d0c61f6521827273ba031d196189f048a45c7ba30097002f1aa8928eed3af99778e92874ab0c662ba85ad4ab055f2b33fa91e66d2c1ff8e04211e3bbdc5ba1972e75aeb36ce677aaed36d3a5ed20db5fc23ffdcee0c24a6aa78c9da3550d702ce74915c2a9b1aa728923f2cf2c0c82535088b31b3baeb7699333bd6d4107fe3b4d81ee90414a4db58bb960da07663d98f6390443c236306d3c18a92022521e2dc127d466cd2a14f289637693cfd73cdae8b6aff2d4aea429df297121dd3f4ae92940f582912aaca8ae5acb75b574e601fbb958c69088713d6f6bf982b4664b8126eedb84ab58ebed5a3eace1344a690fbd84c39fa41da1fba97473574a39a727963526c71e7f773721234a7fcdd69f3067d33df722ac0b28a0b754c0cb0984b30fa2e293c7bd3d7fa68a1b962b39b6fb5450dacb767bd628f58bd71cea4f4e798bfeafa12122c00dad41d3f0cd2d5a247e2e2c65f22eee8647648da4f1a007a7f90e066a7173c1a903fbdc5fc321fec6e869e4fa04e46ee6831fd49f41625847cae94674ac97eba13e920e0280e285b27f1131ca2327029dabcb0092ac8111d1afce1484f71810a5ddb4af7412b64cc1a7039cc6a6a6a1b40ed1745b57ce6768f1024776ec055f1e14274509340c41ed6973e01a6019020a4beaa6a6bf6529cad5fa5319b5518a043c990da95e70313e82dce3dbb6a2a330b0edba491723a0f0faa307a87e39d40d1281819292fe45907d9fcd0033714187a020849e3b82cf3a2e4b0dee3306671db10b870901b59f1e4f5d7f934603ccc575af3918a46f9381199359cb71b29d2ddaf7428c20db4e7718b7c626e701ec835b0be3761d1ac42aeb9e944de764a1a88a657def2de1e9ab0475b2060272a2dc51958ac999bcb977b010de90066a10174157cad9fe6c9552d8b0567394a4772db2214eeb5e217ab4282dc59db1", 0x1000}, {&(0x7f0000005d00)="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", 0x1000}, {&(0x7f0000006d00)="454f3d1f9d68bf2492dfb290592e769bcb31b4577d94b7d719ac54f8c816ea50656ba1bf9ab71e1e165bb79ff1bd0895ac3f5d774a", 0x35}, {&(0x7f0000006d40)="8df1a5e9d52ca3dfa2cfede20126a523e9fdfb908327fa230d834732a02c1e5592563232ebb6a0455408de2861aa1730bc500ec9e324f579aa6189e73fdf79f44a236737122c7fab7e4e3a7f91ecc562a3d8738d19", 0x55}], 0x6, &(0x7f0000006e40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18, 0x40080}], 0x5, 0x8045) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) read$usbmon(r4, &(0x7f0000000180)=""/239, 0xef) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x2) [ 2241.794624][T21087] FAULT_INJECTION: forcing a failure. [ 2241.794624][T21087] name failslab, interval 1, probability 0, space 0, times 0 17:12:03 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000480)=""/52, 0x34}], 0x1, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x10000, 0x0) ioctl$TCGETX(r1, 0x5432, &(0x7f0000000040)) [ 2241.845334][T21087] CPU: 1 PID: 21087 Comm: syz-executor.4 Not tainted 5.8.0-rc3-syzkaller #0 [ 2241.854141][T21087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2241.864211][T21087] Call Trace: [ 2241.867511][T21087] dump_stack+0x1f0/0x31e [ 2241.871871][T21087] should_fail+0x38a/0x4e0 [ 2241.876295][T21087] should_failslab+0x5/0x20 [ 2241.880896][T21087] kmem_cache_alloc_node_trace+0x69/0x2b0 [ 2241.886620][T21087] ? __kmalloc_node+0x37/0x60 [ 2241.891827][T21087] __kmalloc_node+0x37/0x60 [ 2241.896332][T21087] kvmalloc_node+0x81/0x110 [ 2241.900923][T21087] seq_read+0x19b/0xce0 [ 2241.905081][T21087] ? trace_lock_release+0x137/0x1a0 [ 2241.910289][T21087] ? memset+0x1f/0x40 [ 2241.914275][T21087] full_proxy_read+0x110/0x1c0 [ 2241.919606][T21087] do_iter_read+0x44b/0x550 [ 2241.924124][T21087] do_preadv+0x17b/0x290 [ 2241.928378][T21087] ? lock_is_held_type+0x87/0xe0 [ 2241.933583][T21087] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2241.939651][T21087] do_syscall_64+0x73/0xe0 [ 2241.944081][T21087] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2241.949973][T21087] RIP: 0033:0x45cb29 [ 2241.953857][T21087] Code: Bad RIP value. [ 2241.957922][T21087] RSP: 002b:00007f9b12261c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2241.966333][T21087] RAX: ffffffffffffffda RBX: 00000000004fb820 RCX: 000000000045cb29 [ 2241.974315][T21087] RDX: 00000000000000f2 RSI: 00000000200017c0 RDI: 0000000000000004 [ 2241.982381][T21087] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 17:12:03 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r2) [ 2241.990366][T21087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 2241.998340][T21087] R13: 0000000000000886 R14: 00000000004cb816 R15: 00007f9b122626d4 17:12:03 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0463044053682f7e6395d76a257c0884ed4c1161e0f359985524f5ac192cab28910a2545858d3b5af529e44bf546e30fd15952c3b81a145966803c2ebd900fcd3f3fbe9f51706c65fb4c4eb700000000c0ffffff2ce18985c7014f74087bd79572278e89a1888cac21"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="240429bd7400fbdbdf2502000900ff0100000c0099000104000000003497890be8870108000b01ff7f0000160040000500002eb99719b96fc6c15f260490547cdac8994ba2bcfe36136b05f0d8749e41746fbbab7f097d297450d0880ab36c0865858ec373fd1c70a95fb9feda772781cf72ee8c05ca39bbc857205fe78fe24b81470adb43a49182b770b37c999d2a145469e3dacb81b4feae73aedef38f6bbf26547b4c835b9ec0238addbee062620b24af8529368206a973f8e792eda473b6acf8ee0fdc7cf3fe69fba755c01c98373f938827e056"], 0x38}, 0x1, 0x0, 0x0, 0xc00c80c}, 0x20004010) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) r5 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0xdc, r6, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x1c}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x95}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x1f}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xff}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x8001}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_SETUP={0x1c, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_TX_RATES={0x5c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, "4f60d8237b48ff88b727fa6c54fd58b67c11e0ce224c9ff73a6418"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, [@NL80211_TXRATE_HT={0xa, 0x2, "37369e58b89e"}, @NL80211_TXRATE_LEGACY={0xb, 0x1, "60058206354323"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xb1, 0xa00, 0x3, 0x7, 0x10}}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0xf2, 0x0) 17:12:03 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:12:03 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) recvmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/105, 0x69}], 0x1, &(0x7f0000000180)=""/173, 0xad}, 0x10041) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x0) 17:12:03 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x40000000) 17:12:03 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:12:03 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000480)=""/52, 0x34}], 0x1, 0x0) [ 2242.309326][T21107] binder: BINDER_SET_CONTEXT_MGR already set [ 2242.322481][T21107] binder: 21105:21107 ioctl 40046207 0 returned -16 17:12:03 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) setsockopt$inet_opts(r5, 0x0, 0xc, &(0x7f0000000000)="8c624355f6114a6bd6afa54e68f5ab94caa4fc337c006a0c422521ca64fd3693f2bf6d0d18ff1f1119ec976463d0826a2bb1a271c06a9098771169416d85a2b04941c03a2890bcc55e72c46cd411b40c09eeb883b9bf60bfa446b15fc44401ee707d0b950b8632b4c7afafb096d239d5fa5bb59e13fb2735eec188b959953bf28330ab30ce3696b2dfce86de5af1c4bcdf71e7eb58a47bdcfd2fecdfe8cb65e7759bf75fce1cb5d94a6c94a8a2ff03da5f07", 0xb2) preadv(r2, &(0x7f00000017c0), 0xf2, 0x0) 17:12:03 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) 17:12:03 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r2) preadv(r2, &(0x7f00000023c0)=[{&(0x7f0000000240)=""/4097, 0x1001}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0xf2, 0x2) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000880}, 0x40) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r6, r5) ioctl$FIOCLEX(r5, 0x5451) 17:12:03 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x48000000) 17:12:03 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r4, r3) fcntl$getown(r3, 0x9) 17:12:03 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:12:04 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/235, 0xeb}], 0x1, 0x800) 17:12:04 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:12:04 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x4c000000) 17:12:04 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6b1a9dcb6b1532dcb85a69b0aec5075625c4630c42735ce43b911a5c29959cf346782e6e410857d23bc55bfe3ab78e85c317df90b5ee00d04741ea650bcf6f3294fca727630a7115ad28a79d5a9d45300e3f1f305930430eb2536bf29a94710ad3271f0ca1f8f70ac741c6bf1a725233", @ANYRESDEC, @ANYRES32], 0x24, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000, r5}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r6, 0xc02064a4, &(0x7f0000000180)={0xc0000, 0x4, &(0x7f0000000040)=[0xfff, 0x2be7, 0x62b, 0x4], &(0x7f0000000080)=[0x5, 0x4, 0x80, 0x8a78], &(0x7f0000000100)=[0x922a, 0x32e, 0x52, 0x4]}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r7 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000006740)={0x28, 0x0, 0x2711, @local}, 0x10, 0x0) accept4$vsock_stream(r7, &(0x7f0000006780)={0x28, 0x0, 0x2711}, 0x10, 0x180800) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r8, &(0x7f00000017c0), 0xf2, 0x2) 17:12:04 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:12:04 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:12:04 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:12:08 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x8, 0x0) 17:12:08 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x68000000) 17:12:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="20630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x39) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) ptrace$cont(0x18, 0x0, 0x8, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) kcmp(r3, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000180)={@flat=@weak_handle={0x77622a85, 0x0, 0x22}, @ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/249, 0xf9, 0x1, 0x22}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}}], 0x0, 0x73c000, 0x0}) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @broadcast}, 0x10) connect$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000380), 0x0, 0x9) 17:12:08 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x5, 0x2}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="27680c4497c2975e3563488c592088de5e2f6b9d4cbbacce0d39f4850154cb886d4154e1ff587df176d400000000000000000008000000"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x100, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000, 0x4}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x0, 0x73c000, 0x0}) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000000)=0x6, 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000080)={0x2, &(0x7f0000000380)=[{@fixed}, {@fixed}]}) 17:12:08 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:12:08 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4087, 0xff7}], 0x1, 0x3) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$VT_RELDISP(r5, 0x5605) 17:12:08 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) [ 2247.582256][T21167] binder: BINDER_SET_CONTEXT_MGR already set [ 2247.594664][T21167] binder: 21160:21167 ioctl 40046207 0 returned -16 [ 2247.640453][T21167] binder: 21160:21167 unknown command 1074029344 [ 2247.653762][T21167] binder: 21160:21167 ioctl c0306201 20000200 returned -22 17:12:09 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x6c000000) 17:12:09 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x2) 17:12:09 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\t\x00\x00\x00'], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$DRM_IOCTL_IRQ_BUSID(r5, 0xc0106403, &(0x7f0000000040)={0xffffff01, 0x1e2, 0x80000001, 0x3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080)) 17:12:09 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100), 0x2, 0x100000000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)={0x20, 0x2, 0x6, 0x100, 0xffffffff, 0x7}) 17:12:09 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:12:09 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:12:09 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x3) 17:12:09 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0xf2, 0x2) 17:12:09 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0463044058317a721334e6e091b240451bcc2cccb5f5c29cc952d151a2c9ee8e7d2f362613eb60838936b5b9b7f2aa596681d0375ac4ec75a3dfcc1b"], 0x0, 0x0, 0x0}) dup2(r4, r3) vmsplice(r3, &(0x7f0000000680)=[{&(0x7f0000000180)="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", 0xfb}, {&(0x7f0000000000)="fa2defb83b815657db", 0x9}, {&(0x7f0000000700)="6873a783d3316317523fd67cf9d4cd892e0fe98dfb884272c6019867e8ec068fc72f965c07d7332c902ad82d22cb2087e467369e93029d8985ac255b0003db47fcb668", 0x43}, {&(0x7f0000000280)="2ef412f4a0bd3ea8729f69cf20b9449df9f91feecb7459880eabd582fb054cd493061c5f7009298b35de7ce4886b2b6a9c8e4b1d7a40915a0fe6e5f6cb2ba2b9002bc6745d32b50681fbef2d9d549e513783fe56045b9f5b082f55ecb3261b3c077c70b20868cbf0d7e57f52af8a4957027be492275cc584841ab4b582781dc18c3d47a88c73691a96b2958c703ab49190151f68a8f655e9dc996eaaf6f6f0524461237ccce17aa3c91675ab839c9bf579ad373a7942842a5cc65a4e051a2fd6e1de3b19ec5fbb6d90e8995e9aea2193e95b200b46bdcc000de9652e4a22ea3df660fc2a30", 0xe5}, {&(0x7f0000000380)="2c68c565e6ee867d0881389381058d2f5f26f6599ba4352e466e94129dfd92583570f6747baf2822c72e282d551fa31bc6f3097b2cb1303ae41114dc1ef4ded9f5a00ed944ce74c2747a64e2486ca9eaa60c728acd085a6894ceb01b45e3a3fd94c8665da1c72f3f9dd4fbf1185cb5ff4c866c8adac55bf2986a3a8d0c3c1b29132e4d26ac8c7ad9b783844646c1dd8d6fe8847a8ab6f8a68bc1ecaa5fa0b8b95e0d8d0f97a9c9bd689c71ae2de657ae1fc59f46ed86aebdc9f5f004a9a5fd6a65f8729f5027412a14bc2a7c446a926757c5626c9e9a6ccf9721234a04a5a40d", 0xe0}, {&(0x7f0000000480)="677e3c582141831d6465a162e56682515257d951b2d12370a1773bc684f8ad221681f395fe33162cfa2ed6f3af7338fa9203f98ae33b6395d125e782efeb697859859b9ee49df74fe08b3a1a6dffaa4ef475a5f402f308273a72adaa13ac4407e0e569bdcfa4354ca5a8ef04a53c106b38ca728b73a828600bf8f21a7ad57646e77f45907ece8a7dac5d33b0c89caf5605279eb6568d441f6354ebb758060165c429d5e8b0482cf8600edfd3e3f5507000006bebcc0ce5b6219435", 0xbb}, {&(0x7f0000000580)="ebff455056f555a4983a63c9e92f11cfe0e3ecd8aa0ff33d9b8cd7e540c74cf45f48000699bae425c56b6348a7856e33e40f5a6a4dd71712f6e7f16e4a7bb44aa7ca2a2828a91f48e09bfee45f892cde95c6831a2cb01b215189fa6af6f08b1998cd25a21d6658", 0x67}, {&(0x7f0000000600)="45d95f5692f9dba879bcc5e9e37d2e9fef039072aec893ccddd8c3d69a101a926cb304229bdc4b24e6ea6d35fc7f8819e3cae75a25b3bc764f015b0b234d15f36530d3aad5435c50e70d4e2f22b693bbc9ad29279827429e9a97f068e40f4d5e8f5266872d17d3089e1df03b05fa7eb2a074", 0x72}], 0x8, 0x2) preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:12:09 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x74000000) 17:12:12 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x0) 17:12:12 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x4) 17:12:12 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0xf2, 0x2) 17:12:12 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) getdents(r5, &(0x7f0000000000)=""/182, 0xb6) 17:12:12 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x7a000000) 17:12:12 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) r5 = creat(0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{}, {}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000140)={r6, 0x8}) dup3(r0, r4, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000000)={r6, 0x0}) ioctl$DRM_IOCTL_DMA(r4, 0xc0406429, &(0x7f00000002c0)={r6, 0x2, &(0x7f00000001c0)=[0x6, 0x100], &(0x7f0000000200)=[0x100, 0xffff8000], 0x17, 0x5, 0x40008000, &(0x7f0000000240)=[0x80, 0x5, 0x7, 0x8, 0x8], &(0x7f0000000280)=[0xffffffff, 0x1]}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x100}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0xf78a}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x40) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000480)=""/52, 0x34}], 0x1, 0x0) [ 2250.870363][T21223] binder: BINDER_SET_CONTEXT_MGR already set [ 2250.902180][T21223] binder: 21219:21223 ioctl 40046207 0 returned -16 17:12:12 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0xf2, 0x2) 17:12:12 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x7fffe000) 17:12:12 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0xf2, 0x2) 17:12:12 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x5) 17:12:12 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, 0x0, 0x0, 0x2) 17:12:12 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, 0x0, 0x0, 0x2) 17:12:16 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, 0x0, 0x0, 0x2) 17:12:16 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x7ffff000) 17:12:16 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) dup(r1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:12:16 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x6) 17:12:16 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="720098ab4fdd4d63e2bd53965c1696a8f2e4037ebfae61e27d9fa68417c891cdb88d1ab35c78140587d1d213efad1111a42a41ae97e14e40b51883aba83059564b708fc3f7a37edbefdda1e48067d50d5ed500ca75d3a56c240629fa047c1522ab25ca5f613d008ade545989fa217482d0fdb1fd284e1aeeff73a0795d3edb9941486330173694263b61441335d4292e2ff1080143069cf9dcd857ffdbd5482cfd4e911215e743f170bc7cdf20070148f9ef5031572f3c7ef087f7"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000000)={{0x7, 0xdd}, {0x7, 0x1f}, 0x28, 0x6, 0xd7}) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000480)=""/52, 0x34}], 0x1, 0x0) 17:12:16 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0463044064416f18dcfe2b52648782f606a6d65816d274278d148c27396b990d689843ffd7c1c174e5f4044dbd3b9769406bcc972bc9ebfcbcede4ea76a6c98e618d8a2c0a5008ee3b932a79d7e66af57740dccd9dbe6d4397c1eafaf96bad4fae025abd70eb239aa8091fbfedcb305d0e265b95876756cd7b167bd02f4305af807f9178f99ad20b3f2fd84780119f9d9229745afe6cc5252708fde11b790d74a4bbcc17ebef3b0450d2056bbd1522b06b6855ec"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r6, 0x0) ioctl$SIOCAX25DELUID(r4, 0x89e2, &(0x7f0000000000)={0x3, @bcast, r6}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0xf2, 0x0) 17:12:17 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) clock_settime(0x0, &(0x7f0000000000)) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = socket(0x1000000010, 0x80002, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5}]}}]}, 0x44}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) preadv(r2, &(0x7f00000017c0), 0x0, 0xfffffffffffffffe) 17:12:17 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x0) [ 2255.682164][T21273] binder: BINDER_SET_CONTEXT_MGR already set [ 2255.710322][T21273] binder: 21267:21273 ioctl 40046207 0 returned -16 17:12:17 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x2) [ 2255.815583][T21279] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 17:12:17 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x7ffffffff000) 17:12:17 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/66, 0x42}], 0x1, 0x0) [ 2255.948863][T21291] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 17:12:17 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x7) 17:12:17 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x0) [ 2256.189883][T21305] binder: BINDER_SET_CONTEXT_MGR already set [ 2256.199508][T21305] binder: 21303:21305 ioctl 40046207 0 returned -16 17:12:17 executing program 1 (fault-call:2 fault-nth:0): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x1, 0x0) [ 2256.302297][T21305] binder: 21303:21305 ioctl 8912 400200 returned -22 17:12:17 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x10000000000000) [ 2256.443906][T21313] FAULT_INJECTION: forcing a failure. [ 2256.443906][T21313] name failslab, interval 1, probability 0, space 0, times 0 17:12:17 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05632a04"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000000)=0x1000) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x39) r6 = syz_open_procfs(r5, &(0x7f0000000080)='net/tcp6\x00') preadv(r6, &(0x7f00000017c0), 0xf2, 0x2) [ 2256.496784][T21313] CPU: 0 PID: 21313 Comm: syz-executor.1 Not tainted 5.8.0-rc3-syzkaller #0 [ 2256.505486][T21313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2256.516150][T21313] Call Trace: [ 2256.519447][T21313] dump_stack+0x1f0/0x31e [ 2256.523790][T21313] should_fail+0x38a/0x4e0 [ 2256.528221][T21313] should_failslab+0x5/0x20 [ 2256.532731][T21313] kmem_cache_alloc_node_trace+0x69/0x2b0 [ 2256.538451][T21313] ? __kmalloc_node+0x37/0x60 [ 2256.543455][T21313] __kmalloc_node+0x37/0x60 [ 2256.547969][T21313] kvmalloc_node+0x81/0x110 [ 2256.552485][T21313] seq_read+0x19b/0xce0 [ 2256.556636][T21313] ? trace_lock_release+0x137/0x1a0 [ 2256.561864][T21313] ? memset+0x1f/0x40 [ 2256.565953][T21313] full_proxy_read+0x110/0x1c0 [ 2256.570820][T21313] do_iter_read+0x44b/0x550 [ 2256.575439][T21313] do_preadv+0x17b/0x290 [ 2256.579698][T21313] ? lock_is_held_type+0x87/0xe0 [ 2256.584761][T21313] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2256.590835][T21313] do_syscall_64+0x73/0xe0 17:12:17 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="a903ae983d", 0x5}, {&(0x7f0000002400)="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", 0x1000}, {&(0x7f0000000380)="389fecd6e5bca9447188a022382c1543832375af5004b0ac1096d175846c9b1c5de1dfb569747c09fa5dc056ac8383a5db5784bbcc9a092ec34b9b49ee22eba7ef1390aedb9ab8a64999d353531bac827d28b633c3a668ad3934d0b131a00125f77be315a22207149f025021cc6f964497ef08f9929d1a343b670d8f68b013531485608629eff9f2cd068b5cbb0d3d43035ca7b4820b171ebb0cd4ff082c549ba2a2d0b360ddbe5a67b0f2b35186cbf3a36f3e1f3941b7081d80cf0538a92525ee73e3299b6da86ce857fae70f0b64ba47e3", 0xd2}, {&(0x7f0000000580)="e8b56717ea41fedb0fb9588b0815b89ac8899d894bd68470b28f7a5e60fa10cff7db9dd83f7d4db4d13fff33ef2f8ad753539f71fe7b530da59d75a4e6e5f1713484ab50793a8f4812a5a560c2f37bd4901a6a258d3c84875c22639960b8a6a5933c20808ef26844d4fbf77a779f9eb8e9f25afc6705509c459a89d53c1b849ceaabf63b96a556ef7a7bffe25f57a372e9fd0fc77042a9b28372b0b57ae22aa1df64f319fa1b1ba91ef5e3b3b21e05616d5bb73ae7c73e9f952d7e9eec1314d6767fdaf34c7c1ed3c0ee1de6491793f3a6e9f31bcc5eb1bafa", 0xd9}, {&(0x7f0000000680)="4444c6d037567d9e386ff28e54d573e85f5c1656692905d80939ad31ad859bf6c36083c2665e49aec04c604889ea02eed10ba6c227663554f9d19a0748afddd8cc2815c32fa459762bdf723644680bfed93c598278ea02b53d19bf68414ed69179131544968111ca6f18d531ccadab8c7e55dd3031bef5519b78a17f6af1f4455796c1d40d876b025d37b1056139a43854d7f74072e993405f09ac6f755b35f4e57b5f258d34dd650fcbbcd46018d228c1120141462e1d7fdbb9dd8304beff22580ea8a7", 0xc4}], 0x5, 0x7f) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) [ 2256.595267][T21313] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2256.601183][T21313] RIP: 0033:0x45cb29 [ 2256.605167][T21313] Code: Bad RIP value. [ 2256.609234][T21313] RSP: 002b:00007f0e4816ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2256.617739][T21313] RAX: ffffffffffffffda RBX: 00000000004fb820 RCX: 000000000045cb29 [ 2256.626250][T21313] RDX: 0000000000000001 RSI: 0000000020000200 RDI: 0000000000000004 [ 2256.634416][T21313] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2256.643026][T21313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 2256.651539][T21313] R13: 0000000000000886 R14: 00000000004cb816 R15: 00007f0e4816f6d4 17:12:18 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x8) 17:12:18 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000380)=""/191) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffef, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x2c}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x0, 0x73c000, 0x0}) setsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000000)=0x8, 0x4) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r6 = socket$pptp(0x18, 0x1, 0x2) getpeername(r6, &(0x7f0000000180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, &(0x7f0000000080)=0x80) preadv(r5, &(0x7f00000017c0), 0xf2, 0x2) 17:12:22 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x0) 17:12:22 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(0xffffffffffffffff, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="05ff0f00009da04160d900ac229662e6402100"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0xffffffffdbffffff) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0xf2, 0x2) 17:12:22 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xe0ff7f00000000) 17:12:22 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x9) 17:12:22 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x1, 0x0) 17:12:22 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYRES16], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) r5 = pidfd_getfd(r0, r1, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x1) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) ioctl(r6, 0x9, &(0x7f0000000180)="d08fcadd3e35514318970bc6bc4d3c906f73ed941861c485d259af61a0bebc509538aa222be7807adfca0044c5812dcfaf1fb611381a5de64cbac1b4b2f98504fc20d6e6741de5baf09e855657abc3d4c47befff679cf242f8eddd65b62a0f3a558331074a") ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x73c000, 0x0}) r7 = accept4$phonet_pipe(r4, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r9, &(0x7f00000017c0), 0xf2, 0x0) [ 2261.160303][T21345] binder: BINDER_SET_CONTEXT_MGR already set [ 2261.185430][T21350] binder: BINDER_SET_CONTEXT_MGR already set [ 2261.192669][T21345] binder: 21339:21345 ioctl 40046207 0 returned -16 [ 2261.200180][T21350] binder: 21343:21350 ioctl 40046207 0 returned -16 [ 2261.252548][T21350] binder: 21343:21350 unknown command 808464432 [ 2261.281496][T21350] binder: 21343:21350 ioctl c0306201 20000200 returned -22 17:12:22 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x2000049a}], 0x1, 0x0) [ 2261.332571][T21354] binder: BINDER_SET_CONTEXT_MGR already set [ 2261.338616][T21354] binder: 21343:21354 ioctl 40046207 0 returned -16 17:12:22 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xf0ff7f00000000) 17:12:22 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xa) 17:12:22 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000000)=""/21, 0x15}, {&(0x7f0000000040)=""/87, 0x57}, {&(0x7f0000000200)=""/126, 0x7e}], 0x3, 0xfffffffbfffffffc) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000280)={0x9, 0x2, 0x0, [{0xe205, 0x8000, 0xff, 0x1, 0x92, 0x1, 0x5}, {0x3ff, 0x9, 0xb9, 0x5, 0x5, 0x7, 0x81}]}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000340)=""/147) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) 17:12:22 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="df000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000040)={@private2={0xfc, 0x2, [], 0x1}, r6}, 0x14) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/4081, 0xff1}], 0x1, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0xf2, 0x2) 17:12:22 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:12:29 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x0) 17:12:29 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xb) 17:12:29 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xf0ffffff7f0000) 17:12:29 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x7ffff000}], 0x1, 0x0) 17:12:29 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x80, 0x0) preadv(r2, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/connector\x00') r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000380)={{0x1, 0x0, @identifier="f7d2fa3d55e0de55bd4bc12e40e979a7"}}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="a98bbf91"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$VIDIOC_S_FBUF(r6, 0x4030560b, &(0x7f00000000c0)={0x82, 0x31, &(0x7f0000000180)="906b894d32babcecee3e4caf6dbeceba657d4cfbcfa169c4251e2d73c29f3dbd71fe49ddf18d67ac45d663451ff9603662e46e9d0afe3593abef3f4e8524f35567adcabb5ce61db90889c5f985d00dfbdca79d06dd9668d1a88dc6489102f7640c98cd6efebc961387fab98486e2dd7796cdcc812307348be350cc4ca61b953185bc3c123d5af72f17e13557678a4827f00f03dca7a48eba126fc6978d15cb39e7d6d1ff03dab910e5d81beb79b1187231cadf4e5a82b7c451fea70bba527ef226bfd242b79c8e5fcc3ac4e0e649387ffe8d45e3a68a4f137e8d361b35b1fa7eec9c", {0x40, 0x5, 0x34343459, 0x8, 0xfff, 0x8, 0x7, 0x3ff}}) preadv(r3, &(0x7f00000017c0), 0xf2, 0x2) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000040)=0x20010, 0x4) 17:12:29 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r4, 0x5386, &(0x7f0000000000)) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x0) 17:12:29 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) preadv(r3, &(0x7f00000017c0), 0xf2, 0x0) 17:12:29 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x401) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fd}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x0, 0x73c000, 0x0}) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, 0x0, 0x23, 0x0, 0x0, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'vlan0\x00'}}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) ioctl$DRM_IOCTL_RM_MAP(r5, 0x4028641b, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, 0x0, 0x2, 0xfe, &(0x7f0000ffc000/0x2000)=nil, 0x7d}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000380)=""/166, 0xa6}, {&(0x7f0000000440)=""/147, 0x93}], 0x2, 0x789) 17:12:29 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xc) 17:12:29 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000000)=""/182, 0xb6}], 0x1, 0x2) ioctl$RTC_PIE_OFF(r1, 0x7006) 17:12:30 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x100000000000000) 17:12:30 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0xffffffffffffffff}], 0x1, 0x0) 17:12:36 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x200000000000000) 17:12:36 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xd) 17:12:36 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x2, 0x0) 17:12:36 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000000040)=""/121, 0x79}], 0x2, 0x2) 17:12:36 executing program 5 (fault-call:6 fault-nth:0): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:12:36 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={&(0x7f0000000000)="5d87fe4b23a7cfb7c614a412274edb908ed5fd3ef4250d29c9ed729250389440b8508cc06a5b0919a35345f1debe9e98ffd2ea58141a4eca7407717b3c871e9e596ae6ace56e16d08b02d3ba4376ad50ed4f75b2b038c89560eed551efbd6a511ae07d11609e28f75b693778a0737a0a20b69470", &(0x7f0000000080), &(0x7f0000000180)="62c81fb9fc4094621bb7e4b32d202b8accdbbdec4c30db8f9541a5a2efbb6000f9f1e350f843beb50bec0a7ae9f12745c782ca2e1fffe8e77ba2799efe893dac1cd6433f1f24e24827e90ab4fc6ed89bc6742d5a5fb5c57d25984f7374f4f9573589a381be2d54f9322d05c19c231f03a2e91bd36403151f5af58af7bd5009322633bcb9380b376c9cf1aa8080d18c8edf7fb9b3d2fa2ae207e6de", &(0x7f0000000240)="d5a1bba19b1fa0be54901f2a00dd74241a1878f9445330c3b04a0390183ff6977f51028455ebaca517925f3a3f85d795ac799a22ccaa1557f14050daace1fc742bb3dc4c8e685cd24494e1629fbf229405f1281f2ca559b2b164ddfd329ca1a3875e170bbb7308c5e0343894fc862f783e3dd28686444f154c625d541fb7b15c3b8aab0c3b5537586e70872365", 0x722, r4, 0x4}, 0x38) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x2) [ 2275.321842][T21443] FAULT_INJECTION: forcing a failure. [ 2275.321842][T21443] name failslab, interval 1, probability 0, space 0, times 0 17:12:36 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) r5 = openat2(r4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40000, 0x85, 0x4}, 0x18) ioctl$BLKRAGET(r5, 0x1263, &(0x7f0000000080)) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0xf2, 0x0) [ 2275.392054][T21443] CPU: 0 PID: 21443 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 2275.400766][T21443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2275.410822][T21443] Call Trace: [ 2275.414126][T21443] dump_stack+0x1f0/0x31e [ 2275.418515][T21443] should_fail+0x38a/0x4e0 [ 2275.422947][T21443] ? kmalloc_array+0x2b/0x50 [ 2275.427539][T21443] should_failslab+0x5/0x20 [ 2275.432059][T21443] __kmalloc+0x74/0x330 [ 2275.436226][T21443] kmalloc_array+0x2b/0x50 [ 2275.440655][T21443] rw_copy_check_uvector+0x95/0x380 [ 2275.445857][T21443] ? __fget_files+0x388/0x3c0 [ 2275.450548][T21443] import_iovec+0x8a/0x2c0 [ 2275.455062][T21443] ? __fdget+0x18f/0x210 [ 2275.459323][T21443] do_preadv+0x149/0x290 [ 2275.463619][T21443] ? ksys_write+0x1b1/0x220 [ 2275.468142][T21443] ? lock_is_held_type+0x87/0xe0 [ 2275.473101][T21443] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2275.479230][T21443] do_syscall_64+0x73/0xe0 [ 2275.483658][T21443] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2275.489553][T21443] RIP: 0033:0x45cb29 [ 2275.493444][T21443] Code: Bad RIP value. [ 2275.497597][T21443] RSP: 002b:00007f6b6c46bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2275.506018][T21443] RAX: ffffffffffffffda RBX: 00000000004fb820 RCX: 000000000045cb29 [ 2275.514081][T21443] RDX: 00000000000000f2 RSI: 00000000200017c0 RDI: 0000000000000006 [ 2275.522066][T21443] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2275.530137][T21443] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000007 [ 2275.538113][T21443] R13: 0000000000000886 R14: 00000000004cb816 R15: 00007f6b6c46c6d4 17:12:36 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000280)=""/234, 0xea}], 0x1, 0x6) 17:12:36 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xe) 17:12:37 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r3, r2) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r5, r4) preadv(r5, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0xf2, 0x0) 17:12:37 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x300000000000000) 17:12:37 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x3, 0x0) 17:12:37 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x10) 17:12:37 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="4000000087b8453b494851c188d92b6605c4f8093de613568bf6c89b587078e24be7ee48c82d36f201e0d1bcdf2bc72922f8e23dbf4e947dfaf4c9e421e62c72876489e81ba825242262ca7949e696a4067450171b75fb01dc664cd8a4339b532c050a235d7f3cf021d4e0ee40c73e810ac0f7de2f3a1f91db07aac336ac247ec782dec6cb28b5dc71598e564720808a096eb7fb53d44027268879e8bfa2dbec0f74"], 0x0, 0x0, 0x0}) dup2(r3, r2) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r5, r4) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x1040}, {0xffffffffffffffff, 0xa000}, {0xffffffffffffffff, 0x180}, {r3, 0x4}, {r5, 0x4000}], 0x5, 0x8) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0xf2, 0x0) 17:12:37 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x400000000000000) 17:12:37 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) getsockopt$inet6_dccp_buf(r4, 0x21, 0xe, &(0x7f0000000000)=""/115, &(0x7f0000000080)=0x73) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x0) 17:12:37 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:12:37 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x4, 0x0) 17:12:37 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x73c000, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_MTU={0x8}]}, 0x4c}}, 0x0) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r6}, 0x10) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0xf2, 0x2) 17:12:37 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x11) 17:12:37 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) connect$nfc_raw(r2, &(0x7f0000000000)={0x27, 0x1, 0x1, 0x7}, 0x10) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x440080, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r3, 0x80184153, &(0x7f00000001c0)={0x0, &(0x7f0000000180)=[&(0x7f0000000380)="acd66c2cd65018f73faf7862a1e148ba5024aa49d298595cbc2bb6f28d4f3551cbb672d8dc82a86571e8df582062bb96d976b70be2dbdebf582fe6a4f371c6dcd75bfb6494cf9d63730302dac2d468b4a5b6f77da099744e08ea74790640e14014b0945ff5028254b0f27a115abce9f906286157643640e9effbf7d80eb7b6522ec8770ca5e6743a2522f75c5398ec077fdf9cf53688e377c7c03c8f5300b21ff12abc7e50225fa72af62c784c272c8827e7bc3263c8afd9e9251e151a9d859457fea7f5638acd646109ef64312e414758c38e875caf5e9758003d7b14db12604d7ea89894aa50d7e4875055df621af127a8422f7414d59f19", &(0x7f0000000580)="7952382014f8fd2d3eb8f56d47228b06b94d52e6bebf7b189b6140c7fb8fc4ee9ecaaba202f069b40722e7af2db7663e3b1acd1ffb469d185d7d057ab9213ebdd55cf2532725528cb6fcbea7d39dee53510c54534ffed472af6f1b0c7c035d840ac6cdfd5814ef76832142c58ee42e489f497f7da5ee60bbc8734560c349663ecdbe17a1e11705ea4369f3552c5e9981982c5c23c3b64f1514cb86265b7d3d56205c3d02d33d8b8a507a4a419124b8df8be4be8a4cef4ab8dd8fecb3bf18d69a7687a20c00ac2d69cf572b9d91fbcbbf3237", &(0x7f0000002400)="c98ece9a5eaa4ded8dcdb8eebbe5173bb9bc161f54de6de3b72481c82738ec2bf3508c5ff79bc3e820772ca16c2759261911ad216b2f6dcc3c81dd847bd13669379705fb3fe9dc0eea6020b8ff64ed01c1be733f4b79c38281c42472023ca35ebf05bd62744443b9baf15140e746d3b9f28f63831a03fe59f6219553381cd2ac0af1b10057ec8beb5cb34ec1c1060129bc2aabc3c8665abcf466ff6652801e21025dc10fdd7dfef045d6bb97d59b4a3317c73d3e70d8b648a2a287a18854f1189822e8c521284b8513028cf35e09337ebf1be3e5b12ef9295d58002b8910e3b8cbba2c24c4c9532c059dbe1f6c24d33be14f3fbb60e49ca63a2a31565f80a835610391a00f411b9888d3d976e889851c72d634b50e99d070e4e92050dac265f7d7aef29f02cba62d1f4777817a472916e771a0aebf9fc5b91498c454cdf54e40e34b7576d1441892eb519c7b090f2935102cfa90c8a34ae5fd4e914ffa46bdb18f491b229de3d1c4bffcd9ff84638a2106579967b34b29cb090fd0b35bd96d7bfb21047759b91cfb9dc99be88b5831caa9372f69f6c534ad77636c9c13a8c4c1a5d5c60c039062ea80e304ca11f4830e8bb765e3f78dabb6568312d565f49690d03025bb43ea92d8876077e393dc7b166b25d9e483c8fce87466549948b259315331cb5200beabfd87e262c6f88668f7a8423e4d668957385a4e3d089eeacac29c9c18b200c0a7e60d78f7ef6e0161bf3a4c47fa93656e7a32096c06d30c4d3c6b88eaff3b35f54dae3b0a7c8ddd96a28262fe6cea445dcbe6fed35c4004931960a04f309a725fde90ae0e4bf7daf5fb6d4c1acca16ed5135eaa83d3d25d0af3c3dfc7593a1690d7b3b53d4d341282766da6686f010ac789e940c40038708f7e7193b7910376344a4236b03ddbb400868da84370a7c686597d7b4e16bac2c16961ae336e53d2d31e0d981c6c0000a9867f19141286c712e3afa4560706b4534213481ada283a4665a8a8c3f91c39ad892033b33fbe424389fa1db4b000658886081c2631d00fb4589bc227159f4adc155cfef494b95b7aa0638748b54716a86b5569521cca65799d0f16e612a4e91de28adadb888ab7084a8894197f445f1afae223126823deeb817dbefdca0f068b0c574e6d9c2e355f52a6ae66948d7195625daf86c2353e716268a51e4081134075699f5caf1437199908c2056ecb9f0f57ffffec2a0ebc075ee737216c5d57797cc9f894d5f20a8775c1d40618109a09592460456b3ba738e7d161c23f47618677f012417630c83048e2078a7d322af5e3d2021e14b4c05871aa1af65825e4f7d2955c3ffb129db8d16d9fe716b2beb239cf9b3cb1f6578cd1e088a4da6a91d65a9aadb0cd2652055074795b1ed389b4a8ab24ab0cf9db3de15295054008322f31be37861cf605bd2bbc085e3abe640b81ea230bf8241b45fb8467515aaaca253323ba4d49a9751bd02021ec4b073b79ee12af951e731c8f90ab0078ad5cbf768520bc0796311fc760e8d158457c6838de3e23a16d5ad932e63508755e1af5683da49cfced4c8d76cbb1a6aebd2a4bd6dc1181515c70bc1e2612ffb173702d5f4aa446f980907c373967533df578aa93e504b4f7d00be75835b0cc5193f5a63c8cbc23cd30b098721ee6a4be0244da7be7173f42dce98fa6c1f7f152815828256330edcfc0828ad3b61c2deec8b530d7bbb15cb57912a2756c87abed1c2934341fe0370a3dbbbde07512a588dc4bfa1048ed523fb3435a9c488725b637d3d3104251ee9453d27f34bb5ca0abc002ca9b90e0f1a5d9eeca24cac3d8745f3b68ea8b9afe3591bf36fff4a0da6e580efd0d387b3d947584f0dbc478e41a0885b5c49922c5ee5360b6a689ad5fb07912e4467ea246edd8a5e578632210e7f88f597e94dd33b75ac8d57a956d7ebebc75c261bda7f7b8c752c62a85e297b952a7482d60b6ed09dc147906a6bb2c7ff5d38a27426db6af1c5e7cfeb4f8651e4dfb03b7eb33715026056a3afee41760de048b099a3b43e6036e21fbdbc305e43f16844fe48673ef57140229af83fd601e21678024621d18dd7d8ae8bbee3e9a4b202eaca0b34632a784991836408dc3fdb6328e598026a346e4f4a4b2d7d4e4d03ed271005a2fc96f7c74a27f4f11a2e961c8b6e345700349132bf1dfd553f9d1a4f99c31ec1fedb877a79b916aabef271deda1b926d6b02be94b08df7d44b5d9eae557a8e62b0abbc88a414f3dd402ed92395e70bdced2e72f9e98f81eb39fb9ac411604b62962e4de6211346b814ba55c9ada69b7e92bdb760ed1fefdbfd868879af68478f441623c6e964ba6cee3c18d20373f0f4c0b7cf9a309b1a734d9dbb54a1047ff754de03c26dce68550aa9bb634e2f50ed5dfab0038516f0759767ad46dc9ad3637303291e4edac8171c20e8aec616165d8d05f1332283caf3471d04b81b2256b5b9da85ab4c3500f2c3313f6b414b154ab163e8eddcec9039121b9a4f3be4b7c4e5653de57138a5695d729aab9b988409d0bb2ff23359a71a293fb12872ce6d0143186d4e7e20e0dc41cae017bb54e8ea199ff5bec13223d57c7185c520d81f131146be8cac11a85052100d3fa2e45fa25df4d1564d3c874f40cd6c1a27caf5e5221a567645af599ca73a18448d2f7f55c0351ae022dd50ce0e1860d46257568ed7aea11750371d96c18e76594d372c20d6ac55317320f2fc1d6687652b95905fd9f6c339f2db61157adecc0fbc9b38dec4ef2c6b489fef66c483af435c9c028c630a8817acebfedc515eb3d352a71a4effe82f8bc6acf433bc46957b74c184f6fb5e4d819d9e4692f2a445b72c41fdb1a78fc245868bbb52e7a2f16ad9f4823a5d11ca8c8dbb3e0636f2645ad8df98e6351c475d932d68f3bd4edaefa9d40fc2ff41fb529d2b897d1c0b56293ab8e03e9f2ae10bca2d14ca70f3cddae1c6994c1491e98732353af01557d4aebac8ea79477f9608d7c99ef6ad55fd245fa8974c4955bc1b8e423da17de6d9f7886c120619b34d159433048929b189b2079bf17e2147af849949880fc07fe74afff4c4c18196436195580b68e4602ccbd3db99dccc83350946770e432af68a1d4c27728d8e5cf0bcc984c69b011592dd6007fdcf0d02c55d7e8f4804212a4d5cf9e81a953a1a6b75279cb7ec62d9c8534baa366e5513bf08f07109d26fc528a8ef75b645becae88e1cb8018430bdf8f6cbac39529fab422003eee0b60c93063f9a3ae1d0251d154fa38e30c56de44930e5bc431bf95e3a96285b448524a5fd90f5c0318cc8e0852de6681ec08a20b3614b817eaa1914c63d30db2fd7fba06f0f1607114aa00d7fc673c26e4d0baf970093629dcfde855507318d32ec69380198ccd3a267f76957ef65255c56d12f1f5cb5e56d651e86f1cb36750f464419d94516f0861b1e26f670b6cd1ef471464518231f07d6084012ef834da86d88e1afcfa0238df7d1add98245ddc65f009700b1e8421c94a7d4d3466c13216dd5295a200cef6dcdf417e2e82adf5d561c920eafa44066e243eb31cbac4523797ad933159a67cb0d0aba453239e37d2748e72a444e8fd5904c7204eb597dcd8c52fcbdb581f48b0e31bc168abff355a549abe652cb9cc744eabd24c22b925a822421c7abe7fffb32f428e9f1332c9f00dbca1172628ac72cdb166222bc2cfb0164dfe7efb349431639db6a5cb8fc3e077aed1b490398316e5c7a99fd71a1d8a54f7ffa6fe02c58c2ec25d2e834aa70e03b4417bb6ccc96a1b9f2cbe50afea2786227584a15a6240c800f82cbe84b3f804a11e4cb1ba03caaacf7ae38a5e1cd245c55f4ffe10d885f459e48faa9124445c38615ff78476fc74d8dc957c4737f4445ea8e891dfa583657f4ea6779609c4b2f6eeb61cbfe5d9f15a39c8c21a2df1dd603dcfea47911f878875cd713b7be07d997a506f1244497904fc39bb94826a81dd304767bb10d53ed4d3ece602018de91f5da2dbd8fc38800f709851a080786df96f8e04ad622016f46225c5ee38ebd6bfc8503461e5e5046b331da724d0efec5f462f0f818d075f7c3948edabda12bbf6dc6a38bfc9bd2b18bfb7e3ba9b23aaa812ca583f578667b71ca3d7bb267468988a0e01c2338522116bc0b43793fa59628e51d8bae496f824f10a24d29bf2ca91598a3db84504d11563cc39718233b20a9110ac22ceaeca81cce120b143ed8d3e35688627ecd66d4aaa57a77ebfead8dd51ed2c32aaf6730956d3e8d20da50635537447e8b6f76bd49b020dc88a6d06508b3f25242096bb60c14534930a740541b2bf01dac4f1a389b66d014cc1536f97967553a7f2c163569c209697f97274f2e84ecb88855a538c0839ad1818dfdf7fc25d70d1b5dc7aff3df3454675e1418de36ad30a1c865ec9111ce91725cf9969f021f6b112b691a9be56bcdff6447e5f048a170cdb91ce7fcaefe0ca84a04287d13589806fadd9ec816bb71915f0bd690d3e8324b4a5313a033f5cfd6349b78512488d017563c7b0b17ff27d28a0b6fa7ab579842db2475f461cccf483b240c80f55bed1e9a8a188ba2f5cfc52f9e284bf22492f39b4757321a3fb3d3c98e48ce4346a4bb31a99cb792da14e8cc39f195808baf69cc6969fc8a782d2fa93c77cbaf4ceaa287ff763015a87c1c18e0e249c3cfa29efcb6635444ca451664f396490b0cfda60b94b871861fe25901e8bd1f68df9caa366993fec1868ce8b3dd11cdb792e700bebd9a13280cfb6ddcbd6ce35de1d55aaa636b3c8000d733753427f5dceb16429a30fd496835864f8a36913ba60343bfb8bba8ee379ea3f4a7822aea66b4628e11965a26bb1f2e1576ec09f29ac0e85b9f0bc4985d20c379182e92df711ece644ca9a935fc92d95e93a087fd647aa73e77aceface58a3c36d14fffd2a8936068b8c2f81a733c8a7073ea81d324814888f15c061409eeaf720fda1f44e1762a0b6a16c9216f95f22b2a5316e9ae5f69ed0d52c058b2d653449e6262e6b31c29e8d94ea87a9ed791dc5c4252106f7ac13aefa945b303acb09f47499a034495fc9d7b94d321664fee73ef38d6fcc16d7bcb0cd03f5dfc0dfbe1068fbdcbf23bfa4c01670f012d5eb7673927324902262e46776c075a440485a24e31b610e5b033eec6506f8f9fd9418e73d94f43e5fa87556cc2dc64198cf1ab8683bff890d0726fc5ee157af7a11e4b2be6a0afd72f4cc8335a66ddb18ca0bc136ed82fd997dc36133f0fa3ccb188219d310cc97ca1c086da393abb049e1536482a3f9a0cdf9bc2a78248d518a389a08ec730488419512985a0bfa7187fd4c4849c57952bcc98435680241cdf7b8ffe7dd67af33d23b1646e7db70d173f7c36b692a44b728e76c019886dd847eab8dd5ffe0a0e3e4b6f051d5f430a476e1fcd0058c3577c5c996bc50834f8b8c371e03d6f858c37e79987d4d2d6fd612a23a80228072a437628bd74a987c23800f6c81b08254e5791a5b6a57b6399795a7e5093b0e2e195fcd8a635fdac1cf2b010ae93308b89d0884f209529a4b459d4efa6721a125a40e39082ea25446273fbe60384339328c82d7aa8d969ece7017489c2283da45842ce2ffb75dd7d8edabcfa8d6970423601aef286998e7b8fa4a3e50d55b526e9a482f45ac7c772a2e08add9f6cd965d59d508f447e50707073cc982122a9b1a6fce6a772cfefc77ab636955ba08e9ef2660428275f2b18813d92f4a81d00a5ec11fb880e1e07a3b39fe09e1fd73e9008b619ccee7d0935435284119a2d5fc0b2a1aeb427c"]}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$LOOP_SET_CAPACITY(r6, 0x4c07) preadv(r6, &(0x7f00000017c0), 0xf2, 0x0) 17:12:37 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x500000000000000) 17:12:37 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000000)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x181042, 0x333, 0x5}, 0x18) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f00000001c0)={0x0, 0x0, [0x5ef31054, 0x7fffffff, 0x4, 0x9, 0x7f5, 0x800, 0x7, 0x100]}) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000022c0)=""/4108, 0x1000}], 0x10000058, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0xf2, 0x2) [ 2276.460436][T21499] binder: BINDER_SET_CONTEXT_MGR already set [ 2276.482165][T21499] binder: 21491:21499 ioctl 40046207 0 returned -16 17:12:37 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000000)) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x0) 17:12:38 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x12) 17:12:38 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x600000000000000) [ 2276.717216][T21504] binder: 21502:21504 ioctl 80047c05 20000000 returned -22 17:12:38 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x8, 0x2) 17:12:38 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0xf2, 0x0) 17:12:38 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x2) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000180)={{0x10000, 0x6000, 0x1b, 0x84, 0x9, 0x0, 0x1, 0x3a, 0x8, 0x3, 0x75, 0x20}, {0x100000, 0x2000, 0xa, 0x8, 0xf9, 0x1, 0x1, 0x1, 0x6, 0x4, 0xc2, 0x8}, {0x1, 0xd000, 0x0, 0xbf, 0x3, 0x3, 0x81, 0x2, 0x7, 0x8, 0x0, 0x9}, {0x6000, 0x6000, 0x8, 0x9, 0x6b, 0x0, 0x2, 0x20, 0x7f, 0x9, 0x93, 0xe0}, {0x0, 0x3000, 0x8, 0x0, 0x8, 0x81, 0x3, 0xfc, 0x39, 0x40, 0x4, 0x8}, {0x0, 0x100000, 0xc, 0x3, 0x0, 0x3, 0x0, 0xfd, 0xff, 0x9, 0x20, 0x40}, {0x4000, 0x5000, 0x5, 0xe1, 0x9, 0xe0, 0x6, 0xfe, 0x7, 0x1, 0x6, 0xfd}, {0x4, 0x3000, 0xf, 0x1, 0x2, 0x4d, 0x9, 0xa0, 0x4, 0x7f, 0x8, 0x1}, {0x0, 0x8}, {0x6000, 0x5}, 0x8, 0x0, 0xf002, 0x1, 0xf, 0x4901, 0x6000, [0x2, 0x100000001, 0x5, 0x6f]}) [ 2276.924518][T21520] binder: BINDER_SET_CONTEXT_MGR already set [ 2276.942124][T21520] binder: 21517:21520 ioctl 40046207 0 returned -16 17:12:38 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x5, 0x0) 17:12:38 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x3) [ 2276.994560][T21520] binder: BINDER_SET_CONTEXT_MGR already set [ 2277.020830][T21520] binder: 21517:21520 ioctl 40046207 0 returned -16 17:12:38 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x25) 17:12:38 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x700000000000000) 17:12:38 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="044386fc78bdd95ebb9d2c753dd3dc470a0959a59765ac4c6c49f05e91aab4a2576eb782f7f24e672edce26acb68c46eef85c8ad8173a41d48e3db51a4e290944a5b3b66cc2b24e413f81981ef38d71545c07e33f081e699f63a957c5b3d401cae5d2b987a5788ebb183ce297d9c72eec2f0c36393690edc3c77462791a41ea9b779708db0b781ddfdb3bab2ad89d57365492e82408657a87086efa81ba81e77e0c82273c142ff0d48180fb35ad65d48cdc00fdd16b4f0b53b293aa7053a71da978f9695c94c18bf6f231968f10d79d5cdf7a36189c54d416900198627026a37ebc1616a903c19b99a08915031a8706db2f94a7f48a80a66"], 0x0, 0x0, 0x0}) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r6, r5) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0xa00000, 0x1, 0x8, r5, 0x0, &(0x7f0000000080)={0x9a0921, 0x9, [], @p_u8=&(0x7f0000000040)=0x1}}) ioctl$HIDIOCSUSAGE(r7, 0x4018480c, &(0x7f0000000180)={0x2, 0x100, 0xfffffffc, 0x4, 0x7f, 0x8}) dup2(r4, r3) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000000)) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/245, 0xf5}], 0x1, 0x2) 17:12:38 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x209) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000000)={0x7ffffffffffffba, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @remote}]}) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0xf2, 0x2) 17:12:38 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x9) 17:12:38 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x48) 17:12:38 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x800000000000000) 17:12:38 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x6, 0x0) [ 2277.745784][T21520] binder: BINDER_SET_CONTEXT_MGR already set [ 2277.766115][T21520] binder: 21517:21520 ioctl 40046207 0 returned -16 17:12:43 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0xa) 17:12:43 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r5, 0xc0405519, &(0x7f0000000000)={0x5, 0x0, 0x4, 0x401, 'syz0\x00', 0x3ff}) preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:12:43 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x4c) 17:12:43 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x7, 0x0) 17:12:43 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r3, r2) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000180)=""/242, 0xf2}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000000000)=""/23, 0x17}], 0x3, 0x10001) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0xf2, 0x0) 17:12:43 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x900000000000000) 17:12:43 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000000c0)=[@exit_looper], 0x0, 0x73c000, 0x0}) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000000)={0x33, 0x20, 0x0, 0x3, 0x1, 0x4, 0x6, 0x1, 0x81, 0x4, 0x7, 0x4, 0x80, 0x1}, 0xe) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x0) 17:12:43 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x2) 17:12:43 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) splice(0xffffffffffffffff, &(0x7f0000000040)=0x5, r0, &(0x7f0000000080)=0xd2d4, 0x7, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x39) ptrace$cont(0x20, r2, 0x100000001, 0xd) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000000)='attr/fscreate\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 17:12:43 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8000, 0x0) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) r3 = dup(r1) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000180)={0xa00000, 0x9c0, 0x5, r3, 0x0, &(0x7f0000000100)={0x9909d4, 0x0, [], @p_u8=&(0x7f0000000080)=0x1}}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f0000000300)={0x2, &(0x7f00000001c0)=[{}, {@none}]}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x39) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r5, 0x0, 0x0) sched_setscheduler(r5, 0x6, &(0x7f0000000040)=0x81) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0xf2, 0x2) write$uinput_user_dev(r2, &(0x7f0000000600)={'syz0\x00', {0x1ff, 0x0, 0x1ff, 0x7ff}, 0x37, [0x8, 0xc2ad, 0x8, 0x3, 0x9, 0x9, 0x7, 0x0, 0x5b8d70c, 0x8, 0x3ff, 0x4, 0x6, 0x100, 0x4, 0x80, 0x1ff, 0x9, 0x1, 0x923, 0x9, 0x42, 0x0, 0x40, 0x401, 0x1d73, 0x4, 0x81, 0x8, 0x8001, 0x8000, 0x512, 0x2, 0x3ff, 0x4, 0x7, 0x0, 0x2, 0xb96, 0x9, 0x2, 0x8, 0x5, 0x3f, 0xb5, 0xfff, 0x0, 0xd46, 0x4, 0x5, 0x1, 0x3f, 0x5, 0x9, 0x1, 0x1, 0x91e, 0x100, 0x3, 0x9, 0x8001, 0x7, 0x9ffc, 0x487], [0x6d9, 0x6, 0x4, 0x9, 0x1000000, 0x68a3, 0x1000, 0xda, 0x7ff, 0x3ff, 0x100, 0x5, 0x8, 0x7, 0x8004, 0x7, 0x1, 0xd747, 0x36165c19, 0x2, 0x0, 0x200000, 0x3, 0x9, 0xe9, 0x3ec00, 0x7, 0x8001, 0x7f, 0x4f, 0x40, 0x8, 0x9, 0x4, 0x4, 0x401, 0x8, 0x7, 0x7, 0x0, 0xffff, 0x1ff, 0x3, 0x9, 0x101, 0x2, 0x4, 0x6, 0x2, 0x7, 0x4, 0x80000000, 0x5, 0x7fffffff, 0x4, 0x0, 0x8a4a, 0x80008000, 0x0, 0x80, 0x7, 0x8000000, 0x8e, 0x1], [0x1000, 0x8, 0x3, 0x9, 0x4, 0x1, 0x1, 0x0, 0x4, 0x1, 0x2, 0x78f4, 0x3, 0x5, 0x4, 0x80000000, 0x7fffffff, 0x4, 0x0, 0xf4, 0x3, 0x73d, 0x5, 0x7, 0x400, 0x4, 0xd7b1, 0x7, 0x7, 0x8, 0x7, 0x7fff, 0x6, 0x7, 0x80, 0x0, 0x0, 0x8, 0x6, 0x7fff, 0x9, 0x8, 0x2a6e5a3f, 0x101, 0x9f, 0xffffffff, 0x80, 0x4, 0x3, 0x1f, 0x1eb, 0x101, 0x1, 0x80, 0x6, 0x20, 0x5, 0x1, 0x7, 0x5, 0xe8c, 0x20000008, 0x4, 0x6], [0x7caa, 0xcf3, 0x400, 0xffff8b0f, 0x0, 0x3, 0x7, 0x7356fc79, 0x400, 0x1000, 0x6, 0x87b7, 0x400, 0x0, 0x5, 0x6, 0x21, 0x6, 0x2, 0x7ff, 0x7, 0xec, 0x2, 0x40, 0x6, 0xffff, 0x8, 0x1ff, 0x5, 0x194c, 0x80000000, 0x44f, 0xffffffc0, 0xfc, 0x401, 0x5, 0x5, 0xfffff235, 0xffff, 0x80000000, 0x4, 0x80, 0x40, 0x3, 0x6, 0x5, 0x8, 0x4, 0x0, 0xd940, 0x10000, 0xceac, 0x1ff, 0x3, 0x0, 0x4, 0x8001, 0x0, 0x4, 0x40, 0x3, 0x9, 0x7, 0x4]}, 0x45c) 17:12:43 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xa00000000000000) 17:12:43 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x68) 17:12:43 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x10) 17:12:43 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x5, 0x3}, {0x7, 0x8001}, {0x4, 0xfac}, {0x40, 0x1}]}) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r4, r3) signalfd4(r3, &(0x7f0000000080)={[0x13]}, 0x8, 0x80000) preadv(r2, &(0x7f00000017c0), 0xf2, 0x0) 17:12:44 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x800000000000000) 17:12:44 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x8, 0x0) 17:12:44 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000040)=0x7, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) preadv(r3, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0xf2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4880, 0x4) 17:12:44 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xb00000000000000) 17:12:44 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x22) 17:12:44 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000000)={{0x20, 0x7f}, {0x9, 0x4}, 0xff, 0x2}) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x0) 17:12:44 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x6c) 17:12:44 executing program 2 (fault-call:2 fault-nth:0): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x1, 0x0) 17:12:44 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xc00000000000000) [ 2283.367942][T21633] FAULT_INJECTION: forcing a failure. [ 2283.367942][T21633] name failslab, interval 1, probability 0, space 0, times 0 [ 2283.464552][T21633] CPU: 0 PID: 21633 Comm: syz-executor.2 Not tainted 5.8.0-rc3-syzkaller #0 [ 2283.473622][T21633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2283.484133][T21633] Call Trace: [ 2283.487519][T21633] dump_stack+0x1f0/0x31e [ 2283.492166][T21633] should_fail+0x38a/0x4e0 [ 2283.496604][T21633] should_failslab+0x5/0x20 [ 2283.501220][T21633] kmem_cache_alloc_node_trace+0x69/0x2b0 [ 2283.507078][T21633] ? __kmalloc_node+0x37/0x60 [ 2283.513509][T21633] __kmalloc_node+0x37/0x60 [ 2283.518228][T21633] kvmalloc_node+0x81/0x110 [ 2283.522994][T21633] seq_read+0x19b/0xce0 [ 2283.527241][T21633] ? trace_lock_release+0x137/0x1a0 [ 2283.532917][T21633] ? memset+0x1f/0x40 [ 2283.537340][T21633] full_proxy_read+0x110/0x1c0 [ 2283.542512][T21633] do_iter_read+0x44b/0x550 [ 2283.547256][T21633] do_preadv+0x17b/0x290 [ 2283.553114][T21633] ? lock_is_held_type+0x87/0xe0 [ 2283.560283][T21633] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2283.567552][T21633] do_syscall_64+0x73/0xe0 [ 2283.572608][T21633] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2283.579157][T21633] RIP: 0033:0x45cb29 [ 2283.583403][T21633] Code: Bad RIP value. [ 2283.588093][T21633] RSP: 002b:00007f7c1f1a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2283.597387][T21633] RAX: ffffffffffffffda RBX: 00000000004fb820 RCX: 000000000045cb29 [ 2283.605961][T21633] RDX: 0000000000000001 RSI: 0000000020000200 RDI: 0000000000000004 17:12:44 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x74) 17:12:44 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x62) [ 2283.614929][T21633] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2283.623284][T21633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 2283.631527][T21633] R13: 0000000000000886 R14: 00000000004cb816 R15: 00007f7c1f1a36d4 17:12:45 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x9, 0x0) 17:12:45 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xd00000000000000) 17:12:45 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x64) 17:12:45 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x7a) 17:12:45 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xe00000000000000) 17:12:45 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0xb0) 17:12:48 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x2, 'batadv_slave_1\x00', {}, 0x7f}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x0) 17:12:48 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x1, 0x0) 17:12:48 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x300) 17:12:48 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0xa, 0x0) 17:12:48 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x1000000000000000) 17:12:48 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0xec) 17:12:48 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x1100000000000000) 17:12:48 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x500) 17:12:48 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x2000049a}], 0x1, 0x0) 17:12:48 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x13a) 17:12:48 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x26, 0x0) 17:12:48 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x600) 17:12:51 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x176) 17:12:51 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x1200000000000000) 17:12:51 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x7ffff000}], 0x1, 0x0) 17:12:51 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x700) 17:12:51 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x2f, 0x0) 17:12:51 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x10440, 0x0) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000000380)="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") r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="55d844b99d9bb755d3d5fe8cfbca2351152c675a489815fce11ba747aea46dac83bdcf9a300f629270d27d7e4cf593e83b938a3dbf607bdad8c3c4676ebfd33f4244deee02773059d2e9a93c0896a1b536d10d18205dc44b0b65bcc191eae54c53e5ce3b3e55331d41831869e45183acb8d252a26c963a0d82d2053ec8caad719738f8e6d357a3e4423f4a1b9fc3a5ca14b095ea69eac277659703b2febf4e4c7d55bccf6c2056ffefcfc0fdd91f420802ee2631df87a9391eb31d2e", @ANYRES64=r5], 0x0, 0x0, 0x0}) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="000000000000000000000000856164660000000005ecffffffffffff00008000000000000000852a6873008c785c9b00000000001700"/68], &(0x7f00000002c0)={0xfffffffffffffce0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000080)={0x5, 0x8}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0xf2, 0x0) 17:12:51 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x0) 17:12:51 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x900) 17:12:51 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x36, 0x0) 17:12:51 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x2500000000000000) 17:12:51 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x1c4) 17:12:51 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0xffffffffffffffff}], 0x1, 0x0) 17:12:51 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x2, 0x0) 17:12:52 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x38, 0x0) 17:12:52 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x3f00000000000000) 17:12:52 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x24d) 17:12:52 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xa00) 17:12:52 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x3a, 0x0) 17:12:56 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$bt_rfcomm(0x1f, 0x1, 0x3) preadv(r3, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4080, 0xff0}], 0x1, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0xf2, 0x0) 17:12:56 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x288) 17:12:56 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x3, 0x0) 17:12:56 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x4000000000000000) 17:12:56 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xb00) 17:12:56 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x58, 0x0) 17:12:57 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2d6) 17:12:57 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x4800000000000000) 17:12:57 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x61, 0x0) 17:12:57 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xc00) 17:12:57 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x4, 0x0) 17:12:57 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x64, 0x0) 17:12:59 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0xf2, 0x0) 17:12:59 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x4c00000000000000) 17:12:59 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xd00) 17:12:59 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x311) 17:12:59 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x68, 0x0) 17:12:59 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x5, 0x0) [ 2298.694566][T21855] binder: BINDER_SET_CONTEXT_MGR already set [ 2298.721044][T21855] binder: 21849:21855 ioctl 40046207 0 returned -16 [ 2298.787116][T21855] binder: BINDER_SET_CONTEXT_MGR already set [ 2298.801655][T21855] binder: 21849:21855 ioctl 40046207 0 returned -16 17:13:00 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x6a, 0x0) [ 2298.862063][T21855] binder: 21849:21855 ioctl 8912 400200 returned -22 17:13:00 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xe00) 17:13:00 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x6800000000000000) 17:13:00 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x35f) 17:13:00 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x6, 0x0) 17:13:00 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x6c, 0x0) [ 2299.532464][T21888] binder: BINDER_SET_CONTEXT_MGR already set [ 2299.550283][T21888] binder: 21849:21888 ioctl 40046207 0 returned -16 [ 2299.592554][T21895] binder: BINDER_SET_CONTEXT_MGR already set [ 2299.598767][T21895] binder: 21849:21895 ioctl 40046207 0 returned -16 17:13:05 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x1100) 17:13:05 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x6c00000000000000) 17:13:05 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x39a) 17:13:05 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x8a, 0x0) 17:13:05 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x7, 0x0) 17:13:05 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) connect$l2tp(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote, 0x4}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e22, @loopback}, 0x8c, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7f, 0x5, 0x12e1}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x0) [ 2304.097510][T21910] binder: BINDER_SET_CONTEXT_MGR already set [ 2304.125807][T21910] binder: 21906:21910 ioctl 40046207 0 returned -16 [ 2304.186925][T21910] binder: BINDER_SET_CONTEXT_MGR already set [ 2304.195467][T21910] binder: 21906:21910 ioctl 40046207 0 returned -16 [ 2304.212409][T21910] binder: 21906:21910 ioctl 890c 20000000 returned -22 17:13:05 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x93, 0x0) 17:13:05 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x7400000000000000) 17:13:05 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x1200) 17:13:05 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x3e8) 17:13:05 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x8, 0x0) 17:13:05 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x9a, 0x0) 17:13:06 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x2500) 17:13:06 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x7a00000000000000) 17:13:06 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x423) 17:13:06 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x9c, 0x0) 17:13:06 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x9, 0x0) 17:13:06 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xffffffff00000000) 17:13:06 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x4000) 17:13:06 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x47d) 17:13:06 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) preadv(r3, &(0x7f00000017c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)={'#! ', './file0', [{0x20, 'fd/3\x00'}, {0x20, '[).['}], 0xa, "3e055060a5eb02d07ac70dcfce7114103b42827850557ad398c7fde6455d76464f590f4038dce399e9cbfa04487d857c9b407a7422816f9ec6337d57e63931fa2ebb3e73cc19587bb9116f4ef37eb94747fb5df8fc8fb8d495b31a27ac1f787e4b0b6673bc8b9e5e7d3fc4c8bdde7aa09486"}, 0x88) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x30001, 0x0) 17:13:06 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x9e, 0x0) [ 2305.405805][T21967] binder: BINDER_SET_CONTEXT_MGR already set [ 2305.419328][T21967] binder: 21966:21967 ioctl 40046207 0 returned -16 17:13:06 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0xa, 0x0) 17:13:06 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x4800) 17:13:06 executing program 3: seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x2) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000001c0)=""/4086, 0xff6}], 0x1, 0xfff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x200, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000011c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000001280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, r5, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000040)=0x5) preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) 17:13:06 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x54e) 17:13:06 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0xbc, 0x0) [ 2305.699137][T21983] binder: BINDER_SET_CONTEXT_MGR already set [ 2305.712088][T21983] binder: 21979:21983 ioctl 40046207 0 returned -16 17:13:07 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x4c00) 17:13:07 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x589) 17:13:07 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0xc5, 0x0) 17:13:07 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x26, 0x0) 17:13:07 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x6800) 17:13:07 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0xcc, 0x0) 17:13:07 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x5d1) [ 2306.512661][T21988] binder: BINDER_SET_CONTEXT_MGR already set [ 2306.520920][T21988] binder: 21979:21988 ioctl 40046207 0 returned -16 [ 2306.569412][T22013] binder: BINDER_SET_CONTEXT_MGR already set [ 2306.580421][T22013] binder: 21979:22013 ioctl 40046207 0 returned -16 [ 2306.587752][T22016] binder: 21979:22016 ioctl 40045612 20000040 returned -22 17:13:08 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x2f, 0x0) 17:13:08 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x6c00) 17:13:11 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x7fff) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000040)) preadv(r2, &(0x7f00000017c0), 0xf2, 0x0) 17:13:11 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0xce, 0x0) 17:13:11 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x611) 17:13:11 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x36, 0x0) 17:13:11 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x7400) 17:13:11 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000000000001"], 0x34}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x1f) write$binfmt_misc(r4, &(0x7f0000000380)=ANY=[], 0x4240a2a0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/zoneinfo\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="000800000000fcdbdf2502000000cc0008800c000780080006006d0000000c00078008000600ab0000002400078008000500bac2676408000500188bbd5b0800050000000000080005000e4f636a14000780080006006a00000008000500cb70be261c0007800800060056000000080006002700000008000500b0b2b0361400078008000600a900000008000600c7000000240007800800060056000000080005008469c41a08000600dd00000008000600ac00000024000780080005000000000008000600f0000000080005000000000008000500a93f6464"], 0xe0}, 0x1, 0x0, 0x0, 0x90}, 0x4000010) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x38, r6, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x40) sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, r6, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}}, 0x8000) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x104010}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x37c, r6, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xd4, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb81c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6160}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xba9e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x957f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x955f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5722}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe47f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9eec}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3aa15a16}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9577}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf5df}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x19ec}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51e9c2a9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfe14}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e50a3ff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4bca}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a7824d1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x437b9ab7}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7be3933}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7789}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa058}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7bcc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x167abec9}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xf0, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4304dcd7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9d0}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc233}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7906ca9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x406adb1c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa667}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7659cb1a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x50201e3}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x286005e0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x667c2d01}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5cf7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68a48145}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd9de}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ae0a611}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72a7b759}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7281}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ded46a8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x36b4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8a4c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd4cd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6102043e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc9fd}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe53f2e1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xce70}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29e5bfd2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf5b8}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xac, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x90f3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd15d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9780}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xca4a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65a52298}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54cc3259}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b0e6e25}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3632}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x479d74a2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e95a516}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x32f4}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7249}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x322d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9279}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5db579fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xada6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd8f1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x97ad}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7c3a}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xc4, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c166e10}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x762e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b7a0f7f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b180b51}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a80e654}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf73e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6225}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43ef714b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2714}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9f16}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd1b7877}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcb81}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb455}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x583727a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4912}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdabb}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc096}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xacaf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d672391}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8301}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe88b50c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x461f4cc4}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x37c}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0xf2, 0x0) 17:13:11 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x38, 0x0) 17:13:11 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x7a00) 17:13:11 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0xd0, 0x0) 17:13:11 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x64f) 17:13:11 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x3a, 0x0) 17:13:11 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0xee, 0x0) 17:13:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x73c000, 0x0}) ioctl$CAPI_INSTALLED(r2, 0x80024322) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000080)=0x712e) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0xf2, 0x0) 17:13:16 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000005c0)={0xffffffffffffff49, 0x0, &(0x7f0000001740)=ANY=[@ANYRES32], 0x0, 0x0, 0x0}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630140"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) accept$unix(r6, &(0x7f0000000040)=@abs, &(0x7f0000000100)=0x6e) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x3, 0x8}, 0xc) dup2(0xffffffffffffffff, r7) r8 = dup(r3) preadv(r8, &(0x7f0000000540)=[{&(0x7f0000000240)=""/179, 0xb3}, {&(0x7f0000000300)=""/111, 0x6f}, {&(0x7f00000001c0)=""/42, 0x2a}, {&(0x7f0000000380)=""/23, 0x17}, {&(0x7f0000000600)=""/79, 0x4f}, {&(0x7f0000000440)=""/206, 0xce}], 0x6, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r9, &(0x7f00000017c0), 0xf2, 0x0) 17:13:16 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x100000) 17:13:16 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x683) 17:13:16 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x58, 0x0) 17:13:16 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0xf7, 0x0) 17:13:16 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0xf1681d1ad0e64bad, 0x20, 0x800, 0x1000, 0xfffffc01, 0x0, 0x18, 0x1, {0x5, 0x80000000}, {0xffffffff}, {0xffffffff, 0x8}, {0x7}, 0x6, 0x1, 0x9, 0x5, 0x0, 0x1ff, 0x7, 0x800, 0x71, 0x7f, 0x9, 0x9, 0x1, 0x0, 0x0, 0x1}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x0) [ 2315.168537][T22097] binder: BINDER_SET_CONTEXT_MGR already set [ 2315.195770][T22097] binder: 22091:22097 ioctl 40046207 0 returned -16 [ 2315.290537][T22097] binder: BINDER_SET_CONTEXT_MGR already set [ 2315.306465][T22097] binder: 22091:22097 ioctl 40046207 0 returned -16 17:13:16 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x61, 0x0) 17:13:16 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0xfe, 0x0) 17:13:16 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xe0ff7f) 17:13:16 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0xf2, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x29287771}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x84}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4008015) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_MTU={0x8}]}, 0x4c}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="650000be370c376800", @ANYRES16=0x0, @ANYBLOB="000129bd7000ffdbdf2508000000050033000100000005002a00010000000500380001000000080034000900000005002a000000000008000300", @ANYRES32=r7, @ANYBLOB="08003c000100000005002a000100000005002a000000000008002c0002000000"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0005b1e239ea993bef6b84ea0c"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x0, 0x73c000, 0x0}) ioctl$SNDCTL_DSP_GETIPTR(r5, 0x800c5011, &(0x7f00000001c0)) 17:13:16 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x777) 17:13:17 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x64, 0x0) 17:13:17 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xf0ff7f) 17:13:17 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x102, 0x0) 17:13:17 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x7e1) 17:13:17 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x68, 0x0) 17:13:17 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x120, 0x0) 17:13:25 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x9a4) 17:13:25 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x1000000) 17:13:25 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x129, 0x0) 17:13:25 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x6a, 0x0) 17:13:26 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x2000000) 17:13:26 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000380)={@fda={0x66646185, 0x2, 0x0, 0x30}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x20, 0x48}}}], 0x0, 0x73c000, 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(0xffffffffffffffff, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="21c12b260000ff"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x5, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0xfffffffffffffec9}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x0, 0x73c000, 0x0}) r6 = perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x20, 0x7f, 0x1, 0x0, 0x3ff, 0x4100, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_bp={&(0x7f0000000000), 0xc}, 0x10000, 0x5f7d, 0x2, 0x2, 0xf381, 0x0, 0xdf}, 0xffffffffffffffff, 0x3, r5, 0x1) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x1449}, {r6, 0x54b}, {r0, 0x40}], 0x3, 0x7) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0xf2, 0x0) 17:13:26 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x9e4) 17:13:26 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x6c, 0x0) 17:13:26 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x130, 0x0) 17:13:26 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000000)=""/120) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x0) 17:13:26 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r2, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@file_umask={'file_umask'}}, {@part={'part'}}, {@type={'type', 0x3d, "ae4bf3ae"}}, {@gid={'gid', 0x3d, r4}}]}) r5 = getegid() r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@file_umask={'file_umask'}}, {@part={'part'}}, {@type={'type', 0x3d, "ae4bf3ae"}}, {@gid={'gid', 0x3d, r7}}]}) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@file_umask={'file_umask'}}, {@part={'part'}}, {@type={'type', 0x3d, "ae4bf3ae"}}, {@gid={'gid', 0x3d, r9}}]}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [{0x2, 0x5}, {0x2, 0x1}, {0x2, 0x2, r2}], {}, [{0x8, 0x3, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r7}, {0x8, 0x4, r9}], {0x10, 0x7}, {0x20, 0x1}}, 0x5c, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) preadv(r10, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/150, 0x96}, {&(0x7f0000000280)=""/161, 0xa1}, {&(0x7f0000000100)=""/31, 0x1f}, {&(0x7f0000000340)=""/201, 0xc9}], 0x4, 0x0) 17:13:26 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0xa25) 17:13:26 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x402000, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200000, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000180)=0x621d02b8) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000240)=ANY=[@ANYRES64=r2], 0x0, 0x0, 0x0}) dup2(r5, r3) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) fstat(r6, &(0x7f00000002c0)) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x1) 17:13:26 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x3000000) 17:13:26 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x132, 0x0) 17:13:26 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x0) 17:13:26 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x8a, 0x0) 17:13:26 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000040)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x0) 17:13:26 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000140)=ANY=[], 0x3c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000000)={0x2, "7f19a456641177217fb26670b3bd51261d31ededeaf3b35334bffe68537036cf", 0x1}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x80000000000000) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f0000000380)) 17:13:26 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0xb20) 17:13:27 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x134, 0x0) [ 2325.708438][T22223] binder: BINDER_SET_CONTEXT_MGR already set [ 2325.729232][T22223] binder: 22220:22223 ioctl 40046207 0 returned -16 17:13:27 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x4000000) 17:13:27 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x93, 0x0) 17:13:27 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x152, 0x0) 17:13:27 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0xb85) 17:13:27 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x9a, 0x0) 17:13:27 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x5000000) 17:13:27 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x15b, 0x0) 17:13:27 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x9c, 0x0) 17:13:33 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) sendto$inet(r1, &(0x7f0000000000)="25e42fd7e08a52bc697cf9d99555caea4215c48f06384242a6844a140c6ebd4826a68932ee64dd651b8d4a27ccc93b404d14b13b88f9b716a3bee0caa8b0bfaaeedce810af", 0x45, 0x404c014, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x2a00, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x0) 17:13:34 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') openat$cgroup_type(r0, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) 17:13:34 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0xcfc) 17:13:34 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x6000000) 17:13:34 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x162, 0x0) 17:13:34 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x9e, 0x0) 17:13:34 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0xf0b) 17:13:34 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0xbc, 0x0) 17:13:34 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x164, 0x0) 17:13:35 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0xf69) 17:13:35 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x7000000) 17:13:35 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0xc5, 0x0) 17:13:38 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0xfc8) 17:13:39 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x8000000) 17:13:39 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x166, 0x0) 17:13:39 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0xcc, 0x0) 17:13:39 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000180)={0x2, 0x7, 0x0, [{0x7, 0x10001, 0x3, 0x7a, 0x4, 0x5, 0x1}, {0x8, 0x5, 0xff, 0x3, 0x7, 0x8, 0x9}, {0xf5, 0x7f, 0x2084752e, 0x3f, 0xff, 0x6, 0x1f}, {0x100000001, 0xd60b, 0x9, 0x1, 0x9, 0xff, 0xf9}, {0xb90d, 0x2, 0xc72, 0x1f, 0x40, 0x1, 0x9}, {0x3ff, 0x6, 0xffff, 0x1, 0x3f, 0x80, 0x1}, {0x89bc, 0x1e, 0x100000000, 0x6, 0x0, 0xf7, 0x3}]}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x0) 17:13:39 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x1cfc) 17:13:39 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x9, 0xffffffffffffffff, &(0x7f0000000380)="da6ada8648ec42db98aa0102b07f3f35bb10489c99fd8e7c60eabdbd5176b2a286941f18a6b0ba75870fc109b56b7a953236eb43d83b51e16e7dc5a6781f473c83cdccd679fc3a05b29a1f5288463f72ed387f8c24f159dbd770771b3928d7a955cb5cb566c9448b5704a9a8b37eac666340ee13e35d3f90f3f27489837743616f71cd069762801dbc8d109c2e01e1a943d249507c59c4ade5f5aa15463d1aed09942a42bab480214ae763653ec47690ecf91e3e2614e0b82a4f4ff398abf697edfac71f9221ead25dbc6e25744aacb97bed34bf9c2cb4", 0xd7, 0x8, 0x0, 0x3, r0}]) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0xf2, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) getpeername$qrtr(r4, &(0x7f0000000000), &(0x7f0000000040)=0xc) 17:13:39 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x184, 0x0) 17:13:39 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0xce, 0x0) 17:13:39 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x1f0b) 17:13:39 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x9000000) 17:13:40 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x18d, 0x0) 17:13:40 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x1f69) 17:13:40 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xa000000) 17:13:40 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0xd0, 0x0) 17:13:40 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x194, 0x0) 17:13:48 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x0) 17:13:48 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x1fc8) 17:13:48 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0xee, 0x0) 17:13:48 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xb000000) 17:13:48 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x196, 0x0) 17:13:49 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0), 0x0) sendto$inet(r3, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0xe, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)={r4, 0x7}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={r5, 0x1f}, 0x8) 17:13:49 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0), 0x0) sendto$inet(r5, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0xe, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={r6, 0x3}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r7, @in={{0x2, 0x4e23, @broadcast}}, 0x8001, 0x5, 0x83, 0x4, 0x2d, 0x7, 0x40}, &(0x7f0000000080)=0x9c) preadv(r1, &(0x7f00000017c0), 0xf2, 0x0) 17:13:49 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x198, 0x0) 17:13:49 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0xf7, 0x0) 17:13:49 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xc000000) 17:13:49 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0xfe, 0x0) 17:13:49 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x1b6, 0x0) 17:13:52 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x80103, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x0) 17:13:52 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xd000000) 17:13:52 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x102, 0x0) 17:13:52 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x80, 0x0) ioctl$BLKRESETZONE(r4, 0x40101283, &(0x7f0000000180)={0x3, 0x2b}) r5 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="056640881b84abe4dc464e5c5458251fe300"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) preadv(r5, &(0x7f00000017c0), 0x0, 0x20002) 17:13:52 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x1bf, 0x0) 17:13:53 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r4, 0x800455d1, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 17:13:54 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x120, 0x0) 17:13:54 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xe000000) 17:13:54 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000000), 0x4) preadv(r3, &(0x7f00000017c0), 0xf2, 0x2) 17:13:54 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x1c6, 0x0) 17:13:54 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x7) preadv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/222, 0xde}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000000000)=""/189, 0xbd}], 0x3, 0x0) [ 2353.376378][T22501] binder: BINDER_SET_CONTEXT_MGR already set [ 2353.382636][T22501] binder: 22497:22501 ioctl 40046207 0 returned -16 17:13:54 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x1c8, 0x0) 17:13:58 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = accept4$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x2710, @my=0x0}, 0x10, 0x0) fstat(r0, &(0x7f0000000380)) r3 = dup(r1) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = dup2(r5, r4) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563d9b2"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x0, 0x73c000, 0x0}) getsockname$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x20) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') fcntl$getflags(r2, 0xb) preadv(r7, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/2, 0x33}, {&(0x7f0000002400)=""/4096}], 0x1, 0x0) 17:13:58 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002e40)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000002f40)=0xe8) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000002f80)='/dev/full\x00', 0x80000, 0x0) bind$xdp(r0, &(0x7f0000002fc0)={0x2c, 0x8, r1, 0x2e, r2}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2a, 0xffffffff, 0x8000}, 0xc, &(0x7f00000024c0)=[{&(0x7f0000000100)="fcde42c1a7fc3eefd3e385fbdd004097b16acad312305fe6b66d2abdabda58aa338cf9546450b56fb319be124fd89fd8629c2bc311e2a630c24399505f0393405f7ebf9bd55d768286ddc64c2d7e3ffb773da9510a020c05c2d515f8076881eceefa7b45e04d392252347cc9adfd9433c7", 0x71}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="e4a73bf413f08aad27d3c1d10bd2c085ab91c6fc5b8a4d4b331de91d2e5a3480e5fe552794d30f1ce7b3f8b99c32826cb44411365b34a8624caa1c23d883fe546f9904d3ca3427a1e4a177250a16b047e8372fea4ea635833aed3024a423616fccc83ea6b29ac6aafaa0398044dfa04294b1d908d02413a451a014de4875a64e4d74d6b10042085e8a54ae22958889b7be7d996bd6e0f87fffff91e48484d8f3b97640da6e8fb154094047f82f7d8aad717880da86bede207beee98c858a54e8e6bc06e793044550c8a49257668709d64f50414bf7413bc981a1a3f853367acf589fba57848e74a3631fe8027c3c9aa655d5a1c5cb", 0xf5}, {&(0x7f00000022c0)="f8a6a8925161910c6cbaf3eaf4565b72b04d4bd6189af434606239313f815c50ce0edbb5ee396fb7edb4e3a2821bba80171abe5143e43b9ca6fb0fafbf38eb1b8fd2a58550e0d106a2db7a87e6821b21ae6549d31fd2056d35e8fc9d3bfd7947852560aa68fb7e13", 0x68}, {&(0x7f0000002340)="b0e9589b081dba717621eb0f4a145026b705df6389b1918950c3003b4b976c9138f0195da04a9eb9833acf7864c162b6bcb3fce84d191a7bad05d9714662a1618e54228aefebab055e547f4c10aea963812ceffffd5008f23d7a29e244fcce", 0x5f}, {&(0x7f0000002400)="9cbed9285b771083060427851ce20a765b488024b76de1a50f25b167ad28dea773ab86226ac094b26c381bc83ba43971762e6bd56b2108215b1b236e6a0b12f15cafc76a30195e7e30558e015d8234d81025160968e949ef1078c047e6e0344ee6cb29a89f5d27469f642c31b073f5fed449cf3f0f5b9738bffa5f5f6236ee4213cf6017e79847b23e90f3e9e72df48862090b7455cd07c258c8ea1571dd0f8ec6aaa01b47f76b7d28802aa58056bb3b37a4cf2606d8a0", 0xb7}], 0x6, 0x0, 0x0, 0x8054}, 0x38) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x2) 17:13:58 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x10000000) 17:13:58 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x129, 0x0) 17:13:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f00000001c0)={0x3, [[0x7, 0x7, 0x0, 0x2, 0x8, 0x7ff, 0x7, 0x3], [0x5, 0x10001, 0x7, 0x9, 0x8, 0x400, 0x7, 0xfb], [0x4, 0x0, 0xaa, 0x9, 0x5, 0x6, 0x21e8, 0x7f]], [], [{0x5, 0x80000001, 0x0, 0x1, 0x1}, {0x7, 0x4c49}, {0x9f, 0x762b}, {0x40, 0x80000000, 0x0, 0x0, 0x0, 0x1}, {0x7, 0x32, 0x0, 0x1, 0x1, 0x1}, {0xb, 0x9, 0x0, 0x1, 0x1}, {0x8, 0x5, 0x1, 0x1}, {0x3, 0xffffffa1, 0x0, 0x0, 0x1, 0x1}, {0x3, 0x6, 0x0, 0x1, 0x0, 0x1}, {0x7fff, 0x95a6, 0x1, 0x1, 0x1}, {0x5, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x2, 0x69f5, 0x1, 0x1, 0x1}], [], 0x1}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x0) 17:13:58 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x1ca, 0x0) [ 2357.250520][T22530] binder: BINDER_SET_CONTEXT_MGR already set [ 2357.292244][T22530] binder: 22527:22530 ioctl 40046207 0 returned -16 17:13:58 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200084}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x1411, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x14}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x2) [ 2357.339905][T22536] binder: BINDER_SET_CONTEXT_MGR already set [ 2357.351772][T22536] binder: 22532:22536 ioctl 40046207 0 returned -16 [ 2357.361207][T22530] binder: BINDER_SET_CONTEXT_MGR already set 17:13:58 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x1e8, 0x0) [ 2357.424471][T22530] binder: 22527:22530 ioctl 40046207 0 returned -16 17:13:58 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x11000000) 17:13:58 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) sendmsg$AUDIT_TTY_SET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80010000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x100, 0x70bd2c, 0x25dfdbfe, {0x1}, ["", "", "", "", "", "", "", ""]}, 0x18}}, 0x800) socket$alg(0x26, 0x5, 0x0) preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) [ 2357.497795][T22544] binder: BINDER_SET_CONTEXT_MGR already set [ 2357.514519][T22544] binder: 22542:22544 ioctl 40046207 0 returned -16 17:13:58 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x130, 0x0) 17:13:58 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f0000000000), 0x0, 0x0) 17:13:59 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x1f1, 0x0) [ 2357.690928][T22555] binder: BINDER_SET_CONTEXT_MGR already set [ 2357.699577][T22555] binder: 22554:22555 ioctl 40046207 0 returned -16 17:13:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x0) [ 2357.765276][T22555] binder: BINDER_SET_CONTEXT_MGR already set [ 2357.776239][T22555] binder: 22554:22555 ioctl 40046207 0 returned -16 17:13:59 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x12000000) 17:13:59 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x80000001, 0x300) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x2) 17:13:59 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0xf2, 0x2) 17:13:59 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x132, 0x0) 17:13:59 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x1f8, 0x0) 17:13:59 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f0000000080)={0x9d0000, 0x52, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x990a67, 0x1, [], @p_u16=&(0x7f0000000000)=0x4}}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) ioctl$SOUND_MIXER_WRITE_VOLUME(r5, 0xc0044d0c, &(0x7f0000000100)=0x60) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0xf2, 0x0) 17:13:59 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) getsockopt$inet_tcp_buf(r5, 0x6, 0x1a, &(0x7f0000000100)=""/117, &(0x7f0000000000)=0x75) 17:14:06 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x0, 0x962) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000040)={0x9d0000, 0x3f, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x990a5e, 0xffffff85, [], @ptr=0x60d1}}) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000001c0)={0x8, @vbi={0x8000, 0x401, 0x4, 0x32315241, [0x4, 0x4], [0x4, 0x1], 0x1}}) semget$private(0x0, 0x1, 0xc) 17:14:06 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x134, 0x0) 17:14:06 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x1fa, 0x0) 17:14:06 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x25000000) 17:14:06 executing program 5: futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000002e40)=[{&(0x7f0000000080)=0x2, 0x2}, {&(0x7f00000011c0)=0x1}, {&(0x7f0000001200)=0x2, 0x2}, {&(0x7f0000001240)=0x1}, {&(0x7f0000001280)=0x2, 0x1}, {&(0x7f00000022c0), 0x1}, {&(0x7f0000002300), 0x1}, {&(0x7f0000002340)=0x1, 0x1}, {&(0x7f0000002380), 0x1}, {&(0x7f0000002400)}, {&(0x7f0000002440)=0x1, 0x2}, {&(0x7f0000002480)=0x2}, {&(0x7f00000024c0)=0x2, 0x2}, {&(0x7f0000002500)=0x1}, {&(0x7f0000002540)=0x10000, 0x1}, {&(0x7f0000002580)}, {&(0x7f00000025c0)=0x2, 0x2}, {&(0x7f0000002600), 0x1}, {&(0x7f0000002640)}, {&(0x7f0000002680)=0x2}, {&(0x7f00000026c0), 0x1}, {&(0x7f0000002700)=0x1, 0x2}, {&(0x7f0000002740)=0x1}, {&(0x7f0000002780)=0x1}, {&(0x7f00000027c0)=0x1, 0x1}, {&(0x7f0000002800)=0x2, 0x1}, {&(0x7f0000002840)=0x2, 0x2}, {&(0x7f0000002880)}, {&(0x7f00000028c0)=0x1}, {&(0x7f0000002900)=0x2, 0x1}, {&(0x7f0000002940)=0x1}, {&(0x7f0000002980)}, {&(0x7f00000029c0)=0x1}, {&(0x7f0000002a00)=0x2}, {&(0x7f0000002a40)=0x2, 0x2}, {&(0x7f0000002a80)=0x1}, {&(0x7f0000002ac0), 0x2}, {&(0x7f0000002b00)}, {&(0x7f0000002b40)=0x1, 0x2}, {&(0x7f0000002b80)=0x1, 0x2}, {&(0x7f0000002bc0)=0x1}, {&(0x7f0000002c00)=0x1, 0x2}, {&(0x7f0000002c40)=0x2, 0x2}, {&(0x7f0000002c80)=0x2, 0x1}, {&(0x7f0000002cc0)=0x2, 0x1}, {&(0x7f0000002d00)=0x1, 0x2}, {&(0x7f0000002d40)=0x1}, {&(0x7f0000002d80)=0x2, 0x1}, {&(0x7f0000002dc0)}, {&(0x7f0000002e00), 0x2}], 0xd, 0x32, &(0x7f0000003180), 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/142, 0x8e}], 0x2, 0x2) 17:14:06 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x3, 0x7, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x0) [ 2365.035618][T22620] binder: BINDER_SET_CONTEXT_MGR already set [ 2365.041637][T22620] binder: 22615:22620 ioctl 40046207 0 returned -16 17:14:06 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x1fc, 0x0) [ 2365.114755][T22620] binder: BINDER_SET_CONTEXT_MGR already set [ 2365.134398][T22620] binder: 22615:22620 ioctl 40046207 0 returned -16 17:14:06 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x152, 0x0) [ 2365.171119][T22626] binder: 22615:22626 ioctl c0205647 20000040 returned -22 [ 2365.240427][T22620] binder: BINDER_SET_CONTEXT_MGR already set [ 2365.257794][T22620] binder: 22615:22620 ioctl 40046207 0 returned -16 [ 2365.285976][T22634] binder: BINDER_SET_CONTEXT_MGR already set [ 2365.299359][T22634] binder: 22615:22634 ioctl 40046207 0 returned -16 [ 2365.316592][T22620] binder: 22615:22620 unknown command 10289152 [ 2365.325154][T22634] binder: 22615:22634 ioctl c0205647 20000040 returned -22 17:14:06 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x40000000) 17:14:06 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x21a, 0x0) [ 2365.366878][T22620] binder: 22615:22620 ioctl c0306201 20000280 returned -22 17:14:06 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x15b, 0x0) 17:14:06 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0), 0x0) sendto$inet(r1, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0xe, &(0x7f000059aff8)={r2}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={r2, 0x84, &(0x7f0000000000)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x9, @loopback, 0x1}, @in6={0xa, 0x4e23, 0x96c, @loopback}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e23, 0x4cd, @mcast1, 0x7f}]}, &(0x7f0000000140)=0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x0) 17:14:06 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000140)={0x71, 0x6f, 0x1, {0x8, [{0x2, 0x3, 0x6}, {0x20, 0x0, 0x1}, {0x1, 0x2, 0x2}, {0x0, 0x0, 0x3}, {0x80, 0x4, 0x6}, {0x0, 0x1, 0x3}, {0x8, 0x1, 0x6}, {0x8, 0x0, 0x1}]}}, 0x71) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r3, 0x10000000) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4086, 0xff6}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x2) [ 2365.683589][T22649] binder: BINDER_SET_CONTEXT_MGR already set [ 2365.699712][T22649] binder: 22647:22649 ioctl 40046207 0 returned -16 17:14:07 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x48000000) 17:14:07 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x223, 0x0) 17:14:07 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x162, 0x0) 17:14:07 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) set_tid_address(&(0x7f0000000000)) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:14:11 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x164, 0x0) 17:14:11 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x22a, 0x0) 17:14:11 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000080)={0x9f0000, 0x0, 0x81, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9909c9, 0x7, [], @ptr=0x6}}) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000100)) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0xf2, 0x2) 17:14:11 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x4c000000) 17:14:11 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000000)={0x1, 0x100, 0x9}) preadv(r2, &(0x7f00000017c0), 0xf2, 0x0) 17:14:11 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, &(0x7f0000000000)=0xb7, 0x4) preadv(r2, &(0x7f00000017c0), 0xf2, 0x0) [ 2370.066548][T22690] binder: BINDER_SET_CONTEXT_MGR already set [ 2370.075005][T22690] binder: 22683:22690 ioctl 40046207 0 returned -16 [ 2370.127980][T22690] binder: BINDER_SET_CONTEXT_MGR already set [ 2370.138902][T22690] binder: 22683:22690 ioctl 40046207 0 returned -16 [ 2370.161641][T22690] binder: 22683:22690 ioctl c0205647 20000080 returned -22 17:14:11 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x22c, 0x0) 17:14:11 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x0) 17:14:11 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x166, 0x0) 17:14:11 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r3, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6bee4f04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r2], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x8, 0x0, 0x3a, 0x8}, 0x6) syncfs(r5) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0xf2, 0x2) 17:14:11 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="03000000"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) sendto$inet6(r3, &(0x7f0000000000)="4263ff92b99f2e48fb50db2f9372ebde32d28959d0bf758aed5fa352a356a29ae272db78404069369913a930ab6b95abf433871344d3651064fb9ba8376f16b45a3f13", 0x43, 0x18, &(0x7f0000000080)={0xa, 0x4e22, 0x400, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, 0x1c) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000140)={@local, @private=0xa010101, @broadcast}, 0xc) preadv(r0, &(0x7f00000017c0), 0x0, 0x4000000000000) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) mmap$usbfs(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x810, r0, 0x4) 17:14:11 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x68000000) 17:14:12 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x8840, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f0000000100)=0x8) 17:14:12 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000080)) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000000), 0x4) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x2) [ 2370.847634][T22714] binder: 22708:22714 unknown command 3 [ 2370.876569][T22714] binder: 22708:22714 ioctl c0306201 20000200 returned -22 [ 2370.894068][T22717] binder: BINDER_SET_CONTEXT_MGR already set [ 2370.907817][T22717] binder: 22708:22717 ioctl 40046207 0 returned -16 17:14:12 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000012c0)=""/4080, 0xff0}, {&(0x7f0000000000)=""/36, 0x24}, {&(0x7f00000001c0)=""/129, 0x81}], 0x3, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0xd40, 0x0) connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x8) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0xf2, 0x0) 17:14:12 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x184, 0x0) 17:14:12 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x6c000000) [ 2371.074890][T22724] binder: BINDER_SET_CONTEXT_MGR already set [ 2371.080922][T22724] binder: 22721:22724 ioctl 40046207 0 returned -16 17:14:12 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x22e, 0x0) [ 2371.252595][T22724] binder: BINDER_SET_CONTEXT_MGR already set [ 2371.259396][T22724] binder: 22721:22724 ioctl 40046207 0 returned -16 [ 2371.275401][T22741] binder: BINDER_SET_CONTEXT_MGR already set 17:14:12 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1f, 0x109080) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000240)) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="8686f87f6c89a64cb8d1ecb76b8f4a655eb0767e9d492d64d664631de0de19c7b499d2139d7b9686ba08b3f85e81f2165d80a68f073c3cb8c9607eab24f9361cb736203d0f8b066b90e8d4b8b3a8d8df4358e8a90ab9c9e55aaa21216903dd829d3cfc68ddf9a31111e377579fd822408672a9db097dd6cf5fe29c33adaa1251ab81b1df4248740be06d31eb80640899fb4fc597038e4431c9edaf43"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)={0x8, 0x4, 0x4, 0x1, 0xffffcd8b, {}, {0x4, 0xc, 0x7, 0x1, 0x6, 0x0, "a15998b4"}, 0x56d, 0x4, @planes=&(0x7f0000000080)={0x9, 0x6, @mem_offset=0x800, 0x4}, 0xb01, 0x0, r4}) r5 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x401, 0x1) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000040)={0xc, 0x1a, 0x17, 0x13, 0xa, 0x6, 0x5, 0xc0}) preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) [ 2371.302031][T22741] binder: 22721:22741 ioctl 40046207 0 returned -16 [ 2372.228955][T22747] binder: BINDER_SET_CONTEXT_MGR already set [ 2372.251052][T22747] binder: 22744:22747 ioctl 40046207 0 returned -16 [ 2372.286808][T22759] binder: BINDER_SET_CONTEXT_MGR already set [ 2372.286814][T22760] binder: 22744:22760 unknown command 2146993798 [ 2372.286829][T22760] binder: 22744:22760 ioctl c0306201 20000280 returned -22 [ 2372.318284][T22759] binder: 22744:22759 ioctl 40046207 0 returned -16 17:14:16 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x2) 17:14:16 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x18d, 0x0) 17:14:16 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x24c, 0x0) 17:14:16 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x74000000) 17:14:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000000040)=""/11, 0xb}], 0x2, 0x8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0x83, @time={0x0, 0x80000001}, 0xaf, {0x1}, 0x76, 0x3, 0xe0}) mount$9p_fd(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)='9p\x00', 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="f33b6a827409950fe4888e7472616e733d66642c7266646e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',nodevmap,measure,subj_type=:#},\x00']) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001180)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0xc8, 0x1f8, 0xc8, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, &(0x7f0000000140), {[{{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}, {0x4a6, 0x5, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0xc0, 0x130, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[0x9, 0x5]}}, @common=@socket0={{0x20, 'socket\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x3, 0x7, 0x101, 0x1, 0x0, "543e532f440428f9a0c7ae674edf7ed6a591b20ee90bb77d2efd620f6e50b22664e565aca4c1519409209e067c066f67257ef07270d1aa5698961033de3d0718"}}}, {{@ip={@empty, @loopback, 0xffffff00, 0xffffffff, 'bond_slave_1\x00', 'wg2\x00', {0xff}, {0xff}, 0x0, 0x0, 0x60}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40, 'set\x00'}, {{0x2, [0x0, 0x0, 0x3, 0x2, 0x2, 0x3], 0x4, 0x1}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x1f) ioctl$sock_qrtr_TIOCOUTQ(r2, 0x5411, &(0x7f0000001580)) 17:14:16 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r2, &(0x7f00000017c0), 0x0, 0x4) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) linkat(r5, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1400) 17:14:16 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0xf69) 17:14:16 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x255, 0x0) 17:14:16 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x7a000000) 17:14:16 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) prctl$PR_GET_CHILD_SUBREAPER(0x25) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:14:17 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x194, 0x0) 17:14:17 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x111000, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) 17:14:17 executing program 0 (fault-call:3 fault-nth:0): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) 17:14:17 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x25c, 0x0) 17:14:17 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x7fffe000) 17:14:17 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) recvmsg$can_raw(r5, &(0x7f00000002c0)={&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000080)=""/7, 0x7}], 0x2, &(0x7f00000001c0)=""/247, 0xf7}, 0x102) 17:14:17 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x196, 0x0) [ 2376.440147][T22810] FAULT_INJECTION: forcing a failure. [ 2376.440147][T22810] name failslab, interval 1, probability 0, space 0, times 0 [ 2376.475188][T22810] CPU: 1 PID: 22810 Comm: syz-executor.0 Not tainted 5.8.0-rc3-syzkaller #0 [ 2376.483893][T22810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2376.494042][T22810] Call Trace: [ 2376.497350][T22810] dump_stack+0x1f0/0x31e [ 2376.501692][T22810] should_fail+0x38a/0x4e0 [ 2376.506120][T22810] ? kmalloc_array+0x2b/0x50 [ 2376.510719][T22810] should_failslab+0x5/0x20 [ 2376.515231][T22810] __kmalloc+0x74/0x330 [ 2376.519400][T22810] kmalloc_array+0x2b/0x50 [ 2376.523815][T22810] rw_copy_check_uvector+0x95/0x380 [ 2376.529019][T22810] ? __fget_files+0x388/0x3c0 [ 2376.533705][T22810] import_iovec+0x8a/0x2c0 [ 2376.539346][T22810] ? __fdget+0x18f/0x210 [ 2376.543605][T22810] do_preadv+0x149/0x290 [ 2376.547958][T22810] ? ksys_write+0x1b1/0x220 [ 2376.552484][T22810] ? lock_is_held_type+0x87/0xe0 [ 2376.557439][T22810] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2376.563516][T22810] do_syscall_64+0x73/0xe0 [ 2376.567951][T22810] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2376.573850][T22810] RIP: 0033:0x45cb29 [ 2376.577743][T22810] Code: Bad RIP value. [ 2376.581810][T22810] RSP: 002b:00007f20d5aa8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 17:14:17 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x7ffff000) [ 2376.590238][T22810] RAX: ffffffffffffffda RBX: 00000000004fb820 RCX: 000000000045cb29 [ 2376.598221][T22810] RDX: 00000000000000f2 RSI: 00000000200017c0 RDI: 0000000000000004 [ 2376.606298][T22810] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2376.614279][T22810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 2376.622259][T22810] R13: 0000000000000886 R14: 00000000004cb816 R15: 00007f20d5aa96d4 17:14:18 executing program 0 (fault-call:3 fault-nth:1): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) 17:14:18 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x25e, 0x0) 17:14:18 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x198, 0x0) 17:14:18 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xff, 0x480) getsockname$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x1c) preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) [ 2376.889934][T22825] FAULT_INJECTION: forcing a failure. [ 2376.889934][T22825] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2376.903179][T22825] CPU: 0 PID: 22825 Comm: syz-executor.0 Not tainted 5.8.0-rc3-syzkaller #0 [ 2376.911944][T22825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2376.921998][T22825] Call Trace: [ 2376.925309][T22825] dump_stack+0x1f0/0x31e [ 2376.929653][T22825] should_fail+0x38a/0x4e0 [ 2376.934255][T22825] prepare_alloc_pages+0x28c/0x4a0 [ 2376.939381][T22825] __alloc_pages_nodemask+0xbc/0x5e0 [ 2376.944695][T22825] kmem_getpages+0x49/0x900 [ 2376.949300][T22825] cache_grow_begin+0x7b/0x2e0 [ 2376.954250][T22825] cache_alloc_refill+0x359/0x3f0 [ 2376.959288][T22825] ? check_preemption_disabled+0x51/0x140 [ 2376.965194][T22825] __kmalloc+0x30c/0x330 [ 2376.969458][T22825] ? kmalloc_array+0x2b/0x50 [ 2376.974155][T22825] kmalloc_array+0x2b/0x50 [ 2376.979897][T22825] rw_copy_check_uvector+0x95/0x380 [ 2376.985112][T22825] ? __fget_files+0x388/0x3c0 [ 2376.989821][T22825] import_iovec+0x8a/0x2c0 [ 2376.994346][T22825] ? __fdget+0x18f/0x210 [ 2376.998790][T22825] do_preadv+0x149/0x290 [ 2377.003484][T22825] ? ksys_write+0x1b1/0x220 [ 2377.008014][T22825] ? lock_is_held_type+0x87/0xe0 [ 2377.012976][T22825] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2377.019666][T22825] do_syscall_64+0x73/0xe0 [ 2377.024106][T22825] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2377.030010][T22825] RIP: 0033:0x45cb29 [ 2377.033905][T22825] Code: Bad RIP value. 17:14:18 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) write$FUSE_LK(r4, &(0x7f0000000000)={0x28, 0xfffffffffffffffe, 0x4, {{0x20, 0x2, 0x1, 0xffffffffffffffff}}}, 0x28) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x2) [ 2377.037978][T22825] RSP: 002b:00007f20d5aa8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2377.046428][T22825] RAX: ffffffffffffffda RBX: 00000000004fb820 RCX: 000000000045cb29 [ 2377.054558][T22825] RDX: 00000000000000f2 RSI: 00000000200017c0 RDI: 0000000000000004 [ 2377.062686][T22825] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2377.071118][T22825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 2377.079100][T22825] R13: 0000000000000886 R14: 00000000004cb816 R15: 00007f20d5aa96d4 17:14:22 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = creat(&(0x7f0000000000)='./file0\x00', 0x11) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffe000/0x1000)=nil, 0x8, 0x0, 0x20, &(0x7f0000ffb000/0x4000)=nil, 0x4}) preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r8, 0x4008ae89, &(0x7f0000000080)={0x7e, 0x0, [0x800000003a, 0x0, 0x48], [0xc1]}) r9 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) r10 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) 17:14:22 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x7ffffffff000) 17:14:22 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x1b6, 0x0) 17:14:22 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x260, 0x0) 17:14:22 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) 17:14:22 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/224, 0xe0}, {&(0x7f0000000040)=""/125, 0x7d}, {&(0x7f00000002c0)=""/235, 0xeb}, {&(0x7f0000000100)=""/76, 0x4c}, {&(0x7f00000003c0)=""/152, 0x98}], 0x6, 0x3f) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000000)=0x8, 0x4) [ 2381.534018][T22861] kvm [22849]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 [ 2381.557294][T22858] binder: BINDER_SET_CONTEXT_MGR already set [ 2381.567256][T22858] binder: 22852:22858 ioctl 40046207 0 returned -16 17:14:23 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x27e, 0x0) 17:14:23 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x200400, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x10000) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 2381.634934][T22858] binder: BINDER_SET_CONTEXT_MGR already set [ 2381.650519][T22858] binder: 22852:22858 ioctl 40046207 0 returned -16 [ 2381.666332][T22868] binder: BINDER_SET_CONTEXT_MGR already set 17:14:23 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x1bf, 0x0) [ 2381.747304][T22868] binder: 22852:22868 ioctl 40046207 0 returned -16 17:14:23 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000001c0)=""/4093, 0xffd}], 0x1, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/sockstat\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x0) 17:14:23 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x10000000000000) 17:14:23 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x1c6, 0x0) [ 2381.974032][T22885] binder: BINDER_SET_CONTEXT_MGR already set [ 2382.004880][T22885] binder: 22881:22885 ioctl 40046207 0 returned -16 17:14:23 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x287, 0x0) 17:14:23 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0463fd81"], 0x0, 0x0, 0x0}) dup2(r2, r1) dup2(r0, r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x2) [ 2382.130518][T22885] binder: BINDER_SET_CONTEXT_MGR already set [ 2382.160642][T22885] binder: 22881:22885 ioctl 40046207 0 returned -16 [ 2382.170592][T22896] binder: BINDER_SET_CONTEXT_MGR already set 17:14:23 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xe0ff7f00000000) [ 2382.200538][T22885] binder: 22881:22885 ioctl c0a85322 ffffffffffffffff returned -22 [ 2382.223431][T22896] binder: 22881:22896 ioctl 40046207 0 returned -16 [ 2382.262115][T22899] binder: BINDER_SET_CONTEXT_MGR already set 17:14:23 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x2000, 0x0) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x170, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x63ab}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x120000000000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x140}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x25b}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "eafef03532a5295c631567611fc9c1adfc64f6f244eda5191d8be615b4227fdbec"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xf, 0x3, "ca7e43a6e2025d3b569fa3"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "85aec1c98878f279ffbed91469e6766a916196ad"}}, @TIPC_NLA_NODE_ID={0x46, 0x3, "f429b53cd04f43a5e601acd04f9b4bde80253cc07f6f7eb440802462b19eeae28c9ae7d4a4cd86b96fc5ddf26fe416771e2b03667e727e3bc11e0b1a27a664febcf2"}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x810}, 0x20000080) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) faccessat(r1, &(0x7f0000000080)='./file0\x00', 0x2) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x0) [ 2382.321822][T22899] binder: 22897:22899 ioctl 40046207 0 returned -16 17:14:23 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x8, 0x0) 17:14:23 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x1c8, 0x0) 17:14:23 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x28e, 0x0) 17:14:23 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000000)={0x0, 0x3, [@remote, @broadcast, @broadcast]}) preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:14:24 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) getsockname$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000001100)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x2) 17:14:24 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xf0ff7f00000000) 17:14:24 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x2) 17:14:24 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x290, 0x0) 17:14:24 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x3) 17:14:24 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x1ca, 0x0) 17:14:24 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x4) 17:14:26 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000040)='./file0\x00', 0x1, 0x2, &(0x7f0000000100)=[{&(0x7f00000001c0)="c2b5ff0b322ea5cd0081e68da0be1cb94d3877c6358410fc67e1f095f24a2b4870ee240979ab2c74ef8afd5c0019c39302d779ac9376f029b169bea588a0a24f26dc1e53b25fc2a1f74f6e35308ed3b096b5ff4bbf3dd5ea60e37a37a99f5801b317c4bbb5bc773eba25b293472e2adf95f5910d144eecc9f2a0b2828617ede9340decc5b24281926a22c465a1f9ba1baa53d80676189ceb8286f6154ef026f26b9f0c3301bcc220585dd9f159dc0e4428ceda9cb240ecb6d65f251613ed70a7ce53a0f7696b6ff58aca74f27acff067ceee6f7d731a2db859d89f654d6d26ada8", 0xe1, 0x1}, {&(0x7f0000000080)="fa880c4344c050fb1f5608d7f138122f51f31eb8794b3ab5774a1ddc5465c9efefee", 0x22}], 0x1000, &(0x7f0000000140)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) 17:14:26 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xf0ffffff7f0000) 17:14:26 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x1e8, 0x0) 17:14:26 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x292, 0x0) 17:14:26 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x5) 17:14:26 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES64, @ANYRES16, @ANYRES64, @ANYRES64, @ANYRES64, @ANYRESOCT, @ANYRESHEX=r2], 0x0, 0x0, 0x0}) r6 = dup2(r4, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0xe0) preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:14:26 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_POST(r2, 0x5008, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4093, 0xffd}], 0x1, 0xfffffffffffffff8) 17:14:26 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x6) 17:14:27 executing program 5: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:14:27 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x2b0, 0x0) 17:14:27 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x1f1, 0x0) 17:14:27 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x7) 17:14:31 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, 0x2, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xfffffffd}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xc8a}]}, @CTA_LABELS_MASK={0xc, 0x17, [0x20, 0x90f]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0xf2, 0x0) 17:14:31 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x100000000000000) 17:14:31 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x8) 17:14:31 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r3, r2) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x8000000000004) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0xf2, 0x2) 17:14:31 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x1f8, 0x0) 17:14:31 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x2b9, 0x0) 17:14:31 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$fb(r0, &(0x7f0000000580)=""/142, 0x8e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) r6 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xb0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x34f, &(0x7f0000000440)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A'}, 0xffffffffffffffc0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x4030582a, &(0x7f0000000040)) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) 17:14:31 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x9) 17:14:31 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x1fa, 0x0) 17:14:31 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x200000000000000) 17:14:31 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xa) 17:14:31 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x2c0, 0x0) 17:14:36 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xb) 17:14:36 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:14:36 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x300000000000000) 17:14:36 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x1fc, 0x0) 17:14:36 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x2c2, 0x0) 17:14:36 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xc) 17:14:36 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000380)=""/91, 0x5b}], 0x1, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000001c0)={0x1, 0x7fff, 0x0, 0x81, 0x3}, 0x14) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x80000001, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x73c000, 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000033c0)={@empty, 0x0}, &(0x7f0000003400)=0x14) recvfrom$packet(r4, &(0x7f0000000140)=""/4, 0x4, 0x1, &(0x7f0000003440)={0x11, 0x9, r5, 0x1, 0x40, 0x6, @random="5602f05970ef"}, 0x14) r6 = semget(0x3, 0x1, 0x80) semctl$GETALL(r6, 0x0, 0xd, &(0x7f0000002340)=""/4096) semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000100)=[0x40, 0xfffd, 0x80, 0x2, 0x1]) waitid$P_PIDFD(0x3, r0, 0x0, 0x80000000, &(0x7f0000000000)) 17:14:36 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xd) 17:14:36 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x2c4, 0x0) 17:14:37 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x21a, 0x0) 17:14:37 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="852a62770000000002000000000000000000000000000000852a62730000000003000000000000000000000000000000852a627700000000000000000000000000000000000000000d000000000000004f17585547a29cda23448e027c09af29fa7e7ffcb7010ca900067c052f3b9aa69f4332b4cf4d9e22598427f6dcb090c0b5ad48c841fe7abf1d94e6192b68a7a30a9803da2a4f5570e785edd40e1502d2112f5a893bb711e884d58a43b2df9ebeeb28855582dcff5c1b3ef0ae8cb1"], &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x73c000, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440ddb62955e4f15e24c73e03eacc3826069fc121a1481a3727cbe15c18"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @fd, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}}], 0x0, 0x73c000, 0x0}) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000080), &(0x7f0000000140)=0x40) ioctl$TIOCMBIC(r5, 0x5417, &(0x7f0000000000)=0x9) 17:14:37 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xe) 17:14:37 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x400000000000000) [ 2395.821992][T23066] binder: BINDER_SET_CONTEXT_MGR already set [ 2395.828142][T23066] binder: 23059:23066 ioctl 40046207 0 returned -16 17:14:37 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x2e2, 0x0) 17:14:37 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x10) 17:14:37 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) r3 = openat2(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x42080, 0x319fead663993064, 0x4}, 0x18) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000140)={0x0, 0x0, {0x1, 0x7d81, 0x3, 0xb57c}}) preadv(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') ioctl$SOUND_MIXER_READ_DEVMASK(r4, 0x80044dfe, &(0x7f0000000080)) preadv(r4, &(0x7f00000017c0), 0xf2, 0x0) r5 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, r5) 17:14:37 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x223, 0x0) 17:14:37 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x500000000000000) [ 2396.135736][T23100] binder: BINDER_SET_CONTEXT_MGR already set [ 2396.149428][T23100] binder: 23096:23100 ioctl 40046207 0 returned -16 17:14:37 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x11) 17:14:37 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000080)={0x7, 0x4, 0xff01, 0x1, 0x8b12, 0x99e}) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{0x7, 0x101, 0xa199, 0xec60}, 'syz0\x00', 0x2b}) 17:14:37 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x22a, 0x0) [ 2396.254328][T23100] binder: BINDER_SET_CONTEXT_MGR already set [ 2396.266566][T23100] binder: 23096:23100 ioctl 40046207 0 returned -16 [ 2396.291212][T23109] binder: BINDER_SET_CONTEXT_MGR already set 17:14:37 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x2eb, 0x0) [ 2396.339716][T23109] binder: 23096:23109 ioctl 40046207 0 returned -16 17:14:37 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x12) 17:14:37 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0xc0040, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x80, 0x4) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = getpid() ptrace$cont(0x9, r2, 0x20000000000000, 0x2) r3 = syz_open_procfs(r1, &(0x7f00000000c0)='smaps_rollup\x00') preadv(r3, &(0x7f0000000080), 0x0, 0xf2) 17:14:37 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x600000000000000) 17:14:37 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0xffffff06, 0x18, &(0x7f0000000300)={@flat=@weak_binder, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x3}, @fda={0x77622a85, 0xfffffffffffffffe}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x0, 0x73c000, 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0xf2, 0x2) 17:14:38 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x22c, 0x0) 17:14:38 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) 17:14:38 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x2f2, 0x0) 17:14:38 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x25) [ 2396.738609][T23135] binder: BINDER_SET_CONTEXT_MGR already set [ 2396.750837][T23135] binder: 23132:23135 ioctl 40046207 0 returned -16 [ 2396.802677][T23135] binder: BINDER_SET_CONTEXT_MGR already set [ 2396.817970][T23135] binder: 23132:23135 ioctl 40046207 0 returned -16 17:14:38 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x700000000000000) 17:14:38 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) r3 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800) preadv(r3, &(0x7f00000017c0), 0x0, 0x0) [ 2396.855105][T23144] binder: 23132:23144 ioctl 8912 400200 returned -22 17:14:38 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x48) [ 2396.938806][T23135] binder: BINDER_SET_CONTEXT_MGR already set 17:14:38 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x22e, 0x0) [ 2396.984575][T23135] binder: 23132:23135 ioctl 40046207 0 returned -16 [ 2396.984925][T23155] binder: BINDER_SET_CONTEXT_MGR already set 17:14:38 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x2f4, 0x0) [ 2397.054952][T23144] binder: BINDER_SET_CONTEXT_MGR already set [ 2397.062343][T23155] binder: 23132:23155 ioctl 40046207 0 returned -16 [ 2397.072351][T23157] binder: BINDER_SET_CONTEXT_MGR already set [ 2397.079407][T23157] binder: 23152:23157 ioctl 40046207 0 returned -16 [ 2397.093705][T23144] binder: 23132:23144 ioctl 40046207 0 returned -16 [ 2397.108060][T23163] binder: 23132:23163 ioctl 8912 400200 returned -22 17:14:38 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x4c) [ 2397.155060][T23168] binder: BINDER_SET_CONTEXT_MGR already set [ 2397.195084][T23168] binder: 23152:23168 ioctl 40046207 0 returned -16 17:14:38 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x800000000000000) 17:14:38 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000001c0)=""/4101, 0x1005}], 0x1, 0x4) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) 17:14:38 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="4ef75dfc"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="05636420004a138d0441"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000140)=ANY=[@ANYBLOB="030000003f0c00000600000000000000010001625c688915cc4b14d9aa74837f00000000000007000000360000000002000000000000000700000000000000333ffa5829166035a68b61b41c1979b12531e573e1bea2a5472e9949d9da31d8f7cfa2e60f21221f2d6b11cfaef3c82aaafd6cb1875f94ef1e183d6884acf7445451ad1b2a08dc9955831f039768385edea01b16ecc6189814"]) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$ASHMEM_PURGE_ALL_CACHES(r3, 0x770a, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0xf2, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@handle={0x73682a85, 0x1100, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x7}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x0, 0x73c000, 0x0}) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000380)="76707b15ac299767f08fd33a568e1dff0afa283ad4048ab0b2241e9f83630da3564fecad6779e648c716e759cd9f0febdd8599a15cfe3eada7d27f89dff7887c3da6909ba99eceb2ba492ec95340b5e4f39a6f643db12f17b0b1a60d5ad1e901b0260c3edf7919c79e71b2f4ed088e651dbeb9b3616444") 17:14:38 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x24c, 0x0) 17:14:38 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x2f6, 0x0) 17:14:38 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x68) [ 2397.400546][T23182] binder: BINDER_SET_CONTEXT_MGR already set [ 2397.413710][T23182] binder: 23179:23182 ioctl 40046207 0 returned -16 [ 2397.463306][T23182] binder: 23179:23182 unknown command -60950706 [ 2397.477674][T23182] binder: 23179:23182 ioctl c0306201 20000200 returned -22 [ 2397.517025][T23182] binder: BINDER_SET_CONTEXT_MGR already set [ 2397.534402][T23182] binder: 23179:23182 ioctl 40046207 0 returned -16 [ 2397.545532][T23182] binder: 23179:23182 unknown command 543449861 [ 2397.555375][T23182] binder: 23179:23182 ioctl c0306201 20000280 returned -22 [ 2397.569960][T23182] binder: 23179:23182 ioctl 8188aea6 20000140 returned -22 17:14:39 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x6c) 17:14:39 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x255, 0x0) 17:14:39 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x900000000000000) 17:14:39 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x74) 17:14:39 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="017afbf4c2"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f0000000140)=0x1e) preadv(r3, &(0x7f00000017c0), 0xf2, 0x2) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x9) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="046304402894ef54a07ae7494b582bf5e52b820cbaf24509c21551c6fbb132f4265bb760f67e6f051a0d01eadc1cacb382ff8287d0ad9505d6cf565090d84f"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) accept$alg(r6, 0x0, 0x0) 17:14:39 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x314, 0x0) 17:14:39 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x7a) 17:14:41 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x70400, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000500)=[0xffffffff, 0x1]) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/96, 0x60}, {&(0x7f00000004c0)=""/46, 0x2e}, {&(0x7f00000001c0)=""/129, 0x81}, {&(0x7f0000000280)=""/194, 0xc2}, {&(0x7f0000000380)=""/179, 0xb3}, {&(0x7f0000000100)=""/75, 0x4b}], 0x6, 0x0) 17:14:41 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xa00000000000000) 17:14:41 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x25c, 0x0) 17:14:41 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x300) 17:14:41 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x31d, 0x0) 17:14:41 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x44500, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x77) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x2) 17:14:41 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x500) 17:14:41 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x25e, 0x0) 17:14:42 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xb00000000000000) 17:14:42 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x324, 0x0) 17:14:42 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x600) 17:14:42 executing program 5: prctl$PR_SET_FPEMU(0xa, 0x2) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0xd8c, 0x1f, 0x7f, 0x81, 0x6, "941053abe7d7e2f12b66affeafd931ee511791", 0x1, 0x8}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:14:42 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x5, 0x4) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r2, r1) fgetxattr(r2, &(0x7f0000000040)=@random={'btrfs.', '/*:\\\x00'}, &(0x7f0000000080)=""/11, 0xb) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x101000, 0x0) statx(r3, &(0x7f0000000140)='./file0\x00', 0x1000, 0x8, &(0x7f0000000240)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0xf2, 0x0) ioctl$VIDIOC_DQEVENT(r4, 0x80885659, &(0x7f0000000340)={0x0, @src_change}) 17:14:42 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x260, 0x0) [ 2401.007482][T23264] binder: BINDER_SET_CONTEXT_MGR already set [ 2401.019344][T23264] binder: 23262:23264 ioctl 40046207 0 returned -16 17:14:42 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x326, 0x0) 17:14:42 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xc00000000000000) 17:14:42 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x700) 17:14:42 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000080)={0x8}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x2) 17:14:42 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x900) 17:14:42 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x27e, 0x0) 17:14:42 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x328, 0x0) 17:14:42 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r3, r2) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0xf2, 0x2) 17:14:42 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xd00000000000000) 17:14:43 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xa00) 17:14:45 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x346, 0x0) 17:14:45 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r4, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000100)="ab2969f4f54c262f5d01bb0e3596f809aac3ae2d3fd378bba492909006b015586c74f0384505d28dec6b175ed65ae4296334f3c45dacff47f624e5630964d1be21e5f06831f732378870c9a39a84b6627f79950c53911115e7b0386496ae0fbd7797bb597891eb1e6acf7c5eee63a09a049714de5f869643d846977d9969357d89883476af383b828ec5b7be147808e82b14f816544b23f82588aac179e0d2e37453706e28cd3dd2be3e8b118768b93504664b2d49fb", 0xb6, 0x80000000}, {&(0x7f00000001c0)="8a87d7d0fe44ad8f3c103c38d8ce6420bef6e09fee9502e41dbf66174fa9af428b0e2d9df2cf385b0096c6f4dec2adc53a1538ce42c382f2228a2a8f8cf517e6f4a08edf1934cf207cdfdc1da8a8b6eb7638cc312ad046efffc7cda1090ddd5d8d8311bcbf4b2feba7f35af2f23648b473b76ffba6721dc3115367d4c7a55b0115fc8033684ed5cd266eaeeab91f9a666ffe010570d73011be342cb03bdfe6e7e4f27231ca91b6279cb654088b5c7b0ab4faba221a7fca4ec881a3d56454ed0b45d35cb385494170606bb9aa6dafd2a6de677b32f8e18c0b5f6b45", 0xdb, 0x5}, {&(0x7f00000002c0)="001e5c78c9f84ecd238ddcfd275fe25e7585958c92f07ea0250807e663a323f74550d2123347146a027fb2c46e9d0fa9ea3094bb2b67e7c421a17d788a2e370061d29a2b448227229876eee9003e12c999b7ca3e18917812a8c80b2bf5edbbbb9b083b6d3a9d60a08725ad959013adee08d963f628717ea37c31acf40ce83fde60d4794bef1b468c57556ef8a16f543523a735744379935bc2acb2ac017dd68dc2a84b9f519ffe50fd0c12abdf7ea8834db7296e1ea3f26f34575b03d950129867f6fbbcfe5f6ec0ef3ae6d1d8f092a7a0a0719d0971cb2e46e40f3c72d37729ebf3671f51573a339802abbe39176f79c7211132498866", 0xf7, 0xa094}, {&(0x7f00000003c0)="64f014c493cf34e8a42f6be5b7788d0d71ed8adfdfff0688238a0de4d67a1acefd2678b15a4d1c83f66a86fda8ba0b23b059a9761f5a017f181bf9eb2697de60dfcdf7aef6ad7ce0b6f681735a4cf87727e54f3da8afcc5aefcfbce3b3653a08df987cea4fb79dba4f74e52af12106c9523618fe58e815fc9c52701b9a85bf061d10866581bbdc54001115cade207d4e6a7b300cdbada4a7fe1e3b2c7e82d215766dd044105a50a16f5f713c930e5c056ccd92742928df89022991d31e376266ecf98f9a83ce8ddc0012ef5088deca91c742acfd263b61f948c32e6573a36360eca089b1", 0xe4, 0x6}, {&(0x7f00000004c0)="e58ae625926685e363aaa20760a807bf4f13efad3070e6006ff7156f0a3c4e39f18ecacac8bc9401d3f8bf806fc88b164fd729a9589e28152695340791e59e95c2df919c344dc8754032fe2380d8e475cbd1056e916cf2c909e2d9046f2febc2d853a1cad7416bd8561a3bb82695392d806b5b6a55f0f0dd9e0bcc3ca957162e9e4228ebd0957289fa8a75bfa4a0b21808223672d9db857d2c685a67c7c00aef80c484b554c249786d2aa35d59cd8b3f4dca40f2187aaefe572e73239290fe5c4df618399d548fff4856b8225bcd644d2df82e179772a76bf214b14e8d1e933d3fc22710c65d146b0e3e000039d10cfb2e", 0xf1, 0xd840}], 0x4028, &(0x7f0000000640)={[{@barrier='barrier'}, {@umask={'umask', 0x3d, 0x6}}, {@part={'part', 0x3d, 0x9}}, {@type={'type', 0x3d, "68d261a7"}}], [{@appraise_type='appraise_type=imasig'}, {@fowner_gt={'fowner>', r4}}, {@appraise='appraise'}]}) 17:14:45 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x287, 0x0) 17:14:45 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xb00) 17:14:45 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xe00000000000000) 17:14:45 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x60, r3, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1}}, {0x14, 0x2, @in={0xa, 0x0, @empty}}}}]}]}, 0x60}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xd4, r3, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7a34eba0}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40010}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x0) 17:14:45 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xc00) [ 2404.331513][T23331] binder: BINDER_SET_CONTEXT_MGR already set [ 2404.353951][T23331] binder: 23326:23331 ioctl 40046207 0 returned -16 17:14:45 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x1000000000000000) [ 2404.408395][T23331] tipc: Enabling of bearer rejected, failed to enable media 17:14:45 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/14], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r3, r2) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0xf2, 0x2) 17:14:45 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xccc) 17:14:45 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x34f, 0x0) 17:14:45 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x28e, 0x0) 17:14:46 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xd00) 17:14:46 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x1100000000000000) [ 2404.737372][T23346] binder: BINDER_SET_CONTEXT_MGR already set [ 2404.745999][T23346] binder: 23342:23346 ioctl 40046207 0 returned -16 17:14:46 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x356, 0x0) 17:14:46 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x290, 0x0) 17:14:46 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xe00) [ 2405.031265][T23350] binder: BINDER_SET_CONTEXT_MGR already set [ 2405.062526][T23346] binder: BINDER_SET_CONTEXT_MGR already set [ 2405.072500][T23350] binder: 23342:23350 ioctl 40046207 0 returned -16 [ 2405.101253][T23346] binder: 23342:23346 ioctl 40046207 0 returned -16 17:14:48 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) fallocate(r0, 0x1, 0xff, 0x3) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0xf2, 0x0) 17:14:48 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x1200000000000000) 17:14:48 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) dup2(r1, r0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05000400"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_targets\x00') preadv(r6, &(0x7f00000017c0), 0xf2, 0x2) 17:14:48 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x1100) 17:14:48 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x358, 0x0) 17:14:48 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x292, 0x0) [ 2407.433180][T23396] binder: BINDER_SET_CONTEXT_MGR already set [ 2407.439201][T23396] binder: 23390:23396 ioctl 40046207 0 returned -16 [ 2407.543199][T23396] binder: BINDER_SET_CONTEXT_MGR already set [ 2407.551588][T23396] binder: 23390:23396 ioctl 40046207 0 returned -16 17:14:48 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x1200) [ 2407.633541][T23396] binder: 23390:23396 unknown command 262149 [ 2407.652967][T23396] binder: 23390:23396 ioctl c0306201 20000200 returned -22 [ 2407.677829][T23401] binder: BINDER_SET_CONTEXT_MGR already set 17:14:49 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x2500000000000000) 17:14:49 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x2b0, 0x0) 17:14:49 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x35a, 0x0) [ 2407.687488][T23401] binder: 23390:23401 ioctl 40046207 0 returned -16 17:14:49 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x2500) [ 2407.853928][T23396] binder: BINDER_SET_CONTEXT_MGR already set [ 2407.860130][T23396] binder: 23390:23396 ioctl 40046207 0 returned -16 [ 2407.903794][T23396] binder: 23390:23396 unknown command 262149 [ 2407.910913][T23396] binder: 23390:23396 ioctl c0306201 20000200 returned -22 [ 2407.915251][T23415] binder: BINDER_SET_CONTEXT_MGR already set [ 2407.932378][T23415] binder: 23390:23415 ioctl 40046207 0 returned -16 17:14:49 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x8) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:14:53 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x4000000000000000) 17:14:53 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x3f00) 17:14:53 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x2b9, 0x0) 17:14:53 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x378, 0x0) 17:14:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0xfff, 0x7f, 0x8000, 0x4, 0x1, 0xfffffffc, 0x8726, 0x3, 0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000080)={r3, 0x6}, &(0x7f0000000100)=0x8) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f00000001c0)) preadv(r5, &(0x7f00000017c0), 0xf2, 0x0) 17:14:53 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4092, 0xffc}], 0x1, 0x0) r2 = gettid() ptrace$setopts(0x4200, r2, 0x1, 0x39) tkill(r2, 0x39) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x24) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x10, &(0x7f0000000140)={&(0x7f0000000080)=""/100, 0x64}}, 0x10) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000000)='net/mcfilter\x00') preadv(r4, &(0x7f00000017c0), 0xf2, 0x2) 17:14:53 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001140)=""/4115, 0x1013}], 0x1, 0x7fffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:14:53 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x4000) [ 2412.528939][T23451] binder: BINDER_SET_CONTEXT_MGR already set [ 2412.578622][T23451] binder: 23445:23451 ioctl 40046207 0 returned -16 17:14:54 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x2c0, 0x0) [ 2412.646497][T23451] binder: BINDER_SET_CONTEXT_MGR already set 17:14:54 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x381, 0x0) 17:14:54 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x4800000000000000) [ 2412.690554][T23451] binder: 23445:23451 ioctl 40046207 0 returned -16 17:14:54 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x4800) 17:14:54 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) r4 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xfffffffffffffff8, 0xc003) getsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f0000000140)={@multicast1, @dev}, &(0x7f0000000180)=0x8) r5 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x58, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @free_buffer={0x40086303, r5}], 0x0, 0x73c000, 0x0}) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000000)={0xffffffff, 0x2, 0x8, 0xffff}, 0x10) preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) 17:14:54 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000000)=0x5) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:14:54 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x4c00) 17:14:54 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x2c2, 0x0) [ 2412.919304][T23479] binder: BINDER_SET_CONTEXT_MGR already set [ 2412.945565][T23479] binder: 23472:23479 ioctl 40046207 0 returned -16 17:14:54 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x4c00000000000000) 17:14:54 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x388, 0x0) 17:14:54 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9c00000002060300fb10eee5407066098a380000000000000000000080010c000780060004404e2000003800078008000a40000000030c00018008000140ac1e000105000300400000000800094000000b4f08000640000000040800084000000091300007801800028014000240200100000000000000000000000000010c00018008000140ac1414bb0800094000000007090002007379e6d28b70c1b4ee54c839920a2323662f82"], 0x9c}, 0x1, 0x0, 0x0, 0x20044080}, 0x40000) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttynull\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000180)={0x0, 0xfb, 0x24, 0xc, 0x40, "9eef05930f5fbdad91ed3424802cce63", "9d286901c4f3b0cc471e8a554fbfcd"}, 0x24, 0x1) 17:14:54 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x6800) 17:14:54 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x2c4, 0x0) 17:14:54 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x6800000000000000) 17:14:54 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x6c00) 17:14:54 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x38a, 0x0) 17:14:54 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000240)=""/4096}, {&(0x7f0000001240)=""/147}], 0x9, 0xb005) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x0) 17:14:54 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x2e2, 0x0) 17:14:55 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r3, 0xc0305302, &(0x7f0000000100)={0x4, 0x1ff, 0x8, 0x401, 0x400}) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000000)=""/29, 0x1d}], 0x1, 0x2) 17:14:55 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x7400) 17:14:55 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x6c00000000000000) [ 2413.767293][T23528] binder: BINDER_SET_CONTEXT_MGR already set [ 2413.785089][T23528] binder: 23523:23528 ioctl 40046207 0 returned -16 17:14:55 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x7a00) 17:14:55 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x38c, 0x0) [ 2413.814429][T23533] binder: BINDER_SET_CONTEXT_MGR already set [ 2413.848399][T23533] binder: 23527:23533 ioctl 40046207 0 returned -16 17:14:55 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) write$P9_RREADDIR(r2, &(0x7f0000000000)={0x49, 0x29, 0x2, {0x1, [{{0x8, 0x1, 0x6}, 0x6, 0x3, 0x7, './file0'}, {{0x80, 0x1, 0x7}, 0xfffffffffffffffa, 0xff, 0x7, './file0'}]}}, 0x49) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x0) 17:14:55 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x2eb, 0x0) 17:14:55 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xcc0c) [ 2414.060504][T23548] binder: BINDER_SET_CONTEXT_MGR already set [ 2414.069905][T23548] binder: 23545:23548 ioctl 40046207 0 returned -16 17:14:55 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x3aa, 0x0) 17:14:55 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x7400000000000000) 17:14:55 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x100000) 17:14:55 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r4 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x3c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r4}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x4c, r3, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_macvtap\x00'}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xe040) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4094, 0xffe}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x2) 17:14:55 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x2f2, 0x0) 17:14:55 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xe0ff7f) 17:14:56 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000100)={0x4, 0x9, 0x83, 0x8, [], [], [], 0x5, 0x1, 0x0, 0x8, "0f1da52a7a3a514ff20301b341a17504"}) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x2) 17:14:56 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xf0ff7f) 17:14:56 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x7a00000000000000) 17:15:00 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = socket$bt_cmtp(0x1f, 0x3, 0x5) write$binfmt_elf32(r2, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x47, 0x1, 0x9, 0xfb, 0x401, 0x3, 0x3e, 0xfffffffb, 0x3b9, 0x38, 0x25f, 0xf66, 0x1, 0x20, 0x1, 0x7, 0xfff, 0x1000}, [{0x1, 0x1, 0xb76, 0x9, 0x4, 0x6, 0x2, 0x6}], "86aed2e3048e2500088b5ac57effcc23c73d308ac1743ba22886025481be9cb540ba0e3a0b4ab420ed272a43020ee8873cfeaabb975422c94f628025b256226f55a7fe8ceb5a", [[], [], [], [], []]}, 0x59e) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x2) 17:15:00 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x3b3, 0x0) 17:15:00 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x2f4, 0x0) 17:15:00 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x1000000) 17:15:00 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xffffffff00000000) 17:15:00 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05631a98"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x60, r4, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1}}, {0x14, 0x2, @in={0xa, 0x0, @empty}}}}]}]}, 0x60}}, 0x0) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x60, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004050}, 0x4000051) [ 2419.341422][T23613] binder: BINDER_SET_CONTEXT_MGR already set 17:15:00 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x2000000) [ 2419.397023][T23619] tipc: Enabling of bearer rejected, failed to enable media [ 2419.403452][T23613] binder: 23605:23613 ioctl 40046207 0 returned -16 17:15:00 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000500)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x1000, 0xffffffff}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x0, 0x73c000, 0x0}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000100)={0x9, 0x4, 0x2, {0x3, @pix_mp={0x1, 0xfff, 0x212aaed9, 0x5, 0x7, [{0x6, 0x8f}, {0x7, 0x7}, {0x1800, 0x5}, {0xffff7419, 0x9}, {0x8000, 0x10000}, {0x1ff, 0x14}, {0x2, 0xdfa}, {0x3, 0x40}], 0x7f, 0x31, 0x2, 0x1, 0xaab0db085ed4822a}}, 0x4}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x6d, 0x0, &(0x7f0000000380)="37ed14b75d6f069ae1914f3d7cdd7c83102dcbae4d5da700c0c5e00791091ebbff9df14f137efa8845a41e1a15e9a4c7b851e9122edf20b9440648df5a936190ec469c2d1040cece9073c2eff545d3f3e38a69b0279808fbaf7082bf3a2fd14d83d08f5e808f76b644dbe3c079"}) 17:15:00 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x39) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000000)='net/ip_tables_targets\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x2) 17:15:00 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x3ba, 0x0) 17:15:00 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000001c0)="600084e002000a0000000001000000c98f13", 0x12, 0x400}, {0x0, 0x0, 0x34f9}], 0x0, 0x0) acct(&(0x7f0000000480)='./file0\x00') pipe2$9p(&(0x7f0000000240), 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x282002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050704000000000000000000", @ANYRES32, @ANYBLOB='\x00', @ANYRESDEC, @ANYRES64, @ANYRES64], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000640)=""/224, 0xe0}], 0x1, &(0x7f00000004c0)}, 0xb4}], 0x1, 0x40000020, 0x0) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000280), 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$rose(r1, &(0x7f0000000200)=@full={0xb, @remote, @netrom, 0x0, [@netrom, @bcast, @default, @default, @null, @bcast]}, 0x0, 0x0) umount2(&(0x7f0000000500)='./file0\x00', 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r2 = socket$inet6(0xa, 0x800000000000002, 0x200a) close(r2) 17:15:01 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x2f6, 0x0) 17:15:01 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000380)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x3, 0x4, 0x0, 0xffffffff}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x30, r4, 0x6000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x2) 17:15:01 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x3000000) [ 2419.838498][T23641] MINIX-fs: mounting unchecked file system, running fsck is recommended 17:15:01 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x314, 0x0) [ 2419.895991][ T28] audit: type=1800 audit(1594055701.225:85): pid=23637 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16382 res=0 [ 2420.025558][T23641] minix_free_inode: bit 1 already cleared 17:15:01 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x4000000) 17:15:01 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x3bc, 0x0) [ 2420.161560][T23641] Process accounting resumed 17:15:05 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) connect$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, @fixed={[], 0x10}, 0xfc}, 0xa) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 17:15:05 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x8001, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85, 0x0, 0x0, 0xfffffffffffffffd}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x0, 0x73c000, 0x0}) accept4$phonet_pipe(r2, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x2) 17:15:05 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x5000000) 17:15:05 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000000)=""/6, 0x6}, {&(0x7f0000000100)=""/177, 0xb1}, {&(0x7f00000001c0)=""/83, 0x53}, {&(0x7f0000000300)=""/138, 0x8a}], 0x4, 0x2) 17:15:05 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x31d, 0x0) 17:15:05 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x3be, 0x0) 17:15:05 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x6000000) [ 2424.478658][T23684] binder: BINDER_SET_CONTEXT_MGR already set [ 2424.480923][T23682] binder: BINDER_SET_CONTEXT_MGR already set [ 2424.487176][T23684] binder: 23677:23684 ioctl 40046207 0 returned -16 [ 2424.526007][T23682] binder: 23672:23682 ioctl 40046207 0 returned -16 [ 2424.576376][T23684] binder: BINDER_SET_CONTEXT_MGR already set [ 2424.601038][T23684] binder: 23677:23684 ioctl 40046207 0 returned -16 [ 2424.614079][T23691] binder: BINDER_SET_CONTEXT_MGR already set [ 2424.623957][T23692] binder: BINDER_SET_CONTEXT_MGR already set 17:15:06 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x324, 0x0) 17:15:06 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x3dc, 0x0) [ 2424.650827][T23692] binder: 23677:23692 ioctl 40046207 0 returned -16 [ 2424.664047][T23687] binder: BINDER_SET_CONTEXT_MGR already set [ 2424.664836][T23691] binder: 23672:23691 ioctl 40046207 0 returned -16 [ 2424.672913][T23687] binder: 23672:23687 ioctl 40046207 0 returned -16 17:15:06 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x7000000) 17:15:06 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) fcntl$setpipe(r0, 0x407, 0x6e9) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0763f240955fb1e1c7eb3cf527537b8971fe9824cdb962552d8911d136de6a5093384bbc3683971e6d1c0000000000000002d0aa5a2acac3e115a65d4cd467fde4ba"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000080)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') pipe(&(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0xa8, r5, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000050}, 0x20008045) 17:15:06 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0481ff3e"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$int_out(r5, 0x5460, &(0x7f00000000c0)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)={0x2, 'ip6gretap0\x00', {0xc5c}, 0x1e0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000)='NLBL_MGMT\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/exec\x00') preadv(r6, &(0x7f00000017c0), 0xf2, 0x2) 17:15:06 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x8000000) [ 2424.900375][T23710] binder: BINDER_SET_CONTEXT_MGR already set [ 2424.929793][T23712] binder: BINDER_SET_CONTEXT_MGR already set [ 2424.940207][T23710] binder: 23707:23710 ioctl 40046207 0 returned -16 17:15:06 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x3e5, 0x0) [ 2424.967655][T23712] binder: 23705:23712 ioctl 40046207 0 returned -16 17:15:06 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000002400)) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0xf2, 0x0) 17:15:06 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304406e71f27bd5165e20a30264acde49ddd78e5c8cfa396ddb1d4cca"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) r5 = openat$cgroup_type(r4, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000080)=0x20010) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0xf2, 0x2) 17:15:06 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x326, 0x0) 17:15:06 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x9000000) [ 2425.144452][T23725] binder: BINDER_SET_CONTEXT_MGR already set [ 2425.161707][T23725] binder: 23722:23725 ioctl 40046207 0 returned -16 [ 2425.240097][T23730] binder: BINDER_SET_CONTEXT_MGR already set [ 2425.264055][T23730] binder: 23726:23730 ioctl 40046207 0 returned -16 17:15:06 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xa000000) 17:15:06 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x3ec, 0x0) 17:15:06 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x328, 0x0) 17:15:06 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0463184e4f370d066b3fc282458ddd297d9ac70ee770c54c58685d3de07d1499ae415eb3c21fcfc17b5fc1ffb4d2b2e3e959d695b0b991dba4a99c6e70c5a6fd355499b0928b9a0f98cc0db55c5cdeaa42ae4c1170a2575d10a626b5bacd87e72f682ef1eb54a329fb800a3d107d851e29c399b230db2758e7"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000380)={0x15e, 0x100, "6b870a0a1b9e10ecc13f261d3fb53dc122ef0a60f7c937deed242195dcbc6179", 0x6332, 0x1, 0x8, 0xffffff0d, 0x5f8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$KVM_ASSIGN_SET_INTX_MASK(r5, 0x4040aea4, &(0x7f0000000000)={0x5, 0x39b8, 0x101, 0x5, 0xc4}) 17:15:13 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x3ee, 0x0) 17:15:13 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xb000000) 17:15:13 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x346, 0x0) 17:15:13 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x39) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x2) 17:15:13 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x242142, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0xf2, 0x0) 17:15:13 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000580)=""/4112, 0x1010}], 0x1, 0x7ff) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x0) 17:15:13 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(0xffffffffffffffff, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='sched\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x2) 17:15:13 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xc000000) [ 2432.416152][T23778] binder: BINDER_SET_CONTEXT_MGR already set [ 2432.429731][T23778] binder: 23772:23778 ioctl 40046207 0 returned -16 [ 2432.455609][T23782] binder: BINDER_SET_CONTEXT_MGR already set 17:15:13 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x34f, 0x0) [ 2432.497494][T23782] binder: 23780:23782 ioctl 40046207 0 returned -16 17:15:13 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630840"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000480)={@ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/238, 0xee, 0x1, 0x3c}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x73c000, 0x0}) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r2, 0x40184150, &(0x7f0000000080)={0x0, &(0x7f0000000000)="fc4d9d2aa66293abedccc402aab8a0077a66dda12dd7c2748c4f9957c7e27e12c1a3d59bf2f84f6e2caa0d23627118e750af88e355a1b0e8a19aa04efb56bc9a5bb14d96771876f0a2e2c76ecc2ae8b3aa5462baa726a506eb6128473c86b00c316767047b7a926a4d144f0f1f98e5664b4702b1eb063c", 0x77}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="846304405708cbae781f3c78db69666eafce0fff044538b833785abbf969b31dcd6e4be3e2dc9084f4c77aff44c40b812eb5ddd54f64d947a0370d86e6"], 0x0, 0x0, 0x0}) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) setsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f00000001c0)={@local, @remote, @broadcast}, 0xc) 17:15:14 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x3f0, 0x0) 17:15:14 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xd000000) 17:15:14 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0304000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000001280)={&(0x7f0000001140), 0xc, &(0x7f0000001240)={&(0x7f0000001180)={0x9c, r6, 0x108, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x24, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1ff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x40}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x404c010) preadv(r2, &(0x7f0000001100)=[{&(0x7f0000000080)=""/13, 0xd}], 0x1, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x2) [ 2432.793738][T23798] binder: 23796:23798 unknown command 1074291460 [ 2432.827032][T23798] binder: 23796:23798 ioctl c0306201 20000200 returned -22 [ 2432.839980][T23802] binder: BINDER_SET_CONTEXT_MGR already set 17:15:14 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x356, 0x0) [ 2432.865864][T23802] binder: 23796:23802 ioctl 40046207 0 returned -16 [ 2432.886229][T23798] binder: 23796:23798 ioctl 40184150 20000080 returned -22 17:15:14 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) prctl$PR_CAPBSET_DROP(0x18, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) [ 2432.930986][T23798] binder: BINDER_SET_CONTEXT_MGR already set [ 2432.931059][T23802] binder: 23796:23802 unknown command 1074291460 [ 2432.968185][T23798] binder: 23796:23798 ioctl 40046207 0 returned -16 [ 2432.968926][T23810] binder: BINDER_SET_CONTEXT_MGR already set 17:15:14 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xe000000) [ 2433.015481][T23809] binder: 23796:23809 ioctl 40184150 20000080 returned -22 [ 2433.042654][T23802] binder: 23796:23802 ioctl c0306201 20000200 returned -22 [ 2433.062078][T23810] binder: 23796:23810 ioctl 40046207 0 returned -16 17:15:16 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) 17:15:16 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x40e, 0x0) 17:15:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000003c0)={&(0x7f0000000000)="0e33aa237e486d37bdf89a1aa018cd9ead42e5af397b95702ca352e7f1484a617542b66b50b4281bef1cedd79cfd30d0e95655cdbb75a559a1687955569c88fa5271adbcadeb9498c758845c7cdd8760d668db5c898463d134bb2dedbdb8847551e53487e31920258456feb8ca4cce59c352e28b32a4d12e4a2b94fdbea9fed24aeb17ac2873f3d4428d", &(0x7f00000001c0)=""/221, &(0x7f00000002c0)="a95806ea515ff0cff7ff69750deeb76c49262472fe5e46d10841237b29efa9467de9044f4a665a2213770b0e4ccb11a19fa5c6a5ac547ebb4278406c4bd5611ef1b80ddd98c04ff88981e522eaf14bf4bb2d65e90e46fc337e9644aac9edf0e92e44174f6983961300af4b45ad1086c449b103c961fab28d256f8bd07ff4d4e8e936ce1954fc956bcecd7954a1c66c80fee609d8e1112b7953b5e506a6241751a107dffec736426b7527e04f13cadab5daf62db880817604797a80a89b31590ee4d5c821313ea80b4ea15f8bd128afc0", &(0x7f0000000100)="810ecce710a738004b31ba26ddbbd9d1d14c8c71f724fda45d253b3f41fa316325d6ca0a385027dd5a76be2590a6aa6cde3fafc31e602aa8d9d1ddb7e6beb78cb2d2d11a11447095fe8c031e392e8397ae7063a2f81efd49187931e268a4b96c456b520faaf67e859f6d5d", 0x7fffffff, r2, 0x4}, 0x38) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x0) 17:15:16 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x10000000) 17:15:16 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x358, 0x0) 17:15:16 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) close(r1) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x2) [ 2435.269349][T23835] binder: BINDER_SET_CONTEXT_MGR already set [ 2435.285944][T23835] binder: 23831:23835 ioctl 40046207 0 returned -16 17:15:16 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x417, 0x0) 17:15:16 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x11000000) [ 2435.387017][T23835] binder: BINDER_SET_CONTEXT_MGR already set [ 2435.420175][T23835] binder: 23831:23835 ioctl 40046207 0 returned -16 17:15:16 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) preadv(r2, &(0x7f00000017c0), 0x0, 0x2) 17:15:16 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000100)=""/101, 0x104000, 0x800, 0x1, 0x1}, 0x20) dup2(r1, r0) fsetxattr$security_smack_transmute(r0, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000040)='TRUE', 0x4, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x0) 17:15:16 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x41e, 0x0) 17:15:16 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x12000000) [ 2435.674835][T23863] binder: BINDER_SET_CONTEXT_MGR already set [ 2435.682295][T23863] binder: 23861:23863 ioctl 40046207 0 returned -16 [ 2435.764660][T23863] binder: BINDER_SET_CONTEXT_MGR already set [ 2435.775513][T23863] binder: 23861:23863 ioctl 40046207 0 returned -16 [ 2435.810300][T23863] binder: BINDER_SET_CONTEXT_MGR already set [ 2435.832264][T23863] binder: 23861:23863 ioctl 40046207 0 returned -16 17:15:23 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000080)={0x0, 0x80, 0x2c4d, r0, 0x0, &(0x7f0000000040)={0x9c090a, 0x0, [], @p_u32=&(0x7f0000000000)=0x1}}) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x3ff) preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) 17:15:23 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x60, r2, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1}}, {0x14, 0x2, @in={0xa, 0x0, @empty}}}}]}]}, 0x60}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="8a010000", @ANYRES16=r2, @ANYBLOB="000325bd7000fcdbdf2505000000480106804300040067636d28616573290000000000000000000000000000000000000000000000001b0000004d587a4509ca7391b20ceb9e945a6f931611e3d949d6953f8cc83f0071000300d3a6024155d22ac9d2647aaca95ed5fa85a91ac805f604f3a8c78792996fc2de57c0ab1926055205032382748362902af750d0ca07330a755448465a341fa004fa3fabe1cfa497417cae5ed60dbd362285948539d318221b28ea4c950c38d115ba3cf7594914e50b40dd9228b70000008b00030019b88206bbe4dc59d8a3b28c3109e43fb05c107f49d2f377e4aae6312c9bb5e3e3ea58e0320d5d94af18799bc7aec9d83e4ffc02d20aae1c1d98df3eab05902fa91268f7aafac1ad8ef030fc2f4e28f36813c031c63bc5ed15e6c86554cd7d383793c6fb81c062e8de51f101197c992df64836329b495a1b23724f0f0c650ff9db2034d9d473fb00180007800c00040001000000000000000800020007000000"], 0x174}, 0x1, 0x0, 0x0, 0x408d4}, 0x8000) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x2) 17:15:23 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x35a, 0x0) 17:15:23 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x420, 0x0) 17:15:23 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x25000000) 17:15:23 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x3f000000) 17:15:23 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x422, 0x0) [ 2442.021723][T23890] tipc: Enabling of bearer rejected, failed to enable media 17:15:23 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='attr/keycreate\x00') preadv(r1, &(0x7f00000017c0), 0xf2, 0x0) [ 2442.110303][T23886] binder: BINDER_SET_CONTEXT_MGR already set [ 2442.123647][T23886] binder: 23883:23886 ioctl 40046207 0 returned -16 17:15:23 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x440, 0x0) [ 2442.156370][T23894] binder: 23883:23894 ioctl c0205647 20000080 returned -22 17:15:23 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x40000000) 17:15:23 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000), 0x3, 0xe3) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) r4 = pidfd_getfd(r0, r3, 0x0) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000000)) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x0) 17:15:23 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x449, 0x0) [ 2442.310787][T23905] tipc: Enabling of bearer rejected, failed to enable media [ 2442.410674][T23909] binder: BINDER_SET_CONTEXT_MGR already set [ 2442.416722][T23909] binder: 23906:23909 ioctl 40046207 0 returned -16 [ 2442.492126][T23909] binder: BINDER_SET_CONTEXT_MGR already set [ 2442.518168][T23921] binder: BINDER_SET_CONTEXT_MGR already set [ 2442.524180][T23921] binder: 23906:23921 ioctl 40046207 0 returned -16 [ 2442.532787][T23909] binder: 23906:23909 ioctl 40046207 0 returned -16 17:15:28 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0) 17:15:28 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x378, 0x0) 17:15:28 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x48000000) 17:15:28 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(r2, &(0x7f0000000240)=[{&(0x7f00000012c0)=""/4090, 0xffa}, {&(0x7f0000000280)=""/239, 0xef}, {&(0x7f0000000000)=""/39, 0x27}], 0x66, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x2) 17:15:28 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x450, 0x0) 17:15:28 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0xf2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)={0x7, 0x2, 0x4, 0x8, 0x0, {0x77359400}, {0x4, 0x1, 0x20, 0x20, 0x15, 0x4, "68758619"}, 0x3, 0x1, @planes=&(0x7f0000000040)={0x8001, 0xe2ed, @mem_offset=0x23, 0x37b}, 0x7, 0x0, r1}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="df000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0xf6, r4, 0x1, 0x3, 0x6, @dev={[], 0x1d}}, 0x14) 17:15:28 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x4c000000) [ 2446.984080][T23942] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 17:15:28 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x452, 0x0) 17:15:28 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x381, 0x0) [ 2447.172484][T23942] 8021q: adding VLAN 0 to HW filter on device bond7 17:15:28 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x68000000) 17:15:28 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x454, 0x0) 17:15:28 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xa20000, 0x9, 0x8000001f, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909ce, 0x401, [], @string=&(0x7f0000000240)=0x3}}) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01527dbe1c24a9a38859b156bd26d67c0806be7e8e76585849926690e0cfbc5e974bdb84a614f6e04b45454b776a393e47d88acd2db8c1953f960dadb1ef6046e8b8a49168653f03fe45463c6b6642f3aeb4065cbfa541871fbcbc9d5ea8d07d8339986e23c52b5982aa6ab7cd2998a7164762e440c7d8addacddd1c63a45510cf7837da0ed57732b934ceb908862768dd275e0f9cd291ff8e8bfdfa39065c011cd6a5da13d80a248c3f6776c3"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x1402, 0x800, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x44001) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r7, 0x540c) preadv(r6, &(0x7f00000017c0), 0xf2, 0x2) 17:15:28 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) 17:15:28 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x472, 0x0) 17:15:28 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x6c000000) 17:15:28 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x388, 0x0) [ 2447.532099][T24001] binder: BINDER_SET_CONTEXT_MGR already set [ 2447.563471][T24001] binder: 23999:24001 ioctl 40046207 0 returned -16 [ 2447.577993][T24003] binder: 23999:24003 unknown command -1099083263 [ 2447.584464][T24003] binder: 23999:24003 ioctl c0306201 20000280 returned -22 17:15:29 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x47b, 0x0) [ 2447.720859][T23946] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 17:15:33 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000010", @ANYRES16=r1, @ANYBLOB="000228bd7000fcdbdf250400000008000300ffffffff0500050005000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0xadf34102f8a5a6c8) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x0) 17:15:33 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x0, 0xfffffffffffffffe) 17:15:33 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x74000000) 17:15:33 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x38a, 0x0) 17:15:33 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) r5 = accept4$rose(r4, 0x0, &(0x7f0000000000), 0x40800) setsockopt(r5, 0x6, 0x4, &(0x7f0000000100)="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", 0xfd) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000380)={{0x4, 0x4000, 0xf, 0x7f, 0x8, 0xab, 0x2, 0x1f, 0x6, 0x84, 0x3, 0x81}, {0x0, 0x100000, 0xf, 0x3, 0x1f, 0x81, 0x0, 0x0, 0xcd, 0x29, 0x3, 0xe7}, {0x2, 0x1, 0xd, 0x1f, 0x2, 0x1, 0x28, 0x20, 0x0, 0x3, 0x6c, 0x8e}, {0x5000, 0x10000, 0xa, 0x3f, 0x1, 0x1, 0x5, 0x5, 0x0, 0x3, 0x5, 0xfe}, {0x107004, 0x0, 0xd, 0x1f, 0xdf, 0x0, 0x20, 0x4, 0x40, 0x50, 0x5, 0xa2}, {0x2000, 0x108005, 0xc, 0x0, 0x1, 0x7f, 0x8, 0x3f, 0x62, 0x80, 0x2, 0x6a}, {0x0, 0x1000, 0xa, 0x3f, 0x2, 0x5, 0x8, 0x9e, 0x80, 0x9, 0x81}, {0xf000, 0xf000, 0x8, 0x1, 0x0, 0x9, 0x3f, 0x9, 0x9, 0x5, 0xf5, 0xf8}, {0x2000, 0x9}, {0x6000, 0x7}, 0x0, 0x0, 0x4, 0x80, 0x7, 0x1001, 0x5000, [0xd0a, 0x1, 0x5, 0x8]}) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0xf2, 0x2) 17:15:33 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x482, 0x0) [ 2451.980921][T24035] binder: BINDER_SET_CONTEXT_MGR already set [ 2452.007368][T24035] binder: 24031:24035 ioctl 40046207 0 returned -16 17:15:33 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x484, 0x0) 17:15:33 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x7a000000) 17:15:33 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x38c, 0x0) 17:15:33 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r4 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x3c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r4}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000001) preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) 17:15:33 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x7fffe000) 17:15:33 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x486, 0x0) 17:15:39 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x4a4, 0x0) 17:15:39 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r5, r4) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @aes128, 0x0, "1efe2fd07cb501f1"}) preadv(r3, &(0x7f00000017c0), 0xf2, 0x2) 17:15:39 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x3aa, 0x0) 17:15:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) setsockopt(r2, 0x2, 0x0, &(0x7f00000001c0)="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", 0x1000) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x0) getsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000000)=0x81, &(0x7f0000000040)=0x4) 17:15:39 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x7ffff000) 17:15:39 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x4ad, 0x0) 17:15:39 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$VIDIOC_DQEVENT(r4, 0x80885659, &(0x7f0000001140)={0x0, @src_change}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x1002) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000000)=""/58, 0x3a}, {&(0x7f0000000080)=""/2, 0x2}], 0x2, 0x2) [ 2458.495327][T24080] binder: BINDER_SET_CONTEXT_MGR already set [ 2458.512664][T24080] binder: 24075:24080 ioctl 40046207 0 returned -16 17:15:39 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xcc0c0000) [ 2458.561156][T24080] binder: BINDER_SET_CONTEXT_MGR already set [ 2458.587523][T24080] binder: 24075:24080 ioctl 40046207 0 returned -16 17:15:40 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x3b3, 0x0) [ 2458.670362][T24090] binder: BINDER_SET_CONTEXT_MGR already set [ 2458.676502][T24090] binder: 24085:24090 ioctl 40046207 0 returned -16 [ 2458.684571][T24080] binder: BINDER_SET_CONTEXT_MGR already set [ 2458.694696][T24080] binder: 24075:24080 ioctl 40046207 0 returned -16 [ 2458.703694][T24094] binder: BINDER_SET_CONTEXT_MGR already set [ 2458.740715][T24094] binder: 24075:24094 ioctl 40046207 0 returned -16 [ 2458.750805][T24080] binder: 24075:24080 ioctl c0306201 20000280 returned -14 17:15:40 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f00000003c0)=""/127, 0x7f}, {&(0x7f0000000080)=""/51, 0x33}, {&(0x7f0000000200)=""/40, 0x28}, {&(0x7f0000000280)=""/143, 0x8f}, {&(0x7f0000000000)=""/105, 0x69}], 0x6, 0x2) 17:15:40 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x4b4, 0x0) 17:15:40 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x103642, 0x0) getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x2) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x210040, 0x0) 17:15:40 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xffffff7f) 17:15:40 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='I'], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) sendmmsg$alg(r4, &(0x7f0000001280)=[{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000980)="f9ce54354edeedf9494f079cc46116a18f9fe4378437ab33a60d29073a250d9341032ee1bbbf3de2df993a9c36b086491002011c99b67b809f4a82d84acf51", 0x3f}, {&(0x7f00000009c0)="684aef27fd1e74177b5490c13bbd11745acfb93299e499bfb25cb8ab8943d81bd17d5bd874e48d6209ab819acc900a3b638be867874aa7f6d9a835a8168068112c1ada987037646fdca158201f946dd658ef89737c0b6b7b5a34d46ec14e34e9e66eb9cc134859d7fb629c492cc3f4b46cf2ae2d3fd9a2ac5b4fa1aa69bca57f725f4ee072bcf4d79722bb478cb63bcab5a6ddff17659de809111eb5ee7b7433e457705531d4f67e4e9f75e2b097d93c6fe5956b", 0xb4}, {&(0x7f0000000d40)="c3bc7090b769fdbd195dc809258d7ea3ef2f1b298a86676c4752d2e9bfc26d9cb4df65bcca2bf035362f9544d36108ab74d3247e936736c87a29f93d699e56ca764886c49942bdfca5c74d26890f0b28c1a9239df58fb9c88bca06ba1d4e22e799fa110820b205b0466ffee966df26663762af68f42b946758b115fb17ee2aa7722e29426033bc2820fa640e1bf600e6c8a1384895117ee8ef869113343268416580324833292cfe0eca6a1fc5f40fa945185052f24908847ad06a86cee5e54041630ec7352b9ee1f352df", 0xcb}, {&(0x7f0000000e40)="70befdb5ee90dcae35b072efdcb0aa74eb0e217364c69516f4e91d9d2794f0b6cc672c3147c3ade379cb72b772e98398a79908861f42cc8ce88eb99e80189f1d64b40543fac533b9cc97e80e07bbaacfd8f7e18af24c633c10e364bbefdd4366674fe8b3e7b5d50f5dfb45ec75050d3da500ed97ccc9670779a5fd28b8d81167be8c04232b0a396f6664f8010ee5635fcc1673652f7e9c3589871dc018e4a7179772ee35bf731fc242a4957df435949a85338f3e9dd475886d9895396cd438facdc3e10e64d9", 0xc6}, {&(0x7f0000002400)="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", 0x1000}, {&(0x7f0000000f40)="9e75eeaac96d60f4823bc43b8e171fc88a3b5581a08fac3de3bb8d999d698edb9761be412c6c59a45ea3f72d7e8cdec5148913758a9c073ab6540ec902f6ca9934b31d45ff21a508133a8a7d4a8cf1979ddec9a88304464de27322", 0x5b}, {&(0x7f0000000fc0)="c513ee3100f9b8a199251776f474ff2b73e10e2b6e5c28a9d1a5f22858a205efdc0965f139166ac0f16858b5e8a4b08e94f6d54d684dcc66d410c84d6fa5d7398218e71531e6f564fbb99e7bb4402d04aa0cce06e686394060aae04121cf15fb74a0ae31aef669bdbbe6aa05d9f3f22e3bca630bd675df87fbc740b5c7b6c027a6ff6bc98c725618734888fc28f505137bef4fce6cfc3545bddd98d4c98fbf7e2e70ae03b0568b89b172cc974f65", 0xae}, {&(0x7f0000001080)="f3f5251f009c732be7e45f071b02624a0111d8e7ffda685c0b22ceda1814d20e244f7e6541105ace60a6a85b01a8fa02aa2853a838a40cfa6a718d8b657fd9f0b8c929de4648505b1092f39783fcf62e72f49289901985c6cd870da1a27b26b7233d502add2499bc4ff3ad96b315c2358902a5660e64705c3965f55b488046551a9f1a6c42432d35a49d2047569cceb075f27302d4ecaf9aa6188adba38a326c", 0xa0}, {&(0x7f0000000a80)="90a5c8064127915491728013e1598f0551151445c19f528711bb99bc6c0ae10184b19316276f91b30c4a682fa37555564e6cdbde98a7bd7b80", 0x39}], 0x9, &(0x7f0000001200)=[@assoc={0x18, 0x117, 0x4, 0x7fffffff}, @op={0x18}, @iv={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x87ea197d58336dd7}], 0x1, 0x80) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="059a4c409ff5dfc1f1e833f6c428785e95a355558dd259c7a54c33313ff4874a13151bf0ab6cab128e74be5e3e4be08acebd5f6b"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) sendmsg$rds(r3, &(0x7f0000000ac0)={&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/120, 0x78}, {&(0x7f0000000100)=""/52, 0x34}, {&(0x7f00000001c0)=""/152, 0x98}, {&(0x7f0000000280)=""/227, 0xe3}, {&(0x7f0000000380)=""/100, 0x64}, {&(0x7f0000000400)=""/205, 0xcd}, {&(0x7f0000000500)=""/150, 0x96}], 0x7, &(0x7f0000000b80)=[@cswp={0x58, 0x114, 0x7, {{0x3, 0x1000}, &(0x7f00000022c0)=0x8001, &(0x7f0000002300)=0x800000000, 0xfffffffffffffffb, 0x6, 0x84, 0x40, 0x13, 0x2}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000680)=""/33, 0x21}, &(0x7f00000006c0), 0x10}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1, 0xfffffffa}, &(0x7f0000000700)=0xfffffffffffffff7, &(0x7f0000000740)=0x8000, 0x8, 0xf46c, 0xfffffffffffffffc, 0x40, 0x18, 0x6}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000780)=""/216, 0xd8}, &(0x7f0000000880), 0x18}}, @fadd={0x58, 0x114, 0x6, {{0x0, 0x7ff}, &(0x7f0000000b00)=0x2, &(0x7f0000000900)=0x1, 0x8, 0x7, 0x400, 0x7, 0x2, 0x9}}, @mask_cswp={0x58, 0x114, 0x9, {{0x4a, 0x5}, &(0x7f00000008c0)=0x15d, &(0x7f0000000b40)=0x3f, 0x30e, 0x0, 0x5, 0x100000001, 0x30, 0xb93}}], 0x1c0, 0x8115}, 0x8) preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) 17:15:40 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x3ba, 0x0) [ 2459.376398][T24115] binder: BINDER_SET_CONTEXT_MGR already set [ 2459.389874][T24115] binder: 24109:24115 ioctl 40046207 0 returned -16 17:15:40 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x7ffffffff000) 17:15:40 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x4b6, 0x0) 17:15:40 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/102384, 0x7}, {&(0x7f0000000440)=""/131, 0x83}], 0x48, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0xf2, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0}) r6 = dup2(r5, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="ea6648d7"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$GIO_FONT(r6, 0x4b60, &(0x7f0000000000)=""/80) 17:15:40 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000025c0)='vegas\x00', 0x6) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x3c, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40001) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_usb_connect(0x3, 0x92e, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0xc3, 0x5, 0x29, 0xff, 0x2001, 0x3c1c, 0xd6c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91c, 0x4, 0x81, 0x9, 0x0, 0x81, [{{0x9, 0x4, 0xe8, 0x6, 0x0, 0x5d, 0xab, 0xb0, 0x20}}, {{0x9, 0x4, 0x67, 0x5, 0x7, 0x63, 0x79, 0x15, 0x20, [], [{{0x9, 0x5, 0x4, 0x0, 0x40, 0x0, 0x3, 0xc1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x80}]}}, {{0x9, 0x5, 0x0, 0x1, 0x40, 0x7f, 0x5, 0x8}}, {{0x9, 0x5, 0x2, 0x8, 0x10, 0x9, 0x0, 0xa6}}, {{0x9, 0x5, 0x3, 0x1, 0x8, 0xc0, 0x3, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x3f}]}}, {{0x9, 0x5, 0xb, 0x1f, 0x400, 0x96, 0x1, 0x14, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x916}]}}, {{0x9, 0x5, 0xa, 0x8, 0x20, 0x81, 0x1, 0x81}}, {{0x9, 0x5, 0x5, 0x13, 0x8, 0x20, 0x40, 0x0, [@generic={0x69, 0x22, "a565de1b0236f58f89d6d2f59cc98ac14e77cc48267113581bbbc5d177a324d5e8fc2efa02ce4ed202eaddec200a4c7b6f61a6c92decb34322327afb297eebf41c6530c4fde3fd44c99799f76b3a8d568af6566c196c2ac2358e8c5d912735db4208ee4a9eac7a"}, @generic={0x50, 0x21, "2f97d717e7636ecc3e21bdcbb916db59ccdde951effd9952b1af7e555109962485545b792a7f5db01033760d0f9e392d83fb82666c54316c1a41998d3ec04f8d5d7859c2c2801c4dda26c4d8cb03"}]}}]}}, {{0x9, 0x4, 0x37, 0x1f, 0xb, 0x3a, 0x4c, 0xe, 0xc3, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "0258dda1931b"}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x4e2, 0xffff, 0x800, 0x5}}, @uac_as={[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x40, 0xa97, 0x2e, "3b875ea2"}]}], [{{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x7, 0x8, 0x79}}, {{0x9, 0x5, 0x5, 0x1, 0x3ff, 0xff, 0x81, 0x0, [@generic={0x3e, 0x30, "192ec400a0a16463664e28323d46ed604ce464b1a5edeb58851ba9efc9698b1abcaaaaeb5c46bda20cc15d098b4b6692ce17b35d979fd99521897255"}, @generic={0x101, 0xb, "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"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x1f, 0x59, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x20, 0x50}]}}, {{0x9, 0x5, 0x1, 0x1, 0x400, 0x6, 0x7f, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x39, 0xe849}]}}, {{0x9, 0x5, 0x1, 0x3, 0x200, 0x6, 0x8, 0x7}}, {{0x9, 0x5, 0x8, 0x8, 0x20, 0x3f, 0x46, 0x2, [@generic={0xc, 0x2, "30c467dc06acc04c8f4d"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0xf9c4}]}}, {{0x9, 0x5, 0x5, 0x8, 0x3ff, 0x9, 0x3, 0x3, [@generic={0xbb, 0x23, "19b02fe9febb96614b8566e943c7e7e563313075f8210233aee9e12c7c68383f204f2afe08a8fc7ac00afd3673732d0ec7114e1e6b3cbf6841d6aa8d24525152bca191f66c4ae169da557775fa687172f7fb04362a40c5f84967164c98c2e23e9624bb7993e42ea73b24f1ed5141d347c5cacd45c7012d46ac0220c8983fcfde1fe78cb31f86af4c0a7702e31b7024a3d236c3f7bbed715346ef9b87124c187bd12f79cc72e0028bd246fc20f50b96e478b377ce4f81a90f01"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xb3e}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x59, 0x34, 0x4d}}, {{0x9, 0x5, 0x7, 0x4, 0x200, 0x75, 0x20, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xe1, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x80}]}}, {{0x9, 0x5, 0xe, 0x0, 0x187, 0x1, 0x2, 0xdc, [@generic={0xea, 0xd, "92bf6ddead51b6b3be252935f5bb2ac8f86c1c5608080b25a889a9cca8e235ac3e07b7b3efd23df447a00593a5b302a0fbda3bf9e0b358a22d69d5751b3c49c51580134e2179cee90906e9ae52b1ed7a620a924680de50ed6524d58dfcec5da9206b7f97c321c07ade1ba1b379917efb0c9842f971321c5483614be9adbfe705a58b5086161465dc189baf31509a1c20a462c824048c14da7cbfa7826225a6817fbeb3738304fa4daab29816cbe0d56e868a6e6c4f4a230a4425e954b96e7fabf2cc92ec1658d18a30d114437be592f8b2ccb97c893509c0fd1383776ed3bb02be845ab1b4596055"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x1f}]}}, {{0x9, 0x5, 0x7, 0xc, 0x200, 0x9, 0x3f, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x1ff}, @generic={0xa6, 0x10, "bb49cd4c3fa7d3ca383aa91919c8400cc2b418217f923f2de186a4b620583cc5a4f6773df4414c748dae220d17b0581c5f4626605f43e87e9f2b01641076998fc95fc4b1b562d902a130f5833378bf1f2bef76c33baa387a725574ab3aa8e25a54107ba852425c4fb41f344f5618c4b0f79e59733985b167ef22769ff9a625db26e39fd2a53481480a3fcbdc22c7c6d895e1445c80f17bfa7b0e0c66d46ccc3a47b5afcb"}]}}]}}, {{0x9, 0x4, 0x8a, 0x3f, 0xe, 0xf9, 0x68, 0xd2, 0x9, [@generic={0x1b, 0x2, "b03e8d8263b65793d80f4acdda811ac6519bf20f0d2c8ed07a"}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "9e0471d3"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x40, 0x1, 0x1}, {0x6, 0x24, 0x1a, 0x35d, 0x2}, [@mbim_extended={0x8, 0x24, 0x1c, 0x8000, 0x1e, 0x9}, @obex={0x5, 0x24, 0x15, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x9}, @obex={0x5, 0x24, 0x15, 0xff}]}], [{{0x9, 0x5, 0x9, 0x2, 0x8, 0x7, 0x3f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0xc64f}, @generic={0x28, 0xf, "1bec89006491ff85704efa85a396240891ec603ebfcd5940bdbf5a4665b52ea60629d4cd2c55"}]}}, {{0x9, 0x5, 0x30742996a91841a9, 0x0, 0x400, 0x0, 0x5, 0x4, [@generic={0x8c, 0x31, "f62086cb94227a3949e4d6f7e70065cbf47cdc7c4808af4ff95696f50394ed2a1a7927ca76470eaa8c3735fccd2274ae7ed15749ed691074a63634f780483efae103b8b18b1bcaa52016df13986627e22bc7b0e9e2ab69c1e0ad5cf1992eaab6565d72f28402b3f2990358abb7d06d34d8953bd8c521619accbddb1808bb5402898f8f0d486a72792643"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x3f, 0x81, 0x3f}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x9, 0x7f, 0x2, [@generic={0x9e, 0xb, "3eb251d59e3bc4ef61cd36e3d77bb40fa6b54b6d7d537d6586c36570fa2d8b984915cefdd3d4cbb05a49ea62ba794c7b3d27d1bed7cf6db6cf5e4838b1a3079d54e26976fb76cfca5c939ef551a03a42c21ba99c10cc9e2173fff1f5f0693c199f920a9b9d6a6fed3385b21bd4ce7356f5f7881123261031d74d3b1879530139baf55c11c5175f8896e068cc8fdf463aff5ce0eab40b1cc944982e2d"}]}}, {{0x9, 0x5, 0x1, 0x11, 0x400, 0x3b, 0xca, 0x4}}, {{0x9, 0x5, 0x9, 0x3, 0x400, 0xff, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0xf6, 0x0, 0x20, [@generic={0xbe, 0xf, "834477e86e27a65a9e0ba94c8a109f9f3af0439bfb5cb9040f4474d319ea96f572a869a03b866a6f83c96f2189709a25ddc40b191b3a78ba5524de037d1204aee8ad06f9d1bce8489d43a38d0da3ddee19919bd75c49f3dcb41ffa7a008275f001c6fb45279dd3be2145cad34971647956d72b290e367c7ab2ed33978583d9d54a60354f4e21871be46b6f6a30db7b27a6e89199d17ab65fb38f45112f7c385d33bdbb6bc39b2f243122a649e21d4638d67c0adfcd77a9f987d1b23e"}, @generic={0x4d, 0x10, "638adfd16ab1267dd168a85abaaf49c12170673a31bd5ad180ebfae07b99bba73c580422a4e857a157c62b22c1503d8ace6f6aebc0ac5ad4c7aa9f788e36d795b8eed2595cc87770d92a51"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x0, 0x1e, 0x3, 0x0, [@generic={0x7, 0x22, "ca9e6686db"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x1}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x4, 0x5c, 0xee, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x5}]}}, {{0x9, 0x5, 0x3, 0x0, 0x608, 0xe1, 0x1f, 0x6}}, {{0x9, 0x5, 0xa, 0x4, 0x20, 0x81, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xff, 0x5}]}}, {{0x9, 0x5, 0x0, 0x0, 0x430, 0x9, 0x1, 0x80, [@generic={0x18, 0xd, "0a57cb0eb3d0974990ef103ddeba77f999c137529398"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x400, 0x80, 0x2, 0x1f}}, {{0x9, 0x5, 0x80, 0x8, 0x20, 0x1f, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x6}]}}]}}]}}]}}, &(0x7f0000000f80)={0x0, 0xfffffffffffffffe, 0x11d, &(0x7f0000000ac0)={0x5, 0xf, 0x11d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x3, 0x8, 0x7}, @generic={0xe7, 0x10, 0x3, "a661ba87c394d61bbcee561f5503b20a5958e9f0865f8927d667bd0a6ca804269b6f8fb6b5820b911807fdfedd29d55ef5a9c5b1ebdd8eea9b2f75c6b3c53057b61f6443ed695e8a4407db12959a791180df707ca625bb962b52ebd365ca5b0def4db393f8947f113e25bb83878f1e67dcbe73949b113d542489f4cf63490cdb8dac86f33a0fb3b1fa291fa893860e256c37cf03bdb122e1b0d09dcc275810d760afee8af51e0da6cd758e3dc69cef66311d3dc72efee2aadf9c7eb8836a3c26e42561897690e9889fa44eab56a928429820204978e445b974dfa5b2488937f1a164eca5"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x0, 0x0, 0x7}, @generic={0x9, 0x10, 0xb, "73cc5823b50d"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "60e9de5867b6ffeeb0e7dc4ad66fdb2c"}]}, 0x9, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x41d}}, {0x4a, &(0x7f0000000c00)=@string={0x4a, 0x3, "ac1385c4d035ac97dca44b0af5597789afd84ad0b9be754d2ccd791a9bbdd68af49e7fe9f60201d86cc8ca9a7874df8f55a89040d66586da78180d1d3306d89de4272414cfe67e0b"}}, {0x58, &(0x7f0000000c80)=@string={0x58, 0x3, "66e8c8d4f3ec1232530e71608296865bb72099ecd2f07aeb089cab80f8ef59684fc02b68af95073f8face0d15e0943ed050cf430bb78cd2621caef2fa60a17537b97f9cc4e60c1d5ac4a1dc96b64cd7aa21cb65d45d6"}}, {0x102, &(0x7f0000000d00)=@string={0x102, 0x3, "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"}}, {0xfc, &(0x7f0000000e40)=@string={0xfc, 0x3, "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"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x42c}}]}) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000001100)={0x14, &(0x7f0000001040)={0x20, 0x5, 0x5e, {0x5e, 0x2f, "ec0dd9dac787531a6bffad561ac39ce662e446d0287ac2646ca306de8180592b0209185c805bb6d15a40c832051182fdf622f02de7de4481a33ca94a1f8f5b9d65a973e35d6b6ee5d03af2190ea77bd1d46456e9a8885721e4a6d2b6"}}, &(0x7f00000010c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002440)={0x44, &(0x7f0000001140)={0x20, 0x15, 0xbe, "e88b913355ea6bbe198a5d52d3df448d8d4ec0a9dc08f98c1a718d99b4ff5a6b9d59dbe25c6c48a52c59800fa299b10a6f107bcbcab90f1b54671e7bdfa481c246cd59ac714a5967b4839940a62a95e1142a3c31b8b9a680857e1cbe989bf86f6b9d17d9d9c380d3f2a49e79f2e2ebc6243107f70b33d9f4c3a784d3754326ac41139e7190f551c5b8bceba23a1475c6ea6ca6589ab837311e9ab929120683b3ab0f7b3e5fc8bcee6e7383cef664b8c21a9e8453ff1e7e27beb6a232fac1"}, &(0x7f0000001240)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000001280)={0x0, 0x8, 0x1, 0x40}, &(0x7f00000022c0)={0x20, 0x80, 0x1c, {0x0, 0x1000, 0x0, 0x44c6, 0x15, 0x4, 0x1ff, 0xce8, 0xfff, 0x0, 0x6, 0xe75}}, &(0x7f0000002300)={0x20, 0x85, 0x4, 0xac}, &(0x7f0000002340)={0x20, 0x83, 0x2}, &(0x7f0000002380)={0x20, 0x87, 0x2, 0x79e}, &(0x7f0000002400)={0x20, 0x89, 0x2}}) preadv(r3, &(0x7f00000017c0), 0xf2, 0x0) 17:15:41 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x3bc, 0x0) 17:15:41 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x10000000000000) 17:15:41 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x4b8, 0x0) [ 2459.667069][T24139] binder: BINDER_SET_CONTEXT_MGR already set [ 2459.700340][T24139] binder: 24135:24139 ioctl 40046207 0 returned -16 17:15:41 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = dup2(r0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_MTU={0x8}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x10, 0xa}, {0x2, 0x2}, {0x3, 0x1}}, [@qdisc_kind_options=@q_pfifo_fast={0xf, 0x1, 'pfifo_fast\x00'}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10000}, @qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x8840) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0xf2, 0x2) [ 2459.732377][T24144] binder: BINDER_SET_CONTEXT_MGR already set [ 2459.775489][T24144] binder: 24135:24144 ioctl 40046207 0 returned -16 [ 2459.785553][T24139] binder: 24135:24139 unknown command 926363952 17:15:41 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xe0ff7f00000000) 17:15:41 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x4d6, 0x0) [ 2459.828773][T24139] binder: 24135:24139 ioctl c0306201 20000200 returned -22 [ 2459.848465][T24144] binder: BINDER_SET_CONTEXT_MGR already set [ 2459.889861][T24144] binder: 24135:24144 ioctl 40046207 0 returned -16 [ 2459.903645][T24139] binder: 24135:24139 unknown command -683120918 [ 2459.929555][T24139] binder: 24135:24139 ioctl c0306201 20000280 returned -22 [ 2459.944502][T24144] binder: 24135:24144 ioctl 4b60 20000000 returned -22 17:15:41 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xf0ff7f00000000) 17:15:41 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x3be, 0x0) [ 2460.006640][T19136] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 2460.020619][T24144] binder: BINDER_SET_CONTEXT_MGR already set 17:15:41 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x4df, 0x0) 17:15:41 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0), 0x0) sendto$inet(r4, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0xe, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={r5, 0x4303, 0x81, 0x10}, &(0x7f0000000080)=0x10) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0xf2, 0x2) [ 2460.052969][T24144] binder: 24135:24144 ioctl 40046207 0 returned -16 [ 2460.052973][T24139] binder: BINDER_SET_CONTEXT_MGR already set [ 2460.052992][T24139] binder: 24135:24139 ioctl 40046207 0 returned -16 [ 2460.076105][T24167] binder: BINDER_SET_CONTEXT_MGR already set [ 2460.096394][T24157] binder: 24135:24157 unknown command -683120918 [ 2460.108425][T24157] binder: 24135:24157 ioctl c0306201 20000280 returned -22 [ 2460.119194][T24144] binder: 24135:24144 ioctl 4b60 20000000 returned -22 [ 2460.120213][T24167] binder: 24135:24167 ioctl 40046207 0 returned -16 17:15:41 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xf0ffffff7f0000) [ 2460.276015][T19136] usb 5-1: Invalid ep0 maxpacket: 512 [ 2460.436941][T19136] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2460.676606][T19136] usb 5-1: Invalid ep0 maxpacket: 512 [ 2460.682433][T19136] usb usb5-port1: attempt power cycle [ 2461.426574][T19136] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 2461.536499][T19136] usb 5-1: Invalid ep0 maxpacket: 512 [ 2461.686457][T19136] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2461.786593][T19136] usb 5-1: Invalid ep0 maxpacket: 512 [ 2461.792249][T19136] usb usb5-port1: unable to enumerate USB device 17:15:44 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/4088, 0xad5}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x39) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x80000001, 0x5, 0x7, 0x5, 0x1, 0x4}) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) ptrace(0x8, r1) 17:15:44 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x4e6, 0x0) 17:15:44 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 17:15:44 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x100000001) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') fsetxattr$smack_xattr_label(r0, &(0x7f0000000000)='security.SMACK64IPIN\x00', &(0x7f0000000080), 0x1, 0x1) preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:15:44 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x3dc, 0x0) 17:15:44 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x100000000000000) 17:15:44 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') r2 = socket$inet(0x2, 0x800, 0x11e3) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000000)={0x73, @multicast1, 0x4e21, 0x0, 'sh\x00', 0x0, 0xd2d, 0x6c}, 0x2c) preadv(r1, &(0x7f00000017c0), 0xf2, 0x0) 17:15:44 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x4e8, 0x0) [ 2462.819911][T24206] binder: BINDER_SET_CONTEXT_MGR already set [ 2462.831109][T24206] binder: 24193:24206 ioctl 40046207 0 returned -16 17:15:44 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x200000000000000) 17:15:44 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x4ea, 0x0) 17:15:44 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000000)=0x0) syz_open_procfs(r4, &(0x7f0000000040)='net/softnet_stat\x00') 17:15:44 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000000)) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x2) 17:15:44 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x3e5, 0x0) 17:15:44 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x300000000000000) [ 2463.547002][T24209] binder: BINDER_SET_CONTEXT_MGR already set [ 2463.553071][T24209] binder: 24193:24209 ioctl 40046207 0 returned -16 17:15:52 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6bc, 0x301000) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f00000001c0)={0x5, 0x0, [{0x1ff, 0x2, 0x0, 0x0, @msi={0x2db, 0xe3, 0x6}}, {0x1000, 0x4, 0x0, 0x0, @adapter={0x6, 0x80, 0x7fff, 0x8, 0x9}}, {0xfff, 0x4, 0x0, 0x0, @adapter={0x1, 0x3, 0x1000, 0x1, 0x2}}, {0xffffff01, 0x4, 0x0, 0x0, @msi={0x1, 0x4, 0x31b00000, 0x8b}}, {0x2, 0x3, 0x0, 0x0, @sint={0x4, 0x9}}]}) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0xf2, 0x0) 17:15:52 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x508, 0x0) 17:15:52 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x400000000000000) 17:15:52 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x3ec, 0x0) 17:15:52 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r3, r2) preadv(r3, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0xf2, 0x2) 17:15:52 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x511, 0x0) 17:15:53 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x500000000000000) 17:15:53 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85, 0x1}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x0, 0x73c000, 0x0}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x60, r6, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1}}, {0x14, 0x2, @in={0xa, 0x0, @empty}}}}]}]}, 0x60}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xac, r6, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4044014}, 0x20000800) 17:15:53 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/22, 0x16}, {&(0x7f0000000100)=""/102, 0x66}, {&(0x7f0000000180)=""/86, 0x56}], 0x4, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') syz_genetlink_get_family_id$mptcp(&(0x7f0000000240)='mptcp_pm\x00') 17:15:53 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x3ee, 0x0) 17:15:53 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x518, 0x0) 17:15:53 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x600000000000000) 17:15:55 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x3, 0x20000) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x14000, 0x0) 17:15:55 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x51a, 0x0) 17:15:55 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x700000000000000) 17:15:55 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x3f0, 0x0) 17:15:55 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r4, r3) preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:15:55 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r5, 0x4144, 0x0) 17:15:55 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x51c, 0x0) 17:15:55 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x800000000000000) 17:15:56 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x40e, 0x0) 17:15:56 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x53a, 0x0) 17:15:56 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x900000000000000) 17:15:56 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x543, 0x0) 17:16:00 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/187, 0xbb}], 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0xfd) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r7 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x73c000, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r6, 0xc0605345, &(0x7f0000000240)={0x80000000, 0x0, {0x3, 0x2, 0x8, 0x3, 0x5d4}, 0x800}) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)=0x119) preadv(r3, &(0x7f00000017c0), 0x0, 0x0) 17:16:00 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x417, 0x0) 17:16:00 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c000000100001040000000000000000000000de", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="0800040000000000"], 0x4c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="42e71ec7b3604617787cf83b2e0d600007defe0b03d36ec1d75f883a1dff828f944aa35ea98072810af72d5b290d6544fd40211acdd287f534d05a6d1267ddcab885a3e44a0e211cf0a8b7620b4161125d482149e7bd4f50042a44f81aa083c7a060774fbfbba7661aae0841cd2929ffa00359174f7acc7620e00577ec2a38d783de7ad0c91f0088a95bd92d75364ff1a8b2ac9b5207ccb245e9d4549b3ef6750fd34a69d14d4ef8484062765800d0f334551697b55537"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="df000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_MTU={0x8}]}, 0x4c}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000002e80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002e40)={&(0x7f0000002940)={0x4dc, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x60000}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x200}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x629}}}]}}, {{0x8, 0x1, r2}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x2, 0xf0, 0x5, 0x4}]}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}]}, 0x4dc}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r9, &(0x7f00000017c0), 0xf2, 0x0) 17:16:00 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x54a, 0x0) 17:16:00 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xa00000000000000) 17:16:00 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x200002) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r5, r4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYRES16], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000480)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @fd, @ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/185, 0xb9, 0x0, 0x27}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}}], 0x0, 0x73c000, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000180)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 17:16:00 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xb00000000000000) [ 2479.182526][T24347] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2479.213416][T24352] binder: BINDER_SET_CONTEXT_MGR already set 17:16:00 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x41e, 0x0) 17:16:00 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x54c, 0x0) [ 2479.238554][T24352] binder: 24346:24352 ioctl 40046207 0 returned -16 [ 2479.249543][T24354] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2479.277847][T24356] binder: 24346:24356 ioctl 810c5701 20000180 returned -22 17:16:00 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x0, 0x800) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x8001, 0x40, 0x4}, 0x18) ioctl$FBIOPUTCMAP(r4, 0x4605, &(0x7f0000000400)={0x9, 0x6, &(0x7f00000001c0)=[0xe9, 0x0, 0x8000, 0x7fff, 0x9, 0x2], &(0x7f0000000240)=[0x3f, 0x7ff, 0x1000], &(0x7f0000000380)=[0x7f, 0x5, 0x8001, 0x3, 0xfff, 0x7, 0xf1aa, 0x0], &(0x7f00000003c0)=[0xfff, 0x8, 0x6, 0x8, 0x1, 0x8, 0x0, 0x80, 0x0, 0x7]}) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0537c8746772e806b9ea87fb50959f5d0440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$TIOCGSOFTCAR(r6, 0x5419, &(0x7f0000000000)) [ 2479.343332][T24352] binder: BINDER_SET_CONTEXT_MGR already set [ 2479.372470][T24354] 8021q: adding VLAN 0 to HW filter on device bond8 17:16:00 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xc00000000000000) 17:16:00 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x420, 0x0) [ 2479.391882][T24347] bond8: (slave macvlan2): Opening slave failed [ 2479.412542][T24347] macvlan2: mtu less than device minimum [ 2479.412591][T24361] binder: BINDER_SET_CONTEXT_MGR already set [ 2479.432177][T24352] binder: 24346:24352 ioctl 40046207 0 returned -16 17:16:00 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x2) [ 2479.470619][T24347] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2479.481987][T24356] binder: 24346:24356 ioctl 810c5701 20000180 returned -22 [ 2479.502171][T24354] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2479.511982][T24361] binder: 24346:24361 ioctl 40046207 0 returned -16 17:16:00 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x54e, 0x0) [ 2479.544171][T24354] bond9 (uninitialized): Released all slaves 17:16:00 executing program 3: unshare(0x2010180) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) 17:16:00 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x422, 0x0) 17:16:01 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xd00000000000000) 17:16:01 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) r1 = openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2301, 0x0, 0x14}, 0x18) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000080)=0x200) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20ncci\x00', 0x157080, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, 0x2, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc010}, 0x4000040) syz_mount_image$exfat(&(0x7f0000000100)='exfat\x00', &(0x7f0000000180)='./file0\x00', 0x9, 0x8, &(0x7f0000001840)=[{&(0x7f00000001c0)="3a4c5a2c7d7d8e777c701d94d9bf8e8c5f2215974ff155313c6cb0b3e63574c67b01b653a18b8667461722efaf6852c7650e1f47212e1566feecc227c388835c814f2e3f2c4c03f64c0a39bff136cc73c0b470c3c3a4cecfda18ce89c30102db4afd0d5942f6927ca5f29fac82d92b6ad43d9eceec44c74c52bae7c2b905f36b3fcb26e51eee3c23c59aaf3d4c6a30b38a61ce31", 0x94}, {&(0x7f0000000280)="d16000a4d974d110da3cddc6ce76931f74183473e89e39dfe6daca0c5b7d13db59c5291eea7c2af71b9642be6fa22ad60acc889e4d1a89aae68eccd93d7cbaf202da4394b81435e2d3af5a5bcff8fd01590f559bc09303238967cb9843a23479c5c5d3906f6706043aa900ea900023a098f3b6c045e647142841d5a15f1635155d02c1f2debaa64689442ccb8cd1abac33254f7318a9a2b322fc5b10d8af5d244523efad453c00a097667fe1a80574b1c83304c04640fcfad41f52", 0xbb, 0xfffffffffffffffe}, {&(0x7f00000004c0)="8c9e80107a648cddc5cb46fa4cc579037fd82bec0054784693c58f2aa766d6736e55a68a9422668d5a1068cef17206ca9993825f06ff76bd498a7c0c80945d8855bebec1a21d28f2d0ef23da68531d42201ec9f74395309dd69613ce4766841b41d75b24762f617e9d3c70b6b4b058e223252fe75a4cde9471bb90e6d9bb9e36628064deef226c1df912f6ef1708818a721cdb39f5df2b5465bc71c432448e5808f919f2d2144dc949ea4948547987699f358315fbbc0753f9c247edfa26f629db6ef0ee8ad0af2f837749cb5cf45b1d48a8054221f4a8a4429cfa963d2576b77ee9c195ebf6c7843165253cb08c76923b6bba7f", 0xf4, 0x7fff}, {&(0x7f00000005c0)="5bb59799fa929a297751aeca98677d75baf28380ebc196a8ca55e20e0237f6ad32fb", 0x22, 0x81}, {&(0x7f0000000600)="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", 0xfe, 0x7}, {&(0x7f0000000700)="d3826f06739d8c043cfdf0d75d3702f73d477c6e77d4055d39363224f8cdaef32ab9bbd06617de85bf85", 0x2a, 0x1f}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="7af15d70b4a4336cd72b64869eae8aa7e4828309512f764e251e1aa21579c69f93f51342ef44b52893a61cc55fea7cb86554db511416c8565abc9a3281abec602f1e2f032a17b27911c948ebbf9840edc0204cedbb9de75bb919d513c2b8d86cf451ece903f6024e25a47e288fb0aba982df11d3165fabb93bd4089a8f59c5d1bfb9da49fafe68a95bf0faf8c857489e3354e5e3c7dad05555c5c685f73c37383441a655ad14d60399a108c9524190929ff7050a5d023340ab28e15aadf1832fcc2fbe95247d28509be338383e70171f6b10cd761a", 0xd5}], 0xc04, &(0x7f0000001900)={[{@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@dmask={'dmask', 0x3d, 0x7fff}}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@fmask={'fmask', 0x3d, 0x1}}, {@discard='discard'}, {@codepage={'codepage', 0x3d, 'maccyrillic'}}, {@codepage={'codepage', 0x3d, 'macturkish'}}, {@iocharset={'iocharset', 0x3d, 'cp863'}}], [{@dont_hash='dont_hash'}, {@smackfshat={'smackfshat', 0x3d, '/proc/capi/capi20ncci\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '/proc/capi/capi20ncci\x00'}}, {@subj_type={'subj_type', 0x3d, '/proc/capi/capi20ncci\x00'}}]}) preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x0) [ 2479.639102][T24422] binder: BINDER_SET_CONTEXT_MGR already set [ 2479.666273][T24422] binder: 24417:24422 ioctl 40046207 0 returned -16 17:16:01 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x56c, 0x0) [ 2479.802494][T24433] exfat: Deprecated parameter 'codepage' [ 2479.841656][T24433] exfat: Bad value for 'codepage' 17:16:01 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x440, 0x0) 17:16:01 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x575, 0x0) 17:16:01 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xe00000000000000) [ 2479.895374][T24422] binder: BINDER_SET_CONTEXT_MGR already set [ 2479.901390][T24422] binder: 24417:24422 ioctl 40046207 0 returned -16 [ 2479.985207][T24441] exfat: Deprecated parameter 'codepage' [ 2479.994317][T24441] exfat: Bad value for 'codepage' 17:16:01 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x449, 0x0) 17:16:01 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000100)="a4766d1b1335ab5a77797455031166", 0xf, 0x0) preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:16:01 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000280)=""/258, 0xfa}], 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) 17:16:01 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x57c, 0x0) 17:16:03 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x1000000000000000) 17:16:03 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) sendto$l2tp(r0, &(0x7f0000000000)="800b2d09dbde0bcb8fb759a6d58659a50b6dcc6599c289db80faa0ec532a9e97749fb3064b652b358739e507bf77e657222cb7f66e9d28f5ad5d0af506382576c1626ea903dc180143b7", 0x4a, 0x8080, 0x0, 0x0) 17:16:03 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x450, 0x0) 17:16:03 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x57e, 0x0) 17:16:03 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f0000000080)=0x8) r5 = dup2(r4, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$VIDIOC_S_MODULATOR(r5, 0x40445637, &(0x7f0000000100)={0x200, "c5dac2bc2fc6e176ca95eb2e5a4bbedd51fcb33cb6bef884fdf88f8a493dec58", 0x10, 0xacb, 0x31, 0x2, 0x3}) preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) 17:16:03 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000080), 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000380)) 17:16:03 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x452, 0x0) 17:16:03 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x1100000000000000) 17:16:03 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000100)) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="046304b7"], 0x0, 0x0, 0x0}) ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000080)={'bond0\x00', {0x2a, 0x2, 0x4000}}) r4 = dup2(r3, r2) preadv(r4, &(0x7f00000023c0)=[{&(0x7f0000002400)=""/4084, 0xff4}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r6 = socket$tipc(0x1e, 0x5, 0x0) shutdown(r6, 0x1) preadv(r5, &(0x7f00000017c0), 0xf2, 0x2) [ 2482.364148][T24491] binder: BINDER_SET_CONTEXT_MGR already set [ 2482.397373][T24491] binder: 24484:24491 ioctl 40046207 0 returned -16 17:16:03 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x580, 0x0) 17:16:03 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x454, 0x0) 17:16:03 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'team0\x00', {0x2, 0x4e23, @multicast1}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x2) 17:16:03 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x1200000000000000) 17:16:12 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r3, 0xc59f5877b6aeee37, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x3}}, @NL80211_ATTR_MAC={0xa, 0x6, @random="1e28a072bb3f"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4080) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0xf2, 0x0) 17:16:12 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x59d, 0x0) 17:16:12 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x2500000000000000) 17:16:12 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x472, 0x0) [ 2491.037355][T24538] binder: BINDER_SET_CONTEXT_MGR already set [ 2491.043671][T24538] binder: 24535:24538 ioctl 40046207 0 returned -16 17:16:12 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x5a6, 0x0) 17:16:12 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000100)={{0xffffffffffffffff, 0x0, 0x87b0, 0x0, 0x7}, 0x7fff, 0x3}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/25, 0x19}], 0x1, 0xffffffffffffffff) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) r6 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440d1ed290e92b2b8f72459bb8750ceeaa186973b1c9fc4bd69308b4cc4f7791e771c9fe2d816f4ab6aac5d57d3cd46187ca11adf6e78afcd409832916df2dcceaf81f8247d06a9a889e379656269d27cd0acc65803bf05e187a7ab4813d525b3363f78a79ae7b1bf06f01fecdb0fd4f240f9443a9d554ed433f3a881532785c0ccf2660680911568e0e83284c5eec9741e0627a0ac383badc2bdcab77ccf4e68b1681cb858ddbe371bbf16e88dc1625a5793784ac1d338cd1ee6e7201b61d0a7471ad8e80e3868854492457ec0b30caf35ac3f526b04c0f1f08b35"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800711e", @ANYRESOCT=r6, @ANYBLOB="0304000300", @ANYRES32=0x0, @ANYRESOCT], 0x28}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x20, r7, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @multicast}]}, 0x20}, 0x1, 0x0, 0x0, 0x54010}, 0x0) 17:16:12 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x47b, 0x0) 17:16:12 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x3f00000000000000) 17:16:12 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x482, 0x0) 17:16:12 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) r4 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) write$capi20(r3, &(0x7f0000000000)={0x10, 0x175, 0x80, 0x83, 0x7ff, 0x15b}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0304000300", @ANYRES32=0x0, @ANYRESHEX=r4], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r5, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xffffff41, 0x4}}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x1}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x81}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000) 17:16:12 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x5ad, 0x0) 17:16:12 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r1, &(0x7f0000000080), 0x0, 0x2000002) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000000)={0xfd3, 0x9, 0x3}) [ 2491.771299][T24575] binder: BINDER_SET_CONTEXT_MGR already set [ 2491.788646][T24575] binder: 24535:24575 ioctl 40046207 0 returned -16 [ 2492.174815][T24569] binder: BINDER_SET_CONTEXT_MGR already set [ 2492.181149][T24569] binder: 24555:24569 ioctl 40046207 0 returned -16 17:16:18 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/35, 0x23}, {&(0x7f0000000100)=""/205, 0xcd}, {&(0x7f0000000200)=""/235, 0xeb}], 0x3, 0x2) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000700)={0x3, 0x0, 0x12, 0x1c, 0x6a, &(0x7f0000000300)}) 17:16:18 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x4000000000000000) 17:16:18 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x5af, 0x0) 17:16:18 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x484, 0x0) 17:16:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$sock_x25_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={@null=' \x00', 0x9, 'gre0\x00'}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x0) [ 2497.290436][ T28] audit: type=1326 audit(1594055778.621:86): auid=0 uid=0 gid=0 ses=4 subj=_ pid=24579 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 17:16:18 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x486, 0x0) 17:16:18 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x5b1, 0x0) 17:16:18 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x4800000000000000) 17:16:18 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x5ce, 0x0) 17:16:19 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@generic={0x2, "05a7c22450ab881819f074f230a7421dabbc184a271472e796783875ff1a8b2400068770d0d7773ab8eca0a3356742657e9563e27218011eee655cfff3ed9fb9602e7178b2bb830fa22fa35e751cac9a9c64f149439e149fa037e541413def57645aea5a28d7bcd71409d36e7d96de91634069bb872fd3975504c81255cc0fb2"}}}, &(0x7f0000000100)={0x0, 0x4, [0x91a, 0xf61, 0x7ac, 0xcd3]}) 17:16:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00\b\x00\x00'], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) write$P9_RSYMLINK(r2, &(0x7f0000000000)={0x14, 0x11, 0x1, {0x8, 0x2, 0x7}}, 0x14) r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x108c0) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000180)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r4, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0)='security.capability\x00', &(0x7f0000000240)=@v1={0x1000000, [{0x1, 0x4}]}, 0xc, 0x1) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x0) 17:16:19 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x4a4, 0x0) [ 2498.069779][ T28] audit: type=1326 audit(1594055779.401:87): auid=0 uid=0 gid=0 ses=4 subj=_ pid=24579 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f96a code=0x0 [ 2498.180910][T24617] binder: 24613:24617 unknown command 2048 [ 2498.187790][T24617] binder: 24613:24617 ioctl c0306201 20000200 returned -22 17:16:19 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x5d7, 0x0) 17:16:19 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x4c00000000000000) 17:16:19 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000000)={0x11, @private=0xa010101, 0x4e20, 0x2, 'wlc\x00', 0x29, 0x100, 0x57}, 0x2c) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0xf2, 0x0) 17:16:19 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x4ad, 0x0) [ 2498.232119][T24617] binder: BINDER_SET_CONTEXT_MGR already set [ 2498.240847][T24617] binder: 24613:24617 ioctl 40046207 0 returned -16 17:16:19 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x5, 0x0, 0x2d}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x20, 0x48}}}], 0x0, 0x73c000, 0x0}) ioctl$FIONCLEX(r2, 0x5450) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r4) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r3], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x2) 17:16:19 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x5de, 0x0) 17:16:19 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0xf2, 0x0) 17:16:19 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x4b4, 0x0) 17:16:19 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x6800000000000000) [ 2498.455786][T24638] binder: BINDER_SET_CONTEXT_MGR already set [ 2498.466725][T24638] binder: 24637:24638 ioctl 40046207 0 returned -16 17:16:19 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x5e0, 0x0) 17:16:19 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x4b6, 0x0) [ 2498.556656][T24638] binder: BINDER_SET_CONTEXT_MGR already set [ 2498.571090][T24638] binder: 24637:24638 ioctl 40046207 0 returned -16 17:16:19 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000000)=0x9, 0x4) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x0) 17:16:19 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x6c00000000000000) 17:16:20 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) read(r4, &(0x7f0000000000), 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x2) 17:16:26 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x4b8, 0x0) 17:16:26 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x7400000000000000) 17:16:26 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x5e2, 0x0) 17:16:26 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, 0x5, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004014}, 0x20000014) r5 = dup2(r4, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630448"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) bind$x25(r5, &(0x7f0000000000)={0x9, @remote={[], 0x2}}, 0x12) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0xf2, 0x2) 17:16:26 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) connect$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x7, @private1={0xfc, 0x1, [], 0x1}, 0x8001}}, 0x24) 17:16:26 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x3) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="7ee983119c47312d9fdcfc3ded26416de2dbcd2bda92b1586cf3780ec43b8867dacc44b63c8c775d3895c8"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) bind$l2tp6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2, 0x6, 0x1}, 0x20) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="f2fa0440830b0a77721f6325d31e1b3358ff08cff3e722fdc006ed"], 0x0, 0x0, 0x0}) r3 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x58, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000380)={@fda={0x66646185, 0x1, 0x2, 0x37}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x48}}}, @register_looper, @release={0x40046306, 0x3}], 0x0, 0x73c000, 0x0}) preadv(r3, &(0x7f00000017c0), 0x0, 0x0) 17:16:26 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x4d6, 0x0) 17:16:26 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x5ff, 0x0) 17:16:26 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x6}, 0x4) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000180)='security.ima\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="050104000006da0094e09c3815dda9712eace4ec407c9747a74cf4c4da8ceddd9ebfa5e50ae99bacce6e0d6b56755f567b1c66603c5b59e736be26e19b3cd517e5a0d75405ce2b31d059a49b34295ac17bd89ede2b8f5402ce45e99032ae8e4f85ca6ab164eb58c853111614b33e980dc926c8d7430b82f552f0f740340b7acdd8389c08f63769fa7b2874f6bdee04d04acba13d2b13a51970b16ef6de"], 0x9d, 0x1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="7a620440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) openat2(r4, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x111000, 0x40, 0x10}, 0x18) io_uring_enter(0xffffffffffffffff, 0x400, 0x8, 0x0, &(0x7f0000000140)={[0x40]}, 0x8) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x2) 17:16:26 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x7a00000000000000) [ 2505.316613][T24701] binder: BINDER_SET_CONTEXT_MGR already set [ 2505.346381][T24701] binder: 24698:24701 ioctl 40046207 0 returned -16 17:16:26 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x4df, 0x0) 17:16:26 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x608, 0x0) 17:16:26 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0xa, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/162, 0xa2, 0x1, 0x2a}, @ptr={0x70742a85, 0x10000, &(0x7f0000000380)=""/194, 0xc2, 0x1, 0x12}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x73c000, 0x0}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0), 0x0) sendto$inet(r4, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB="00ddcea07d5dd01e692031983ff0976f00000000ff3d3626400a2ab7862f07274a56c4a30700f88f28880257f747283d3aea308af8773fc8fa7d5069b6696c9b975271", @ANYRES32=0x0], &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0xe, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000100)={r5, @in6={{0xa, 0x4e22, 0x6b, @private1={0xfc, 0x1, [], 0x1}, 0x7fff}}}, 0x84) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0xf2, 0x2) 17:16:26 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xcc0c000000000000) 17:16:26 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="00670448"], 0x0, 0x0, 0x0}) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f0000000080)={0x2, 0x1, 0x3, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) preadv(r2, &(0x7f0000000080), 0x52, 0x40000000000) 17:16:26 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) fchmod(r0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x2) [ 2505.681127][T24730] binder: BINDER_SET_CONTEXT_MGR already set [ 2505.702005][T24730] binder: 24726:24730 ioctl 40046207 0 returned -16 [ 2505.947428][T24739] binder: BINDER_SET_CONTEXT_MGR already set [ 2505.967064][T24739] binder: 24684:24739 ioctl 40046207 0 returned -16 [ 2505.967218][T24741] binder: BINDER_SET_CONTEXT_MGR already set [ 2506.023002][T24741] binder: 24684:24741 ioctl 40046207 0 returned -16 17:16:31 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x60f, 0x0) 17:16:31 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x4e6, 0x0) 17:16:31 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xffffff7f00000000) 17:16:31 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="9b000000"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x9) dup(0xffffffffffffffff) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000380)) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7, 0x10000) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x50001, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000100)) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f0000000040)={{0x0, 0x0, @descriptor="6eeef2fca24845d5"}}) preadv(r3, &(0x7f00000017c0), 0xf2, 0x0) 17:16:31 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="8bbf0d43cf08461457446c48aa0285"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) write$midi(r4, &(0x7f0000000380)="a118603a17c040e2e37cb16db163c4c076b1dfc515b4540c15eeaca86c80a50a8eabff3b34582982a6c985463fb52cdafa854fae0f556d72c6fdb9bcb6d81010480761699a1139286d6a24dc250e32def1436ecf49ae460f97c9a24ba326520431f0198a315cad30a38a6b4879545e7af945dd8352b7e282b9a2e7f5bdac7d3979568aac5cb7082c3a5f0282d90b2edb70fd5d942a1b0697268adad8b1029f8461f126925c0df892ba7a796fb33405838ecc2fd61c7df3b36b78", 0xba) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000180)={0x0, 0xfb, 0xf9, 0x1, 0x20, "386922637377fab4b816d07a8f44fa0d", "8d7ff6bf09de966354069a5a263c68c0e56eaebc846015000ae336bc29cc1ecf73401f5b4e04f89d627cf74fe021610c223b158a40b1176e19d32c67c46f75a61c7ea76f5e7f73c04a4bb05a2505b259ce2b2f0a3f53a99b285ae3cdef064e285648549d551f2a7deaa82d3b13d1a764314fe65fd81e9be9199507e3e64c55c98f838e4c6e4f3ecb762a155354db10ed18b27e0ab1f41b6ed3a247889f71f01387f77db26af7ae30dd579763554cca212baebf097495c7b0e3c0de1cbbc0ef25354fc441e23332781969ebc08f1593cf2c762862b0e6c0e6238b0f032f231a74b458261a"}, 0xf9, 0x3) preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) 17:16:31 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') connect$caif(r1, &(0x7f0000000000)=@dbg={0x25, 0x9, 0x3}, 0x18) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0304000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd8, r6, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "25b41c9b53"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x3}, @NL80211_ATTR_KEY={0x4c, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0xf, 0x4, "436a3dbee0ac2959c33837"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "d2eb11b1bf"}, @NL80211_KEY_SEQ={0xf, 0x4, "4f7fd4c2f8b3301f6febaf"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "6baed071695483"}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "83ffcd6a02720e537e4c"}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "cc92e5856dd0"}]}, 0xd8}, 0x1, 0x0, 0x0, 0x70}, 0x10) preadv(r2, &(0x7f00000017c0), 0xf2, 0x2) [ 2509.958312][T24755] binder: BINDER_SET_CONTEXT_MGR already set [ 2509.985759][T24755] binder: 24747:24755 ioctl 40046207 0 returned -16 17:16:31 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x611, 0x0) 17:16:31 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x4e8, 0x0) 17:16:31 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0xffffffff00000000) 17:16:31 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x4, 0x7, 0x81, 0x7fff, 0x1, 0xfffffffc}) 17:16:31 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x613, 0x0) 17:16:31 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x4ea, 0x0) 17:16:31 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000100)={0x4, 0x8, 0x1, r0, 0x0, &(0x7f0000000080)={0x9b090c, 0x6, [], @p_u8}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r6 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r6) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x3c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r6}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r5, 0x1703, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000010}, 0x480d0) r7 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x40000000) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r8, &(0x7f00000017c0), 0xf2, 0x2) 17:16:31 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x508, 0x0) 17:16:31 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f00000001c0)=[{}, {}, {}], 0x54) r2 = dup2(r0, r1) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, r2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, &(0x7f0000000100)) open(0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 17:16:36 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) read$smackfs_ptrace(r2, &(0x7f0000000000), 0x14) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) 17:16:36 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x630, 0x0) 17:16:36 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x511, 0x0) 17:16:36 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f00000001c0)=[{}, {}, {}], 0x54) r2 = dup2(r0, r1) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, r2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, &(0x7f0000000100)) open(0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 17:16:36 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f0000000000)) 17:16:36 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') r4 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, r3, 0x536ae464467e3e0b, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0xb4, r3, 0x22, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xd, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x7f9ebf38077400ce}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r7 = dup2(r6, r5) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$VIDIOC_ENCODER_CMD(r7, 0xc028564d, &(0x7f0000000000)={0x3, 0x0, [0xfd2, 0x8, 0x3deb, 0x0, 0x3, 0x4b85, 0x7f]}) preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) 17:16:36 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x639, 0x0) 17:16:36 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x518, 0x0) [ 2515.259417][T24822] binder: BINDER_SET_CONTEXT_MGR already set [ 2515.293570][T24822] binder: 24816:24822 ioctl 40046207 0 returned -16 [ 2515.295589][T24823] binder: BINDER_SET_CONTEXT_MGR already set [ 2515.358142][T24826] binder: 24815:24826 ioctl c028564d 20000000 returned -22 [ 2515.369119][T24823] binder: 24812:24823 ioctl 40046207 0 returned -16 17:16:36 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x51a, 0x0) 17:16:36 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x651, 0x0) 17:16:36 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x51c, 0x0) 17:16:37 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x682, 0x0) 17:16:43 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000011c0)={0x0, 0x0, [], @raw_data=[0x46, 0x2ec, 0x3, 0x2, 0x0, 0x14, 0x2, 0x0, 0x0, 0x9, 0xb1, 0xdc1, 0x5, 0x3, 0x4, 0x40, 0xbdf1, 0x6, 0x2, 0x2f5866b, 0x6, 0x0, 0x18, 0x100, 0x2, 0x8001, 0x3, 0x4, 0x40000000, 0x8000, 0x9, 0xbf]}) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85, 0x4}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x0, 0x73c000, 0x0}) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000002400)=""/102384, 0x18ff0}, {&(0x7f0000001280)=""/154, 0x9a}], 0x2, 0x0) 17:16:43 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x68d, 0x0) 17:16:43 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x53a, 0x0) 17:16:43 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0xf2, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=r1, 0x12) 17:16:43 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f00000001c0)=[{}, {}, {}], 0x54) r2 = dup2(r0, r1) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, r2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, &(0x7f0000000100)) open(0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 17:16:43 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x5) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000000)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x44}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0xf2, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r5, r4) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) dup2(r3, r2) ioctl$FITHAW(r3, 0xc0045878) 17:16:43 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000000)={0x7f}, 0x4) preadv(r0, &(0x7f0000000240), 0x0, 0x100) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r5, r4) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000080)=0xff) 17:16:43 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x543, 0x0) [ 2522.573212][T24909] binder: BINDER_SET_CONTEXT_MGR already set [ 2522.608657][T24909] binder: 24904:24909 ioctl 40046207 0 returned -16 17:16:44 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x6ab, 0x0) [ 2522.695867][T24915] binder: BINDER_SET_CONTEXT_MGR already set [ 2522.696392][T24921] binder: BINDER_SET_CONTEXT_MGR already set [ 2522.702860][T24917] binder: BINDER_SET_CONTEXT_MGR already set [ 2522.718841][T24918] binder: BINDER_SET_CONTEXT_MGR already set [ 2522.718861][T24915] binder: 24904:24915 ioctl 40046207 0 returned -16 [ 2522.737523][T24918] binder: 24904:24918 ioctl 40046207 0 returned -16 [ 2522.751080][T24917] binder: 24910:24917 ioctl 40046207 0 returned -16 [ 2522.753520][T24921] binder: 24916:24921 ioctl 40046207 0 returned -16 [ 2522.774719][T24925] binder: BINDER_SET_CONTEXT_MGR already set 17:16:44 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x54a, 0x0) [ 2522.807941][T24925] binder: 24916:24925 ioctl 40046207 0 returned -16 [ 2522.827466][T24932] binder: 24916:24932 ioctl 40086607 20000080 returned -22 [ 2522.873822][T24921] binder: BINDER_SET_CONTEXT_MGR already set [ 2522.882764][T24921] binder: 24916:24921 ioctl 40046207 0 returned -16 [ 2522.894955][T24934] binder: BINDER_SET_CONTEXT_MGR already set 17:16:44 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x6c9, 0x0) 17:16:44 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x0) 17:16:44 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(r4, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @fd={0x66642a85, 0x0, r3}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}, 0x400}], 0x7e, 0x73c000, 0x0}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000000)={0x2, 0x6, 0x1, 'queue1\x00', 0x10000}) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0xf2, 0x0) [ 2522.923996][T24934] binder: 24916:24934 ioctl 40046207 0 returned -16 17:16:44 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x10000, 0x48, 0x4}, 0x18) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000440)={0x16b, 0x6, &(0x7f0000000900)="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"}) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') finit_module(r0, &(0x7f0000000480)='fd/3\x00', 0x1) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000000040)=""/97, 0x61}, {&(0x7f0000000180)=""/200, 0xc8}, {&(0x7f0000000100)=""/21, 0x15}, {&(0x7f0000000280)=""/80, 0x50}, {&(0x7f0000000300)=""/52, 0x34}, {&(0x7f0000000340)=""/70, 0x46}, {&(0x7f0000000740)=""/61, 0x3d}, {&(0x7f0000000800)=""/208, 0xd0}, {&(0x7f0000000780)=""/99, 0x63}, {&(0x7f0000000580)=""/203, 0xcb}], 0xa, 0x2) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x101, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x0, 0x73c000, 0x0}) setsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f00000004c0)=0x1, 0x4) 17:16:44 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x54c, 0x0) [ 2523.020422][T24944] binder: BINDER_SET_CONTEXT_MGR already set [ 2523.049489][T24945] binder: BINDER_SET_CONTEXT_MGR already set 17:16:44 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x6e1, 0x0) [ 2523.081246][T24944] binder: 24940:24944 ioctl 40046207 0 returned -16 [ 2523.098255][T24945] binder: 24939:24945 ioctl 40046207 0 returned -16 [ 2523.108041][T24950] binder: 24939:24950 ioctl 408c5333 20000000 returned -22 [ 2523.139349][T24944] binder: BINDER_SET_CONTEXT_MGR already set [ 2523.165411][T24952] binder: BINDER_SET_CONTEXT_MGR already set [ 2523.178177][T24944] binder: 24940:24944 ioctl 40046207 0 returned -16 [ 2523.213669][T24952] binder: 24949:24952 ioctl 40046207 0 returned -16 [ 2523.300669][T24952] binder: BINDER_SET_CONTEXT_MGR already set [ 2523.310621][T24952] binder: 24949:24952 ioctl 40046207 0 returned -16 [ 2523.346822][T24962] binder: BINDER_SET_CONTEXT_MGR already set [ 2523.375358][T24962] binder: 24949:24962 ioctl 40046207 0 returned -16 17:16:44 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f00000001c0)=[{}, {}, {}], 0x54) r2 = dup2(r0, r1) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x3, 0x11, r2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, &(0x7f0000000100)) open(0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 17:16:44 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x54e, 0x0) 17:16:44 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x1, 0x70bd27, 0x25dfdbfc, "", ["", "", ""]}, 0x10}}, 0x4000080) 17:16:44 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x712, 0x0) 17:16:44 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) ioctl$VFIO_GET_API_VERSION(r3, 0x3b64) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x4300c1, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000001000710eb010007000000000000000000000000f9ff00000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x44005}, 0x8000) 17:16:45 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x56c, 0x0) 17:16:45 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x71d, 0x0) [ 2523.729296][T24977] binder: BINDER_SET_CONTEXT_MGR already set [ 2523.739888][T24977] binder: 24966:24977 ioctl 40046207 0 returned -16 [ 2523.841976][T24973] binder: BINDER_SET_CONTEXT_MGR already set [ 2523.848641][T24973] binder: 24968:24973 ioctl 40046207 0 returned -16 [ 2523.870025][T24984] binder: 24939:24984 ioctl 408c5333 20000000 returned -22 [ 2523.874499][T24991] binder: BINDER_SET_CONTEXT_MGR already set 17:16:45 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x575, 0x0) [ 2523.920987][T24978] binder: 24968:24978 ioctl 3b64 0 returned -22 [ 2523.935666][T24991] binder: 24968:24991 ioctl 40046207 0 returned -16 [ 2524.477699][T24980] binder: BINDER_SET_CONTEXT_MGR already set [ 2524.486909][T24980] binder: 24966:24980 ioctl 40046207 0 returned -16 17:16:50 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$TUNGETSNDBUF(r2, 0x800454d3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, 0x0, 0x0) 17:16:50 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x73b, 0x0) 17:16:50 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/94, 0x5e}], 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000100)={0xf, 0x8, 0xfa00, {r2, 0x5}}, 0x10) 17:16:50 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x57c, 0x0) 17:16:50 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x7, {0x7, 0x0, '\x00$r\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x124, &(0x7f0000000180)={[{0x32, 0x4e00, "935cbed3839e0348e496f7c412d86ea10ce73e7ce5d27e63b94501ce23cc1979058fc54acb2ee98229e157e70860f1d12969"}, {0x9c, 0x4e00, "11771ccec0fb59879a516d7d564c552848c8451a13c7e90534d6955b9fc429739db897d83ce91ca3dd428f5d4fad1f2ead9fd586547145ed1feeb3c3de2ce3035827cd522abb42d0ae8d6f5bc885ee85b9ff156015510635d2eeee5d140a4416b58009d1f98abc50ab6295b395cc33bc87b5f55e31ce29649b0fb96ad1c503e457039c9fd938976eaab2dceea11d56e51ab1e1b86826e66f262a2ced"}, {0x45, 0x4e00, "d83b3c5e3900f3bff4642f1ffdbac62a2b35d89cf0f85a199b47fc73e0149cf180374e086bac052f3beac17fe6dfd6ca8d9c16775dcdb61c83e637663d983a1d44ef818469"}]}) preadv(r1, &(0x7f00000017c0), 0xf2, 0x0) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) 17:16:50 executing program 5: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x7) [ 2529.511262][T19136] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 2529.781187][T19136] usb 5-1: device descriptor read/64, error 18 17:16:51 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x759, 0x0) 17:16:51 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x57e, 0x0) 17:16:51 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x12a1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000)='NLBL_MGMT\x00') 17:16:51 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$binfmt_misc(r1, &(0x7f00000004c0)=ANY=[], 0x1000000c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 17:16:51 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0), 0x0) sendto$inet(r4, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="01000200", @ANYRES32=0x0], &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0xe, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000000)={r5, 0x0, 0x30, 0x6, 0x1}, &(0x7f0000000040)=0x18) [ 2530.175252][T19136] usb 5-1: device descriptor read/64, error 18 17:16:51 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x771, 0x0) 17:16:51 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x580, 0x0) [ 2530.303619][T25045] binder: BINDER_SET_CONTEXT_MGR already set [ 2530.347080][T25045] binder: 25034:25045 ioctl 40046207 0 returned -16 [ 2530.358016][T25048] binder: BINDER_SET_CONTEXT_MGR already set [ 2530.379846][T25048] binder: 25038:25048 ioctl 40046207 0 returned -16 17:16:51 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x7a0, 0x0) 17:16:51 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x59d, 0x0) [ 2530.451297][T19136] usb 5-1: new high-speed USB device number 10 using dummy_hcd 17:16:51 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x7ab, 0x0) [ 2530.761203][T19136] usb 5-1: device descriptor read/64, error 18 [ 2530.860334][T25045] binder: BINDER_SET_CONTEXT_MGR already set [ 2530.868334][T25045] binder: 25034:25045 ioctl 40046207 0 returned -16 [ 2531.071754][T25055] binder: BINDER_SET_CONTEXT_MGR already set [ 2531.081267][T25055] binder: 25038:25055 ioctl 40046207 0 returned -16 [ 2531.171219][T19136] usb 5-1: device descriptor read/64, error 18 [ 2531.291195][T19136] usb usb5-port1: attempt power cycle [ 2532.021171][T19136] usb 5-1: new high-speed USB device number 11 using dummy_hcd 17:16:53 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000040)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000080)=0x2c) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x4d19666b, 0x181040) preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) 17:16:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x336) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @dev}}) 17:16:53 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x5a6, 0x0) 17:16:53 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x7c9, 0x0) 17:16:53 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000740)=""/133, 0x85}], 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SET_FPEMU(0xa, 0x3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0), 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x288100, 0x0) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f0000000180)) sendto$inet(r2, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="010083d29524589a00000000000000", @ANYRES32=0x0], &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0xe, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000040)={r4, 0x100}, 0x8) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, 0xfffffffffffffff7) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0xf2, 0x0) [ 2532.211071][T19136] usb 5-1: device descriptor read/8, error -71 17:16:53 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x5ad, 0x0) [ 2532.421886][T19136] usb 5-1: device descriptor read/8, error -71 17:16:59 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) 17:16:59 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x7e7, 0x0) 17:16:59 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x5af, 0x0) 17:16:59 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x0) 17:16:59 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x77622a85}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x50, 0x73c000, 0x0}) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x1) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0xf2, 0x0) 17:16:59 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f00000000c0)=0x5, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, 0x0, 0x0) [ 2538.278434][T25125] binder: BINDER_SET_CONTEXT_MGR already set [ 2538.294668][T25125] binder: 25119:25125 ioctl 40046207 0 returned -16 17:17:02 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5452, &(0x7f00000001c0)) 17:17:02 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x5b1, 0x0) 17:17:02 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x82a, 0x0) 17:17:02 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x5ce, 0x0) 17:17:02 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, &(0x7f0000000200)) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x16) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42800) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 17:17:02 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x835, 0x0) [ 2541.723668][T25169] IPVS: ftp: loaded support on port[0] = 21 [ 2541.729031][T25160] IPVS: ftp: loaded support on port[0] = 21 17:17:07 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0xf2, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020028bd7000fedbdf250600000008000700e0000002150001e5c370729b632f706172747c8d7e0fdee2e95dfef1a2f1494b6974696f6e7300000000080002000700000006000b0029009e818b98588dd69e1d92bbec237f64a2d992306965"], 0x44}, 0x1, 0x0, 0x0, 0x20040050}, 0x4081) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042cbd7000fbdbdf250600000014000500fe8000000000000000000000000000aa81d0e9bd4090b0f6bbc9765d6ae1dca89f7e0743dd6ea460bd29fc946da91478af3397e1f9ead0e908551b5a2008d61405cd0b96b784ff22fadf085ff5e23f5f659707bc764d714bae86feb6e7ed8425eced5d24eafcee41653c0d5415382ed6d9e22c6bf7b18c9689787e16b64c4ce00a5382bc800b2c94268d6f7454bb29"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x20040004) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000002400)) 17:17:07 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x5d7, 0x0) 17:17:07 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x853, 0x0) 17:17:07 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00'}) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRES64=r4, @ANYRESHEX=0x0, @ANYRESHEX=r5], 0x26) socket$inet(0x2, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) flock(r6, 0x6) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0xf2, 0x0) 17:17:08 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x5de, 0x0) 17:17:08 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x871, 0x0) 17:17:08 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x5e0, 0x0) 17:17:08 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x889, 0x0) 17:17:08 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x5e2, 0x0) 17:17:08 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/26, 0x1a}], 0x8b4, 0x0) [ 2548.482579][ T332] tipc: TX() has been purged, node left! [ 2659.251032][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 2659.258009][ C0] rcu: 0-....: (10499 ticks this GP) idle=53e/1/0x4000000000000000 softirq=325827/325827 fqs=5235 [ 2659.269473][ C0] (t=10501 jiffies g=502497 q=102639) [ 2659.274930][ C0] NMI backtrace for cpu 0 [ 2659.279255][ C0] CPU: 0 PID: 25160 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 2659.287923][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2659.298504][ C0] Call Trace: [ 2659.301767][ C0] [ 2659.304617][ C0] dump_stack+0x1f0/0x31e [ 2659.308918][ C0] nmi_cpu_backtrace+0x9f/0x180 [ 2659.313772][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 2659.319806][ C0] nmi_trigger_cpumask_backtrace+0x16a/0x280 [ 2659.325771][ C0] rcu_dump_cpu_stacks+0x199/0x2a0 [ 2659.330889][ C0] rcu_sched_clock_irq+0x1928/0x1eb0 [ 2659.336142][ C0] ? lock_is_held_type+0x87/0xe0 [ 2659.341057][ C0] update_process_times+0x12c/0x180 [ 2659.346224][ C0] tick_sched_timer+0x254/0x410 [ 2659.351043][ C0] ? tick_setup_sched_timer+0x3e0/0x3e0 [ 2659.356577][ C0] __hrtimer_run_queues+0x42d/0x930 [ 2659.361848][ C0] hrtimer_interrupt+0x373/0xd60 [ 2659.366775][ C0] __sysvec_apic_timer_interrupt+0xf0/0x260 [ 2659.372821][ C0] asm_call_on_stack+0xf/0x20 [ 2659.377550][ C0] [ 2659.380460][ C0] sysvec_apic_timer_interrupt+0xb9/0x130 [ 2659.386174][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2659.392131][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x31/0xa0 [ 2659.398947][ C0] Code: 14 25 00 fe 01 00 65 8b 05 d8 7d 8d 7e a9 00 01 ff 00 74 10 a9 00 01 00 00 74 6e 83 ba 04 14 00 00 00 74 65 8b 82 e0 13 00 00 <83> f8 03 75 5a 48 8b 8a e8 13 00 00 44 8b 8a e4 13 00 00 49 c1 e1 [ 2659.418551][ C0] RSP: 0000:ffffc900052179f8 EFLAGS: 00000246 [ 2659.424703][ C0] RAX: 0000000000000002 RBX: 0000000000000001 RCX: ffff88803d158480 [ 2659.432661][ C0] RDX: ffff88803d158480 RSI: 0000000000000001 RDI: 0000000000000000 [ 2659.440619][ C0] RBP: dffffc0000000000 R08: ffffffff86e2b210 R09: fffffbfff163349f [ 2659.448588][ C0] R10: fffffbfff163349f R11: 0000000000000000 R12: dffffc0000000000 [ 2659.456541][ C0] R13: 1ffffffff12c516e R14: 0000000000000002 R15: 00000000000710f3 [ 2659.464534][ C0] ? inet_twsk_purge+0x720/0x820 [ 2659.469504][ C0] inet_twsk_purge+0x720/0x820 [ 2659.474263][ C0] ? dccp_v4_exit_net+0x70/0x70 [ 2659.479085][ C0] setup_net+0x606/0x770 [ 2659.483299][ C0] copy_net_ns+0x339/0x540 [ 2659.487695][ C0] create_new_namespaces+0x52e/0x9f0 [ 2659.492950][ C0] ? copy_namespaces+0x2ad/0x370 [ 2659.497916][ C0] copy_namespaces+0x2f6/0x370 [ 2659.502684][ C0] copy_process+0x203b/0x52f0 [ 2659.507735][ C0] _do_fork+0x134/0x650 [ 2659.511952][ C0] ? check_preemption_disabled+0x51/0x140 [ 2659.517828][ C0] ? check_preemption_disabled+0x51/0x140 [ 2659.523559][ C0] __x64_sys_clone+0x21c/0x260 [ 2659.528303][ C0] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2659.534349][ C0] do_syscall_64+0x73/0xe0 [ 2659.538747][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2659.544620][ C0] RIP: 0033:0x45cb29 [ 2659.548479][ C0] Code: Bad RIP value. [ 2659.552512][ C0] RSP: 002b:00007f6b6c46bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2659.560913][ C0] RAX: ffffffffffffffda RBX: 00000000004db5a0 RCX: 000000000045cb29 [ 2659.568956][ C0] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000050000103 [ 2659.576946][ C0] RBP: 000000000078bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 2659.584902][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2659.592966][ C0] R13: 000000000000007c R14: 00000000004c34ba R15: 00007f6b6c46c6d4