gram 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x1f}, 0xc) [ 1060.562502] binder: 21689:21697 ioctl c0306201 20000080 returned -22 03:37:34 executing program 0: 03:37:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0563044000000001a063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:34 executing program 4: 03:37:34 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x1f}, 0xc) 03:37:34 executing program 4: [ 1060.852922] binder: 21711:21715 unknown command 1077961632 [ 1060.872795] binder: 21711:21715 ioctl c0306201 20000080 returned -22 03:37:35 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) 03:37:35 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x1f}, 0xc) 03:37:35 executing program 0: 03:37:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0563044000fffffdfd63404001"], 0x0, 0xffffff7f, 0x0}) 03:37:35 executing program 4: 03:37:35 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8000, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = mmap$binder(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x1, 0x11, r3, 0x7) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ashmem\x00', 0x404000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0xb4, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/206, 0xce, 0x1, 0x23}, @fda={0x66646185, 0x1, 0x1, 0x14}, @fd}, &(0x7f0000000200)={0x0, 0x28, 0x48}}}, @register_looper, @free_buffer={0x40086303, r4}, @acquire_done={0x40106309, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/191, 0xbf, 0x1, 0x26}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000400)={0x0, 0x18, 0x40}}}], 0x5d, 0x0, &(0x7f0000000440)="a105a420908ef7da8e77f157631a86d0371e157ce563e69948e1ba8253ae77cf2bd18fd908b964465d8ec07256aabb6692c3a2e64494bf2af987b2854643ffd63294587e9d1f35ae29354a60a4c76db51a285cda3da20d8c176dc6ac3d"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) 03:37:35 executing program 4: 03:37:35 executing program 0: [ 1061.447386] binder: 21725:21727 ioctl c0306201 20000240 returned -11 [ 1061.464160] binder: 21726:21729 unknown command 1077961725 03:37:35 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x1f}, 0xc) [ 1061.488253] binder: 21726:21729 ioctl c0306201 20000080 returned -22 03:37:35 executing program 4: 03:37:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0563044000fdfdffff63404001"], 0x0, 0xffffff7f, 0x0}) 03:37:35 executing program 0: [ 1061.728492] binder: 21743:21745 unknown command 1077961727 [ 1061.735080] binder: 21743:21745 ioctl c0306201 20000080 returned -22 03:37:36 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) 03:37:36 executing program 0: 03:37:36 executing program 4: 03:37:36 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x1f}, 0xc) 03:37:36 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$MON_IOCG_STATS(r8, 0x80089203, &(0x7f0000000280)) ioctl$KDGKBMETA(r6, 0x4b62, 0x0) r9 = syz_genetlink_get_family_id$netlbl_cipso(0x0) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f00000003c0)={0x4, "208279baab30c6b328349d8cb99bac48ccc2203d4e127a1d2a16b76f5328c076", 0x1, 0x7fffffff, 0x6, 0x8, 0x3}) sendmsg$NLBL_CIPSOV4_C_LISTALL(r6, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r9, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x24}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40014}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)={0x1d8, r9, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x16c, 0xc, [{0x14, 0xb, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf77e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf880}]}, {0xc, 0xb, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b2b81fd}]}, {0x34, 0xb, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9dd9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ad8988f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78a202e5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9d54}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a02}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x253e}]}, {0x44, 0xb, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x80f0a9e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x212def92}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf0bb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5d3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x24b2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73694e83}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b9161f7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x548}]}, {0x3c, 0xb, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb499}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd356}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8315}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1a79}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2cf8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6cf3}]}, {0x34, 0xb, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb5b02a3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x211b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x15f14e24}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbe40}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5437c520}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x21b5}]}, {0x14, 0xb, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7ef}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41ed4e47}]}, {0x4c, 0xb, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde1a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x468a717d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe83e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd9a0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a2f3dfb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58db460e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2528}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa400}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24cc4788}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x34, 0xc, [{0x1c, 0xb, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x78fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb083}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x62ed}]}, {0x14, 0xb, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x35460756}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb383}]}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x8}, 0x880) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r9, @ANYBLOB="080028bd7000fedbdf2504000000bc000c0014000b00080009006b502a5908000900dab703010c000b0008000a00bfa100004c000b0008000900aa1c172308000a00b74b000008000a00b6d0000008000a00bcb800000800090017cfed09080009001d11293008000900b540dd61080009004d5a287c08000a00ac4200001c000b0008000a003094000008000900fb35d77c08000a004cb500000c000b00080009008c23e86824000b0008000a005fc3000008000900196cb73408000a00fc16000008000a00a82100000800020001000000080001000300000008000200030000000800020002000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) 03:37:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440007fffffff63404001"], 0x0, 0xffffff7f, 0x0}) 03:37:36 executing program 4: [ 1062.316228] binder: 21750:21755 ioctl c0306201 20000240 returned -11 [ 1062.332020] binder: 21751:21756 unknown command 1077961727 03:37:36 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x1f}, 0xc) [ 1062.370273] binder: 21751:21756 ioctl c0306201 20000080 returned -22 03:37:36 executing program 0: 03:37:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0563044000000000000a404001"], 0x0, 0xffffff7f, 0x0}) 03:37:36 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) 03:37:36 executing program 4: 03:37:36 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) 03:37:36 executing program 0: 03:37:36 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x1f}, 0xc) [ 1062.609930] binder: 21772:21773 unknown command 1077938688 03:37:36 executing program 4: [ 1062.692541] binder: 21772:21773 ioctl c0306201 20000080 returned -22 03:37:36 executing program 0: 03:37:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000025404001"], 0x0, 0xffffff7f, 0x0}) [ 1062.751779] binder: 21781:21784 ioctl c0306201 20000240 returned -11 03:37:36 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, 0x0, 0x0) 03:37:36 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080), 0x26, 0x0, &(0x7f00000000c0)="68f75c5500fe405b4fb0f600f4fb0a6ddf9c59d4eea3e0f03c331a32df3e53bf9628590d3ddd"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) 03:37:36 executing program 4: getxattr(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r0, 0x2410}], 0x1, 0x3) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xce02ff8b896e77d9, 0x0) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='ceph\x00', 0x1000000, &(0x7f0000000200)='\x98user\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)) ioctl$TCSETSW(r0, 0x5453, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) [ 1062.888419] binder: 21790:21791 unknown command 1077945600 [ 1062.947618] binder: 21790:21791 ioctl c0306201 20000080 returned -22 03:37:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="5500000018007f6800fe01b2a4a280930a060001fe80000202dc00003900090035005028010000001900154003000000000022dc1338d54400009b84136ef75afb83de4411000500fe80000000000000ec4fab91d4", 0x55}], 0x1}, 0x0) r3 = socket(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r3, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x0, r5}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={r5, 0x1}, 0xc) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r7, r0) dup2(r6, r1) 03:37:36 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, 0x0, 0x0) [ 1063.026467] binder: 21798:21803 ioctl c0306201 20000100 returned -11 03:37:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000002000063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:37 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 1063.126221] binder: BINDER_SET_CONTEXT_MGR already set [ 1063.163523] binder: 21798:21803 ioctl 40046207 0 returned -16 [ 1063.200147] input: syz0 as /devices/virtual/input/input10 03:37:37 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, 0x0, 0x0) 03:37:37 executing program 4: getxattr(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r0, 0x2410}], 0x1, 0x3) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)='\x98user\x00') ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0x6) ioctl$TCSETSW(r0, 0x5453, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) 03:37:37 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x88000}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e74e7dea10617fba419820b8179343a3e37bb0f3f6b37da452e667aae5", @ANYRES16=r4, @ANYBLOB="000025bd7000fddbdf25130000003400050007000100696200001c000200080003000000500008000300ede1000008000200000000000c00020008000200ffffffff1c0006800400020008000100ffffff7f040002000400020004000200180005000c000200080003000000000008000100"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r4, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x3c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff7fff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc3fa}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3d}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40001}, 0x40810) 03:37:37 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000003000063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:37 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 1063.487699] binder: 21944:21973 ioctl c0306201 20000240 returned -11 03:37:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="5500000018007f6800fe01b2a4a280930a060001fe80000202dc00003900090035005028010000001900154003000000000022dc1338d54400009b84136ef75afb83de4411000500fe80000000000000ec4fab91d4", 0x55}], 0x1}, 0x0) r3 = socket(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r3, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x0, r5}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={r5, 0x1}, 0xc) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r7, r0) dup2(r6, r1) 03:37:37 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1f}, 0xc) 03:37:37 executing program 4: creat(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400010000000404000001e37c60b7040000000000006a0a00fe000000008500000032000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400010000000404000001e37c60b7040000000000006a0a00fe000000008500000032000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) dup3(r0, r1, 0x0) 03:37:37 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) write$9p(r3, &(0x7f0000001400)="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", 0x600) sendfile(r3, r4, 0x0, 0x10000) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000080)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}], 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x0, @remote}], 0x10) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f0000000500)={0x0, 0xfb, 0xa6, 0x4, 0xff, "548b9699fd01039d7abf951e2d1e068f", "06a5475a1c68bbc95ad074cb5747b1f69130bcc7c3c1495869bbe1a1c7cecf857497ba6ed935fe7f94004bd5c1241e3e56742d7129a8da19863108486035d05f8ae86028614018cfcc9f93234376a8166d59c2f802585955ea301036d8b4bbbe74d35953da9f5dd4037e5e6beb36b14a69df4c47df2a393666d3a8e000c344595540d141d2ee2d732a681eb22440375682"}, 0xa6, 0x2) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000001c0)={0x401, 0x9, 0x4, 0x20000, 0x80000001, {0x0, 0x7530}, {0x1, 0x0, 0xfc, 0x5, 0x34, 0x10, "9290b9b1"}, 0x8, 0x3, @fd=r3, 0x1, 0x0, r5}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={r7, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x2, @remote, 0x3}, @in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x80000000}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e24, 0x6, @loopback, 0xe7f3}]}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000040)={r7, 0xe5b2, 0x3}, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) 03:37:37 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000004000063404001"], 0x0, 0xffffff7f, 0x0}) [ 1063.706834] input: syz0 as /devices/virtual/input/input12 03:37:37 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 1063.815179] audit: type=1804 audit(2000000257.670:443): pid=22071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir936819723/syzkaller.bDyG7y/1797/file0" dev="sda1" ino=16625 res=1 03:37:37 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1f}, 0xc) 03:37:37 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000005000063404001"], 0x0, 0xffffff7f, 0x0}) [ 1063.926394] audit: type=1800 audit(2000000257.670:444): pid=22071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16625 res=0 03:37:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="5500000018007f6800fe01b2a4a280930a060001fe80000202dc00003900090035005028010000001900154003000000000022dc1338d54400009b84136ef75afb83de4411000500fe80000000000000ec4fab91d4", 0x55}], 0x1}, 0x0) r3 = socket(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r3, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x0, r5}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={r5, 0x1}, 0xc) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r7, r0) dup2(r6, r1) 03:37:38 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000040)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000033000505d25a80648c63940d0424fc60100010400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r5 = fcntl$dupfd(r4, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_G_EDID(r5, 0xc0285628, &(0x7f0000000140)={0x0, 0x3, 0x40, [], &(0x7f00000000c0)=0x1d}) r6 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5c, 0x0, &(0x7f00000001c0)="765184aeb106afea394903855a308fe9eec756b1162742bfd5cb849ea4536f48a4df0d0cfc9d0081184e5a587c8165bb7dcf6ff5a492cd9c2adccf6689e538a99c302a2765a93eb7268cd18457ce7619b2cc8ae3fd2ff53919034d43"}) 03:37:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000006000063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:38 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1f}, 0xc) 03:37:38 executing program 4: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, 0x0, 0x0) [ 1064.204609] input: syz0 as /devices/virtual/input/input13 03:37:38 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) 03:37:38 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 1064.394838] openvswitch: netlink: Message has 5 unknown bytes. 03:37:38 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="5500000018007f6800fe01b2a4a280930a060001fe80000202dc00003900090035005028010000001900154003000000000022dc1338d54400009b84136ef75afb83de4411000500fe80000000000000ec4fab91d4", 0x55}], 0x1}, 0x0) r3 = socket(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r3, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x0, r5}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={r5, 0x1}, 0xc) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r7, r0) dup2(r6, r1) 03:37:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000007000063404001"], 0x0, 0xffffff7f, 0x0}) [ 1064.455529] binder: 22198:22200 ioctl c0306201 20000100 returned -11 03:37:38 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:37:38 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) 03:37:38 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0xd) write(0xffffffffffffffff, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) [ 1064.672240] input: syz0 as /devices/virtual/input/input14 03:37:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000012000063404001"], 0x0, 0xffffff7f, 0x0}) [ 1064.755942] binder: 22238:22322 ioctl c0306201 20000240 returned -11 03:37:38 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) 03:37:38 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:37:38 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0xd) write(0xffffffffffffffff, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 03:37:38 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) 03:37:38 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="5500000018007f6800fe01b2a4a280930a060001fe80000202dc00003900090035005028010000001900154003000000000022dc1338d54400009b84136ef75afb83de4411000500fe80000000000000ec4fab91d4", 0x55}], 0x1}, 0x0) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x0, r4}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={r4, 0x1}, 0xc) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r0) 03:37:38 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:37:38 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) 03:37:38 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0xd) write(0xffffffffffffffff, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) [ 1065.041742] binder: 22402:22444 ioctl c0306201 20000240 returned -11 03:37:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000048000063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:39 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) name_to_handle_at(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000500)={0x1008, 0x1, "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"}, &(0x7f0000000080), 0x400) [ 1065.225956] input: syz0 as /devices/virtual/input/input15 03:37:39 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) [ 1065.307314] binder: 22460:22465 ioctl c0306201 20000240 returned -11 03:37:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) 03:37:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0563044000004c000063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="5500000018007f6800fe01b2a4a280930a060001fe80000202dc00003900090035005028010000001900154003000000000022dc1338d54400009b84136ef75afb83de4411000500fe80000000000000ec4fab91d4", 0x55}], 0x1}, 0x0) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x0, r4}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={r4, 0x1}, 0xc) dup2(0xffffffffffffffff, r0) 03:37:39 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000100)='ip6_vti0\x00', 0x10) write$P9_RSYMLINK(r1, &(0x7f00000000c0)={0x14, 0x11, 0x2}, 0x14) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) write(0xffffffffffffffff, &(0x7f0000000500)="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", 0x1000) r7 = dup(r6) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000001500)=""/4096) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$9p(r7, &(0x7f0000000080)="b1e071287db0bd8177702c9d7ebc", 0xe) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) 03:37:39 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:37:39 executing program 4: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, 0x0, 0x0) [ 1065.603379] input: syz0 as /devices/virtual/input/input16 03:37:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000060000063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) 03:37:39 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x1802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x241, &(0x7f0000000440)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void}, {@mpls_uc={0x8847, {[{0x0, 0x0, 0x1}], @ipv6=@tipc_packet={0x5, 0x6, "19c4d8", 0x203, 0x6, 0x4, @loopback, @remote, {[@srh={0x96, 0x4, 0x4, 0x2, 0x6, 0x30, 0x1, [@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}, @dstopts={0x3a, 0x1b, [], [@generic={0x9, 0xba, "1aab247cc715f7153f7c45c7b0b247c5eb23aa1ed41f7218ce3301d30c7428f5a9ca1e765937ef3c9a6d10405da4620ce8c0715a6228fa3a74ddd245326d4484d0f422a3a371dadcff1eab1ca45e19dd0081eee861b4af91aa0eaba3789abcade3187c24e44873e68cb645fb026166ab720be53566f828326b621e536546d34c43c08e761b37e9d824da6ba6a91dc109151ceed7ac7fb879d4ceb928db030bf2c6cbbfa6f65744ea73b59a31e5364c523c4171368063184a34b5"}, @ra={0x5, 0x2, 0x6}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x8}, @hao={0xc9, 0x10, @rand_addr="2bc1b225c5b14a3f256778b900983fad"}, @pad1]}, @srh={0x67, 0x4, 0x4, 0x2, 0x81, 0x10, 0x200, [@dev={0xfe, 0x80, [], 0x37}, @rand_addr="6028cd4f4d69591fa7fd63b192e3f1de"]}, @srh={0x3c, 0xe, 0x4, 0x7, 0x7, 0x20, 0x7, [@mcast1, @empty, @local, @mcast2, @local, @mcast1, @mcast2]}, @routing={0x1d, 0x6, 0x2, 0x4, 0x0, [@rand_addr="90cbaa41304276aa012114cbbf2af3d9", @loopback, @ipv4={[], [], @broadcast}]}], @payload_conn={{{0x1b, 0x0, 0x0, 0x0, 0x1, 0x6, 0x2, 0x2, 0xfffa, 0x0, 0x0, 0x2, 0x2, 0x0, 0x20, 0x14d, 0x0, 0x4e21, 0x4e22}}, [0x0, 0x0, 0x0]}}}}}}}, &(0x7f00000002c0)={0x0, 0x4, [0xf5a, 0xb0c, 0x83d, 0x828]}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r6 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) write$9p(r5, &(0x7f0000001400)="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", 0x600) sendfile(r5, r6, 0x0, 0x10000) ioctl$BLKROTATIONAL(r5, 0x127e, &(0x7f0000000080)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_DISABLE(r9, 0x2401, 0xe8c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}], 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x0, @remote}], 0x10) ioctl$VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f00000001c0)={0x401, 0x9, 0x4, 0x20000, 0x80000001, {0x0, 0x7530}, {0x1, 0x0, 0xfc, 0x5, 0x34, 0x10, "9290b9b1"}, 0x8, 0x3, @fd=r5, 0x1, 0x0, r7}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000280)={r11, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x2, @remote, 0x3}, @in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x80000000}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e24, 0x6, @loopback, 0xe7f3}]}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x8, 0x4, 0xeb1, 0x3, r11}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000140)={r12, 0x4, "a068f78d"}, &(0x7f0000000180)=0xc) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000080)="0aa376"}) 03:37:39 executing program 4: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x1f}, 0xc) 03:37:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="5500000018007f6800fe01b2a4a280930a060001fe80000202dc00003900090035005028010000001900154003000000000022dc1338d54400009b84136ef75afb83de4411000500fe80000000000000ec4fab91d4", 0x55}], 0x1}, 0x0) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x0, r4}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={r4, 0x1}, 0xc) dup2(0xffffffffffffffff, r0) 03:37:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x1f}, 0xc) 03:37:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) 03:37:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000068000063404001"], 0x0, 0xffffff7f, 0x0}) [ 1066.008810] input: syz0 as /devices/virtual/input/input17 [ 1066.014862] audit: type=1804 audit(2000000259.860:445): pid=22606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir936819723/syzkaller.bDyG7y/1803/file0" dev="sda1" ino=17681 res=1 03:37:39 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05638eb99b74339304404d78e3198d61b1bee255ac82e82fbc115a03fdc41800b32d93b7fb94e7c32c4888bc5450aa0ee5d760a730b79e89078b8c031378a3153c38805da76dcc24a6be4e1ddfcbfb98aef4109b478e2f730e6f04f44e74e9928ea367b97dc741854cbcdd1bcc34cdd06801648da05700a8ec4db1ee9c83611732a1172783b10ba4196743accc2015674e80ad80c829a6475776a2a6f6c37e75b76b1a82c23592265d7e965793c28ad0d4f91c355d2d3acfdd75565da4ba1b186479106b57b47184dddad94dc8d93f57a4eb34e0543e8b4075b0e56b8000edb33d8d879f981dbb44c8f0227fae3888ef21cb3f07d7551c8223788b0aa8b85f796b86eeb8f16926805b7ec328304c79ebb07a729a536eac7657260df4a4a7b863f0b3a6e31d1079e5ed9ca6b4673180db34e773ca7f0eb743369f664bd300000001000000000000000000"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() sendmmsg$unix(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9701}], 0xa, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20}], 0x198, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x397) r6 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x11, r6, r5, r8) sendmsg$nl_netfilter(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000001740)={0x33c, 0xd, 0x7, 0x101, 0x70bd28, 0x25dfdbff, {0x1, 0x0, 0x8}, [@typed={0x4, 0x1b, 0x0, 0x0, @binary}, @nested={0x1de, 0x67, 0x0, 0x1, [@typed={0x8, 0x64, 0x0, 0x0, @pid=r3}, @typed={0xc, 0x2f, 0x0, 0x0, @u64=0x5052}, @generic="78c421c3f04ec31d0b6c5a89ddfa2386d13de6a977de3cfc860eb987c06b72d60e3881fc92c7deb4d8ad3388a26a6ba33e259639b0ef153a3fec762cc0fa7457048394269b41836a86bd238dceeb25238593da7c07ddfc9b1ba6f0ff7dc22f604a0c83cfc007e7f8a49dfa080583c5d968be38c8454521eb465a203bd809c2fa1635dc695e360e2f17edd3b50463c1a9dea49e3112a053", @typed={0x8, 0x61, 0x0, 0x0, @uid=r5}, @typed={0xd3, 0x40, 0x0, 0x0, @binary="a6c0c755bb31b7f30f591387945608dd2c72246d18998ebe69270596b5bb5ddba39b287409b4d704a9221477fcd78b4c43c0f853f5b5c0daccd944e34d352dd7410bfbe2c97ae3f2beca8e75a3b51399708631a973af6c5a1f2258ffc60e29ce6b4fe69c65daa27648f2e3a18bd2d61088b237807e5519adc3cf5ed77f29a025a5d4084e23fc8dd0691ea1d9395260d7aff60abe20ce2e0908ee2327f3a3ed20a00334b73d1e69b91f79cbece7000ac65b277b7cf1d296fc0e521237ae29395aa6d1128bc9668d7532a948e2373427"}, @typed={0x4, 0x3c}, @generic="855212cbd73376384ae0fba4ed5022074f61192a59f0defddf19594bd4efb258b9c1f0ba5704b3218e55b43ccb48762ec02b26851ea1fe0b1860c09482e3cdfbc32a94", @typed={0x4, 0x29}, @typed={0x8, 0x6, 0x0, 0x0, @uid}]}, @nested={0xc3, 0x5, 0x0, 0x1, [@generic="823fc6963bcd141d06f15fb4a33988ee302be81e06", @generic="07147d02604af6d917", @generic="8c31e52d27a852e1b51e1b4550604e663bad884ceb04395c64d768877712105418deadefb1d2236260282bf966ffdfbe7521bcb8efeb1d3c6d0a53762483ea08224b3a2253717552f6fca35e06eb20901b691af840aa2e43edb29fbd9ea908ac7f307d35cf91b995b6a22c221e3f4885fea8789c168d2f5c3cb70586e75dda3064d89971b60415bd0c5165376b1bfe439827ca5eb0062f14c0e8ef7cfc792715ec"]}, @generic="e1f8beb242eb0b265163d1a5039a781c183473a1af563fa9eb8718debfeaa7a13d7f8d5123f0fddbf9307137c89b06bc20250f5247fbe31ad2b40c58a025ca7b7ebbab1db925db524e2a92d5f24a7816cccd3dc7475758307fd4c23c20aca23cf20b1521fa8339b4eb9d63bc3171e7a0a6d66adef61129a432b470db608df7ff"]}, 0x33c}, 0x1, 0x0, 0x0, 0x440}, 0x8000) lsetxattr$trusted_overlay_opaque(0x0, 0x0, &(0x7f0000000440)='y\x00', 0x2, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000540)={{}, {}, 0x0, 0x4109b1e1634878bf, 0x100}) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r11 = dup(r10) ioctl$DMA_BUF_IOCTL_SYNC(r11, 0x40086200, &(0x7f0000000040)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r12 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) ioctl$KVM_SET_XSAVE(r14, 0x5000aea5, &(0x7f0000000740)={[0x2, 0x4, 0x200001, 0x9d2, 0x7, 0x9, 0x40, 0x6, 0x10001, 0x5c32, 0x8, 0x400, 0xfff, 0xffffffff, 0x1ff, 0xfff, 0x8, 0x9, 0x9, 0x83, 0x2, 0xe4a, 0x800, 0x1000, 0xebf, 0x3ff, 0x7, 0x6, 0x7f, 0x8, 0x29e, 0x8, 0x8001, 0x81, 0x401, 0x8, 0x3ab1c8b1, 0x5, 0xd2ce, 0x1, 0x3, 0x3ff, 0xffffffff, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x81, 0x600, 0x4, 0x81, 0x8, 0x2, 0x5, 0x5, 0x6, 0x9, 0x9, 0x10000, 0x1, 0x3, 0xa6, 0x20b, 0xb52, 0x7ff, 0x7, 0xffffffff, 0x800, 0x8, 0x9, 0x0, 0x7, 0x2, 0x48f3, 0x0, 0x0, 0x8, 0xc5cb, 0x6, 0x0, 0x9d20, 0x0, 0x8, 0x1, 0x1, 0xffffffff, 0x10000, 0x5, 0x7f, 0x5, 0x4, 0x8000, 0x1, 0x7, 0x0, 0x8, 0x7f7b, 0x6, 0x1, 0x9, 0x0, 0x9, 0x970, 0x4, 0xc83, 0x1, 0x1000, 0x9, 0x2, 0x1f, 0x8, 0x7fffffff, 0xfbe, 0x7, 0x1000, 0x3, 0x800, 0x6, 0x7fff, 0x3f, 0x3, 0x1000, 0x4, 0x8, 0x5, 0x3, 0x800, 0x20, 0x100, 0x0, 0x1, 0x701, 0x5, 0x1756, 0x1000, 0x40, 0x7, 0x3, 0xff, 0x2, 0x400, 0x3ff, 0x9, 0xb184, 0x3, 0x80000000, 0x80000000, 0x8, 0x716, 0x400, 0x4c1d90bb, 0x6, 0x3, 0xff, 0x5ed, 0x3, 0x5, 0xff, 0x6, 0x2, 0xfffffff9, 0x9, 0xfff, 0xd616, 0x7fffffff, 0x7, 0x7, 0x4, 0x9, 0x40, 0x6, 0x0, 0x7, 0xfffffc00, 0xfffffff7, 0x8, 0x7, 0x7, 0x4, 0x20000000, 0x32a, 0x8, 0x5, 0x2, 0x401, 0xffff, 0x5, 0x0, 0x3f, 0x3, 0xd9, 0x8, 0x2, 0x4, 0x180000, 0x81, 0x800, 0xffff8001, 0xffffffff, 0x6f9d, 0x8, 0x7, 0x100, 0x74, 0x1, 0x3, 0xbd, 0x7f, 0x80000000, 0x2, 0x81, 0x8, 0x9, 0x6, 0x4, 0x20, 0x56, 0x8, 0x26603ac1, 0x2, 0xffffffff, 0x26e, 0x40, 0x200, 0x3, 0x3, 0xe1b0, 0x5, 0xa05, 0x4, 0x4, 0xba8b, 0x6, 0x1ff, 0x10001, 0x828d, 0x8, 0x0, 0x4, 0x101, 0x1, 0x1, 0xfffffffd, 0x9, 0x8000, 0x10000, 0x3, 0x6, 0x71b7, 0x2, 0x0, 0x1, 0x7fff, 0x1000, 0x2, 0x1ff, 0x1, 0x5, 0x1, 0xff, 0x77b5, 0x3, 0xfffffff9, 0x2, 0x8, 0x8000, 0xff, 0x9, 0xffffffff, 0x1, 0x8, 0xfffffe01, 0x7f, 0x3ff, 0x3ff, 0x5, 0x7fffffff, 0x2, 0x3, 0x3, 0x1, 0x475, 0x2, 0x1, 0x8, 0x3, 0x200, 0xffff, 0x1ff, 0x5, 0x0, 0x3, 0x2, 0x100, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x6a, 0x3, 0x4, 0x338, 0x401, 0x7, 0x7f, 0x80, 0x101, 0x3, 0x81, 0x9, 0x80000001, 0x3, 0x5, 0xeab2, 0x9, 0x2, 0xa4, 0x5, 0x8, 0x8000, 0x5, 0x3f, 0x2, 0x40, 0x1ff, 0x20, 0x3ff, 0x1000, 0x68, 0x0, 0x3, 0x10001, 0x81, 0x20, 0x1, 0x0, 0x7, 0x51e5, 0x8001, 0x400000, 0x4, 0x2, 0x5, 0x1, 0x9, 0x9, 0xfffffffb, 0xfffffff9, 0x0, 0x80, 0x4, 0x3, 0x1, 0xfffffff7, 0x3ccc, 0x3f, 0x4, 0x3d66, 0xa10, 0x1f, 0x8, 0x1, 0x7f8000, 0x80000000, 0x3, 0x5, 0x34a000, 0x200, 0xec, 0xff, 0x4, 0x7, 0x80000001, 0xfffffffd, 0x7fff, 0x8, 0xe09, 0x1, 0x2, 0x2e, 0x3, 0x3f, 0x1000, 0xfff, 0x23be, 0x9, 0x8001, 0x401, 0x3, 0x7ff, 0x4, 0x80000001, 0x2, 0x7, 0x0, 0x6, 0x4, 0x1, 0x3, 0xaf48, 0xff3, 0x401, 0x0, 0x9, 0x0, 0x6, 0x8, 0x200, 0x7fff, 0x6, 0x6, 0x1000, 0x3, 0x73000, 0x8, 0x6, 0x0, 0x8001, 0x8000, 0x12, 0xffff, 0xbe, 0xffff8000, 0x4f, 0x7f, 0x96, 0x0, 0x5, 0xfffffffb, 0x6, 0xff, 0x0, 0x0, 0x5, 0x7, 0x101, 0x7fff, 0x9, 0x10000, 0x2, 0xc84, 0x10001, 0xfffffffa, 0x5, 0x4, 0xfffff476, 0x6, 0xfff, 0x7fffffff, 0x3, 0x9, 0x2, 0x3, 0x40, 0x2, 0xfffffffe, 0x1f, 0x7, 0x81, 0x8001, 0x5, 0x3, 0x4, 0x9, 0x400, 0x1, 0xa8, 0x7, 0x80000001, 0x3, 0x6bc, 0x9, 0x3ff, 0x3f, 0xfffffff7, 0x1, 0x4, 0x200, 0x10000, 0x20, 0x3, 0x1d54, 0x7fff, 0xffffffff, 0x40, 0x8, 0x4, 0x0, 0x0, 0x190d, 0x3, 0x8000, 0x9c61, 0x4, 0x100, 0x6, 0x0, 0x6, 0xfffffffc, 0x2, 0x40, 0xd684, 0x8, 0x101, 0x2, 0x4b5, 0x7, 0x0, 0x8, 0x1, 0x9, 0x4, 0xfffffffd, 0xd27, 0x7fffffff, 0x59, 0x2, 0x2, 0x9, 0xf85c, 0x4, 0x5, 0x3, 0x5, 0x80000001, 0x1, 0x558, 0x4fbf, 0x4, 0x0, 0x1, 0x101, 0xfffffffb, 0x1, 0xc800000, 0x401, 0x1, 0x80, 0x101, 0xfff, 0x9, 0x8, 0x0, 0xa0, 0xfffff6f0, 0xffffffff, 0x1, 0x3, 0x80000001, 0xffffffff, 0x9, 0x6, 0x4, 0x80, 0x6, 0x1, 0x0, 0x3, 0x8, 0xfff, 0x3ff, 0x0, 0x2, 0x1, 0x4, 0x6, 0x6d9, 0x3, 0x3ff, 0x3, 0x3, 0x5, 0x8, 0x4, 0x3, 0x80000000, 0xfd03, 0x89440, 0x1, 0x2943, 0x5b, 0x6, 0xffffff80, 0x6, 0x1, 0x2, 0x0, 0x5, 0x401, 0x8, 0x24a, 0x70, 0x4a3c, 0x7, 0xaa, 0xac5, 0x9, 0x400, 0x1ff, 0x1, 0x7, 0x10000, 0x0, 0x35, 0x34c, 0x401, 0x1, 0x4, 0x49bd7677, 0x4ef, 0x101, 0xffc00000, 0x7, 0x9, 0x8000, 0x1, 0xffffffff, 0xb8a, 0x6, 0x80000001, 0xfe5d, 0x5, 0x3ff, 0x1000, 0x7, 0x401, 0x1, 0x0, 0x2000, 0x8, 0x400, 0x9, 0x9, 0x6, 0x7, 0x1f, 0xfffffffc, 0x7ef7, 0x40, 0x3, 0x5, 0x5, 0xc9a, 0xd5, 0x7, 0xffff0000, 0x1, 0x5, 0x80000000, 0x6, 0x1f, 0x4, 0x8, 0x5, 0xad, 0x400, 0x8000, 0x4, 0x2, 0xa0000, 0x0, 0x5, 0x3, 0x5, 0x81, 0xfffffffe, 0x50b, 0x4b, 0x9, 0x3ff, 0x1, 0x9, 0x1, 0x9, 0x1ff, 0x2a36d80f, 0x8c, 0x8001, 0x5, 0x4525d901, 0x3, 0x6, 0x1, 0x2, 0x8, 0x3f, 0x101, 0x9, 0x2, 0x1, 0x6, 0x6, 0xc65, 0x8f3, 0x98, 0x8ec7, 0x4, 0x2, 0xffffffe1, 0x1, 0x3, 0x1, 0x7, 0x989, 0x6, 0x5, 0x3, 0x4, 0x9000000, 0x1, 0x0, 0x0, 0x0, 0x7, 0x5, 0x459f, 0x7, 0xfabc, 0x1, 0x4, 0x7ac, 0x1, 0x0, 0x0, 0x5, 0x1000, 0x4, 0x0, 0x0, 0x400, 0x20, 0x8, 0x8, 0x101, 0x7, 0xfa, 0x3ff, 0x80000001, 0x961, 0x3, 0xfffffffa, 0x3069, 0x1, 0x2, 0x3ff, 0x9, 0xfa, 0x5dce, 0x4, 0x80000001, 0x10000, 0xc2, 0x5, 0x1b69, 0x80000001, 0xbc, 0x7, 0x1, 0x10000, 0x4038, 0x8000, 0x8001, 0x1000, 0x0, 0x0, 0x1, 0x2, 0x9, 0x65, 0x8000, 0x8, 0x3, 0x800, 0xffffffff, 0x7ff, 0x2, 0x7ff, 0x7, 0x9, 0x6, 0x4890, 0x8, 0x3, 0x4, 0xffffffff, 0x10000, 0x1, 0x4, 0x8001, 0x995, 0x5, 0x2, 0x7fff, 0x80000001, 0x9, 0x8, 0x1, 0xfffffffc, 0x935, 0x7fff, 0x0, 0x1, 0x9b1, 0x0, 0x6, 0x1b, 0x0, 0x3, 0x7f, 0xfffffffd, 0x7ff, 0x4, 0x2, 0x80000001, 0x4, 0x8, 0x9f, 0x4000000, 0x0, 0x5, 0x513a, 0x20, 0x8, 0xc4d, 0x1, 0x1, 0x7, 0x0, 0x7, 0x5, 0x47, 0x9, 0xffffffff, 0x4, 0x2, 0x7fff, 0x20, 0x244, 0x800, 0x7, 0xfffffffd, 0xe4, 0x5, 0x8000, 0x0, 0x3ff, 0x1ff, 0x40, 0x8001, 0x6, 0x6, 0xfffffeff, 0x7, 0x3f, 0x0, 0x682, 0x1, 0x1, 0x64, 0x2, 0x509, 0xe8, 0x80, 0x0, 0x0, 0x3, 0x4, 0x1, 0x5, 0x80000001, 0x7, 0x8, 0x5, 0xfffffc01, 0x3, 0xef07, 0x9, 0x8, 0x3e61a0bf, 0x77e5, 0x9, 0x0, 0x1000, 0xffffffff, 0x3, 0x8000, 0x7, 0x8, 0x33, 0xfffffffa, 0x7, 0x4, 0x4b57, 0x8bb, 0x3ff, 0xf26d, 0x7fffffff, 0x6, 0x40, 0x1, 0x9, 0xff, 0xfff, 0x4, 0x4, 0x7, 0x10001, 0x1, 0x0, 0x0, 0xfffffff0, 0x81, 0x800, 0x0, 0x3, 0xffff, 0x72, 0x8, 0x7, 0x7fffffff, 0x6, 0x9, 0x3, 0x3, 0x9, 0xffff, 0x3, 0x1000, 0x6, 0x5, 0x4, 0x1, 0xfff, 0x3, 0xb1800000, 0x3, 0x3, 0x2, 0x2, 0x20, 0x7fffffff, 0x6, 0x7, 0x3, 0x4, 0x10000, 0x4, 0x8000, 0x8000, 0x2, 0x2, 0x2, 0x8, 0x7fffffff, 0xffff, 0x0, 0xfce8, 0x1, 0xffff, 0x81, 0x9, 0x7fff, 0x0, 0x30, 0x4, 0x10001, 0x0, 0x9, 0x0, 0x1, 0x200, 0x9, 0x1ff, 0x3f, 0x20, 0x401, 0x35, 0xfffffff8, 0x80000001, 0x3, 0x9, 0xfffffffd, 0x1ff, 0x9, 0x6, 0x0, 0x3, 0xffff, 0x7, 0x4, 0xb2, 0x3ff, 0x0, 0x10001, 0x6, 0x400000, 0x4b, 0x8, 0x8, 0x7fff, 0x4, 0xfffffffb, 0x6, 0x1, 0x40, 0x7ff, 0xfa4, 0x6, 0x9, 0x52, 0x9, 0x2, 0x3, 0x5, 0x3, 0xaf64, 0x3, 0xb879, 0x9, 0x6]}) write$ppp(r12, &(0x7f00000003c0)="4cdbd694ec986e3adee4803a0160103f6fa8a78d870bd5c8a6553c88b796c836df9f9fa4b467a0e45d02e98ddbaca10435684335507f5e15f6af358e8c6b5ef7d2ab3ca6b2bf44d40c48fdeb6793e5ceadf34bfb443801596c892d09a73aec2ffd1137a23f6c549d5ea1c04fa536a285ff8d008748eb1ee7b5f7172103b8c622c1f58e1c8710777b80465d7bc9d19a7efb69b8d282c433523cb7f2852fec65c98335994e0ec704e0f229e5f1b2556758fd561052635d708e16e839439bf5eda9e0c5436ce06b8c6fb61049e2b5931ea8578ad58d2d9db985ad78c1d207a442032c22", 0xe2) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="00040000"], 0x8000a0, 0x0, 0x0}) 03:37:40 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x6000000000000000, &(0x7f00000004c0)='v'}) [ 1066.199832] audit: type=1800 audit(2000000259.910:446): pid=22606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17681 res=0 03:37:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="5500000018007f6800fe01b2a4a280930a060001fe80000202dc00003900090035005028010000001900154003000000000022dc1338d54400009b84136ef75afb83de4411000500fe80000000000000ec4fab91d4", 0x55}], 0x1}, 0x0) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x0, r4}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={r4, 0x1}, 0xc) dup2(0xffffffffffffffff, r0) [ 1066.242920] binder: 22622:22624 unknown command -1181850875 [ 1066.269107] binder: 22623:22625 ioctl c0306201 20000240 returned -11 [ 1066.274453] binder: 22622:22624 ioctl c0306201 20000200 returned -22 03:37:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) 03:37:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0563044000006c000063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:40 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="06630440000000000063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:40 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) bind$phonet(r0, &(0x7f0000000040)={0x23, 0x1, 0x8, 0xfe}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) [ 1066.430758] input: syz0 as /devices/virtual/input/input18 03:37:40 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05638eb99b74339304404d78e3198d61b1bee255ac82e82fbc115a03fdc41800b32d93b7fb94e7c32c4888bc5450aa0ee5d760a730b79e89078b8c031378a3153c38805da76dcc24a6be4e1ddfcbfb98aef4109b478e2f730e6f04f44e74e9928ea367b97dc741854cbcdd1bcc34cdd06801648da05700a8ec4db1ee9c83611732a1172783b10ba4196743accc2015674e80ad80c829a6475776a2a6f6c37e75b76b1a82c23592265d7e965793c28ad0d4f91c355d2d3acfdd75565da4ba1b186479106b57b47184dddad94dc8d93f57a4eb34e0543e8b4075b0e56b8000edb33d8d879f981dbb44c8f0227fae3888ef21cb3f07d7551c8223788b0aa8b85f796b86eeb8f16926805b7ec328304c79ebb07a729a536eac7657260df4a4a7b863f0b3a6e31d1079e5ed9ca6b4673180db34e773ca7f0eb743369f664bd300000001000000000000000000"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() sendmmsg$unix(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9701}], 0xa, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20}], 0x198, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x397) r6 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x11, r6, r5, r8) sendmsg$nl_netfilter(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000001740)={0x33c, 0xd, 0x7, 0x101, 0x70bd28, 0x25dfdbff, {0x1, 0x0, 0x8}, [@typed={0x4, 0x1b, 0x0, 0x0, @binary}, @nested={0x1de, 0x67, 0x0, 0x1, [@typed={0x8, 0x64, 0x0, 0x0, @pid=r3}, @typed={0xc, 0x2f, 0x0, 0x0, @u64=0x5052}, @generic="78c421c3f04ec31d0b6c5a89ddfa2386d13de6a977de3cfc860eb987c06b72d60e3881fc92c7deb4d8ad3388a26a6ba33e259639b0ef153a3fec762cc0fa7457048394269b41836a86bd238dceeb25238593da7c07ddfc9b1ba6f0ff7dc22f604a0c83cfc007e7f8a49dfa080583c5d968be38c8454521eb465a203bd809c2fa1635dc695e360e2f17edd3b50463c1a9dea49e3112a053", @typed={0x8, 0x61, 0x0, 0x0, @uid=r5}, @typed={0xd3, 0x40, 0x0, 0x0, @binary="a6c0c755bb31b7f30f591387945608dd2c72246d18998ebe69270596b5bb5ddba39b287409b4d704a9221477fcd78b4c43c0f853f5b5c0daccd944e34d352dd7410bfbe2c97ae3f2beca8e75a3b51399708631a973af6c5a1f2258ffc60e29ce6b4fe69c65daa27648f2e3a18bd2d61088b237807e5519adc3cf5ed77f29a025a5d4084e23fc8dd0691ea1d9395260d7aff60abe20ce2e0908ee2327f3a3ed20a00334b73d1e69b91f79cbece7000ac65b277b7cf1d296fc0e521237ae29395aa6d1128bc9668d7532a948e2373427"}, @typed={0x4, 0x3c}, @generic="855212cbd73376384ae0fba4ed5022074f61192a59f0defddf19594bd4efb258b9c1f0ba5704b3218e55b43ccb48762ec02b26851ea1fe0b1860c09482e3cdfbc32a94", @typed={0x4, 0x29}, @typed={0x8, 0x6, 0x0, 0x0, @uid}]}, @nested={0xc3, 0x5, 0x0, 0x1, [@generic="823fc6963bcd141d06f15fb4a33988ee302be81e06", @generic="07147d02604af6d917", @generic="8c31e52d27a852e1b51e1b4550604e663bad884ceb04395c64d768877712105418deadefb1d2236260282bf966ffdfbe7521bcb8efeb1d3c6d0a53762483ea08224b3a2253717552f6fca35e06eb20901b691af840aa2e43edb29fbd9ea908ac7f307d35cf91b995b6a22c221e3f4885fea8789c168d2f5c3cb70586e75dda3064d89971b60415bd0c5165376b1bfe439827ca5eb0062f14c0e8ef7cfc792715ec"]}, @generic="e1f8beb242eb0b265163d1a5039a781c183473a1af563fa9eb8718debfeaa7a13d7f8d5123f0fddbf9307137c89b06bc20250f5247fbe31ad2b40c58a025ca7b7ebbab1db925db524e2a92d5f24a7816cccd3dc7475758307fd4c23c20aca23cf20b1521fa8339b4eb9d63bc3171e7a0a6d66adef61129a432b470db608df7ff"]}, 0x33c}, 0x1, 0x0, 0x0, 0x440}, 0x8000) lsetxattr$trusted_overlay_opaque(0x0, 0x0, &(0x7f0000000440)='y\x00', 0x2, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000540)={{}, {}, 0x0, 0x4109b1e1634878bf, 0x100}) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r11 = dup(r10) ioctl$DMA_BUF_IOCTL_SYNC(r11, 0x40086200, &(0x7f0000000040)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r12 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) ioctl$KVM_SET_XSAVE(r14, 0x5000aea5, &(0x7f0000000740)={[0x2, 0x4, 0x200001, 0x9d2, 0x7, 0x9, 0x40, 0x6, 0x10001, 0x5c32, 0x8, 0x400, 0xfff, 0xffffffff, 0x1ff, 0xfff, 0x8, 0x9, 0x9, 0x83, 0x2, 0xe4a, 0x800, 0x1000, 0xebf, 0x3ff, 0x7, 0x6, 0x7f, 0x8, 0x29e, 0x8, 0x8001, 0x81, 0x401, 0x8, 0x3ab1c8b1, 0x5, 0xd2ce, 0x1, 0x3, 0x3ff, 0xffffffff, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x81, 0x600, 0x4, 0x81, 0x8, 0x2, 0x5, 0x5, 0x6, 0x9, 0x9, 0x10000, 0x1, 0x3, 0xa6, 0x20b, 0xb52, 0x7ff, 0x7, 0xffffffff, 0x800, 0x8, 0x9, 0x0, 0x7, 0x2, 0x48f3, 0x0, 0x0, 0x8, 0xc5cb, 0x6, 0x0, 0x9d20, 0x0, 0x8, 0x1, 0x1, 0xffffffff, 0x10000, 0x5, 0x7f, 0x5, 0x4, 0x8000, 0x1, 0x7, 0x0, 0x8, 0x7f7b, 0x6, 0x1, 0x9, 0x0, 0x9, 0x970, 0x4, 0xc83, 0x1, 0x1000, 0x9, 0x2, 0x1f, 0x8, 0x7fffffff, 0xfbe, 0x7, 0x1000, 0x3, 0x800, 0x6, 0x7fff, 0x3f, 0x3, 0x1000, 0x4, 0x8, 0x5, 0x3, 0x800, 0x20, 0x100, 0x0, 0x1, 0x701, 0x5, 0x1756, 0x1000, 0x40, 0x7, 0x3, 0xff, 0x2, 0x400, 0x3ff, 0x9, 0xb184, 0x3, 0x80000000, 0x80000000, 0x8, 0x716, 0x400, 0x4c1d90bb, 0x6, 0x3, 0xff, 0x5ed, 0x3, 0x5, 0xff, 0x6, 0x2, 0xfffffff9, 0x9, 0xfff, 0xd616, 0x7fffffff, 0x7, 0x7, 0x4, 0x9, 0x40, 0x6, 0x0, 0x7, 0xfffffc00, 0xfffffff7, 0x8, 0x7, 0x7, 0x4, 0x20000000, 0x32a, 0x8, 0x5, 0x2, 0x401, 0xffff, 0x5, 0x0, 0x3f, 0x3, 0xd9, 0x8, 0x2, 0x4, 0x180000, 0x81, 0x800, 0xffff8001, 0xffffffff, 0x6f9d, 0x8, 0x7, 0x100, 0x74, 0x1, 0x3, 0xbd, 0x7f, 0x80000000, 0x2, 0x81, 0x8, 0x9, 0x6, 0x4, 0x20, 0x56, 0x8, 0x26603ac1, 0x2, 0xffffffff, 0x26e, 0x40, 0x200, 0x3, 0x3, 0xe1b0, 0x5, 0xa05, 0x4, 0x4, 0xba8b, 0x6, 0x1ff, 0x10001, 0x828d, 0x8, 0x0, 0x4, 0x101, 0x1, 0x1, 0xfffffffd, 0x9, 0x8000, 0x10000, 0x3, 0x6, 0x71b7, 0x2, 0x0, 0x1, 0x7fff, 0x1000, 0x2, 0x1ff, 0x1, 0x5, 0x1, 0xff, 0x77b5, 0x3, 0xfffffff9, 0x2, 0x8, 0x8000, 0xff, 0x9, 0xffffffff, 0x1, 0x8, 0xfffffe01, 0x7f, 0x3ff, 0x3ff, 0x5, 0x7fffffff, 0x2, 0x3, 0x3, 0x1, 0x475, 0x2, 0x1, 0x8, 0x3, 0x200, 0xffff, 0x1ff, 0x5, 0x0, 0x3, 0x2, 0x100, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x6a, 0x3, 0x4, 0x338, 0x401, 0x7, 0x7f, 0x80, 0x101, 0x3, 0x81, 0x9, 0x80000001, 0x3, 0x5, 0xeab2, 0x9, 0x2, 0xa4, 0x5, 0x8, 0x8000, 0x5, 0x3f, 0x2, 0x40, 0x1ff, 0x20, 0x3ff, 0x1000, 0x68, 0x0, 0x3, 0x10001, 0x81, 0x20, 0x1, 0x0, 0x7, 0x51e5, 0x8001, 0x400000, 0x4, 0x2, 0x5, 0x1, 0x9, 0x9, 0xfffffffb, 0xfffffff9, 0x0, 0x80, 0x4, 0x3, 0x1, 0xfffffff7, 0x3ccc, 0x3f, 0x4, 0x3d66, 0xa10, 0x1f, 0x8, 0x1, 0x7f8000, 0x80000000, 0x3, 0x5, 0x34a000, 0x200, 0xec, 0xff, 0x4, 0x7, 0x80000001, 0xfffffffd, 0x7fff, 0x8, 0xe09, 0x1, 0x2, 0x2e, 0x3, 0x3f, 0x1000, 0xfff, 0x23be, 0x9, 0x8001, 0x401, 0x3, 0x7ff, 0x4, 0x80000001, 0x2, 0x7, 0x0, 0x6, 0x4, 0x1, 0x3, 0xaf48, 0xff3, 0x401, 0x0, 0x9, 0x0, 0x6, 0x8, 0x200, 0x7fff, 0x6, 0x6, 0x1000, 0x3, 0x73000, 0x8, 0x6, 0x0, 0x8001, 0x8000, 0x12, 0xffff, 0xbe, 0xffff8000, 0x4f, 0x7f, 0x96, 0x0, 0x5, 0xfffffffb, 0x6, 0xff, 0x0, 0x0, 0x5, 0x7, 0x101, 0x7fff, 0x9, 0x10000, 0x2, 0xc84, 0x10001, 0xfffffffa, 0x5, 0x4, 0xfffff476, 0x6, 0xfff, 0x7fffffff, 0x3, 0x9, 0x2, 0x3, 0x40, 0x2, 0xfffffffe, 0x1f, 0x7, 0x81, 0x8001, 0x5, 0x3, 0x4, 0x9, 0x400, 0x1, 0xa8, 0x7, 0x80000001, 0x3, 0x6bc, 0x9, 0x3ff, 0x3f, 0xfffffff7, 0x1, 0x4, 0x200, 0x10000, 0x20, 0x3, 0x1d54, 0x7fff, 0xffffffff, 0x40, 0x8, 0x4, 0x0, 0x0, 0x190d, 0x3, 0x8000, 0x9c61, 0x4, 0x100, 0x6, 0x0, 0x6, 0xfffffffc, 0x2, 0x40, 0xd684, 0x8, 0x101, 0x2, 0x4b5, 0x7, 0x0, 0x8, 0x1, 0x9, 0x4, 0xfffffffd, 0xd27, 0x7fffffff, 0x59, 0x2, 0x2, 0x9, 0xf85c, 0x4, 0x5, 0x3, 0x5, 0x80000001, 0x1, 0x558, 0x4fbf, 0x4, 0x0, 0x1, 0x101, 0xfffffffb, 0x1, 0xc800000, 0x401, 0x1, 0x80, 0x101, 0xfff, 0x9, 0x8, 0x0, 0xa0, 0xfffff6f0, 0xffffffff, 0x1, 0x3, 0x80000001, 0xffffffff, 0x9, 0x6, 0x4, 0x80, 0x6, 0x1, 0x0, 0x3, 0x8, 0xfff, 0x3ff, 0x0, 0x2, 0x1, 0x4, 0x6, 0x6d9, 0x3, 0x3ff, 0x3, 0x3, 0x5, 0x8, 0x4, 0x3, 0x80000000, 0xfd03, 0x89440, 0x1, 0x2943, 0x5b, 0x6, 0xffffff80, 0x6, 0x1, 0x2, 0x0, 0x5, 0x401, 0x8, 0x24a, 0x70, 0x4a3c, 0x7, 0xaa, 0xac5, 0x9, 0x400, 0x1ff, 0x1, 0x7, 0x10000, 0x0, 0x35, 0x34c, 0x401, 0x1, 0x4, 0x49bd7677, 0x4ef, 0x101, 0xffc00000, 0x7, 0x9, 0x8000, 0x1, 0xffffffff, 0xb8a, 0x6, 0x80000001, 0xfe5d, 0x5, 0x3ff, 0x1000, 0x7, 0x401, 0x1, 0x0, 0x2000, 0x8, 0x400, 0x9, 0x9, 0x6, 0x7, 0x1f, 0xfffffffc, 0x7ef7, 0x40, 0x3, 0x5, 0x5, 0xc9a, 0xd5, 0x7, 0xffff0000, 0x1, 0x5, 0x80000000, 0x6, 0x1f, 0x4, 0x8, 0x5, 0xad, 0x400, 0x8000, 0x4, 0x2, 0xa0000, 0x0, 0x5, 0x3, 0x5, 0x81, 0xfffffffe, 0x50b, 0x4b, 0x9, 0x3ff, 0x1, 0x9, 0x1, 0x9, 0x1ff, 0x2a36d80f, 0x8c, 0x8001, 0x5, 0x4525d901, 0x3, 0x6, 0x1, 0x2, 0x8, 0x3f, 0x101, 0x9, 0x2, 0x1, 0x6, 0x6, 0xc65, 0x8f3, 0x98, 0x8ec7, 0x4, 0x2, 0xffffffe1, 0x1, 0x3, 0x1, 0x7, 0x989, 0x6, 0x5, 0x3, 0x4, 0x9000000, 0x1, 0x0, 0x0, 0x0, 0x7, 0x5, 0x459f, 0x7, 0xfabc, 0x1, 0x4, 0x7ac, 0x1, 0x0, 0x0, 0x5, 0x1000, 0x4, 0x0, 0x0, 0x400, 0x20, 0x8, 0x8, 0x101, 0x7, 0xfa, 0x3ff, 0x80000001, 0x961, 0x3, 0xfffffffa, 0x3069, 0x1, 0x2, 0x3ff, 0x9, 0xfa, 0x5dce, 0x4, 0x80000001, 0x10000, 0xc2, 0x5, 0x1b69, 0x80000001, 0xbc, 0x7, 0x1, 0x10000, 0x4038, 0x8000, 0x8001, 0x1000, 0x0, 0x0, 0x1, 0x2, 0x9, 0x65, 0x8000, 0x8, 0x3, 0x800, 0xffffffff, 0x7ff, 0x2, 0x7ff, 0x7, 0x9, 0x6, 0x4890, 0x8, 0x3, 0x4, 0xffffffff, 0x10000, 0x1, 0x4, 0x8001, 0x995, 0x5, 0x2, 0x7fff, 0x80000001, 0x9, 0x8, 0x1, 0xfffffffc, 0x935, 0x7fff, 0x0, 0x1, 0x9b1, 0x0, 0x6, 0x1b, 0x0, 0x3, 0x7f, 0xfffffffd, 0x7ff, 0x4, 0x2, 0x80000001, 0x4, 0x8, 0x9f, 0x4000000, 0x0, 0x5, 0x513a, 0x20, 0x8, 0xc4d, 0x1, 0x1, 0x7, 0x0, 0x7, 0x5, 0x47, 0x9, 0xffffffff, 0x4, 0x2, 0x7fff, 0x20, 0x244, 0x800, 0x7, 0xfffffffd, 0xe4, 0x5, 0x8000, 0x0, 0x3ff, 0x1ff, 0x40, 0x8001, 0x6, 0x6, 0xfffffeff, 0x7, 0x3f, 0x0, 0x682, 0x1, 0x1, 0x64, 0x2, 0x509, 0xe8, 0x80, 0x0, 0x0, 0x3, 0x4, 0x1, 0x5, 0x80000001, 0x7, 0x8, 0x5, 0xfffffc01, 0x3, 0xef07, 0x9, 0x8, 0x3e61a0bf, 0x77e5, 0x9, 0x0, 0x1000, 0xffffffff, 0x3, 0x8000, 0x7, 0x8, 0x33, 0xfffffffa, 0x7, 0x4, 0x4b57, 0x8bb, 0x3ff, 0xf26d, 0x7fffffff, 0x6, 0x40, 0x1, 0x9, 0xff, 0xfff, 0x4, 0x4, 0x7, 0x10001, 0x1, 0x0, 0x0, 0xfffffff0, 0x81, 0x800, 0x0, 0x3, 0xffff, 0x72, 0x8, 0x7, 0x7fffffff, 0x6, 0x9, 0x3, 0x3, 0x9, 0xffff, 0x3, 0x1000, 0x6, 0x5, 0x4, 0x1, 0xfff, 0x3, 0xb1800000, 0x3, 0x3, 0x2, 0x2, 0x20, 0x7fffffff, 0x6, 0x7, 0x3, 0x4, 0x10000, 0x4, 0x8000, 0x8000, 0x2, 0x2, 0x2, 0x8, 0x7fffffff, 0xffff, 0x0, 0xfce8, 0x1, 0xffff, 0x81, 0x9, 0x7fff, 0x0, 0x30, 0x4, 0x10001, 0x0, 0x9, 0x0, 0x1, 0x200, 0x9, 0x1ff, 0x3f, 0x20, 0x401, 0x35, 0xfffffff8, 0x80000001, 0x3, 0x9, 0xfffffffd, 0x1ff, 0x9, 0x6, 0x0, 0x3, 0xffff, 0x7, 0x4, 0xb2, 0x3ff, 0x0, 0x10001, 0x6, 0x400000, 0x4b, 0x8, 0x8, 0x7fff, 0x4, 0xfffffffb, 0x6, 0x1, 0x40, 0x7ff, 0xfa4, 0x6, 0x9, 0x52, 0x9, 0x2, 0x3, 0x5, 0x3, 0xaf64, 0x3, 0xb879, 0x9, 0x6]}) write$ppp(r12, &(0x7f00000003c0)="4cdbd694ec986e3adee4803a0160103f6fa8a78d870bd5c8a6553c88b796c836df9f9fa4b467a0e45d02e98ddbaca10435684335507f5e15f6af358e8c6b5ef7d2ab3ca6b2bf44d40c48fdeb6793e5ceadf34bfb443801596c892d09a73aec2ffd1137a23f6c549d5ea1c04fa536a285ff8d008748eb1ee7b5f7172103b8c622c1f58e1c8710777b80465d7bc9d19a7efb69b8d282c433523cb7f2852fec65c98335994e0ec704e0f229e5f1b2556758fd561052635d708e16e839439bf5eda9e0c5436ce06b8c6fb61049e2b5931ea8578ad58d2d9db985ad78c1d207a442032c22", 0xe2) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="00040000"], 0x8000a0, 0x0, 0x0}) 03:37:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) 03:37:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000074000063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:40 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="06630440000000000063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="5500000018007f6800fe01b2a4a280930a060001fe80000202dc00003900090035005028010000001900154003000000000022dc1338d54400009b84136ef75afb83de4411000500fe80000000000000ec4fab91d4", 0x55}], 0x1}, 0x0) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x0, r4}}], 0x20}], 0x1, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r0) [ 1066.643733] binder: 22746:22748 unknown command -1181850875 [ 1066.666625] binder: 22746:22748 ioctl c0306201 20000200 returned -22 03:37:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0563044000007a000063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 1066.763185] input: syz0 as /devices/virtual/input/input19 03:37:40 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="06630440000000000063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:40 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() sendmmsg$unix(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9701}], 0xa, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20}], 0x198, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x397) r6 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x11, r6, r5, r8) sendmsg$nl_netfilter(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000001740)={0x33c, 0xd, 0x7, 0x101, 0x70bd28, 0x25dfdbff, {0x1, 0x0, 0x8}, [@typed={0x4, 0x1b, 0x0, 0x0, @binary}, @nested={0x1de, 0x67, 0x0, 0x1, [@typed={0x8, 0x64, 0x0, 0x0, @pid=r3}, @typed={0xc, 0x2f, 0x0, 0x0, @u64=0x5052}, @generic="78c421c3f04ec31d0b6c5a89ddfa2386d13de6a977de3cfc860eb987c06b72d60e3881fc92c7deb4d8ad3388a26a6ba33e259639b0ef153a3fec762cc0fa7457048394269b41836a86bd238dceeb25238593da7c07ddfc9b1ba6f0ff7dc22f604a0c83cfc007e7f8a49dfa080583c5d968be38c8454521eb465a203bd809c2fa1635dc695e360e2f17edd3b50463c1a9dea49e3112a053", @typed={0x8, 0x61, 0x0, 0x0, @uid=r5}, @typed={0xd3, 0x40, 0x0, 0x0, @binary="a6c0c755bb31b7f30f591387945608dd2c72246d18998ebe69270596b5bb5ddba39b287409b4d704a9221477fcd78b4c43c0f853f5b5c0daccd944e34d352dd7410bfbe2c97ae3f2beca8e75a3b51399708631a973af6c5a1f2258ffc60e29ce6b4fe69c65daa27648f2e3a18bd2d61088b237807e5519adc3cf5ed77f29a025a5d4084e23fc8dd0691ea1d9395260d7aff60abe20ce2e0908ee2327f3a3ed20a00334b73d1e69b91f79cbece7000ac65b277b7cf1d296fc0e521237ae29395aa6d1128bc9668d7532a948e2373427"}, @typed={0x4, 0x3c}, @generic="855212cbd73376384ae0fba4ed5022074f61192a59f0defddf19594bd4efb258b9c1f0ba5704b3218e55b43ccb48762ec02b26851ea1fe0b1860c09482e3cdfbc32a94", @typed={0x4, 0x29}, @typed={0x8, 0x6, 0x0, 0x0, @uid}]}, @nested={0xc3, 0x5, 0x0, 0x1, [@generic="823fc6963bcd141d06f15fb4a33988ee302be81e06", @generic="07147d02604af6d917", @generic="8c31e52d27a852e1b51e1b4550604e663bad884ceb04395c64d768877712105418deadefb1d2236260282bf966ffdfbe7521bcb8efeb1d3c6d0a53762483ea08224b3a2253717552f6fca35e06eb20901b691af840aa2e43edb29fbd9ea908ac7f307d35cf91b995b6a22c221e3f4885fea8789c168d2f5c3cb70586e75dda3064d89971b60415bd0c5165376b1bfe439827ca5eb0062f14c0e8ef7cfc792715ec"]}, @generic="e1f8beb242eb0b265163d1a5039a781c183473a1af563fa9eb8718debfeaa7a13d7f8d5123f0fddbf9307137c89b06bc20250f5247fbe31ad2b40c58a025ca7b7ebbab1db925db524e2a92d5f24a7816cccd3dc7475758307fd4c23c20aca23cf20b1521fa8339b4eb9d63bc3171e7a0a6d66adef61129a432b470db608df7ff"]}, 0x33c}, 0x1, 0x0, 0x0, 0x440}, 0x8000) lsetxattr$trusted_overlay_opaque(0x0, 0x0, &(0x7f0000000440)='y\x00', 0x2, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000540)={{}, {}, 0x0, 0x4109b1e1634878bf, 0x100}) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r11 = dup(r10) ioctl$DMA_BUF_IOCTL_SYNC(r11, 0x40086200, &(0x7f0000000040)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r12 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) ioctl$KVM_SET_XSAVE(r14, 0x5000aea5, &(0x7f0000000740)={[0x2, 0x4, 0x200001, 0x9d2, 0x7, 0x9, 0x40, 0x6, 0x10001, 0x5c32, 0x8, 0x400, 0xfff, 0xffffffff, 0x1ff, 0xfff, 0x8, 0x9, 0x9, 0x83, 0x2, 0xe4a, 0x800, 0x1000, 0xebf, 0x3ff, 0x7, 0x6, 0x7f, 0x8, 0x29e, 0x8, 0x8001, 0x81, 0x401, 0x8, 0x3ab1c8b1, 0x5, 0xd2ce, 0x1, 0x3, 0x3ff, 0xffffffff, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x81, 0x600, 0x4, 0x81, 0x8, 0x2, 0x5, 0x5, 0x6, 0x9, 0x9, 0x10000, 0x1, 0x3, 0xa6, 0x20b, 0xb52, 0x7ff, 0x7, 0xffffffff, 0x800, 0x8, 0x9, 0x0, 0x7, 0x2, 0x48f3, 0x0, 0x0, 0x8, 0xc5cb, 0x6, 0x0, 0x9d20, 0x0, 0x8, 0x1, 0x1, 0xffffffff, 0x10000, 0x5, 0x7f, 0x5, 0x4, 0x8000, 0x1, 0x7, 0x0, 0x8, 0x7f7b, 0x6, 0x1, 0x9, 0x0, 0x9, 0x970, 0x4, 0xc83, 0x1, 0x1000, 0x9, 0x2, 0x1f, 0x8, 0x7fffffff, 0xfbe, 0x7, 0x1000, 0x3, 0x800, 0x6, 0x7fff, 0x3f, 0x3, 0x1000, 0x4, 0x8, 0x5, 0x3, 0x800, 0x20, 0x100, 0x0, 0x1, 0x701, 0x5, 0x1756, 0x1000, 0x40, 0x7, 0x3, 0xff, 0x2, 0x400, 0x3ff, 0x9, 0xb184, 0x3, 0x80000000, 0x80000000, 0x8, 0x716, 0x400, 0x4c1d90bb, 0x6, 0x3, 0xff, 0x5ed, 0x3, 0x5, 0xff, 0x6, 0x2, 0xfffffff9, 0x9, 0xfff, 0xd616, 0x7fffffff, 0x7, 0x7, 0x4, 0x9, 0x40, 0x6, 0x0, 0x7, 0xfffffc00, 0xfffffff7, 0x8, 0x7, 0x7, 0x4, 0x20000000, 0x32a, 0x8, 0x5, 0x2, 0x401, 0xffff, 0x5, 0x0, 0x3f, 0x3, 0xd9, 0x8, 0x2, 0x4, 0x180000, 0x81, 0x800, 0xffff8001, 0xffffffff, 0x6f9d, 0x8, 0x7, 0x100, 0x74, 0x1, 0x3, 0xbd, 0x7f, 0x80000000, 0x2, 0x81, 0x8, 0x9, 0x6, 0x4, 0x20, 0x56, 0x8, 0x26603ac1, 0x2, 0xffffffff, 0x26e, 0x40, 0x200, 0x3, 0x3, 0xe1b0, 0x5, 0xa05, 0x4, 0x4, 0xba8b, 0x6, 0x1ff, 0x10001, 0x828d, 0x8, 0x0, 0x4, 0x101, 0x1, 0x1, 0xfffffffd, 0x9, 0x8000, 0x10000, 0x3, 0x6, 0x71b7, 0x2, 0x0, 0x1, 0x7fff, 0x1000, 0x2, 0x1ff, 0x1, 0x5, 0x1, 0xff, 0x77b5, 0x3, 0xfffffff9, 0x2, 0x8, 0x8000, 0xff, 0x9, 0xffffffff, 0x1, 0x8, 0xfffffe01, 0x7f, 0x3ff, 0x3ff, 0x5, 0x7fffffff, 0x2, 0x3, 0x3, 0x1, 0x475, 0x2, 0x1, 0x8, 0x3, 0x200, 0xffff, 0x1ff, 0x5, 0x0, 0x3, 0x2, 0x100, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x6a, 0x3, 0x4, 0x338, 0x401, 0x7, 0x7f, 0x80, 0x101, 0x3, 0x81, 0x9, 0x80000001, 0x3, 0x5, 0xeab2, 0x9, 0x2, 0xa4, 0x5, 0x8, 0x8000, 0x5, 0x3f, 0x2, 0x40, 0x1ff, 0x20, 0x3ff, 0x1000, 0x68, 0x0, 0x3, 0x10001, 0x81, 0x20, 0x1, 0x0, 0x7, 0x51e5, 0x8001, 0x400000, 0x4, 0x2, 0x5, 0x1, 0x9, 0x9, 0xfffffffb, 0xfffffff9, 0x0, 0x80, 0x4, 0x3, 0x1, 0xfffffff7, 0x3ccc, 0x3f, 0x4, 0x3d66, 0xa10, 0x1f, 0x8, 0x1, 0x7f8000, 0x80000000, 0x3, 0x5, 0x34a000, 0x200, 0xec, 0xff, 0x4, 0x7, 0x80000001, 0xfffffffd, 0x7fff, 0x8, 0xe09, 0x1, 0x2, 0x2e, 0x3, 0x3f, 0x1000, 0xfff, 0x23be, 0x9, 0x8001, 0x401, 0x3, 0x7ff, 0x4, 0x80000001, 0x2, 0x7, 0x0, 0x6, 0x4, 0x1, 0x3, 0xaf48, 0xff3, 0x401, 0x0, 0x9, 0x0, 0x6, 0x8, 0x200, 0x7fff, 0x6, 0x6, 0x1000, 0x3, 0x73000, 0x8, 0x6, 0x0, 0x8001, 0x8000, 0x12, 0xffff, 0xbe, 0xffff8000, 0x4f, 0x7f, 0x96, 0x0, 0x5, 0xfffffffb, 0x6, 0xff, 0x0, 0x0, 0x5, 0x7, 0x101, 0x7fff, 0x9, 0x10000, 0x2, 0xc84, 0x10001, 0xfffffffa, 0x5, 0x4, 0xfffff476, 0x6, 0xfff, 0x7fffffff, 0x3, 0x9, 0x2, 0x3, 0x40, 0x2, 0xfffffffe, 0x1f, 0x7, 0x81, 0x8001, 0x5, 0x3, 0x4, 0x9, 0x400, 0x1, 0xa8, 0x7, 0x80000001, 0x3, 0x6bc, 0x9, 0x3ff, 0x3f, 0xfffffff7, 0x1, 0x4, 0x200, 0x10000, 0x20, 0x3, 0x1d54, 0x7fff, 0xffffffff, 0x40, 0x8, 0x4, 0x0, 0x0, 0x190d, 0x3, 0x8000, 0x9c61, 0x4, 0x100, 0x6, 0x0, 0x6, 0xfffffffc, 0x2, 0x40, 0xd684, 0x8, 0x101, 0x2, 0x4b5, 0x7, 0x0, 0x8, 0x1, 0x9, 0x4, 0xfffffffd, 0xd27, 0x7fffffff, 0x59, 0x2, 0x2, 0x9, 0xf85c, 0x4, 0x5, 0x3, 0x5, 0x80000001, 0x1, 0x558, 0x4fbf, 0x4, 0x0, 0x1, 0x101, 0xfffffffb, 0x1, 0xc800000, 0x401, 0x1, 0x80, 0x101, 0xfff, 0x9, 0x8, 0x0, 0xa0, 0xfffff6f0, 0xffffffff, 0x1, 0x3, 0x80000001, 0xffffffff, 0x9, 0x6, 0x4, 0x80, 0x6, 0x1, 0x0, 0x3, 0x8, 0xfff, 0x3ff, 0x0, 0x2, 0x1, 0x4, 0x6, 0x6d9, 0x3, 0x3ff, 0x3, 0x3, 0x5, 0x8, 0x4, 0x3, 0x80000000, 0xfd03, 0x89440, 0x1, 0x2943, 0x5b, 0x6, 0xffffff80, 0x6, 0x1, 0x2, 0x0, 0x5, 0x401, 0x8, 0x24a, 0x70, 0x4a3c, 0x7, 0xaa, 0xac5, 0x9, 0x400, 0x1ff, 0x1, 0x7, 0x10000, 0x0, 0x35, 0x34c, 0x401, 0x1, 0x4, 0x49bd7677, 0x4ef, 0x101, 0xffc00000, 0x7, 0x9, 0x8000, 0x1, 0xffffffff, 0xb8a, 0x6, 0x80000001, 0xfe5d, 0x5, 0x3ff, 0x1000, 0x7, 0x401, 0x1, 0x0, 0x2000, 0x8, 0x400, 0x9, 0x9, 0x6, 0x7, 0x1f, 0xfffffffc, 0x7ef7, 0x40, 0x3, 0x5, 0x5, 0xc9a, 0xd5, 0x7, 0xffff0000, 0x1, 0x5, 0x80000000, 0x6, 0x1f, 0x4, 0x8, 0x5, 0xad, 0x400, 0x8000, 0x4, 0x2, 0xa0000, 0x0, 0x5, 0x3, 0x5, 0x81, 0xfffffffe, 0x50b, 0x4b, 0x9, 0x3ff, 0x1, 0x9, 0x1, 0x9, 0x1ff, 0x2a36d80f, 0x8c, 0x8001, 0x5, 0x4525d901, 0x3, 0x6, 0x1, 0x2, 0x8, 0x3f, 0x101, 0x9, 0x2, 0x1, 0x6, 0x6, 0xc65, 0x8f3, 0x98, 0x8ec7, 0x4, 0x2, 0xffffffe1, 0x1, 0x3, 0x1, 0x7, 0x989, 0x6, 0x5, 0x3, 0x4, 0x9000000, 0x1, 0x0, 0x0, 0x0, 0x7, 0x5, 0x459f, 0x7, 0xfabc, 0x1, 0x4, 0x7ac, 0x1, 0x0, 0x0, 0x5, 0x1000, 0x4, 0x0, 0x0, 0x400, 0x20, 0x8, 0x8, 0x101, 0x7, 0xfa, 0x3ff, 0x80000001, 0x961, 0x3, 0xfffffffa, 0x3069, 0x1, 0x2, 0x3ff, 0x9, 0xfa, 0x5dce, 0x4, 0x80000001, 0x10000, 0xc2, 0x5, 0x1b69, 0x80000001, 0xbc, 0x7, 0x1, 0x10000, 0x4038, 0x8000, 0x8001, 0x1000, 0x0, 0x0, 0x1, 0x2, 0x9, 0x65, 0x8000, 0x8, 0x3, 0x800, 0xffffffff, 0x7ff, 0x2, 0x7ff, 0x7, 0x9, 0x6, 0x4890, 0x8, 0x3, 0x4, 0xffffffff, 0x10000, 0x1, 0x4, 0x8001, 0x995, 0x5, 0x2, 0x7fff, 0x80000001, 0x9, 0x8, 0x1, 0xfffffffc, 0x935, 0x7fff, 0x0, 0x1, 0x9b1, 0x0, 0x6, 0x1b, 0x0, 0x3, 0x7f, 0xfffffffd, 0x7ff, 0x4, 0x2, 0x80000001, 0x4, 0x8, 0x9f, 0x4000000, 0x0, 0x5, 0x513a, 0x20, 0x8, 0xc4d, 0x1, 0x1, 0x7, 0x0, 0x7, 0x5, 0x47, 0x9, 0xffffffff, 0x4, 0x2, 0x7fff, 0x20, 0x244, 0x800, 0x7, 0xfffffffd, 0xe4, 0x5, 0x8000, 0x0, 0x3ff, 0x1ff, 0x40, 0x8001, 0x6, 0x6, 0xfffffeff, 0x7, 0x3f, 0x0, 0x682, 0x1, 0x1, 0x64, 0x2, 0x509, 0xe8, 0x80, 0x0, 0x0, 0x3, 0x4, 0x1, 0x5, 0x80000001, 0x7, 0x8, 0x5, 0xfffffc01, 0x3, 0xef07, 0x9, 0x8, 0x3e61a0bf, 0x77e5, 0x9, 0x0, 0x1000, 0xffffffff, 0x3, 0x8000, 0x7, 0x8, 0x33, 0xfffffffa, 0x7, 0x4, 0x4b57, 0x8bb, 0x3ff, 0xf26d, 0x7fffffff, 0x6, 0x40, 0x1, 0x9, 0xff, 0xfff, 0x4, 0x4, 0x7, 0x10001, 0x1, 0x0, 0x0, 0xfffffff0, 0x81, 0x800, 0x0, 0x3, 0xffff, 0x72, 0x8, 0x7, 0x7fffffff, 0x6, 0x9, 0x3, 0x3, 0x9, 0xffff, 0x3, 0x1000, 0x6, 0x5, 0x4, 0x1, 0xfff, 0x3, 0xb1800000, 0x3, 0x3, 0x2, 0x2, 0x20, 0x7fffffff, 0x6, 0x7, 0x3, 0x4, 0x10000, 0x4, 0x8000, 0x8000, 0x2, 0x2, 0x2, 0x8, 0x7fffffff, 0xffff, 0x0, 0xfce8, 0x1, 0xffff, 0x81, 0x9, 0x7fff, 0x0, 0x30, 0x4, 0x10001, 0x0, 0x9, 0x0, 0x1, 0x200, 0x9, 0x1ff, 0x3f, 0x20, 0x401, 0x35, 0xfffffff8, 0x80000001, 0x3, 0x9, 0xfffffffd, 0x1ff, 0x9, 0x6, 0x0, 0x3, 0xffff, 0x7, 0x4, 0xb2, 0x3ff, 0x0, 0x10001, 0x6, 0x400000, 0x4b, 0x8, 0x8, 0x7fff, 0x4, 0xfffffffb, 0x6, 0x1, 0x40, 0x7ff, 0xfa4, 0x6, 0x9, 0x52, 0x9, 0x2, 0x3, 0x5, 0x3, 0xaf64, 0x3, 0xb879, 0x9, 0x6]}) write$ppp(r12, &(0x7f00000003c0)="4cdbd694ec986e3adee4803a0160103f6fa8a78d870bd5c8a6553c88b796c836df9f9fa4b467a0e45d02e98ddbaca10435684335507f5e15f6af358e8c6b5ef7d2ab3ca6b2bf44d40c48fdeb6793e5ceadf34bfb443801596c892d09a73aec2ffd1137a23f6c549d5ea1c04fa536a285ff8d008748eb1ee7b5f7172103b8c622c1f58e1c8710777b80465d7bc9d19a7efb69b8d282c433523cb7f2852fec65c98335994e0ec704e0f229e5f1b2556758fd561052635d708e16e839439bf5eda9e0c5436ce06b8c6fb61049e2b5931ea8578ad58d2d9db985ad78c1d207a442032c22", 0xe2) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="00040000"], 0x8000a0, 0x0, 0x0}) 03:37:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="5500000018007f6800fe01b2a4a280930a060001fe80000202dc00003900090035005028010000001900154003000000000022dc1338d54400009b84136ef75afb83de4411000500fe80000000000000ec4fab91d4", 0x55}], 0x1}, 0x0) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r0) 03:37:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000030063404001"], 0x0, 0xffffff7f, 0x0}) [ 1067.032152] binder: 22872:22876 unknown command -1181850875 [ 1067.063249] binder: 22872:22876 ioctl c0306201 20000200 returned -22 [ 1067.090053] input: syz0 as /devices/virtual/input/input20 03:37:41 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8888}, 0x40084) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'erspan0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) 03:37:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) 03:37:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000050063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:41 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x4c00000000000000, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:41 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000060063404001"], 0x0, 0xffffff7f, 0x0}) [ 1067.362580] binder: 22994:22996 ioctl c0306201 20000240 returned -11 03:37:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) 03:37:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100)='gtp\x00') r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000033000505d25a80648c63940d0424fc60100010400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) dup2(0xffffffffffffffff, r2) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="99fdffff", @ANYRES16=r1, @ANYBLOB="000226bd7000fddbdf25010000000800040000000000081f5312c6f9bc3dfe22717a3700040092ba868870e4a78e5a212becaa85eb207f070301527d2c0e897f901d784d6e7bca7d0023784b207455871516a59fa41fb7ea4c5a25d23c44"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) r3 = socket$inet(0x2, 0x3, 0x33) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000080)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r5, 0x80045700, &(0x7f0000000200)) 03:37:41 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:41 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) [ 1067.580737] openvswitch: netlink: Message has 5 unknown bytes. 03:37:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="5500000018007f6800fe01b2a4a280930a060001fe80000202dc00003900090035005028010000001900154003000000000022dc1338d54400009b84136ef75afb83de4411000500fe80000000000000ec4fab91d4", 0x55}], 0x1}, 0x0) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r0) 03:37:41 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000080)=0x40, &(0x7f00000000c0)=0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SIOCX25SENDCALLACCPT(r4, 0x89e9) 03:37:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000070063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) 03:37:41 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="06630440"], 0x8000a0, 0xa0010000, 0x0}) 03:37:41 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1067.928374] binder: 23017:23024 ioctl c0306201 20000240 returned -11 03:37:41 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) 03:37:41 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) r1 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)='g', 0x524, 0xfffffffffffffffb) keyctl$revoke(0x3, r1) r2 = add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000200)="fa19ef91bc718e65e6abce69f14eb267e0c3bfa09077fe5d61b3af096551667cb1de94af93a41895333a25161be1c09b49a3fe5b5025781c3801f7ebebe85afa28317d6e85a0801ec7025d4fdf399eddbedaf7f71fbf07f401eaba29081331b7b9f4ee4d40713bd403be445b4092c4b9477a70be279ba25d8fcb1d8e4ce4890f9f4cd96eb1c255192d989937a0569b65b97fc490d7025137d68ca54d1210a9e4b8dfa61d6855c831b1482a095f78e6eeca81626535388a0e4d2bad1c24e5e864f9b90c5a23c6af8ea54c8cef7dd4", 0xce, r1) r3 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r2, r3) r4 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)='g', 0x524, 0xfffffffffffffffb) keyctl$revoke(0x3, r4) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000200)="fa19ef91bc718e65e6abce69f14eb267e0c3bfa09077fe5d61b3af096551667cb1de94af93a41895333a25161be1c09b49a3fe5b5025781c3801f7ebebe85afa28317d6e85a0801ec7025d4fdf399eddbedaf7f71fbf07f401eaba29081331b7b9f4ee4d40713bd403be445b4092c4b9477a70be279ba25d8fcb1d8e4ce4890f9f4cd96eb1c255192d989937a0569b65b97fc490d7025137d68ca54d1210a9e4b8dfa61d6855c831b1482a095f78e6eeca81626535388a0e4d2bad1c24e5e864f9b90c5a23c6af8ea54c8cef7dd4", 0xce, r4) keyctl$instantiate_iov(0x14, r2, &(0x7f0000000080)=[{&(0x7f0000000040)="a59f33433a44ef20b4", 0x9}], 0x1, r4) 03:37:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000120063404001"], 0x0, 0xffffff7f, 0x0}) [ 1068.023282] input: syz0 as /devices/virtual/input/input21 [ 1068.112112] binder: 23034:23035 ioctl c0306201 20000240 returned -11 03:37:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) 03:37:42 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) 03:37:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000200063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="5500000018007f6800fe01b2a4a280930a060001fe80000202dc00003900090035005028010000001900154003000000000022dc1338d54400009b84136ef75afb83de4411000500fe80000000000000ec4fab91d4", 0x55}], 0x1}, 0x0) r2 = socket(0xa, 0x1, 0x0) close(r2) socket$inet6_sctp(0xa, 0x10000000005, 0x84) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r0) 03:37:42 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000100)=0x680) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x397) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PPPIOCGUNIT(r6, 0x80047456, &(0x7f0000000640)) r7 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x11, r7, r4, r9) statx(r2, &(0x7f00000001c0)='./file0\x00', 0x0, 0x800, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket$unix(0x1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) fchown(r11, 0x0, r12) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = socket$unix(0x1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) fchown(r14, 0x0, r15) getresgid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) r17 = socket$unix(0x1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) fchown(r17, 0x0, r18) getgroups(0x2, &(0x7f0000000580)=[r18, 0xee00]) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000005c0)={{}, {0x1, 0x1}, [{0x2, 0x0, r4}, {0x2, 0x3, r10}], {0x4, 0x1}, [{0x8, 0x0, r12}, {0x8, 0x4, r13}, {0x8, 0x4, r15}, {0x8, 0x4, r16}, {0x8, 0x3}, {0x8, 0x1, r19}], {0x10, 0x3}, {0x20, 0x1}}, 0x64, 0x2) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000040)={0xc6, {{0xa, 0x4e21, 0x40, @ipv4={[], [], @remote}, 0xc4a}}}, 0x88) 03:37:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="056304400000003f0063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:42 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) 03:37:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) 03:37:42 executing program 2 (fault-call:3 fault-nth:0): bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:37:42 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1068.919888] input: syz0 as /devices/virtual/input/input22 [ 1068.936363] binder: 23060:23067 ioctl c0306201 20000240 returned -11 03:37:42 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:37:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000480063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) 03:37:42 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000080)={0x4, 0x33, 0x80, 0xf6, 0x20, 0x8, 0x5, "3fa91645fd3cb05c9273461079783876aad31453", "eb523304a219a2750325c74abacce5c139b182b8"}) 03:37:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="5500000018007f6800fe01b2a4a280930a060001fe80000202dc00003900090035005028010000001900154003000000000022dc1338d54400009b84136ef75afb83de4411000500fe80000000000000ec4fab91d4", 0x55}], 0x1}, 0x0) r2 = socket(0xa, 0x1, 0x0) close(r2) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r0) 03:37:43 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:43 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x3a, 0xcb, &(0x7f0000000100)={0x9}, 0xc) [ 1069.214733] binder: 23086:23091 ioctl c0306201 20000240 returned -11 03:37:43 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="056304400000004c0063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:43 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = geteuid() statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x6000, 0x200, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x400) r3 = socket$unix(0x1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm_plock\x00', 0x131240, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000005c0)={0x90, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@handle={0x73682a85, 0x2}, @fda={0x66646185, 0x3, 0x1, 0x7}, @fda={0x66646185, 0x0, 0x0, 0x39}}, &(0x7f0000000300)={0x0, 0x18, 0x38}}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000380)={@fd={0x66642a85, 0x0, r7}, @fd={0x66642a85, 0x0, r9}, @flat=@handle={0x73682a85, 0x10a, 0x1}}, &(0x7f0000000400)={0x0, 0x18, 0x30}}, 0x1000}], 0x6d, 0x0, &(0x7f0000000440)="d934407810c1611335b2b68062d7669fee77f26f794673ca5b48395921cd7d8f070e579508080742474ae0bb5c9b11cc48686c5d1c0ae50fd4a22c76ce4bfe3263c1bada5b03fbe5ec394ea6deb5c275834a9855b090c25e1525d31b5d5ecc01eac9beac0b7cd7e5419049c332"}) fchown(r3, 0x0, r4) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010007000000000002000500", @ANYRES32=r1, @ANYBLOB="02010119", @ANYRES32=r2, @ANYBLOB="040003000000000008000100", @ANYRES32=r4, @ANYBLOB="10000200000000002000020000000000"], 0x3c, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) [ 1069.371129] input: syz0 as /devices/virtual/input/input23 03:37:43 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) 03:37:43 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x7, &(0x7f0000000100)={0x9}, 0xc) 03:37:43 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000600063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="5500000018007f6800fe01b2a4a280930a060001fe80000202dc00003900090035005028010000001900154003000000000022dc1338d54400009b84136ef75afb83de4411000500fe80000000000000ec4fab91d4", 0x55}], 0x1}, 0x0) r2 = socket(0xa, 0x1, 0x0) close(r2) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r0) [ 1069.556738] binder: 23105:23114 ioctl c0306201 20000240 returned -11 03:37:43 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) 03:37:43 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x14, &(0x7f0000000100)={0x9}, 0xc) [ 1069.749891] input: syz0 as /devices/virtual/input/input24 03:37:43 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000680063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="5500000018007f6800fe01b2a4a280930a060001fe80000202dc00003900090035005028010000001900154003000000000022dc1338d54400009b84136ef75afb83de4411000500fe80000000000000ec4fab91d4", 0x55}], 0x1}, 0x0) socket(0xa, 0x1, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r0) 03:37:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) 03:37:43 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:43 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x4000, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x105643, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r3, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xb5c00000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x16}]}, 0x44}, 0x1, 0x0, 0x0, 0x4050}, 0x4044000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) [ 1070.056499] input: syz0 as /devices/virtual/input/input25 03:37:43 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x15, &(0x7f0000000100)={0x9}, 0xc) 03:37:43 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="056304400000006c0063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:44 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="5500000018007f6800fe01b2a4a280930a060001fe80000202dc00003900090035005028010000001900154003000000000022dc1338d54400009b84136ef75afb83de4411000500fe80000000000000ec4fab91d4", 0x55}], 0x1}, 0x0) socket(0xa, 0x1, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r0) [ 1070.249256] binder: 23158:23165 ioctl c0306201 20000240 returned -11 03:37:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) 03:37:44 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x1b, &(0x7f0000000100)={0x9}, 0xc) 03:37:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000740063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:44 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffe9f, 0x0, &(0x7f0000000140)="62d126c5539a559ddce91313985a0da2c61cc2c60d1bfd92f19fb5a6dabe10683afeb595bea2b2a1141a2a7dcc0bfe1b9b1ddaae13d1c5e738a41215fef826dcfbf1c414eacad87db605bd1776dcfcd9bd317c1c34aedb03a8b927ec7fe6d930df0cd39ef583efda94096c6ce127f8f5999100004000000000000000000000001300"}) 03:37:44 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1070.411195] input: syz0 as /devices/virtual/input/input26 03:37:44 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x1c, &(0x7f0000000100)={0x9}, 0xc) 03:37:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="056304400000007a0063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="5500000018007f6800fe01b2a4a280930a060001fe80000202dc00003900090035005028010000001900154003000000000022dc1338d54400009b84136ef75afb83de4411000500fe80000000000000ec4fab91d4", 0x55}], 0x1}, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r0) 03:37:44 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = getpgid(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpid() sendmmsg$unix(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9701}], 0xa, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {r5}}}], 0x20}], 0x198, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x408000) kcmp$KCMP_EPOLL_TFD(r3, r5, 0x7, r7, &(0x7f0000000100)={r2, r8, 0x8000}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x40, 0x0, &(0x7f0000000140)="c180acaf8fd7ddfe893507651c681da7d16e21e48bb7446ac712d66e97997d4de1cb0c3ae2101c372a1b1fb95970c8169ae03374e8d5d6f917a96d07000000d4"}) 03:37:44 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 1070.740791] input: syz0 as /devices/virtual/input/input27 03:37:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000020063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:44 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x24, &(0x7f0000000100)={0x9}, 0xc) 03:37:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="5500000018007f6800fe01b2a4a280930a060001fe80000202dc00003900090035005028010000001900154003000000000022dc1338d54400009b84136ef75afb83de4411000500fe80000000000000ec4fab91d4", 0x55}], 0x1}, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r0) 03:37:44 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(0xffffffffffffffff, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 1071.025731] input: syz0 as /devices/virtual/input/input28 03:37:44 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000080)={0x31, 0x4, 0x0, {0x5, 0xd59, 0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x31) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000040)={0x3, 0x800}) 03:37:45 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000030063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:45 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x2a, &(0x7f0000000100)={0x9}, 0xc) 03:37:45 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:45 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="5500000018007f6800fe01b2a4a280930a060001fe80000202dc00003900090035005028010000001900154003000000000022dc1338d54400009b84136ef75afb83de4411000500fe80000000000000ec4fab91d4", 0x55}], 0x1}, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r0) [ 1071.252597] binder: 23237:23242 ioctl c0306201 20000240 returned -11 03:37:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(0xffffffffffffffff, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 1071.324512] input: syz0 as /devices/virtual/input/input29 03:37:45 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000040063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:45 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:45 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x30, &(0x7f0000000100)={0x9}, 0xc) 03:37:45 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) r1 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)='g', 0x524, 0xfffffffffffffffb) keyctl$revoke(0x3, r1) r2 = add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000200)="fa19ef91bc718e65e6abce69f14eb267e0c3bfa09077fe5d61b3af096551667cb1de94af93a41895333a25161be1c09b49a3fe5b5025781c3801f7ebebe85afa28317d6e85a0801ec7025d4fdf399eddbedaf7f71fbf07f401eaba29081331b7b9f4ee4d40713bd403be445b4092c4b9477a70be279ba25d8fcb1d8e4ce4890f9f4cd96eb1c255192d989937a0569b65b97fc490d7025137d68ca54d1210a9e4b8dfa61d6855c831b1482a095f78e6eeca81626535388a0e4d2bad1c24e5e864f9b90c5a23c6af8ea54c8cef7dd4", 0xce, r1) r3 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r2, r3) r4 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='/dev/binder#\x00', r3) keyctl$assume_authority(0x10, r4) 03:37:45 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) socket$inet6(0x10, 0x3, 0x0) socket(0xa, 0x1, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 03:37:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(0xffffffffffffffff, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 1071.543333] binder: 23259:23265 ioctl c0306201 20000240 returned -11 03:37:45 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:45 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000050063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:45 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x36, &(0x7f0000000100)={0x9}, 0xc) 03:37:45 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKRRPART(r2, 0x125f, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) [ 1071.687068] input: syz0 as /devices/virtual/input/input30 03:37:45 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) socket(0xa, 0x1, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 03:37:45 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1071.835625] binder: 23282:23287 ioctl c0306201 20000240 returned -11 03:37:45 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) socket$isdn_base(0x22, 0x3, 0x0) 03:37:45 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000060063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 1071.922239] input: syz0 as /devices/virtual/input/input31 03:37:45 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xc8, &(0x7f0000000100)={0x9}, 0xc) 03:37:45 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:45 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0xa, 0x1, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) [ 1072.053841] binder: 23300:23303 ioctl c0306201 20000240 returned -11 03:37:46 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup(r2, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) 03:37:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 03:37:46 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000070063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:46 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xc9, &(0x7f0000000100)={0x9}, 0xc) [ 1072.225539] input: syz0 as /devices/virtual/input/input32 03:37:46 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) socket(0xa, 0x1, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 03:37:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 03:37:46 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000100)={0x9}, 0xc) 03:37:46 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000120063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:46 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) dup(0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) socket(0xa, 0x1, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 03:37:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040), 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 03:37:46 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9b3}, 0x1c) 03:37:46 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000480063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:46 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcc, &(0x7f0000000100)={0x9}, 0xc) 03:37:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) socket(0xa, 0x1, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 03:37:46 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) dup(0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040), 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 03:37:47 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcd, &(0x7f0000000100)={0x9}, 0xc) 03:37:47 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) dup(0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0xa, 0x1, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 03:37:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040), 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 03:37:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="056304400000004c0063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:47 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcf, &(0x7f0000000100)={0x9}, 0xc) 03:37:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0xa, 0x1, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 03:37:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 03:37:47 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000600063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:47 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, &(0x7f0000000100)={0x9}, 0xc) 03:37:47 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x480, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000140)=""/117) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x2, 0x3, 0x7f, 0x5, 0x0, 0x1, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x5, @perf_config_ext={0x7, 0x40}, 0x2280, 0x7, 0x8, 0x2, 0x6, 0xd43b, 0x9}, 0xffffffffffffffff, 0xf, r3, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000000c0)=0x7f) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000033000505d25a80648c63940d0424fc60100010400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) dup(0xffffffffffffffff) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self\x00', 0x80000, 0x0) dup(r6) [ 1074.085646] binder: BINDER_SET_CONTEXT_MGR already set 03:37:48 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:48 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0xa, 0x1, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) [ 1074.115244] binder: 23403:23405 ioctl 40046207 0 returned -16 03:37:48 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd1, &(0x7f0000000100)={0x9}, 0xc) 03:37:48 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000680063404001"], 0x0, 0xffffff7f, 0x0}) [ 1074.190858] openvswitch: netlink: Message has 5 unknown bytes. 03:37:48 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:48 executing program 0: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) socket(0xa, 0x1, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, 0xffffffffffffffff) 03:37:48 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd2, &(0x7f0000000100)={0x9}, 0xc) 03:37:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 03:37:48 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="056304400000006c0063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:48 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:48 executing program 0: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) socket(0xa, 0x1, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, 0xffffffffffffffff) 03:37:48 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0x7, "bb7e3bb327add8"}, &(0x7f0000000080)=0xf) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x4, 0x6}, &(0x7f0000000100)=0x8) 03:37:48 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd3, &(0x7f0000000100)={0x9}, 0xc) 03:37:48 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000740063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:48 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1075.049905] binder: 23454:23458 ioctl c0306201 20000240 returned -11 03:37:49 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x400001, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) r2 = dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) 03:37:49 executing program 0: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) socket(0xa, 0x1, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, 0xffffffffffffffff) 03:37:49 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:37:49 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1075.302896] binder: 23471:23475 ioctl c0306201 20000080 returned -11 03:37:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 03:37:49 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="056304400000007a0063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:49 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0xa, 0x1, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 03:37:49 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) fchmod(r0, 0x120) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x81, 0x0, &(0x7f0000000040)="2dc3075df32c0335ed9aa6b490fa125e9a2ddcf0cf2e6ab371f82dd83ae1f2921ba59daebcb7b730506b7823ce610afb0042431456162aeb8ce1e7b17808b6956429c79f89728eb568df8cc3a90c1373f058e39d568e3acf235cc36fe641af5bfe6671965387ef4167d6c2fc158cb0e8931a0300e6ef4cae5e8683300be6834e1b"}) 03:37:49 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) ioctl$TCSETX(0xffffffffffffffff, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:49 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9, 0x9}, 0xc) [ 1075.899081] binder: 23490:23494 ioctl c0306201 20000240 returned -11 03:37:49 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0xa, 0x1, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 03:37:49 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000363404001"], 0x0, 0xffffff7f, 0x0}) 03:37:49 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) utimensat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{r3, r4/1000+10000}, {0x77359400}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) faccessat(r6, &(0x7f0000000180)='./file0\x00', 0x20, 0xa00) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x40001, 0x0) signalfd4(r7, &(0x7f0000000140)={[0xffffffff]}, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) 03:37:49 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:37:49 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) ioctl$TCSETX(0xffffffffffffffff, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1076.134122] binder: BINDER_SET_CONTEXT_MGR already set [ 1076.169897] binder: 23505:23510 ioctl 40046207 0 returned -16 03:37:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0xa, 0x1, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) [ 1076.180696] binder: 23506:23511 ioctl c0306201 20000240 returned -11 [ 1076.197949] binder: 23505:23515 unknown command 1077961475 [ 1076.221202] binder: 23505:23515 ioctl c0306201 20000080 returned -22 03:37:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000563404001"], 0x0, 0xffffff7f, 0x0}) 03:37:50 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT2(r2, &(0x7f0000000040)={0xc, {0x36, "088eed49c2eccef81865fc1d59833884cd24983f2aae1b305435160d6a0bea904aabeb8edccfe1467260c8a619d44dbc857b74a81dbe"}}, 0x3c) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) 03:37:50 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) ioctl$TCSETX(0xffffffffffffffff, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0xa, 0x1, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 03:37:50 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9, 0x0, 0x9}, 0xc) 03:37:50 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd3, &(0x7f0000000100)={0x9}, 0xc) 03:37:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0xa, 0x1, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 03:37:50 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r2, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:50 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, &(0x7f0000000100)={0x9}, 0xc) [ 1076.852306] binder: 23530:23535 unknown command 1077961477 [ 1076.862781] binder: 23525:23536 ioctl c0306201 20000240 returned -11 [ 1076.880276] binder: 23530:23535 ioctl c0306201 20000080 returned -22 03:37:50 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x7) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x28a402, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x200000, 0x0) semget$private(0x0, 0x4, 0x21) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x160, 0x0, &(0x7f00000007c0)="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"}) 03:37:50 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:37:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000663404001"], 0x0, 0xffffff7f, 0x0}) 03:37:51 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000040)={0x3004, 0x5000, 0x9, 0x47, 0x2}) [ 1077.125255] binder: 23553:23555 unknown command 1077961478 [ 1077.131291] binder: 23553:23555 ioctl c0306201 20000080 returned -22 03:37:51 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, &(0x7f0000000100)={0x9}, 0xc) 03:37:51 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r2, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0xa, 0x1, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 03:37:51 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000763404001"], 0x0, 0xffffff7f, 0x0}) 03:37:51 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x9}, 0xc) [ 1077.334250] binder: 23565:23570 ioctl c0306201 20000240 returned -11 03:37:51 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, &(0x7f0000000100)={0x9}, 0xc) [ 1077.423381] binder: 23569:23574 unknown command 1077961479 [ 1077.449413] binder: 23569:23574 ioctl c0306201 20000080 returned -22 03:37:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0xa, 0x1, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 03:37:51 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) 03:37:51 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r2, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:51 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x900}, 0xc) 03:37:51 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000001263404001"], 0x0, 0xffffff7f, 0x0}) 03:37:51 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000100)={0x9}, 0xc) [ 1077.660655] binder: 23588:23591 ioctl c0306201 20000240 returned -11 03:37:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0xa, 0x1, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 03:37:51 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x3, 0x33) r2 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r2, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1077.718985] binder: 23592:23596 unknown command 1077961490 [ 1077.733362] binder: 23592:23596 ioctl c0306201 20000080 returned -22 03:37:51 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:37:51 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/148, 0x94) 03:37:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0xa, 0x1, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 03:37:51 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000100)={0x9}, 0xc) 03:37:51 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000002063404001"], 0x0, 0xffffff7f, 0x0}) [ 1077.944450] binder: 23609:23613 ioctl c0306201 20000240 returned -11 03:37:51 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x3, 0x33) r2 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r2, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:51 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x9}, 0xc) 03:37:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) socket(0xa, 0x1, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 03:37:52 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000100)={0x9}, 0xc) [ 1078.108246] binder: 23620:23624 unknown command 1077961504 [ 1078.142699] binder: 23620:23624 ioctl c0306201 20000080 returned -22 03:37:52 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x3, 0x33) r2 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r2, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:52 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x900}, 0xc) 03:37:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000003f63404001"], 0x0, 0xffffff7f, 0x0}) 03:37:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) socket(0xa, 0x1, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 03:37:52 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, &(0x7f0000000100)={0x9}, 0xc) 03:37:52 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x1000000}, 0xc) 03:37:52 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r1 = socket$inet(0x2, 0x3, 0x33) r2 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r2, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1078.414496] binder: 23638:23644 unknown command 1077961535 [ 1078.440877] binder: 23638:23644 ioctl c0306201 20000080 returned -22 03:37:52 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x40000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)="3105c407e9fe40055ea43887e75103c18a0188f2ab11e0e037acb1a40a1950a951e32c4cff6efb514703d7d8c8075c951d7bb04806050319b91f518c37487de2e8359838fcf93cd11f958f72296fc99642a680a3666f356be94ed4e30d4d4a48d31fc1828c0f28e52ba932d0f4969b9438a9c24d71054211298155093b1d6e8a4d41a2907d5bc090818bcfef55b26d12b091a800fb2c49ee"}) ioctl$TIOCCONS(r1, 0x541d) 03:37:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) socket(0xa, 0x1, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) [ 1078.504463] binder: BINDER_SET_CONTEXT_MGR already set [ 1078.555794] binder: 23638:23644 ioctl 40046207 0 returned -16 03:37:52 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, &(0x7f0000000100)={0x9}, 0xc) 03:37:52 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x9000000}, 0xc) 03:37:52 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)=0x3, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) 03:37:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000004863404001"], 0x0, 0xffffff7f, 0x0}) 03:37:52 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r1 = socket$inet(0x2, 0x3, 0x33) r2 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r2, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x1, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 03:37:52 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, &(0x7f0000000100)={0x9}, 0xc) [ 1078.814191] binder: 23670:23671 ioctl c0306201 20000240 returned -11 03:37:52 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r1 = socket$inet(0x2, 0x3, 0x33) r2 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r2, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:52 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0x3) [ 1078.882982] binder: 23676:23682 unknown command 1077961544 [ 1078.904171] binder: 23676:23682 ioctl c0306201 20000080 returned -22 [ 1078.931410] input: syz0 as /devices/virtual/input/input48 03:37:52 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) 03:37:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000004c63404001"], 0x0, 0xffffff7f, 0x0}) 03:37:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 03:37:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, &(0x7f0000000100)={0x9}, 0xc) [ 1079.145211] binder: 23699:23701 ioctl c0306201 20000240 returned -11 03:37:53 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:53 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0x25) [ 1079.199052] binder: 23702:23705 unknown command 1077961548 [ 1079.244099] input: syz0 as /devices/virtual/input/input49 [ 1079.253346] binder: 23702:23705 ioctl c0306201 20000080 returned -22 03:37:53 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) 03:37:53 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000006063404001"], 0x0, 0xffffff7f, 0x0}) 03:37:53 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, &(0x7f0000000100)={0x9}, 0xc) 03:37:53 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:53 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(0x0) dup2(0xffffffffffffffff, r0) [ 1079.430938] binder: 23720:23722 ioctl c0306201 20000240 returned -11 03:37:53 executing program 2: r0 = semget(0x3, 0x0, 0x0) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f0000000000)=""/174) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) [ 1079.548824] binder: 23726:23732 unknown command 1077961568 [ 1079.572742] input: syz0 as /devices/virtual/input/input50 [ 1079.583227] binder: 23726:23732 ioctl c0306201 20000080 returned -22 03:37:53 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, &(0x7f0000000100)={0x9}, 0xc) 03:37:53 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:53 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000006863404001"], 0x0, 0xffffff7f, 0x0}) 03:37:53 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(0x0) dup2(0xffffffffffffffff, r0) [ 1079.842740] binder: 23747:23752 unknown command 1077961576 [ 1079.857698] binder: 23747:23752 ioctl c0306201 20000080 returned -22 [ 1079.890977] input: syz0 as /devices/virtual/input/input51 03:37:53 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, &(0x7f0000000100)={0x9}, 0xc) 03:37:53 executing program 4: dup(0xffffffffffffffff) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r1 = socket$inet(0x2, 0x3, 0x33) r2 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r2, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:53 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000006c63404001"], 0x0, 0xffffff7f, 0x0}) 03:37:53 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={{r2}, 0x3, 0x94, 0x1}) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDMKTONE(r4, 0x4b30, 0x3ff) 03:37:53 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(0x0) dup2(0xffffffffffffffff, r0) [ 1080.079371] binder: 23761:23767 unknown command 1077961580 [ 1080.112055] binder: 23761:23767 ioctl c0306201 20000080 returned -22 03:37:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, &(0x7f0000000100)={0x9}, 0xc) 03:37:54 executing program 4: dup(0xffffffffffffffff) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r1 = socket$inet(0x2, 0x3, 0x33) r2 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r2, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000007463404001"], 0x0, 0xffffff7f, 0x0}) 03:37:54 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) [ 1080.257871] input: syz0 as /devices/virtual/input/input52 03:37:54 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) write$9p(r3, &(0x7f0000001400)="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", 0x600) sendfile(r3, r4, 0x0, 0x10000) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000080)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}], 0x20) fgetxattr(r2, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000440)=""/148, 0x94) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x0, @remote}], 0x10) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000001c0)={0x401, 0x9, 0x4, 0x20000, 0x80000001, {0x0, 0x7530}, {0x1, 0x0, 0xfc, 0x5, 0x34, 0x10, "9290b9b1"}, 0x8, 0x3, @fd=r3, 0x1, 0x0, r5}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={r7, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x2, @remote, 0x3}, @in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x80000000}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e24, 0x6, @loopback, 0xe7f3}]}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={r7, 0x4, 0x7, 0x1, 0x4, 0x7}, &(0x7f0000000040)=0x14) 03:37:54 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)) dup2(0xffffffffffffffff, r0) [ 1080.412588] binder: 23786:23789 unknown command 1077961588 [ 1080.449992] binder: 23786:23789 ioctl c0306201 20000080 returned -22 03:37:54 executing program 4: dup(0xffffffffffffffff) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r1 = socket$inet(0x2, 0x3, 0x33) r2 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r2, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, &(0x7f0000000100)={0x9}, 0xc) 03:37:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000007a63404001"], 0x0, 0xffffff7f, 0x0}) [ 1080.625391] input: syz0 as /devices/virtual/input/input53 03:37:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, &(0x7f0000000100)={0x9}, 0xc) [ 1080.746520] binder: 23804:23808 unknown command 1077961594 [ 1080.787455] binder: 23804:23808 ioctl c0306201 20000080 returned -22 03:37:54 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)) dup2(0xffffffffffffffff, r0) [ 1080.821818] audit: type=1800 audit(2000000274.670:447): pid=23803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=17857 res=0 03:37:54 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x64, 0x65, &(0x7f0000000040)="e480877679a6a184f1ed7069650c6ba09810357b9b112db7e1100de7fcf18f624b486e99f49a9a01ddf6e0e608e1c2915bc6aab49a35ae23d63afa7ca2730987896685ea152709f8c63c676751a1ec240f5beb3418a07faf1afd4403d4e4460d5f7c24e3", &(0x7f0000000140)=""/101, 0x6, 0x0, 0xfe, 0x76, &(0x7f00000001c0)="6be79d8f75505559e4ede091d760cc83a415f54a77b811edca2c2723a1dc7130f2cbf8c22b3e2255bdfbd3e35e8adc913bba7f630a5ef621c286aed7aedb5dc03596c5c75215e3774b72f8a56902763e351979b1f39c1c9d85834d70d6317f45756d6eb8ea7ee4dfbbb813087b1e631ab55ab3e56a5c36c6ee64c7c87d5f68695d1bdae5711ee0a93b7de0445081a0324498ca02250b0d42e531cb561f1a17a0301e0924dcc753951b2e8e92b5c90c95175e5a5e57f5b057b620b5d30b1a0cbc1ca836d9fdb619d842a48447dbd81b9bd2e9a1acbfb6d528d977c6056e8909fe7b9e392160d3c344aba4c174362473c634c12e08477cc454b57726601b38", &(0x7f00000002c0)="acc4eb7a1ec84f7841050da2f6edbc60a34c4c21fe808fad082da1cd8524fdff09e085c108b7ba509e04611be3b13b41a89bbd8f25634dd31f8786e7a26f21dcb7a665de87505760c3c779cb579d05803f3192b63ab69d562b0958808857cc01fe3c95a5a42fcf364f7b4e02b2aa6cff97e5faa479ea"}, 0x40) 03:37:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000b63000001"], 0x0, 0xffffff7f, 0x0}) [ 1080.952085] input: syz0 as /devices/virtual/input/input54 03:37:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, &(0x7f0000000100)={0x9}, 0xc) 03:37:55 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1081.153014] binder: 23828:23831 unknown command 1 03:37:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)) dup2(0xffffffffffffffff, r0) [ 1081.177071] binder: 23828:23831 ioctl c0306201 20000080 returned -22 03:37:55 executing program 2: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000080)={0x9d0000, 0x8, 0x9, r0, 0x0, &(0x7f0000000040)={0x9b0942, 0x7f, [], @p_u32=&(0x7f0000000000)=0x80}}) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:37:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, &(0x7f0000000100)={0x9}, 0xc) 03:37:55 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000c63000001"], 0x0, 0xffffff7f, 0x0}) [ 1081.340439] input: syz0 as /devices/virtual/input/input55 03:37:55 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, 0xffffffffffffffff) [ 1081.557115] binder: 23851:23856 unknown command 1 [ 1081.562113] binder: 23851:23856 ioctl c0306201 20000080 returned -22 03:37:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, &(0x7f0000000100)={0x9}, 0xc) 03:37:55 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000000)={0x8, 0x3, 0x10000, 0x20}) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$isdn(0x22, 0x3, 0x24) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x88000}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e74e7dea10617fba419820b8179343a3e37bb0f3f6b37da452e667aae5", @ANYRES16=r4, @ANYBLOB="000025bd7000fddbdf25130000003400050007000100696200001c000200080003000000500008000300ede1000008000200000000000c00020008000200ffffffff1c0006800400020008000100ffffff7f040002000400020004000200180005000c000200080003000000000008000100"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r4, @ANYBLOB="04002abd7000ffdbdf25080000005400090008000200091d499caf52bfcb990100000800010000f8ffff0800010006000000080001000500000008000200020000000800020000000100080002000100000008000100080000000800010006000000480001000d0001007564703a73797a320000000034000200080004008a3d00000800030018000000080001001c0000000800010005000000080002000100000008000400010000003c00090008000100ffffffff0800020005000000080002000700000008000100020000000800020009000000080001008100000008000100070000000c0002000800010006000000"], 0xf8}, 0x1, 0x0, 0x0, 0x20000840}, 0x40001) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ubi_ctrl\x00', 0x140, 0x0) ioctl$KVM_NMI(r6, 0xae9a) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000040), 0x8) 03:37:55 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1081.655248] input: syz0 as /devices/virtual/input/input56 03:37:55 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000d63000001"], 0x0, 0xffffff7f, 0x0}) 03:37:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, 0xffffffffffffffff) [ 1081.850011] binder: 23869:23871 unknown command 1 03:37:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, &(0x7f0000000100)={0x9}, 0xc) 03:37:55 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1081.885483] binder: 23869:23871 ioctl c0306201 20000080 returned -22 [ 1081.907412] binder: BINDER_SET_CONTEXT_MGR already set [ 1081.931676] binder: 23869:23871 ioctl 40046207 0 returned -16 [ 1081.944675] input: syz0 as /devices/virtual/input/input57 03:37:55 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000263044001"], 0x0, 0xffffff7f, 0x0}) 03:37:56 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x40004, 0x18}, 0xffffffffffffff78) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x62, @dev={0xac, 0x14, 0x14, 0x39}, 0x4e20, 0x1, 'lblcr\x00', 0x21, 0x8000, 0x7f}, 0x2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:37:56 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, 0xffffffffffffffff) 03:37:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, &(0x7f0000000100)={0x9}, 0xc) [ 1082.264223] binder: BC_ACQUIRE_RESULT not supported [ 1082.284948] IPVS: set_ctl: invalid protocol: 98 172.20.20.57:20000 [ 1082.296337] binder: 23890:23893 ioctl c0306201 20000080 returned -22 [ 1082.347468] input: syz0 as /devices/virtual/input/input58 [ 1082.378126] IPVS: set_ctl: invalid protocol: 98 172.20.20.57:20000 03:37:56 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000463044001"], 0x0, 0xffffff7f, 0x0}) 03:37:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, &(0x7f0000000100)={0x9}, 0xc) 03:37:56 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x41bf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x4, 0x10000000000000}, 0x0, 0x0, 0x3fe0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:37:56 executing program 0: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) write$9p(r3, &(0x7f0000001400)="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", 0x600) sendfile(r3, r4, 0x0, 0x10000) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000080)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}], 0x20) fgetxattr(r2, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000440)=""/148, 0x94) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x0, @remote}], 0x10) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000001c0)={0x401, 0x9, 0x4, 0x20000, 0x80000001, {0x0, 0x7530}, {0x1, 0x0, 0xfc, 0x5, 0x34, 0x10, "9290b9b1"}, 0x8, 0x3, @fd=r3, 0x1, 0x0, r5}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={r7, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x2, @remote, 0x3}, @in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x80000000}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e24, 0x6, @loopback, 0xe7f3}]}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={r7, 0x4, 0x7, 0x1, 0x4, 0x7}, &(0x7f0000000040)=0x14) 03:37:56 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000763044001"], 0x0, 0xffffff7f, 0x0}) 03:37:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, &(0x7f0000000100)={0x9}, 0xc) 03:37:56 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000040)) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x80, 0x0) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000140)={0x4, "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"}) ioctl$SNDCTL_DSP_NONBLOCK(0xffffffffffffffff, 0x500e, 0x0) 03:37:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, &(0x7f0000000100)={0x9}, 0xc) 03:37:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000363084001"], 0x0, 0xffffff7f, 0x0}) 03:37:56 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r1 = socket$inet(0x2, 0x3, 0x33) r2 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r2, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:57 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1d4, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_BEACON_TAIL={0x1ae, 0xf, "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"}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:37:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000100)={0x9}, 0xc) 03:37:57 executing program 0: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) write$9p(r3, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600) sendfile(r3, r4, 0x0, 0x10000) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000080)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}], 0x20) fgetxattr(r2, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000440)=""/148, 0x94) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x0, @remote}], 0x10) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000001c0)={0x401, 0x9, 0x4, 0x20000, 0x80000001, {0x0, 0x7530}, {0x1, 0x0, 0xfc, 0x5, 0x34, 0x10, "9290b9b1"}, 0x8, 0x3, @fd=r3, 0x1, 0x0, r5}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={r7, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x2, @remote, 0x3}, @in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x80000000}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e24, 0x6, @loopback, 0xe7f3}]}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={r7, 0x4, 0x7, 0x1, 0x4, 0x7}, &(0x7f0000000040)=0x14) 03:37:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r1 = socket$inet(0x2, 0x3, 0x33) r2 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r2, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:57 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000a63084001"], 0x0, 0xffffff7f, 0x0}) 03:37:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000100)={0x9}, 0xc) 03:37:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r1 = socket$inet(0x2, 0x3, 0x33) r2 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r2, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:57 executing program 2: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x20100, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xc0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x1, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000080)=@raw=[@map_val, @func], &(0x7f00000000c0)='GPL\x00', 0x0, 0xe9, &(0x7f0000000180)=""/233, 0x0, 0x1, [], 0x0, 0xf, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x8, &(0x7f0000000180)=@raw=[@alu={0x4, 0x1, 0x3, 0x0, 0xa, 0x8, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x20}, @alu={0x7, 0x0, 0x2, 0xb, 0xf, 0x10, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}], &(0x7f00000001c0)='GPL\x00', 0xcebe, 0x0, 0x0, 0x40f00, 0x4, [], r5, 0x8, r6, 0x8, &(0x7f00000002c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0xc, 0x0, 0x7}, 0x10, r8}, 0x78) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="0f789e00200f3566b9800000c00f326635000100000f30b830008ee066b9f408000066b80000000066ba000000000f300f0fd3ae0fc7ab0040650f009f0080642e0f096606", 0x45}], 0x1, 0xc, &(0x7f0000000140), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x440c40) setsockopt$inet6_MRT6_ADD_MIF(r9, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) [ 1083.668404] binder: BC_ATTEMPT_ACQUIRE not supported [ 1083.731538] binder: 23962:23964 ioctl c0306201 20000080 returned -22 03:37:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000100)={0x9}, 0xc) [ 1083.807445] binder: BINDER_SET_CONTEXT_MGR already set [ 1083.830561] binder: 23962:23964 ioctl 40046207 0 returned -16 03:37:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, 0x0) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:57 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000001063084001"], 0x0, 0xffffff7f, 0x0}) 03:37:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, &(0x7f0000000100)={0x9}, 0xc) 03:37:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) 03:37:58 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0x10001}, 0xc) 03:37:58 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000e630c4001"], 0x0, 0xffffff7f, 0x0}) 03:37:58 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, 0x0) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) 03:37:58 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000040)) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:37:58 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000f630c4001"], 0x0, 0xffffff7f, 0x0}) 03:37:58 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, 0x0) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:58 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:58 executing program 0: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x1000000}, 0xc) 03:37:58 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:37:58 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000863104001"], 0x0, 0xffffff7f, 0x0}) 03:37:58 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x0, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:58 executing program 0: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000100)={0x9}, 0xc) 03:37:58 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xc8, &(0x7f0000000100)={0x9}, 0xc) 03:37:58 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000963104001"], 0x0, 0xffffff7f, 0x0}) 03:37:58 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) connect$vsock_dgram(r6, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @host}, 0x10) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x200000, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r7, 0x29, 0x44, &(0x7f0000000080)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) 03:37:58 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x0, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:58 executing program 0: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:37:59 executing program 3 (fault-call:2 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) 03:37:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x0, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:37:59 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0563044000000000000a404001"], 0x0, 0xffffff7f, 0x0}) 03:37:59 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x2, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:37:59 executing program 0 (fault-call:5 fault-nth:0): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) [ 1085.315919] binder: 24055:24059 unknown command 1077938688 03:37:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) [ 1085.369373] binder: 24055:24059 ioctl c0306201 20000080 returned -22 03:37:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x0, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1085.410783] binder: BINDER_SET_CONTEXT_MGR already set [ 1085.465250] input: syz0 as /devices/virtual/input/input59 [ 1085.483215] binder: 24055:24059 ioctl 40046207 0 returned -16 [ 1085.538375] FAULT_INJECTION: forcing a failure. [ 1085.538375] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.600907] CPU: 0 PID: 24068 Comm: syz-executor.0 Not tainted 4.19.97-syzkaller #0 [ 1085.609493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1085.619208] Call Trace: [ 1085.621838] dump_stack+0x197/0x210 [ 1085.625916] should_fail.cold+0xa/0x1b [ 1085.630030] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1085.635570] ? lock_downgrade+0x880/0x880 [ 1085.640458] __should_failslab+0x121/0x190 [ 1085.644927] should_failslab+0x9/0x14 [ 1085.650064] __kmalloc_track_caller+0x2de/0x750 [ 1085.654949] ? pointer+0x970/0x970 [ 1085.658826] ? kasprintf+0xbb/0xf0 [ 1085.662629] kvasprintf+0xc8/0x170 [ 1085.666212] ? bust_spinlocks+0xe0/0xe0 [ 1085.670335] ? __lock_acquire+0x6ee/0x49c0 [ 1085.674826] ? debug_check_no_obj_freed+0x200/0x464 [ 1085.679921] kasprintf+0xbb/0xf0 [ 1085.683553] ? kvasprintf_const+0x190/0x190 [ 1085.688129] ? perf_trace_lock_acquire+0xf5/0x580 [ 1085.693018] ? mark_held_locks+0x100/0x100 [ 1085.697669] ? input_default_getkeycode+0x520/0x520 [ 1085.702967] input_devnode+0x4c/0x90 [ 1085.706982] device_get_devnode+0x170/0x2e0 [ 1085.711517] devtmpfs_delete_node+0xaa/0x1a0 [ 1085.716060] ? devtmpfs_create_node+0x250/0x250 [ 1085.721262] ? lock_downgrade+0x880/0x880 [ 1085.725738] ? do_raw_spin_unlock+0x181/0x270 [ 1085.730268] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1085.736320] ? kobject_put+0x8f/0x290 [ 1085.740166] ? __device_link_free_srcu+0xa0/0xa0 [ 1085.745312] ? klist_children_put+0x44/0x50 [ 1085.749669] ? klist_put+0xdf/0x180 [ 1085.753705] device_del+0x831/0xb70 [ 1085.757690] ? __device_link_del+0x3e0/0x3e0 [ 1085.762289] ? _raw_spin_unlock_irq+0x28/0x90 [ 1085.767072] ? __input_unregister_device+0x153/0x490 [ 1085.772495] ? _raw_spin_unlock_irq+0x28/0x90 [ 1085.777313] cdev_device_del+0x1a/0x80 [ 1085.781425] evdev_disconnect+0x42/0xb0 [ 1085.785809] __input_unregister_device+0x1fa/0x490 [ 1085.790997] input_unregister_device+0xc9/0x100 [ 1085.795963] uinput_destroy_device+0x1f4/0x250 [ 1085.800601] ? uinput_destroy_device+0x250/0x250 [ 1085.805800] uinput_release+0x3c/0x60 [ 1085.809742] __fput+0x2dd/0x8b0 [ 1085.813293] ____fput+0x16/0x20 [ 1085.816785] task_work_run+0x145/0x1c0 [ 1085.820718] exit_to_usermode_loop+0x273/0x2c0 [ 1085.825629] do_syscall_64+0x53d/0x620 [ 1085.829679] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1085.835275] RIP: 0033:0x45b159 [ 1085.838648] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1085.858575] RSP: 002b:00007f9337cb5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 1085.866717] RAX: 0000000000000003 RBX: 00007f9337cb66d4 RCX: 000000000045b159 [ 1085.874343] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 1085.882402] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1085.889977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 03:37:59 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000025404001"], 0x0, 0xffffff7f, 0x0}) [ 1085.897717] R13: 0000000000000097 R14: 00000000004c1b73 R15: 0000000000000000 03:37:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x3a, 0xd0, 0x0, 0x0) 03:37:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x0, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1086.021659] binder: 24077:24078 unknown command 1077945600 03:37:59 executing program 0 (fault-call:5 fault-nth:1): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) [ 1086.073602] binder: 24077:24078 ioctl c0306201 20000080 returned -22 03:38:00 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000163404001"], 0x0, 0xffffff7f, 0x0}) 03:38:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x7, 0x0, 0x0) 03:38:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x0, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x14, 0x0, 0x0) 03:38:00 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x2, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x0, 0x0, 0x0, 0x5, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:38:00 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000263404001"], 0x0, 0xffffff7f, 0x0}) 03:38:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x0, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1086.683875] binder: 24115:24133 unknown command 1077961474 [ 1086.721019] binder: 24115:24133 ioctl c0306201 20000080 returned -22 03:38:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x15, 0x0, 0x0) 03:38:00 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:38:00 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000363404001"], 0x0, 0xffffff7f, 0x0}) 03:38:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 03:38:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x0, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x1b, 0x0, 0x0) [ 1087.000690] binder: 24228:24230 unknown command 1077961475 [ 1087.047162] binder: 24228:24230 ioctl c0306201 20000080 returned -22 [ 1087.085850] input: syz0 as /devices/virtual/input/input60 03:38:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000463404001"], 0x0, 0xffffff7f, 0x0}) 03:38:01 executing program 2: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x3, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000080)) 03:38:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x0, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x2, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 03:38:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x1c, 0x0, 0x0) 03:38:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000563404001"], 0x0, 0xffffff7f, 0x0}) [ 1087.517928] input: syz0 as /devices/virtual/input/input61 03:38:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x0, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x24, 0x0, 0x0) 03:38:01 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000040)={0x29, 0x1}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = msgget(0x2, 0x0) msgctl$MSG_STAT(r5, 0xb, 0x0) msgsnd(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000000000000"], 0x8, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r6) ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f0000000180)={0x0, @can={0x1d, 0x0}, @vsock={0x28, 0x0, 0x2710, @my=0x1}, @ipx={0x4, 0x40, 0x8, "1c0897af18bc", 0x5}, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x3, 0x7}) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000200)={@rand_addr=0x20003f, @broadcast, r7}, 0xc) r8 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$IMHOLD_L1(r8, 0x80044948, &(0x7f0000000000)=0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) [ 1087.690504] binder: 24267:24268 unknown command 1077961477 [ 1087.723249] binder: 24267:24268 ioctl c0306201 20000080 returned -22 03:38:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000340)=0xe8) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x397) r8 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x11, r8, r7, r10) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000380)={{{@in=@rand_addr=0x8, @in6=@loopback, 0x4e20, 0xeac2, 0x4e20, 0x0, 0x2, 0x80, 0x80, 0x3a, r5, r7}, {0x6, 0x7fffffff, 0x1e, 0x0, 0x2, 0x6, 0x2, 0x68}, {0x8000, 0x5, 0x8000, 0x7f5}, 0x1, 0x0, 0x2, 0x0, 0x3, 0x3}, {{@in6=@remote, 0x4d4, 0x32}, 0xf, @in=@multicast1, 0x3507, 0x2, 0x0, 0x7, 0x800, 0x8, 0x10000}}, 0xe8) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8010200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r11, 0x100, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c011}, 0x20000050) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR(r13, 0x6, 0x13, &(0x7f00000000c0), 0x4) dup2(r2, r0) 03:38:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x0, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x2a, 0x0, 0x0) 03:38:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000663404001"], 0x0, 0xffffff7f, 0x0}) 03:38:01 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) [ 1087.834727] input: syz0 as /devices/virtual/input/input63 [ 1088.013847] input: syz0 as /devices/virtual/input/input64 03:38:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x30, 0x0, 0x0) [ 1088.093001] binder: 24291:24320 unknown command 1077961478 [ 1088.118704] binder: 24291:24320 ioctl c0306201 20000080 returned -22 03:38:02 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x0, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:02 executing program 2: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000001c0), &(0x7f00000003c0)=0x10) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xfffffffffffffffe, 0x220042) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x40, 0x80000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getdents(r6, &(0x7f0000000580)=""/237, 0xed) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010000d07cdd879345d28000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="aaf20000d046b85cb01e92550250a490cff4300ad49be094008010bcf7bdbbd065501305f5a4d0dacee21d438be196e80742259eb3a1ac7e004b94f9b7ab4baa81cf128f5f61a199ab7c2badfb67c00ca013e15c05fb9a13f9557e4a9191f6c477a723c6fc1f10aca3e062d95598fbf27d12a60451f0e13ceed34dda1a105b18979383f0ef5237116d32d45ead01d0cb6ad41f7185ad664506ae44b9c79abba5de97372bd4a87357cd6c895780dcebe38410add118"], 0x5}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="00ffff00000000003f534a7129f4dac7c536f4a01e814f30ff6c2bad00", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="840000002c00ff095300"/20, @ANYRES32=r4, @ANYBLOB="00080080000000000300000008000100753332005800020014000500be8a0b3de755faac00000000010000000000000000000000400006003c0001000000000000000020898dde66057433b6ef3a41d22be225e0001b00000000000000000000000000000000100000000084e1a912c5998bcbf050000000000000000000000000000000798a3c067277da1a290b9613a33c575c36fad473382c8f552fef3f0e1d2c450a79cb3291bed174b162ab405222245a962fe0484676958265e2988326a89db3139d91fe4aee6ae7e745abdfc268c01a9f61f2035979c1e3e90ba6b3958bc10300000000000000194534ba4e97360000000000000000"], 0x84}}, 0x0) bind$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x3, @loopback}}, 0x1e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r8, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:38:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000763404001"], 0x0, 0xffffff7f, 0x0}) 03:38:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x36, 0x0, 0x0) 03:38:02 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x0, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1088.348958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24414 comm=syz-executor.2 03:38:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) pipe(&(0x7f0000000180)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0xb6, 0x800) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x28000, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r6, r0) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x200000, 0x0) bind$rxrpc(r7, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) 03:38:02 executing program 2: getresuid(&(0x7f0000000140), &(0x7f0000000040), &(0x7f0000000080)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) [ 1088.492322] binder: 24416:24421 unknown command 1077961479 [ 1088.553282] binder: 24416:24421 ioctl c0306201 20000080 returned -22 03:38:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xc8, 0x0, 0x0) 03:38:02 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x0, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000001263404001"], 0x0, 0xffffff7f, 0x0}) 03:38:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x20000) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 03:38:02 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x0, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1088.832443] input: syz0 as /devices/virtual/input/input66 [ 1088.852945] binder: 24439:24443 unknown command 1077961490 03:38:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xc9, 0x0, 0x0) [ 1088.883778] binder: 24439:24443 ioctl c0306201 20000080 returned -22 03:38:02 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x3f, 0x8}, 0xc) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, r1, 0x0, 0x8, &(0x7f0000000000)='trusted\x00'}, 0x30) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x8000005, 0x2}, 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x5, 0x101, 0x5}, &(0x7f0000000200)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=0x5}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, r4, 0x0, 0xf, &(0x7f0000000080)='+procvboxnet0/\x00', r5}, 0x30) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x3000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xffffffffffffff81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r6, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) [ 1089.025128] input: syz0 as /devices/virtual/input/input67 03:38:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000004863404001"], 0x0, 0xffffff7f, 0x0}) 03:38:03 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) socket$netlink(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r2) 03:38:03 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) [ 1089.213754] binder: 24461:24465 unknown command 1077961544 [ 1089.222984] binder: 24461:24465 ioctl c0306201 20000080 returned -22 03:38:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)) 03:38:03 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000004c63404001"], 0x0, 0xffffff7f, 0x0}) [ 1089.391681] input: syz0 as /devices/virtual/input/input68 03:38:03 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, 0x0, 0x0) 03:38:03 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x41bf, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, @perf_config_ext={0x6, 0x10000}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getpeername$unix(r2, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000140)=[{{0x2, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}}, {{0x2, 0x0, 0x1}, {0x1, 0x1, 0x1}}, {{0x0, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3}}], 0x20) [ 1089.556846] binder: 24481:24485 unknown command 1077961548 [ 1089.591869] binder: 24481:24485 ioctl c0306201 20000080 returned -22 03:38:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x4}, 'syz0\x00', 0x2}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x800, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000080)=0x1) r6 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$cgroup_ro(r6, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000006580000a84fbd7000fddbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000891}, 0x4000000) 03:38:03 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:03 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000006063404001"], 0x0, 0xffffff7f, 0x0}) 03:38:03 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0xffffffff8694b8aa}) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) [ 1089.830913] input: syz0 as /devices/virtual/input/input70 03:38:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcc, 0x0, 0x0) 03:38:03 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x0, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1089.976493] binder: 24503:24508 unknown command 1077961568 [ 1090.034244] binder: 24503:24508 ioctl c0306201 20000080 returned -22 03:38:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcd, 0x0, 0x0) 03:38:04 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000006863404001"], 0x0, 0xffffff7f, 0x0}) 03:38:04 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x0, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcf, 0x0, 0x0) [ 1090.376507] binder: 24732:24733 unknown command 1077961576 [ 1090.421657] binder: 24732:24733 ioctl c0306201 20000080 returned -22 03:38:04 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000006c63404001"], 0x0, 0xffffff7f, 0x0}) 03:38:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd1, 0x0, 0x0) [ 1090.682633] binder: 24844:24847 unknown command 1077961580 [ 1090.691182] binder: 24844:24847 ioctl c0306201 20000080 returned -22 03:38:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd2, 0x0, 0x0) 03:38:04 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x0, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:04 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000007463404001"], 0x0, 0xffffff7f, 0x0}) 03:38:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd3, 0x0, 0x0) [ 1090.925880] binder: 24910:24927 unknown command 1077961588 [ 1090.947724] binder: 24910:24927 ioctl c0306201 20000080 returned -22 03:38:04 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:04 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x8, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8000, 0x400) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f0000000240)=0xe8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010000d07cdd87d345d28000000000000", @ANYRES32=r7, @ANYBLOB="0500000000000000280012000c0001007665746800000000d0c8ec6d1400010000000000", @ANYRES32=0x0, @ANYBLOB="aaf20000d046b85cb01e92550250a490cff4300ad49be094008010bcf7bdbbd065501305f5a4d0dacee21d438be196e80742259eb3a1ac7e004b94f9b7ab4baa81cf128f5f61a199ab7c2badfb67c00ca013e15c05fb9a13f9557e4a9191f6c477a723c6fc1f10aca3e062d95598fbf27d12a60451f0e13ceed34dda1a105b18979383f0ef5237116d32d45ead01d0cb6ad41f7185ad664506ae44b9c79abba5de97372bd4a87357cd6c895780dcebe38410add118"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="840000002c00011400"/20, @ANYRES32=r7, @ANYBLOB="00080080000000000300000008000100753332005800020014000500be8a0b3de755faac00000000010000000000000000000000400006003c0001000000000000000020898dde66057433b6ef3a41d22be225e0001b00000000000000000000000000000000100000000084e1a912c5998bcbf050000000000000000000000000000000798a3c067277da1a290b9613a33c575c36fad473382c8f5532ef3f0e1d2c450a7decbf3431a69f9b2ecb3291bed174245a962fe0484676958265e2988326a89db3139d91fe4aee6ae7e745abdfc21a9f61f2035979c1e3e9fea5b3958bc10300000000000000194534ba4e973684b27793bff837d3"], 0x84}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010000d07cdd87d345d28000000000000", @ANYRES32=r12, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="aaf20000d046b85cb01e92550250a490cff4300ad49be094008010bcf7bdbbd065501305f5a4d0dacee21d438be196e80742259eb3a1ac7e004b94f9b7ab4baa81cf128f5f61a199ab7c2badfb67c00ca013e15c05fb9a13f9557e4a9191f6c477a723c6fc1f10aca3e062d95598fbf27d12a60451f0e13ceed34dda1a105b18979383f0ef5237116d32d45ead01d0cb6ad41f7185ad664506ae44b9c79abba5de97372bd4a87357cd6c895780dcebe38410add118"], 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r12, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="840000002c00011400"/20, @ANYRES32=r12, @ANYBLOB="00080080000000000300000008000100753332005800020014000500be8a0b3de755faac00000000010000000000000000000000400006003c0001000000000000000020898dde66057433b6ef3a41d22be225e0001b00000000000000000000000000000000100000000084e1a912c5998bcbf050000000000000000000000000000000798a3c067277da1a290b9613a33c575c36fad473382c8f5532ef3f0e1d2c450a7decbf3431a69f9b2ecb3291bed174245a962fe0484676958265e2988326a89db3139d91fe4aee6ae7e745abdfc21a9f61f2035979c1e3e9fea5b3958bc10300000000000000194534ba4e973684b27793bff837d3"], 0x84}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$netlink(0x10, 0x3, 0x0) r16 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010000d07cdd87d345d28000000000000", @ANYRES32=r17, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="aaf20000d046b85cb01e92550250a490cff4300ad49be094008010bcf7bdbbd065501305f5a4d0dacee21d438be196e80742259eb3a1ac7e004b94f9b7ab4baa81cf128f5f61a199ab7c2badfb67c00ca013e15c05fb9a13f9557e4a9191f6c477a723c6fc1f10aca3e062d95598fbf27d12a60451f0e13ceed34dda1a105b18979383f0ef5237116d32d45ead01d0cb6ad41f7185ad664506ae44b9c79abba5de97372bd4a87357cd6c895780dcebe38410add118"], 0x48}}, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r17, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r18 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r18, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="840000002c00011400"/20, @ANYRES32=r17, @ANYBLOB="00080080000000000300000008000100753332005800020014000500be8a0b3de755faac00000000010000000000000000000000400006003c0001000000000000000020898dde66057433b6ef3a41d22be225e0001b00000000000000000000000000000000100000000084e1a912c5998bcbf050000000000000000000000000000000798a3c067277da1a290b9613a33c575c36fad473382c8f5532ef3f0e1d2c450a7decbf3431a69f9b2ecb3291bed174245a962fe0484676958265e2988326a89db3139d91fe4aee6ae7e745abdfc21a9f61f2035979c1e3e9fea5b3958bc10300000000000000194534ba4e973684b27793bff837d3"], 0x84}}, 0x0) r19 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r19) ioctl$ifreq_SIOCGIFINDEX_vcan(r19, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000400)=0xe8) r22 = socket$nl_route(0x10, 0x3, 0x0) r23 = socket$netlink(0x10, 0x3, 0x0) r24 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r24, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r24, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r26 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r27 = dup(r26) ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x400200) sendmsg$nl_route(r23, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001000cb0000000000000004000000b817cdd87d010000000000000000", @ANYRES32=r25, @ANYRESHEX=r27, @ANYRES32=0x0, @ANYBLOB="aaf20000d046b85cb01e92550250a490cff4300ad49be094008010bcf7bdbbd065501305f5a4d0dacee21d438be196e80742259eb3a1ac7e004b94f9b7ab4baa81cf128f5f61a199ab7c2badfb67c00ca013e15c05fb9a13f9557e4a9191f6c477a723c6fc1f10aca3e062d95598fbf27d12a60451f0e13ceed34dda1a105b18979383f0ef5237116d32d45ead01d0cb6ad41f7185ad664506ae44b9c79abba5de97372bd4a87357cd6c895780dcebe38410add118"], 0x5}}, 0x0) sendmsg$nl_route_sched(r22, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r25, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r28 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r28, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="840000002c00011400"/20, @ANYRES32=r25, @ANYBLOB="00080080000000000300000008000100753332005800020014000500be8a0b3de755faac00000000010000000000000000000000400006003c0001000000000000000020898dde66057433b6ef3a41d22be225e0001b00000000000000000000000000000000100000000084e1a912c5998bcbf050000000000000000000000000000000798a3c067277da1a290b9613a33c575c36fad473382c8f5532ef3f0e1d2c450a7decbf3431a69f9b2ecb3291bed174245a962fe0484676958265e2988326a89db3139d91fe4aee6ae7e745abdfc21a9f61f2035979c1e3e9fea5b3958bc10300000000000000194534ba4e973684b27793bff837d3"], 0x84}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001c00)={{{@in6, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000001d00)=0xe8) r30 = socket$nl_route(0x10, 0x3, 0x0) r31 = socket$netlink(0x10, 0x3, 0x0) r32 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r32, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r32, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r31, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010000d07cdd87d345d28000000000000", @ANYRES32=r33, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="aaf20000d046b85cb01e92550250a490cff4300ad49be094008010bcf7bdbbd065501305f5a4d0dacee21d438be196e80742259eb3a1ac7e004b94f9b7ab4baa81cf128f5f61a199ab7c2badfb67c00ca013e15c05fb9a13f9557e4a9191f6c477a723c6fc1f10aca3e062d95598fbf27d12a60451f0e13ceed34dda1a105b18979383f0ef5237116d32d45ead01d0cb6ad41f7185ad664506ae44b9c79abba5de97372bd4a87357cd6c895780dcebe38410add118"], 0x48}}, 0x0) sendmsg$nl_route_sched(r30, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000582400070500"/20, @ANYRES32=r33, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r34 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r34, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="840000002c00011400"/20, @ANYRES32=r33, @ANYBLOB="00080080000000000300000008000100753332005800020014000500be8a0b3de755faac00000000010000000000000000000000400006003c0001000000000000000020898dde66057433b6ef3a41d22be225e0001b00000000000000000000000000000000100000000084e1a912c5998bcbf050000000000000000000000000000000798a3c067277da1a290b9613a33c575c36fad473382c8f5532ef3f0e1d2c450a7decbf3431a69f9b2ecb3291bed174245a962fe0484676958265e2988326a89db3139d91fe4aee6ae7e745abdfc21a9f61f2035979c1e3e9fea5b3958bc10300000000000000194534ba4e973684b27793bff837d3"], 0x84}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000022c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002280)={&(0x7f0000001d40)={0x520, r2, 0x10, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x204, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x6, 0x80, 0x0, 0x3}, {0xb236, 0x0, 0xe0, 0x9}, {0x6, 0x96, 0x1, 0x1}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r20}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x183, 0xc0, 0x9, 0x8}, {0x6, 0x0, 0x1, 0x2}, {0x5, 0x80, 0x3}, {0x7f, 0x1, 0xc1, 0x9}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r17}, {0x130, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x44, 0x4, [{0x3f, 0x4, 0xff, 0x2}, {0x2, 0x40, 0x0, 0xfffffffb}, {0x1f, 0x9d, 0xd7, 0x9}, {0xff, 0x40, 0x7f, 0x1}, {0x5, 0x1f, 0x9, 0xe58}, {0xffff, 0x12, 0x6d, 0x3f}, {0x7ff, 0x4, 0x5, 0x2}, {0x7f, 0xed, 0x5, 0x5}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r21}, {0x1c0, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r25}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r29}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r33}}}]}}]}, 0x520}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:38:04 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000007a63404001"], 0x0, 0xffffff7f, 0x0}) 03:38:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x4) [ 1091.245721] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 03:38:05 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000001163484001"], 0x0, 0xffffff7f, 0x0}) [ 1091.554105] binder_alloc: 25088: binder_alloc_buf, no vma 03:38:05 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000001263484001"], 0x0, 0xffffff7f, 0x0}) [ 1091.640740] IPv6: ADDRCONF(NETDEV_UP): veth13: link is not ready [ 1091.707880] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1091.768324] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 03:38:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x1000000) 03:38:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0563044000000000000a404001"], 0x0, 0xffffff7f, 0x0}) 03:38:05 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x3}, 0x8) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:38:05 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(0x0, 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x4000000) [ 1092.104965] binder: 25315:25321 unknown command 1077938688 [ 1092.143825] binder: 25315:25321 ioctl c0306201 20000080 returned -22 03:38:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000140)={0x1, 0x100, 0x0, 'queue0\x00', 0x3}) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:38:06 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(0x0, 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x100000000000000) 03:38:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000025404001"], 0x0, 0xffffff7f, 0x0}) 03:38:06 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(0x0, 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1092.470061] binder: 25336:25341 unknown command 1077945600 [ 1092.484616] binder: 25336:25341 ioctl c0306201 20000080 returned -22 03:38:06 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xfffffffe, @my=0x1}, 0x10, 0x80800) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/validatetrans\x00', 0x1, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$VIDIOC_S_PARM(r11, 0xc0cc5616, &(0x7f00000001c0)={0x6, @capture={0x1000, 0x0, {0x800, 0x8001}, 0x100, 0x67ebdda8}}) ppoll(&(0x7f0000000080)=[{r3, 0x2000}, {r0, 0x2000}, {0xffffffffffffffff, 0x8000}, {r4, 0x6050}, {r6, 0x1}, {r7, 0x200}, {r9, 0x1000}], 0x7, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={[0x2000000000]}, 0x8) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:38:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x400000000000000) 03:38:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404003"], 0x0, 0xffffff7f, 0x0}) 03:38:06 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0x0, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:06 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000033000505d25a80648c63940d0424fc60100010400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0x7fffffff) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/enforce\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000640)='NLBL_UNLBL\x00') r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r9) sendmsg$NLBL_UNLABEL_C_ACCEPT(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYRES64=r4, @ANYRESDEC=r8, @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYPTR64=&(0x7f0000000800)=ANY=[@ANYRESHEX=r9], @ANYRESOCT]], 0x3}, 0x1, 0x0, 0x0, 0x80000}, 0x4000000) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000000300)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)={0x14, r10, 0x100, 0x70bd29, 0x25dfdbfd}, 0x14}}, 0x9e054dfa8e4b3c42) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x28, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000005}, 0x4) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x24, r6, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x22000001) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r14 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) write$9p(r13, &(0x7f0000001400)="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", 0x600) sendfile(r13, r14, 0x0, 0x10000) ioctl$BLKROTATIONAL(r13, 0x127e, &(0x7f0000000080)) r15 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r15, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}], 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r15, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x0, @remote}], 0x10) ioctl$VIDIOC_QUERYBUF(r13, 0xc0585609, &(0x7f00000001c0)={0x401, 0x9, 0x4, 0x20000, 0x80000001, {0x0, 0x7530}, {0x1, 0x0, 0xfc, 0x5, 0x34, 0x10, "9290b9b1"}, 0x8, 0x3, @fd=r13, 0x1, 0x0, r15}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r16, 0x84, 0x6f, &(0x7f0000000280)={r17, 0x58, &(0x7f00000003c0)=[@in6={0xa, 0x4e26, 0x3, @remote, 0x8000}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e24, 0x6, @loopback, 0xe7f3}]}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000140)={r17, 0x38, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x8c9f, @remote, 0x9}, @in6={0xa, 0x4e22, 0x400, @remote, 0x7f}]}, &(0x7f0000000180)=0x10) dup2(r2, r1) 03:38:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0563044000000000006340400a"], 0x0, 0xffffff7f, 0x0}) 03:38:06 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'vlan1\x00', {0x3f}, 0xbc}) 03:38:06 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0x0, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x400000, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000140)={0x0, @reserved}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000033000505d25a80648c63940d0424fc60100010400a000000053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000040)={0xa20000, 0x3, 0xa87, r2, 0x0, &(0x7f0000000000)={0x9a0920, 0x50, [], @value64=0x9}}) ioctl$IMHOLD_L1(r5, 0x80044948, &(0x7f0000000080)=0x69c9) eventfd2(0xfffffffd, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xd0, 0x0, 0x0) [ 1092.910143] openvswitch: netlink: Message has 5 unknown bytes. [ 1092.994591] input: syz0 as /devices/virtual/input/input72 03:38:06 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x88}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) write$9p(r2, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600) sendfile(r2, r3, 0x0, 0x10000) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000080)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}], 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x0, @remote}], 0x10) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000001c0)={0x401, 0x9, 0x4, 0x20000, 0x80000001, {0x0, 0x7530}, {0x1, 0x0, 0xfc, 0x5, 0x34, 0x10, "9290b9b1"}, 0x8, 0x3, @fd=r2, 0x1, 0x0, r4}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={r6, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x2, @remote, 0x3}, @in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x80000000}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e24, 0x6, @loopback, 0xe7f3}]}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={r6}, 0x8) accept4$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x800) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:38:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404025"], 0x0, 0xffffff7f, 0x0}) 03:38:07 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0x0, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r2) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x4) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000140)={0xf000000, 0xb47, 0xffffff7f, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x980926, 0xffffffff, [], @value=0x5}}) setsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000180)=0x3, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000000c0)={{0x1, 0x8000, 0x0, 0xff}, 'syz1\x00', 0x15}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xa4c80, 0x0) mq_timedsend(r6, &(0x7f0000000200)="7cad4236d61c157818ebf1d207ff749c", 0x10, 0x4, &(0x7f0000000240)={0x0, 0x989680}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r7, r0) 03:38:07 executing program 3: write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() sendmmsg$unix(r0, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9701}], 0xa, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}], 0x198, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xd0, 0x0, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) 03:38:07 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x0) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0563044000000000006340403c"], 0x0, 0xffffff7f, 0x0}) 03:38:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x0, 0x400}, 'syz0\x00', 0xfffffffc}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000033000505d25a80648c63940d0424fc60100010400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000040)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000080)=0x2c) dup2(r1, r0) [ 1093.521513] audit: type=1800 audit(2000000287.370:448): pid=25396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=18066 res=0 03:38:07 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x0) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404099"], 0x0, 0xffffff7f, 0x0}) 03:38:07 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) [ 1093.682007] input input75: cannot allocate more than FF_MAX_EFFECTS effects [ 1093.772315] openvswitch: netlink: Message has 5 unknown bytes. [ 1093.807662] input input76: cannot allocate more than FF_MAX_EFFECTS effects 03:38:07 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x0) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0563044000000000006340409f"], 0x0, 0xffffff7f, 0x0}) [ 1093.859027] openvswitch: netlink: Message has 5 unknown bytes. 03:38:07 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000033000505d25a80648c63940d0424fc60100010400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x1, 0x0) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f00000001c0)) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000033000505d25a80648c63940d0424fc60100010400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) dup3(r1, r2, 0x80000) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000033000505d25a80648c63940d0424fc60100010400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000000340)={0x6, 'bond0\x00', {0x2}, 0x40}) r6 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r6, 0xc0585609, &(0x7f00000002c0)={0x4, 0x6, 0x4, 0x80000, 0x800, {r7, r8/1000+30000}, {0x3, 0x8, 0x5, 0x6, 0xfa, 0x2b, "af5d982c"}, 0x6, 0x4, @planes=&(0x7f0000000280)={0x7, 0x12ef, @mem_offset=0x4, 0xff}, 0xdd5b}) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$SG_GET_VERSION_NUM(r10, 0x2282, &(0x7f0000000200)) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000140)) setsockopt$inet6_MRT6_ADD_MIF(r11, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:38:07 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(0xffffffffffffffff, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x2, 0xffffff7f, 0x0}) [ 1094.164422] openvswitch: netlink: Message has 5 unknown bytes. [ 1094.197188] openvswitch: netlink: Message has 5 unknown bytes. [ 1094.284547] binder_alloc: 25538: binder_alloc_buf, no vma [ 1094.308515] binder: 25538:25540 ioctl c0306201 20000080 returned -14 [ 1094.345045] openvswitch: netlink: Message has 5 unknown bytes. [ 1094.397612] openvswitch: netlink: Message has 5 unknown bytes. 03:38:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100020ba1080080002007f196be0", 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x34, &(0x7f0000000080), 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xd0, 0x0, 0x0) 03:38:08 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(0xffffffffffffffff, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:08 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r6 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) write$9p(r5, &(0x7f0000001400)="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", 0x600) sendfile(r5, r6, 0x0, 0x10000) ioctl$BLKROTATIONAL(r5, 0x127e, &(0x7f0000000080)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f00000004c0)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, @in6={0xa, 0x4e22, 0x1eec, @mcast1, 0x1}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x0, @remote}], 0x10) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) r12 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000033000505d25a80648c63940d0424fc60100010400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000440)={0x4, 0x2, 0x4, 0x10, 0x7ff, {r10, r11/1000+10000}, {0x2, 0x8, 0x3, 0x36, 0x20, 0xe0, "91c43381"}, 0x0, 0x3, @userptr=0x9, 0xcaa1, 0x0, r12}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r13, 0xc1105518, &(0x7f00000009c0)={{0x1, 0x3, 0x80, 0x5d58, '\x00', 0x8}, 0x6, 0x10, 0x2, 0x0, 0x6, 0x0, 'syz0\x00', &(0x7f0000000300)=['syz0\x00', '\x00', '/dev/uinput\x00', '/dev/uinput\x00', '/dev/uinput\x00', 'cpuset:wlan0\x00'], 0x37, [], [0x8, 0x4a03]}) ioctl$VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f00000001c0)={0x401, 0x9, 0x4, 0x20000, 0x80000001, {0x0, 0x7530}, {0x1, 0x0, 0xfc, 0x5, 0x34, 0x10, "9290b9b1"}, 0x8, 0x3, @fd=r5, 0x1, 0x0, r7}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r14, 0x84, 0x6f, &(0x7f0000000280)={r15, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x2, @remote, 0x3}, @in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x80000000}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e24, 0x6, @loopback, 0xe7f3}]}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f00000000c0)={r15, 0x7e, "a21505e9c2aca88596d9505558540b753d6c5877f793710b8a518d9564811258bc2f1748bd2f2c94ac67dba0f5c96203d619ca4fc0dff0dde040ccd9e706ee0daf06c17b2813e59816e97c16009ca0e678757ce4fd742ff714b471c31362bc52a0eee495fd5031c79d10f58f83a95a748770c1330a621104464d3ad66631"}, &(0x7f0000000180)=0x86) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000001c0)={r16, 0x1}, &(0x7f0000000200)=0x8) write$uinput_user_dev(r2, &(0x7f0000000540)={'syz0\x00', {0x75, 0x1, 0x9fe6, 0x20}, 0x41, [0x8, 0x3, 0x6, 0x0, 0x0, 0x2, 0xfff, 0x3, 0xef, 0x7fffffff, 0x0, 0x5, 0xb8, 0x3, 0x5, 0x0, 0x80000001, 0x5, 0x3, 0x8001, 0x6, 0x0, 0x5, 0x3c2, 0x8001, 0x8, 0x0, 0x2, 0x2, 0xfffffffb, 0xec2, 0x1, 0x8, 0x7, 0xfffffe00, 0x9, 0xfff, 0x1f, 0x9, 0xffffffff, 0x1, 0x7, 0x1000, 0x1, 0x8, 0x7, 0xff, 0x1, 0x8, 0x80000000, 0x5, 0x2, 0x0, 0xf922, 0x4, 0xc568, 0x1b2, 0x101, 0x8, 0xfffffffe, 0xff, 0x8, 0x3f, 0xd0], [0x8, 0x6, 0x0, 0x1, 0x2, 0xf7d, 0x4, 0x4, 0xcd, 0x5, 0x10000, 0x8, 0x5, 0x0, 0xa0, 0xfffffffb, 0xb6, 0x4, 0xc19, 0x5, 0x8000000, 0x1, 0x6, 0xdf2, 0x5, 0x1f, 0x3f, 0x7ff, 0x26, 0x7, 0x4, 0x80000000, 0x8, 0x8, 0x6, 0xcd52, 0x9, 0x8, 0x71b7, 0x2, 0x0, 0x80000000, 0xbed7, 0x3ff, 0x1, 0x400, 0x8cdb, 0x62, 0x6, 0xcbb3, 0x4, 0x9, 0x8, 0x1000, 0x2, 0x4, 0x9, 0xfffff217, 0x11, 0x3, 0x5, 0xe47, 0xfff, 0x2], [0x1, 0x9, 0x2, 0x80000000, 0x0, 0x33a7, 0xba, 0x5, 0x7, 0x657d, 0x1, 0xa8fd, 0x5, 0x0, 0x20000, 0x101, 0x9, 0x9, 0x22, 0x4, 0x9, 0x7ff, 0x20, 0x7, 0xab, 0x1ff, 0x9, 0x2, 0x0, 0xef6, 0x8, 0x0, 0x1ff, 0x1f, 0x3, 0x200, 0x10000, 0x5be67b43, 0x1, 0x6, 0x7ff, 0x5, 0x1, 0x8000, 0x4, 0x80, 0x1, 0xf2c9, 0x6189, 0x0, 0x1, 0x101, 0x80000001, 0x1ee, 0x9, 0x687, 0xfffff482, 0x4, 0x1, 0x6, 0x5, 0x1ff, 0x101, 0x81], [0x2, 0x7, 0x1, 0x1, 0x4, 0x100, 0x3, 0x1, 0x1, 0xffff8000, 0x3, 0x6882, 0x8, 0x2, 0x2, 0x46ed, 0xffffff9d, 0x81, 0x1d15, 0x6, 0x800, 0x40, 0x1f, 0xff, 0x5d7, 0x3f, 0x7f, 0x7, 0x4, 0x0, 0x5, 0x8, 0x0, 0x3ff, 0x9, 0x3c1f, 0xb2cf, 0xfff, 0x4, 0x10000, 0x0, 0x5, 0x0, 0x7f, 0x81, 0x20, 0x9f, 0x9, 0x5, 0x16af, 0xfff, 0x3ff, 0x5, 0x2, 0x3, 0x6, 0x0, 0x6, 0x8, 0xe4e, 0x40, 0x7fffffff, 0xffffffc0, 0x16a]}, 0x45c) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r17, r0) 03:38:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x3, 0xffffff7f, 0x0}) [ 1094.542691] openvswitch: netlink: Message has 5 unknown bytes. [ 1094.586897] openvswitch: netlink: Message has 5 unknown bytes. [ 1094.622952] input: syz0 as /devices/virtual/input/input77 [ 1094.640451] binder_alloc: 25549: binder_alloc_buf, no vma [ 1094.673281] binder: 25549:25553 ioctl c0306201 20000080 returned -14 03:38:08 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(0xffffffffffffffff, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1094.707837] audit: type=1804 audit(2000000288.560:449): pid=25561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir902264037/syzkaller.V9eeg1/1983/file0" dev="sda1" ino=16503 res=1 03:38:08 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2000) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x400, 0x280000) fcntl$addseals(r1, 0x409, 0x3) 03:38:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x4, 0xffffff7f, 0x0}) [ 1094.797924] openvswitch: netlink: Message has 5 unknown bytes. 03:38:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() sendmmsg$unix(r0, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9701}], 0xa, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}], 0x198, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xd0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/167, 0xa7}, {&(0x7f0000000140)=""/232, 0xe8}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000340)=""/78, 0x4e}, {&(0x7f00000003c0)=""/112, 0x70}, {&(0x7f0000000440)=""/127, 0x7f}, {&(0x7f00000004c0)=""/53, 0x35}], 0x7, &(0x7f0000000580)=""/165, 0xa5}, 0x60) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000680)) [ 1094.885249] audit: type=1800 audit(2000000288.600:450): pid=25561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16503 res=0 [ 1094.935841] binder_alloc: 25568: binder_alloc_buf, no vma [ 1094.954697] binder: 25568:25571 ioctl c0306201 20000080 returned -14 03:38:08 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1095.025471] input: syz0 as /devices/virtual/input/input78 03:38:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x5, 0xffffff7f, 0x0}) 03:38:09 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1d1f, 0x40) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000040)={'nat\x00'}, &(0x7f0000000140)=0x54) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) [ 1095.254053] binder_alloc: 25612: binder_alloc_buf, no vma 03:38:09 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1095.298401] binder: 25612:25688 ioctl c0306201 20000080 returned -14 03:38:09 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0xa, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}, @in6={0xa, 0x4e21, 0x81, @remote, 0x200}], 0x38) 03:38:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x6, 0xffffff7f, 0x0}) 03:38:09 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1095.482348] input: syz0 as /devices/virtual/input/input79 03:38:09 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040)=0x2, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap$snddsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x8010, r4, 0x8000) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r5, 0xc0e85667, &(0x7f00000001c0)={0x0, 0x104, "03a5239bdd4803260413f245b30bd82080793d416e11fe1565db5a88090d15d7", 0x101, 0xffff, 0x806, 0x1, 0x1ff, 0x7fff, 0x100, 0x3, [0xfffffffd, 0x1, 0x3, 0x200]}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000033000505d25a80648c63940d0424fc60100010400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080), &(0x7f0000000140)=0x4) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) [ 1095.591048] binder_alloc: 25702: binder_alloc_buf, no vma [ 1095.622001] binder: 25702:25706 ioctl c0306201 20000080 returned -14 03:38:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x7, 0xffffff7f, 0x0}) 03:38:09 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x0, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1095.889688] binder_alloc: 25819: binder_alloc_buf, no vma [ 1095.908601] binder: 25819:25820 ioctl c0306201 20000080 returned -14 03:38:09 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0xffffffff, 0xa, 0x4, 0x2, 0x0, {0x77359400}, {0x5, 0x0, 0x80, 0x0, 0x88, 0x8, "ae394e2f"}, 0x52, 0x1, @offset, 0x3ff, 0x0, r2}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f0000000080)={0x10000000}) 03:38:09 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) signalfd4(r5, &(0x7f00000000c0)={[0x8000]}, 0x8, 0x80c00) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VFIO_CHECK_EXTENSION(r3, 0x3b65, 0x7) dup2(r1, r0) 03:38:09 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x0, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$dupfd(r0, 0x0, r2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xd0, 0x0, 0x0) 03:38:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x12, 0xffffff7f, 0x0}) [ 1096.094435] input: syz0 as /devices/virtual/input/input81 03:38:10 executing program 2: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = dup2(r0, r2) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000000)={0x5, 0xc, 0x1f}) 03:38:10 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2041bf, 0x1e100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x7}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="d11c45a4922b9af9e040ddd07c6ba3e2ebc50ef49086282334356dac437084b94b3e16c9c8ec3675f4f81734994383dadfcbbba68b91d980baf3cb00426e014b211c710e5adda468958bbdb97740eac4d3f392c47ee5afbe952b2e43a6482c24e677d712627e57d6d3a26fcd408b2fe48644b1ea31e86ef9d3d6cc", 0x7b}, {&(0x7f00000000c0)="6f947b448f6c5147a15a40d2334be6d690c12b817288d1e0979ef77adc9f5bc46d2c", 0x22}, {&(0x7f0000000100)="193857f1fd17ed6eac75101ab410c8a1eec94bff812398bdb927f012912ff0c50eada132c01afd118e5c3de0b3354741ecf53dee8e5c0a9d00e395bc6775cb32fb865a90579babcff8bbf7c8330a6dc20eb5a6fc0b88a5aafdbf", 0x5a}, {&(0x7f0000000180)="910422a4ceebffb80638613d8fd2d750e6f90bcb764944f875b32c411bf4edd848e825b49f453812d05722218d8bab92ec67f82bd011dc4144c2b0034cc025c53ee5192d224350213ddf968a03fb", 0x4e}, {&(0x7f0000000200)="c91a7e31e2f690891d5cdb174b90a7cdb9661295d91375643addafad3dd94849792b54730f8256b6fd138f3da578bb82707937be4571c647", 0x38}], 0x5, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) [ 1096.277546] binder_alloc: 25840: binder_alloc_buf, no vma [ 1096.316921] binder: 25840:25883 ioctl c0306201 20000080 returned -14 03:38:10 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x0, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:10 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x1, 0x2, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x3}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x2}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x3}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x2676}]}, 0x34}}, 0x4000) r3 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x38, 0x0, &(0x7f0000000180)=[@exit_looper, @acquire_done={0x40106309, 0x2}, @increfs_done, @free_buffer={0x40086303, r3}], 0x2f, 0x0, &(0x7f00000001c0)="534635ddf6750b61eb2ecd62f6243fe1bdb3b00c4faaf539621c2f7df699a2946d45da9f226f2c2b29478017bb4395"}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SG_EMULATED_HOST(r5, 0x2203, &(0x7f0000000280)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000040)={0x5, 0x6, 0xbc5c}) 03:38:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x48, 0xffffff7f, 0x0}) 03:38:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x3ff, 0x3}, 'syz1\x00', 0x1}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x27, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x40000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010000d07cdd87d345d28000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="aaf20000d046b85cb01e92550250a490cff4300ad49be094008010bcf7bdbbd065501305f5a4d0dacee21d438be196e80742259eb3a1ac7e004b94f9b7ab4baa81cf128f5f61a199ab7c2badfb67c00ca013e15c05fb9a13f9557e4a9191f6c477a723c6fc1f10aca3e062d95598fbf27d12a60451f0e13ceed34dda1a105b18979383f0ef5237116d32d45ead01d0cb6ad41f7185ad664506ae44b9c79abba5de97372bd4a87357cd6c895780dcebe38410add118"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="00000000000000000000004d309838abafc60885273323457b25f83f3df43dfbb418e405eed1cc7858ebf8d15e9bec2b22b54d0f", @ANYRES32=r5, @ANYBLOB="00080080000000000300000008000100753332005800020014000500be8a0b3de755faac00000000010000000000000000000000400006003c0001000000000000000020898dde66057433b6ef3a41d22be225e0001b00000000000000000000000000000000100000000084e1a912c5998bcbf050000000000000000000000000000000798a3c067277da1a290b9613a33c575c36fad473382c8f5532ef3f0e1d2c450a7decbf3431a69f9b2ecb3291bed174245a962fe0484676958265e2988326a89db3139d91fe4aee6ae7e745abdfc21a9f61f2035979c1e3e9fea5b3958bc10300000000000000194534ba4e973684b27793bff837d3"], 0x3}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'veth0\x00', r5}) prctl$PR_SET_NAME(0xf, &(0x7f0000000540)='/dev/uinput\x00') pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000200)="21cccb2ba3f9e88e71be5cf7ade24d8b6103ceef33d85b1131ad8b4a167fea207199b608c9cf7083795c3d8452fc76cdd97f6379e4dab72f1215a7fbacf78e63a265a85e60006238b42dbd0d2da1cdae3580b7d3201c4c4ff24001d5350a4824428baefed1273511cb40f022829e1b8eb9497604e493ee5e9f3d6bf8efb212b0922735de6cec9e43f340467e572a1e036371295e70f5a36e39ba5996a7cb14e85e69da1ad239", 0xa6}, {&(0x7f00000002c0)="5d1bb50ca00bf9c39e4c7c27d6514ee76ba02cb99185606918106cf8f1b5d98d1aae209a4f9f8cc3afdb1803a9ed24dc3ecaacdefd3d4141b5169a8d0683198e80405760fd74d79aaab7d3634ccbb0960a580770576c8201aa7f35b0a17d2e8ae636a7f4cd9ba3d2b4029d732a3dad1cbbd468efe966f86cd4b1cb654cd147c77e749d4d50c02f34ad48bf4a4c33a6063e6b4f6773e2dfd3418f49a463fd", 0x9e}, {&(0x7f0000000380)="d084ed278ebde724060e21f52ea7e5f6", 0x10}, {&(0x7f00000003c0)="a2564086932de7b6fa", 0x9}], 0x4, 0x3) r7 = socket$kcm(0x10, 0x2, 0x10) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ftruncate(r8, 0x6) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000005c0)={0x0, 0x6, 0x4, 0x20, 0x20, {0x77359400}, {0x3, 0x8, 0x14, 0x80, 0x77, 0x6, "4f55781e"}, 0x2, 0x1, @userptr=0x4a5d, 0x3, 0x0, 0xffffffffffffffff}) accept4$nfc_llcp(r9, &(0x7f0000000640), &(0x7f00000006c0)=0x60, 0x80000) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000033000505d25a80648c63940d0424fc60100010400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendfile(r0, r7, &(0x7f0000000580)=0x200, 0x20) ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, &(0x7f0000000440)) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000007c0)=0x3, 0x4) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt(r10, 0x6, 0x9, &(0x7f00000000c0)="0b10fb8ffef546d3ff3bd49793cf22a79d36104f1e0077b4a23ab431ce42263b8de0c5c18933d51ce99b40104a95a2e351890bdf7997d89e95c477142082641f0444877f0ea11d7118e59604cdc777508bf6208cbe336f37d5acd0457f0275be9314028353b6fc17f29a6e329ccc768a103be7f590019225c1945d8e073246542026ca4cf469b7a608968ac7910903c234925ae57d60df2c6618663da0abbe9c8071f789711392e70736daa3c047b5fcb64b73b19d6435a5e98d4039edd492fc5c0f0e828a39", 0xc6) dup2(r11, r0) [ 1096.517342] binder: 25953:25958 ioctl c0306201 20000240 returned -11 03:38:10 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x4, 0x0, 0x8a, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0xa}, 0x0, 0x2, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000340)="43876185b7ccdfa0c669077fe7395da5b0983d33799f6b043594a105fe54935b35df046eaee61e7c8b872b05024bf5265bcc8469fdbc24191a73130baec767dcaa349beae5835564925dd9aec7576f7b9e8e5a69cf532e47d4dd5c95a6cc1f3d7910a26ccf176bb8dcf882b5bdb72f6de8ac31ea43204abb59785e51624c12942c9cda22206008f4755d5b5013756085de996300b7b7ae0c3888d4017b4965d3641e5f25996c0650b8697bec51", 0xad}, {&(0x7f0000000400)="3b994564ec35e117a94c698f750017c508d7bdc157769849bd3512cdd5f26cc33295b81a42c086797f64d9f366d7ad6a2a1cb7f1e026d7479d4969977a6f73ee9bed95f8e680837fef3059a849b2a8a3b0a181a67ce34271aadd0d9a64d94675b320fee3b30b1a73cd262d3d6fdd3a27d9566512888d3a76a1c568bb70c51b06139a4662b2c2d08b89f10b7c8bc2ee1b0018c4860081feeecad5e60291815697e81621075ec3e0fe948ae6e16236688fe9c3e8b78d22f4bd94452b59d9a0aa9dff73f1197737477bf6c7151fd4268d20041ee0fd676378270d", 0xd9}, {&(0x7f0000000500)="b6b8f4bcfcc588f3f621b99e540f46dcea873f13b8fa1bb6753134e62c8f36c6386db81a9fec35021345235c124542146b188ce50d450a7016c1ed38bbeabf517294c2433f2d08e61c467c0f0ed448867324ee4ff8fbad77e1a58cd46b4a4e90b36893af53c1e98683fd00447fa78a7833451ec69b70ee21f0d42278be7e78e779fc0dfcd5a2f1111bcf68421c00f6c3f9ec6b169c2edd077d6dbf95c8cc22922d23e6736f12294eca7e6eb31672a030287b9e7879dc82b569924bee9e7cbb5b07a5327d82ebae72e8dc5cb4608edd647c2f2f991f4a9cd8d33d63a7689b09cd1bbfdb192826f6", 0xe7}, {&(0x7f0000000600)="262952364a2aad6dfcdf7d04e19f0095b3d30222cd186ac94ce8ed8988deba8c7c939a209de0ae1e949ff098b06e774b854cfb2dbe0e345903dea11364ea0aa37809c38925dc9258aa322b425904197efd005595fb00cc9a8574913f304d91617c47b1193c229d8428eedf19502847243bf16c69245cfcd4a9cce95cfb642e90b1c55d404ccad9183bf8ceb3e683f28a4eb8aefb94dc21901f5a60e1d4db57d2ebccc4270dede790c116d393644987b31825782fceccb666af9eac554920c703e73ff9a1bf896ada8d119027030a74a1c50cfc80091b9f9b6a39660ed56835ec123b1ef724040daf48e31e03922a562a4d07926d29423dc3", 0xf8}, {&(0x7f0000000080)}, {&(0x7f0000000700)="e4edb030cd95d879ab55e7b5708d397eee916fc8eebbf1bbf0c973107ac3679462d1203dc40e9e58da59e54c01b10f8960b87a476881222e6205b57db5119f0e31574a19d7e10f20449de9eca18acb", 0x4f}, {&(0x7f0000000780)="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", 0xfe}], 0x7, &(0x7f0000000900)=[@ip_ttl={{0x14, 0x0, 0x2, 0x20}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8001}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8000}}], 0x48}, 0x50) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000980)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000002c0)=0xe1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={r5, 0xff, 0x10}, 0xfffffffffffffffe) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SCSI_IOCTL_SYNC(r4, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r6, 0x29, 0xcb, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x2003, 0x81}, 0xc) 03:38:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sysfs$2(0x2, 0x996, &(0x7f0000000000)=""/35) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0xfffffffffffffffb) 03:38:10 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1096.675584] input: syz1 as /devices/virtual/input/input83 03:38:10 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000033000505d25a80648c63940d0424fc60100010400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000000c0)={0x4, 0x6, 0x4, r1, 0x0, &(0x7f0000000080)={0x9909d2, 0x2, [], @p_u8=&(0x7f0000000040)=0x9}}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0xfe13, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) [ 1096.748024] binder_alloc: 25964: binder_alloc_buf, no vma [ 1096.805641] binder: 25964:25971 ioctl c0306201 20000080 returned -14 03:38:10 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000180)={0xa10000, 0x8d4, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x9a0921, 0xfffffffb, [], @ptr=0x3514400}}) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000001c0)=0x40) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_dccp_int(r0, 0x21, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:38:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) accept$packet(r0, 0x0, &(0x7f0000000040)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xd0, 0x0, 0x0) 03:38:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x4c, 0xffffff7f, 0x0}) 03:38:10 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:10 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)='v'}) 03:38:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x20040, 0x0) write$FUSE_GETXATTR(r1, &(0x7f0000000100)={0x18, 0x0, 0x2}, 0x18) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r0) [ 1097.171619] binder: 25989:25995 ioctl c0306201 20000080 returned -11 [ 1097.204815] binder_alloc: 25990: binder_alloc_buf, no vma 03:38:11 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) sched_getparam(r1, &(0x7f00000001c0)) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x40, 0x0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000040)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, {0x1, @random="df64867d4086"}, 0x8, {0x2, 0x4e21, @local}, 'ipvlan0\x00'}) 03:38:11 executing program 3: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80) setsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f00000000c0)=';(', 0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000700)='/dev/autofs\x00', 0x80, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000740)=@gcm_128={{0x303}, "cf7f6f03bcfe9690", "d7293d8a4d98b730102fbee96c87c0cc", "314878ba", "5d634606edf6abf2"}, 0x28) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xd0, 0x0, 0x0) [ 1097.228614] binder: 25990:25999 ioctl c0306201 20000080 returned -14 03:38:11 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x163, 0x0, &(0x7f0000000280)="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"}) [ 1097.275017] input: syz0 as /devices/virtual/input/input85 03:38:11 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:11 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x60, 0xffffff7f, 0x0}) 03:38:11 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x6) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000000c0)={0xfffffff, 0x4, 0x3, r0, 0x0, &(0x7f0000000080)={0x99096e, 0x0, [], @p_u32=&(0x7f0000000040)=0x7fffffff}}) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) 03:38:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffdff, 0x0, 0x0, 0x0, 0x80, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) 03:38:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) prctl$PR_GET_THP_DISABLE(0x2a) [ 1097.664188] binder_alloc: 26126: binder_alloc_buf, no vma 03:38:11 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x0, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1097.709376] binder: 26126:26129 ioctl c0306201 20000080 returned -14 03:38:11 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x68, 0xffffff7f, 0x0}) [ 1097.790058] input: syz0 as /devices/virtual/input/input87 03:38:11 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) init_module(&(0x7f0000000000)='##selinux#$\x00', 0xc, &(0x7f0000000040)='vmnet0wlan0mime_type-$/\x00') r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x10) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x400100, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000001c0), 0x2) sysfs$3(0x3) 03:38:11 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x0, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xffd3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) [ 1097.927229] input: syz0 as /devices/virtual/input/input88 [ 1097.951830] binder_alloc: 26144: binder_alloc_buf, no vma [ 1098.001405] binder: 26144:26146 ioctl c0306201 20000080 returned -14 [ 1098.044914] binder: BINDER_SET_CONTEXT_MGR already set [ 1098.050256] binder: 26144:26146 ioctl 40046207 0 returned -16 03:38:12 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x6c, 0xffffff7f, 0x0}) 03:38:12 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:38:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x80}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) setrlimit(0xc, &(0x7f00000000c0)={0x6, 0x1}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 03:38:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x240, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) accept$inet(r3, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000280)=0x10) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@ipv4, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8) r6 = socket$unix(0x1, 0x0, 0x0) socket$bt_rfcomm(0x1f, 0x1, 0x3) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000033000505d25a80648c63940d0424fc60100010400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r8) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) fchown(r6, 0x0, r9) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x6, {{0x3, 0x0, 0x200, 0x200, 0x3, 0x4500, {0x1, 0x6, 0x9, 0x400, 0x5, 0x3, 0x6, 0x1ff, 0x8, 0x7, 0x5, r5, r9, 0x6, 0x9}}, {0x0, 0x8}}}, 0xa0) [ 1098.254149] binder_alloc: 26267: binder_alloc_buf, no vma [ 1098.300215] binder: 26267:26269 ioctl c0306201 20000080 returned -14 [ 1098.348274] input: syz0 as /devices/virtual/input/input89 [ 1098.357671] net_ratelimit: 5 callbacks suppressed [ 1098.357680] openvswitch: netlink: Message has 5 unknown bytes. [ 1098.424213] openvswitch: netlink: Message has 5 unknown bytes. [ 1098.451486] input: syz0 as /devices/virtual/input/input90 03:38:12 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x74, 0xffffff7f, 0x0}) 03:38:12 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x0, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:12 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x140) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040), 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x1000}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:38:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9239}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) 03:38:12 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$can_bcm(r2, &(0x7f0000000040), 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKGETSIZE(r4, 0x1260, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) 03:38:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{0xff15}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r0) [ 1098.619817] binder_alloc: 26295: binder_alloc_buf, no vma [ 1098.650112] binder: 26295:26297 ioctl c0306201 20000080 returned -14 03:38:12 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x0, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xc80, 0x0) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000040)) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) [ 1098.702672] binder: 26300:26305 ioctl c0306201 20000240 returned -11 03:38:12 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x1318) 03:38:12 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x100000000, 0x3fdd, 0x7}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) 03:38:12 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x7a, 0xffffff7f, 0x0}) 03:38:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0x1ff, 0x88200) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00', 0x49}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, &(0x7f00000000c0)) 03:38:12 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x0, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1098.948285] binder_alloc: 26321: binder_alloc_buf, no vma [ 1098.975199] binder: 26322:26327 ioctl c0185879 20000040 returned -22 [ 1098.988148] binder: 26321:26324 ioctl c0306201 20000080 returned -14 [ 1099.009970] binder: 26322:26327 ioctl c0306201 20000240 returned -11 [ 1099.041643] binder: 26322:26327 ioctl c0185879 20000040 returned -22 03:38:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7a10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) 03:38:12 executing program 2: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x9, 0x1, 0x1, 0x6], 0x5, 0xffff, 0x10000, 0xfff, 0x7, 0x6, 0x2, {0x800, 0x4, 0x3, 0x8001, 0x0, 0x0, 0x7, 0x8, 0x508, 0x2, 0x7, 0x9, 0x5, 0x4, "778ed519b31634d5462e6e47a8f6322df0fc2ac3f97e1e8e5c87e40b7ea8b3b8"}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f00000001c0)={0x9, 0x3, 0x0, [{0x7, 0x1, 0x7, 0x80, 0x7, 0x8, 0x81}, {0x70000, 0xffffffffffff41ae, 0xe4, 0x40, 0x44, 0x1, 0xf9}, {0x10000, 0x280000, 0x2, 0xfe, 0x4, 0x31, 0x9}]}) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000000080)='\x00', 0x1) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x0, 0x4, [0x8000]}) 03:38:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x6) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x2000, 0x0) 03:38:13 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x8) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000180)=0x8, 0x4) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) connect$nfc_raw(r9, &(0x7f0000000140)={0x27, 0x0, 0x1, 0x4}, 0x10) r10 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x200000, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r13, 0x5501) socket(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r6) 03:38:13 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x1a0, 0xffffff7f, 0x0}) 03:38:13 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x0, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0xfffffffffffffff7}}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) 03:38:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x2000) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000180), &(0x7f00000002c0)=0x10) write$evdev(r1, &(0x7f00000001c0)=[{{}, 0x11, 0x8a0a, 0x4}, {{0x0, 0x7530}, 0x0, 0x3, 0x8}, {{0x0, 0x7530}, 0x1, 0x0, 0x5}, {{}, 0x0, 0x8, 0xc2b}, {{}, 0x1, 0x20, 0x2}, {{0x0, 0x2710}, 0x14, 0x8, 0xfffffffd}, {{}, 0x15, 0x4, 0x5}, {{0x77359400}, 0x12, 0x101, 0x69}, {{0x77359400}, 0x2, 0x1, 0x1}], 0xd8) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000000380)={0x20, 0x44, &(0x7f0000000300)="9bb1432e719adcbfa89018a1f3abc10fb6593b0de22ff9d8810f107dd1b5d0186193b226e4acffc9c48c07923409ee0af4f5a2ca0931d77de98a1ef10223ce81e675540e067cf2f9ec98c4", {0x3, 0x8000, 0x38414762, 0x4, 0x2e, 0xffffffff, 0x7, 0x8}}) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f00000003c0)=0x8ec) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r0) 03:38:13 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x300, 0xffffff7f, 0x0}) 03:38:13 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000140)={0x0, 'ip6tnl0\x00'}, 0x18) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={r4, 0xf880}, 0x8) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) [ 1099.544705] input: syz0 as /devices/virtual/input/input98 03:38:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0='bpq0\x00', 0x6, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 03:38:13 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x0, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1099.686952] binder_alloc: 26375: binder_alloc_buf, no vma 03:38:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e00000033000505d25a80648c63940d0424fc60100010400a000000053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x40409c1) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000000)) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r0) [ 1099.729535] binder: 26375:26380 ioctl c0306201 20000080 returned -14 03:38:13 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x500, 0xffffff7f, 0x0}) [ 1099.924830] input: syz0 as /devices/virtual/input/input99 [ 1099.960940] binder_alloc: 26393: binder_alloc_buf, no vma [ 1099.975132] binder: 26393:26397 ioctl c0306201 20000080 returned -14 03:38:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) r1 = dup(r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) 03:38:13 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x0, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) 03:38:13 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600) sendfile(r1, r2, 0x0, 0x10000) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000080)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}], 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x0, @remote}], 0x10) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x401, 0x9, 0x4, 0x20000, 0x80000001, {0x0, 0x7530}, {0x1, 0x0, 0xfc, 0x5, 0x34, 0x10, "9290b9b1"}, 0x8, 0x3, @fd=r1, 0x1, 0x0, r3}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={r5, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x2, @remote, 0x3}, @in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x80000000}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e24, 0x6, @loopback, 0xe7f3}]}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={r5, @in6={{0xa, 0x4e21, 0x88, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}}}, 0x84) 03:38:13 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x600, 0xffffff7f, 0x0}) 03:38:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) [ 1100.225326] input: syz0 as /devices/virtual/input/input101 [ 1100.248991] binder_alloc: 26408: binder_alloc_buf, no vma [ 1100.262779] binder: 26409:26418 ioctl c0306201 20000240 returned -11 03:38:14 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x0, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1100.289694] binder: 26408:26411 ioctl c0306201 20000080 returned -14 03:38:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000000)=""/24) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) 03:38:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x700, 0xffffff7f, 0x0}) [ 1100.355373] input: syz0 as /devices/virtual/input/input102 03:38:14 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000033000505d25a80648c63940d0424fc60100010400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = mq_open(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x2, 0x5, &(0x7f0000000100)={0x5e0, 0x400, 0x100000000, 0x16c2}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x4, 0x7, 0x2, 0x0, 0x10, r6, 0x2, [], 0x0, r2, 0x0, 0x1}, 0x3c) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000033000505d25a80648c63940d0424fc60100010400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x2202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r8, 0xc0045540, &(0x7f0000000200)) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x8000}, {r1, 0x1180}, {r3, 0x1c0}, {r4, 0x390}, {r0, 0x4001}, {r7}], 0x6, 0x4) r9 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7, 0x480201) ioctl$SIOCRSSCAUSE(r9, 0x89e1, &(0x7f0000000080)=0x7) [ 1100.421945] audit: type=1800 audit(2000000294.260:451): pid=26419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=18105 res=0 03:38:14 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) accept4(r1, &(0x7f0000000000)=@ethernet={0x0, @dev}, &(0x7f0000000080)=0x80, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x9) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:38:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x80005, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x4000) write$vhost_msg_v2(r1, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000100)=""/147, 0x93, &(0x7f00000001c0)=""/173, 0x2, 0x3}}, 0x48) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r0) 03:38:14 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x0, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1100.614778] binder: 26430:26436 ioctl c0306201 20000080 returned -14 [ 1100.647666] binder: 26432:26441 ioctl c0306201 20000240 returned -11 03:38:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x1200, 0xffffff7f, 0x0}) [ 1100.706464] openvswitch: netlink: Message has 5 unknown bytes. [ 1100.737080] input: syz0 as /devices/virtual/input/input103 03:38:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x7}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) accept4(r2, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000180)=0x80, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r4, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xff, 0x2}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffff88a, 0x3}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xfffffffd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xd0, 0x0, 0x0) [ 1100.779751] openvswitch: netlink: Message has 5 unknown bytes. 03:38:14 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) r0 = socket$netlink(0x10, 0x3, 0xe) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:38:14 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x0, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:14 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x39, 0x0, &(0x7f0000000040)="76db0338a1c6bf61ebde75751c7cc08d1c279b5e4fabb630a4632133206d31baaa2462913858a3abcdd3b3590c280fec370000000000000000"}) socket$rds(0x15, 0x5, 0x0) [ 1100.923728] input: syz0 as /devices/virtual/input/input104 [ 1100.940186] binder: BINDER_SET_CONTEXT_MGR already set [ 1100.990048] binder: 26455:26459 ioctl 40046207 0 returned -16 [ 1101.033648] binder: 26455:26465 ioctl c0306201 20000080 returned -14 [ 1101.080571] binder: 26467:26500 ioctl c0306201 20000240 returned -11 03:38:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x2000, 0xffffff7f, 0x0}) 03:38:15 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x0, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='user(ppp1$ppp1cpuset\'.\x00') 03:38:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) 03:38:15 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x397) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x11, r3, r2, r5) ioprio_get$uid(0x0, r2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) [ 1101.334964] binder: 26582:26588 ioctl c0306201 20000080 returned -14 03:38:15 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452]}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1101.407240] input: syz0 as /devices/virtual/input/input105 03:38:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x3f00, 0xffffff7f, 0x0}) 03:38:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x3, @remote}, 0x1c, &(0x7f0000001180)=[{&(0x7f0000000040)="5432729a6f97eb0b295f8d46ba4a231a81008ffa851a98a45a2351ecc79980b2265f0777bbace13449f9a1449d0481226f8bdc14", 0x34}, {&(0x7f0000000080)="ea20d008a07f9e9668e4d2ab582104e775ff712b6ee14bbd77fe7236c29ce6d905153e06c5f9659ecddee546c6398eb169ec6cba9f67220749a661dbec17e44f19c9f68ef99605ae84b4ca7339f0e6724234d1889ef7eb47e22f214c8c54d8d280ab9ea77b8d0979a2bc78cb56f3ddac3cf3ade140a214992631dfc9b25564ee97d7bf2b19d732f66964de64c3f3b7a8e2924ea1f121707f15d5ed0097db3f779b457dc68b21e63d783cd6bf844964fc7efb09b0577bdce86aaca57e23033fdd68e1077d3016e8", 0xc7}, {&(0x7f0000000180)="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", 0x1000}], 0x3, 0x0, 0x0, 0x24008000}, 0x40488c0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) [ 1101.487867] binder: 26595:26599 ioctl c0306201 20000240 returned -11 [ 1101.546934] input: syz0 as /devices/virtual/input/input106 03:38:15 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) nanosleep(&(0x7f0000000140), &(0x7f0000000180)) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x6, 0x80) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x2200, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e21, 0xfffffc01, @mcast1, 0x1e5a}, {0xa, 0x4e21, 0x1, @rand_addr="3737473742f88c34432deba8393873c3", 0xfff}, 0x7fff, [0x6, 0x81, 0x8, 0x200000, 0x9b6, 0x3ff, 0x400]}, 0x5c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) 03:38:15 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452]}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:15 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r4, 0x89e8) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f00000000c0)={0xcb, 0x3}, 0x2) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x1f, 0x1, 0x80, 0xff, 0x0, 0x7fffffff, 0x2aa8a, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f0000000000), 0xc}, 0x20284, 0x80000001, 0xf7, 0x3, 0x1000, 0x2, 0x3}, r1, 0xb, r0, 0xb) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TIOCCONS(r6, 0x541d) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xd0, 0x0, 0x0) [ 1101.676382] binder: 26607:26654 ioctl c0306201 20000080 returned -14 03:38:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) clock_adjtime(0x2, &(0x7f00000000c0)={0x0, 0x1, 0x23ee, 0x4, 0x1000, 0x570c, 0x0, 0xdad, 0x8001, 0x9, 0x49, 0x401, 0x401, 0x7ff, 0x6, 0x3, 0x4, 0x800, 0xffffffffffffff7f, 0x9e89, 0x401, 0x200, 0x200, 0x7, 0x7, 0x8001}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 03:38:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x4800, 0xffffff7f, 0x0}) [ 1101.840124] binder: 26720:26721 ioctl c0306201 20000240 returned -11 03:38:15 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452]}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:15 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x12d, 0x0, &(0x7f0000000280)="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"}) [ 1101.939966] input: syz0 as /devices/virtual/input/input107 [ 1101.999986] binder_alloc_new_buf_locked: 3 callbacks suppressed [ 1101.999999] binder_alloc: 26727: binder_alloc_buf, no vma 03:38:15 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x4, 0x13, 0x3f, 0x0, "1af9ce0c22e62272aaf3aa0cab820b2e49b73e0d72193d5be12b407a4faca21d"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x1010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xd0, 0x0, 0x0) [ 1102.041791] binder: 26727:26730 ioctl c0306201 20000080 returned -14 [ 1102.055729] input: syz0 as /devices/virtual/input/input108 [ 1102.138906] binder: 26735:26748 ioctl c0306201 20000240 returned -11 03:38:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x4c00, 0xffffff7f, 0x0}) 03:38:16 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:16 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x7) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) 03:38:16 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xd0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000d07cdd87d280000000000000000e5524908c31a75cfa2fadc2a6e085f2ebdbeb11470797460607f0dff25bb56ef17cab5cff4d14e232ee00074780edbfbd45cef634595675e90aceb250c4cbcf9b006938750f1f9331ad43f4c8a10b0519fc7cb2c5cded01c2f5a4ec04afec93c801265d5200b88a8e8fad16637e6c560da6d450d2dbe3354c4", @ANYRES32=r7, @ANYRESOCT=r2, @ANYRES32=0x0, @ANYBLOB="aaf20000d046b85cb01e92550250a490cff4300ad49be094008010bcf7bdbbd065501305f5a4d0dacee21d438be196e80742259eb3a1ac7e004b94f9b7ab4baa81cf128f5f61a199ab7c2badfb67c00ca013e15c05fb9a13f9557e4a9191f6c477a723c6fc1f10aca3e062d95598fbf27d12a60451f0e13ceed34dda1a105b18979383f0ef5237116d32d45ead01d0cb6ad41f7185ad664506ae44b9c79abba5de97372bd4a87357cd6c895780dcebe38410add118"], 0x5}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_G_MODULATOR(r3, 0xc0445636, &(0x7f0000000580)={0xabc8, "8407eecd0d147ab9fd3db795282f6390859ed0fa6f9574e2b5bda50e4e1220d1", 0x8, 0x9, 0x7f, 0x4, 0x2}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="840000002c00011400"/20, @ANYRES32=r7, @ANYBLOB="00080080000000000300000008000100753332005800020014000500be8a0b3de755faac00000000010000000000000000000000400006003c0001000000000000000020898dde66057433b6ef3a41d22be225e0001b00000000000000000000000000000000100000000084e1a912c5998bcbf050000000000000000000000000000000798a3c067277da1a290b9613a33c575c36fad473382c8f5532ef3f0e1d2c450a7decbf3431a69f9b2ecb3291bed174245a962fe0484676958265e2988326a89db3139d91fe4aee6ae7e745abdfc21a9f61f2035979c1e3e9fea5b3958bc10300000000000000194534ba4e973684b27793bff837d3"], 0x84}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@mcast2, 0x22, r7}) socketpair(0x10, 0x5, 0x80, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NFNL_MSG_ACCT_DEL(r9, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x3, 0x7, 0x3, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8001}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8000}]}, 0x54}, 0x1, 0x0, 0x0, 0x801}, 0x80) 03:38:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f00000000c0)={0x7ff, 0x1, 0xfffffffc, 0x7b8, 0x3, 0x1f}) dup2(r2, r0) [ 1102.412639] binder_alloc: 26850: binder_alloc_buf, no vma [ 1102.425346] binder: 26850:26856 ioctl c0306201 20000080 returned -14 03:38:16 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1102.458517] input: syz0 as /devices/virtual/input/input109 03:38:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x6000, 0xffffff7f, 0x0}) 03:38:16 executing program 2: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0x400, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x840, 0x0) r3 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) linkat(r3, &(0x7f00000000c0)='\x00', r4, &(0x7f00000002c0)='./file1\x00', 0x1000) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) r6 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r6, 0xc08c5335, &(0x7f0000000100)={0x0, 0x81, 0x0, 'queue0\x00'}) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$GIO_UNIMAP(r9, 0x4b66, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{}]}) getuid() setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast2, @in6=@empty, 0x4e23, 0xfff, 0x4e23, 0x0, 0x2, 0x0, 0x80, 0x3a, r7, 0xee00}, {0x40, 0x5, 0x7, 0x3, 0x5, 0x20, 0xdbe3, 0x3}, {0x9, 0x401, 0x5b, 0x3}, 0x0, 0x6e6bbd, 0x1, 0x1, 0x2, 0x3}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d6, 0x33}, 0xa, @in6=@remote, 0x3502, 0x1, 0x2, 0x40, 0x7f, 0x71f, 0x4}}, 0xe8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f0000000580)={0x0, 0x6, 0x1, 'queue0\x00', 0x8001}) ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, &(0x7f0000000400)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000540)={r10, &(0x7f0000000440)=""/212}) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000140)={r10, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000040)={r10, 0x2}) ioctl$TIOCCBRK(r5, 0x5428) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) 03:38:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000033000505d25a80648c63940d0424fc60100010400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="35000000f6ccf56ddfe84881220d1614b70ec879313c13c4003e797208c4a9d55ced067fbb5388c31e5091e9a1f49f5d35b61dd24859dfa7fe180908af6814e7f69b9180559d04279219107f603e5ca7c44e949dde8562eea1ae733743b1aa8a12f300cbf4fa00bacb8c39b229dbb694e7494269e6e2aef4d7a850831a4c836b3babb6b7790cbac6ee3d071aa8a9bbba6df1c3f405af66623eb767f11707e9ec00"/170, @ANYRES16=r3, @ANYBLOB="040027bd7000fedbdf250b0000000800040000000400"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f0000000100)='./file0\x00'}, 0x10) 03:38:16 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:16 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xd0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='selinuxcgroupem0vboxnet0)\x00') [ 1102.696902] binder_alloc: 26873: binder_alloc_buf, no vma [ 1102.715240] binder: 26873:26878 ioctl c0306201 20000080 returned -14 [ 1102.762426] openvswitch: netlink: Message has 5 unknown bytes. [ 1102.833649] input: syz0 as /devices/virtual/input/input111 03:38:16 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x6800, 0xffffff7f, 0x0}) 03:38:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000000)='system_u:object_r:getty_exec_t:s0\x00', 0x22) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x11, 0x1a001000000}, [@ldst={0x5, 0x3, 0x4801, 0x0, 0xf001}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xd0, 0x0, 0x0) [ 1103.214030] binder: BINDER_SET_CONTEXT_MGR already set [ 1103.219378] binder: 26855:27004 ioctl 40046207 0 returned -16 [ 1103.241295] audit: type=1400 audit(2000000297.090:452): avc: denied { create } for pid=26972 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:getty_exec_t:s0 tclass=key permissive=1 [ 1103.243318] binder_alloc: 26945: binder_alloc_buf, no vma 03:38:17 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) 03:38:17 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000000)=0x1000) prctl$PR_SET_FPEMU(0xa, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xcb, &(0x7f0000000100)={0x4000, 0x1, 0x0, 0x1, 0x2000000a}, 0xc) 03:38:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) signalfd4(r0, &(0x7f0000000280), 0x8, 0x800) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000180)={@null=' \x00', 0x4, 'batadv0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x2) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000080)) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r0) 03:38:17 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1103.293366] binder: 26945:26993 ioctl c0306201 20000080 returned -14 03:38:17 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1103.366980] binder: BINDER_SET_CONTEXT_MGR already set [ 1103.372478] binder: 26945:26993 ioctl 40046207 0 returned -16 [ 1103.402147] input: syz0 as /devices/virtual/input/input113 [ 1103.498809] binder: 27017:27023 ioctl c0306201 20000240 returned -11 03:38:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x6c00, 0xffffff7f, 0x0}) 03:38:17 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) r0 = gettid() ptrace$setregs(0xf, r0, 0x7fff00, &(0x7f0000000000)="85f88b630ba4719339abb7e37cca27acdc") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xcb, &(0x7f0000000100)={0x6, 0x1}, 0xc) [ 1103.569771] input: syz0 as /devices/virtual/input/input114 03:38:17 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x21, 0xffffffc0, 0x2, "838aa6562f635a68c0624d21a88b4d309a0477aa0a658b28c6da79452c10b1c537"}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x100, 0x0) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000280)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x10000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, 0x1, 0x8, 0x5, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x844}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xf7}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6a00}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x70}, 0x1, 0x0, 0x0, 0x9}, 0x8090) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) 03:38:17 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x0, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1103.808216] binder: 27100:27136 ioctl c0306201 20000240 returned -11 [ 1103.821898] binder_alloc: 27055: binder_alloc_buf, no vma [ 1103.849013] binder: 27055:27137 ioctl c0306201 20000080 returned -14 03:38:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x7400, 0xffffff7f, 0x0}) 03:38:17 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) [ 1104.103316] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.133429] binder: 27144:27147 ioctl 40046207 0 returned -16 [ 1104.159020] binder: 27144:27151 ioctl c0306201 20000080 returned -14 03:38:18 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x20000, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f00000000c0)=0x93a, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() sendmmsg$unix(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9701}], 0xa, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}], 0x198, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x2c100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xf}, 0x9000, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getpeername(r3, &(0x7f0000000180)=@nl=@proc, &(0x7f0000000100)=0x80) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xd0, 0x0, 0x0) 03:38:18 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1d4, 0x0, &(0x7f0000000800)="d0239950d826382b38c91b194a646b18d4145e93583f05bc24c7d09af64af186ec02ee70b810ebae6e38c5f590ca25ae330e1c91458bff471624362cd7aea08df8a4389c7dbaa0b8dea2614299fefd0230682562513e3a3741ec15b696a99437b9d2bc9e02f01952747b4d8000171ad225ac8fed7dbe38c94a7ba5580e7041154c0b2c70469bd14752c6caffa0f73dfa6643f862076eacdf4b353b46975d96905e536779b5a82a86b720c0928ea72b8d6ea8c6cbf15b8a091652af5b474ad2ee0d73a225dfa196aec90a7eeb0279ea5e9e0f86f4a5a34674b5d5f8fd7b3f59c846d8c1a1a5338adc2e39be97f989ff25fd37de41d0d6d3fb95dc6d157f00da5d8ded0f8942aef80fb1ec1aa2d379b88b4095d0abf814c1b811e8ae50544295fab24e2301beb8e9c3542512e375e4a0f4572ab4dfa7af6c0c1f4d7e61a2cc199618c0000000000000000000000000000048838421a180d71ecc6612f3320ff789f698948e26f8e5ae6952d81168d22eb512c007a572a152a1bd5e13a4cd35dd5cbda5eb928ab1b90dc251061a9e84ccd9b9af649e61644879f32179d06f8b0141e1fe683b3be2ad0c5f726f0f4cf5d3303ce892b40b7c92877a9cc9dd26d7388b1cb0f29482e51aaa8f6b5e73d600000000000000"}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f0000000040)={0x8000000, 0x7, 0x19}) 03:38:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000380)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f00000000c0)={0x3, 0xc, 0x4, 0x800, 0x1, {0x77359400}, {0x1, 0x1, 0x9, 0x0, 0x1f, 0xad, "162e6d1c"}, 0x9, 0x4, @offset=0x5, 0x3ff, 0x0, 0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x148, r8, 0x400, 0x70bd25, 0x25dfdbfd, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}]}, 0x148}, 0x1, 0x0, 0x0, 0x2000c050}, 0x20008010) sendmsg$DEVLINK_CMD_PORT_SET(r6, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x15c, r8, 0x2, 0x70bd2b, 0x25dfdbff, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x6, 0x4, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x2}, 0x60000000) dup2(r3, r0) 03:38:18 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x0, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:18 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) open(&(0x7f0000000000)='./file0\x00', 0x880, 0x9) 03:38:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x7a00, 0xffffff7f, 0x0}) 03:38:18 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x0, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:18 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = semget(0x2, 0x3, 0x684) semtimedop(r1, &(0x7f0000000040)=[{0x6, 0x2}, {0x3, 0x0, 0x800}, {0x3, 0x4, 0x1000}, {0x2, 0xff7f, 0x1800}, {0x4, 0x2, 0x1000}], 0x5, &(0x7f0000000080)={0x77359400}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) 03:38:18 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) [ 1104.578183] binder_alloc: 27201: binder_alloc_buf, no vma [ 1104.613471] binder: 27201:27257 ioctl c0306201 20000080 returned -14 03:38:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) socket$nl_netfilter(0x10, 0x3, 0xc) 03:38:18 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x0, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1104.649483] binder: 27264:27283 ioctl c0306201 20000240 returned -11 03:38:18 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup3(r2, r0, 0x80000) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000200)={0x2, "967f35"}, 0x6) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xa2, 0x0, &(0x7f0000000040)="76682f90537b3f86df6a1fbe691cade5e3daef968ce306a1e8c9a8232c541b86fda97db37f33a6b01bf059d802110ab7601fbfe6ec41412b145c755326f0fac0fea069ed5365ee3631174893f40f3f8879554b26d9e46ceba2a939986d0245d4b0ca084ad8b9066eba790598b2b548e3fc64f1b0137df0dd371424520cead3a0f2423bdb6e073627ab8a0745d56098d183cff9dc022d00"/162}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x20000, 0x1) connect$vsock_dgram(r4, &(0x7f0000000180)={0x28, 0x0, 0x2711, @local}, 0x10) r5 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0xeb, 0x200100) ioctl$BLKREPORTZONE(r5, 0xc0101282, &(0x7f0000000300)=ANY=[@ANYBLOB="0c0000000000000003000000000000000204000000000000ed420037f9000000070000000000000009180903000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000900000000000000008000010000009f46b7400026d6242700000000000000000000000000000000000000000000000000000008000000000000df0f0000000000001f1f0602000000002a4700000000000000000000633a1100"/205]) [ 1104.812813] input: syz0 as /devices/virtual/input/input117 03:38:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0xff81, 0x2, 0x1f, 0x2, 0x7f, 0x7, 0x0, 0x0, 0x1, 0x40, 0x81, 0x4}, {0x0, 0x81b0, 0x6, 0xcb, 0x3f, 0x8, 0x9, 0x2, 0x5, 0x2, 0x6, 0x40, 0x9}, {0x8, 0xfff9, 0x0, 0x0, 0x2, 0xfd, 0x6, 0xff, 0x3f, 0x1e, 0xff, 0xff, 0x2}], 0x238c}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xd0, 0x0, 0x0) 03:38:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x8000a0, 0xffffff7f, 0x0}) 03:38:19 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x10, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x6, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$VFIO_IOMMU_MAP_DMA(r2, 0x3b71, &(0x7f0000000000)={0x20, 0x1, 0xf8, 0x3, 0x865}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$setsig(r2, 0xa, 0x1b) 03:38:19 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000033000505d25a80648c63940d0424fc60100010400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r4 = getpgid(0xffffffffffffffff) fcntl$lock(r3, 0x25, &(0x7f0000000040)={0x0, 0x2, 0x7, 0x3ff, r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x171, 0x0, &(0x7f0000000280)="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"}) 03:38:19 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x0, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, r2) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = socket(0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000033000505d25a80648c63940d0424fc60100010400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = getpid() sendmmsg$unix(r5, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9701}], 0xa, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {r6}}}], 0x20}], 0x198, 0x0) fcntl$setown(r3, 0x8, r6) fsetxattr$trusted_overlay_redirect(r4, &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x2) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r7, r0) [ 1105.341069] binder_alloc: 27406: binder_alloc_buf, no vma [ 1105.342862] openvswitch: netlink: Message has 5 unknown bytes. [ 1105.375358] audit: type=1400 audit(2000000299.230:453): avc: denied { lock } for pid=27407 comm="syz-executor.5" path="socket:[188976]" dev="sockfs" ino=188976 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1105.386964] input: syz1 as /devices/virtual/input/input119 [ 1105.406713] binder: 27406:27410 ioctl c0306201 20000080 returned -14 03:38:19 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') r1 = socket$kcm(0x29, 0x1000000000002, 0x0) sendmmsg$inet(r1, &(0x7f0000000e80)=[{{0x0, 0xcffe0000, &(0x7f0000000400)=[{&(0x7f0000000080), 0x140000}], 0x1, 0x0, 0x0, 0x3}, 0x3400}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x500) r5 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) tkill(r5, 0x15) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) 03:38:19 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x0, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x1000000, 0xffffff7f, 0x0}) 03:38:19 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xfffffffffffffff7, 0x200402) recvfrom$rxrpc(r0, &(0x7f0000000140)=""/216, 0xd8, 0x3, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:38:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x208000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) 03:38:19 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x0, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1105.689069] binder_alloc: 27432: binder_alloc_buf, no vma [ 1105.715029] binder: 27432:27436 ioctl c0306201 20000080 returned -14 03:38:19 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010000d07cdd87d345d28000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="aaf20000d046b85cb01e92550250a490cff4300ad49be094008010bcf7bdbbd065501305f5a4d0dacee21d438be196e80742259eb3a1ac7e004b94f9b7ab4baa81cf128f5f61a199ab7c2badfb67c00ca013e15c05fb9a13f9557e4a9191f6c477a723c6fc1f10aca3e062d95598fbf27d12a60451f0e13ceed34dda1a105b18979383f0ef5237116d32d45ead01d0cb6ad41f7185ad664506ae44b9c79abba5de97372bd4a87357cd6c895780dcebe38410add118"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="840000002c00011400"/20, @ANYRES32=r6, @ANYBLOB="00080080000000000300000008000100753332005800020014000500be8a0b3de755faac00000000010000000000000000000000400006003c0001000000000000000020898dde66057433b6ef3a41d22be225e0001b00000000000000000000000000000000100000000084e1a912c5998bcbf050000000000000000000000000000000798a3c067277da1a290b9613a33c575c36fad473382c8f5532ef3f0e1d2c450a7decbf3431a69f9b2ecb3291bed174245a962fe0484676958265e2988326a89db3139d91fe4aee6ae7e745abdfc21a9f61f2035979c1e3e9fea5b3958bc10300000000000000194534ba4e973684b27793bff837d3"], 0x84}}, 0x0) recvfrom$packet(r2, &(0x7f0000000040)=""/246, 0xf6, 0x2000, &(0x7f0000000140)={0x11, 0x15, r6, 0x1, 0x5}, 0x14) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)='v'}) 03:38:19 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000240)='tls\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x101200) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000002c0)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@dev, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000000)=0xe8) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x22}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast2, 0xc29c, 0x9af2, 0x7, 0x500, 0x6, 0x4200022, r7}) 03:38:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x2000000, 0xffffff7f, 0x0}) 03:38:19 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getpeername$tipc(r1, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x10, 0x0, 0x0, 0x0, 0x41bf, 0x10842, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x1020}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xd0, 0x0, 0x0) 03:38:19 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x0, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1105.962270] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1105.997517] binder: 27448:27451 ioctl c0306201 20000240 returned -11 [ 1106.007429] binder_alloc: 27453: binder_alloc_buf, no vma [ 1106.049636] binder: 27453:27456 ioctl c0306201 20000080 returned -14 03:38:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) waitid$P_PIDFD(0x3, r3, &(0x7f00000000c0), 0x1, &(0x7f0000000140)) 03:38:20 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) 03:38:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x80000001, 0x41) 03:38:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x3000000, 0xffffff7f, 0x0}) 03:38:20 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000040)=0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:38:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x0, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1106.402225] binder: 27470:27477 ioctl c0306201 20000240 returned -11 [ 1106.422259] binder: BINDER_SET_CONTEXT_MGR already set [ 1106.444663] binder: BINDER_SET_CONTEXT_MGR already set 03:38:20 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) [ 1106.461139] input: syz0 as /devices/virtual/input/input120 [ 1106.462138] binder: 27470:27477 ioctl 40046207 0 returned -16 [ 1106.478888] binder: 27474:27479 ioctl 40046207 0 returned -16 [ 1106.480314] binder: 27474:27486 ioctl c0306201 20000080 returned -14 03:38:20 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb73}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_G_INPUT(r5, 0x80045626, &(0x7f0000000000)) syncfs(0xffffffffffffffff) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xd0, 0x0, 0x0) 03:38:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:20 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$tipc(r2, &(0x7f0000000400)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x2}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="36ea68b0d3e6d9e3560a1163295bf92c3e61e373545a152338840306d97d0f2454a6a084b3b03878a80a46ff67d69b2de19bcaf7d7aee9c2f8479d9a679d6704cbefa9fc12092ef573d8fb8e8e9d26055fc9a650752fbbb042e5ed9742428f033aefe9e542622fa097c562fe4ac3149e7cbb1921f1b9c453a54f7ed6d9c509fe0ea9f6c865810ebb39dbe09616d779abf95f98bdda7a1efedf992c01da98a75a4f9dc94e", 0xa4}, {&(0x7f0000000140)="0274435a9163af362ba4a5cfc5302e15b81092822633e34dee3ce8e81ec9b82389dac0ab5a82e4107e39e9404f75eda83051757d4b9e1d602437a427856610c2fe9d6cb1cab1d4eb12b74d520ffe1dda328f401756ab99fa46ee007416fdb6d7a96718fbd8f102e746c38ce67b1f21f6cbab4da920a67e7dfeb3ad0e39421f1389fab6fdbeb0a2f5202bdc4619", 0x8d}, {&(0x7f0000000280)="51417ea4150ff438cdff3b70bbc5321143157df172e80e04c2714f9dfe2450c81664d51399a0786b3138fab723b56d3bdfa9c8c165287ba0ea5d450593e4edf50e0c0763c5564b41c35ded7deb076ad975d8a4467312cae8ffbe04ae2f8cc98e49", 0x61}], 0x3, &(0x7f0000000300)="318d1596902ba13852496484602cf2d15176d15ad5a40e95746235c551857148da1a0ac583ec55817b90a110458cbb04c2d535c7d6cad4e96f98981d7d3ba751b76da868b29e8be9b0f44fec347b465e2642363ab79f1beadef6e52bf0418cd4d1fda35676af196937c7f87a933ac6aed19aff82f5c7c9de8fbab18dde151643304ef54b6be599317937730bc406f64f2886ae582ed61da75b9a073b9784b67bb173cdfa4aa44d1b465dd74312dd5069e2f112f958320361bf72e865bcf805505a65b33bacdaff71e5fd341e2075393cf59aa5a9931c6e0c7dca917463acce9ae3379ff490fdc9b9441d659d19", 0xed, 0x4000000}, 0x24040010) 03:38:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x4000000, 0xffffff7f, 0x0}) 03:38:20 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000180)={0x1, r5}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x6, 0x1, 0x1f, 0x8, 0x0, 0x8, 0x3435, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3f, 0x4, @perf_bp={&(0x7f0000000000), 0x9}, 0x2, 0x6, 0x7ff, 0x4, 0x431f, 0x3, 0x800}, r1, 0x9, r3, 0x5) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:38:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x4, 0x0, 0x227a}, 'syz1\x00', 0xc}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x28000, 0x84) ioctl$RTC_EPOCH_READ(r3, 0x8008700d, &(0x7f00000001c0)) dup2(r2, r0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0xc1040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, &(0x7f0000000140)=0x3) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f00000000c0)=0x62) 03:38:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="6bebc94910684b552b784df949ede0c06ff1c0", 0x13, 0xfffffffffffffffa) keyctl$update(0x2, r1, &(0x7f00000000c0)="9b590611912024fb5b7a1de3f7f45a0d067138dd1d7e829d2e6eaceab5b5ede0c56ca1d6f3e21fd2217d477f053bc6627f303ad1888aab4d4d0383622ea9d93d7fbb81e7217e3011c111d17605a4", 0x4e) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_tcp_buf(r3, 0x6, 0xe, &(0x7f0000000140)=""/213, &(0x7f0000000240)=0xd5) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) [ 1106.844625] binder_alloc: 27608: binder_alloc_buf, no vma [ 1106.866679] input: syz1 as /devices/virtual/input/input122 [ 1106.885568] binder: 27608:27611 ioctl c0306201 20000080 returned -14 03:38:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x5000000, 0xffffff7f, 0x0}) [ 1107.015649] input: syz1 as /devices/virtual/input/input123 03:38:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x400, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:21 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='system-^\x00') sendmmsg$unix(r0, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9701}], 0xa, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}], 0x198, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xcb, &(0x7f00000001c0)={0x200, 0x1, 0x0, 0x0, 0x8000}, 0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) setfsuid(r3) 03:38:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() sendmmsg$unix(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9701}], 0xa, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20}], 0x198, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ocfs2_control\x00', 0x20200, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$l2tp(0x2, 0x2, 0x73) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001a80)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0x38) r8 = socket$unix(0x1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) fchown(r8, 0x0, r9) sendmmsg$unix(r0, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x1}], 0x1, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r3, r7, r9}}}], 0x40}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000000}, r1, 0x0, 0xffffffffffffffff, 0x0) r10 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x151240) ioctl$BLKRESETZONE(r10, 0x40101283, &(0x7f0000000080)={0x1, 0xff}) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$TIOCL_SELLOADLUT(r13, 0x541c, &(0x7f00000000c0)={0x5, 0x0, 0x8, 0x80000001, 0x6}) setsockopt$inet6_MRT6_ADD_MIF(r11, 0x29, 0xd0, 0x0, 0x0) 03:38:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x4, {0x9}}, 0x18) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) [ 1107.256452] binder: BINDER_SET_CONTEXT_MGR already set [ 1107.271227] binder: 27700:27738 ioctl 40046207 0 returned -16 03:38:21 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1107.305842] binder: 27700:27741 ioctl c0306201 20000080 returned -14 [ 1107.418866] input: syz0 as /devices/virtual/input/input124 03:38:21 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x6) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x3, 0x447282) read$FUSE(0xffffffffffffffff, &(0x7f0000000500), 0x1000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) 03:38:21 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x6000000, 0xffffff7f, 0x0}) 03:38:21 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @multicast2}, &(0x7f0000000040)=0xc) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xd0, 0x0, 0x0) 03:38:21 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)) dup2(r1, r0) 03:38:21 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1107.637865] binder_alloc: 27759: binder_alloc_buf, no vma [ 1107.668652] binder: 27759:27762 ioctl c0306201 20000080 returned -14 03:38:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x6) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) unlink(&(0x7f0000000040)='./file0\x00') 03:38:21 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x7000000, 0xffffff7f, 0x0}) [ 1107.767272] input: syz0 as /devices/virtual/input/input126 [ 1107.867119] input: syz0 as /devices/virtual/input/input127 [ 1107.961550] binder_alloc: 27779: binder_alloc_buf, no vma [ 1107.985051] binder: 27779:27785 ioctl c0306201 20000080 returned -14 03:38:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0x0, 0x40}, 'syz0\x00', 0x4b}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000180)={r2, 0x71, "8085f16c0a57b2bfaaf44cebe4bddad62d393f643a805c9e693d7a9840a1aa0b9ffc3c36960c21b81d3f4fe6fc8adebefa618e405f1428afb0070118498dcca095b28f87fbf63576358ff77714b458ff8336cb1f89c84544a3b4f7fa319828595d34c321883ed7029eb947ddcb22b692a0"}, &(0x7f0000000200)=0x79) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r0) 03:38:22 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x12000000, 0xffffff7f, 0x0}) 03:38:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00') setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) [ 1108.235924] binder_alloc: 27793: binder_alloc_buf, no vma [ 1108.253999] input: syz0 as /devices/virtual/input/input128 [ 1108.271712] binder: 27793:27797 ioctl c0306201 20000080 returned -14 [ 1108.444191] input: syz0 as /devices/virtual/input/input129 03:38:22 executing program 5: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/136, 0x88}], 0x1, &(0x7f0000000280)=""/229, 0xe5}, 0x120) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000380)=0x7, 0x4) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000740)) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000640)=""/207) r4 = accept4(0xffffffffffffffff, &(0x7f0000000500)=@ipx, &(0x7f0000000480)=0x80, 0x80000) recvfrom$rxrpc(r4, &(0x7f0000000580)=""/66, 0x42, 0x40000020, &(0x7f0000000600)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x2, @loopback, 0xfffffff9}}, 0x24) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCRTMSG(r5, 0x890d, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e21, @rand_addr=0xff}, {0x2, 0x4e24, @multicast2}, 0x8, 0x0, 0x0, 0x0, 0x9, &(0x7f00000003c0)='ip6gre0\x00', 0x5, 0x40, 0x1ff}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) 03:38:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x80184153, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[&(0x7f0000000040)="d11268f966c2d36b8ccc64a7e454325031025581bf58e3b08678ef4623de69eba8eb89a8b824f7b7a3371cc19394bd91116a52d60d13a4bd405f178ceb38f0b110b899d20e3abccf82514fb8cdd8c35f63ae54ad2bb04db7f979840c55aa0f7e2ad3e781d4e0b2b4689c54e25f4b1a3ccc7f29b0272038f06cd0ab1207943f9f1fb303cfe808844488bda827d2d162fc18abc357139c0c180274e9f296e338196e7e9056bf338e7296e22ee9784050f17e19cf0ecf032650007d61b5e1b06240c03501f9e7e988590f5783769f2492256c22fa946834bbf480c6d629adc1df044b96cb8a635adbb55a808657f94dae0aef0d2e55b2cd7918da"]}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xd0, 0x0, 0x0) 03:38:22 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x397) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x11, r2, r1, r4) setfsuid(r1) keyctl$set_reqkey_keyring(0xe, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$kcm(0x10, 0x2, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x30, r8, 0xa995953144e8a667, 0x0, 0x0, {{}, {0x0, 0x3}, {0x14, 0x18, {0xe00, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r8, 0x6b57f2663b8ba9d7, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x1) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r9) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r10, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:38:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x20000000, 0xffffff7f, 0x0}) 03:38:22 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x0, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:22 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000000)=0x10000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmsg$kcm(r1, &(0x7f0000000280)={&(0x7f00000000c0)=@ipx, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)=""/135, 0x87}, {&(0x7f0000000200)}], 0x2}, 0x40000102) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000200)=@ethtool_rxfh_indir={0x0, 0x8, [0x4, 0x85, 0x3f, 0x1, 0x0, 0xc9a, 0x7, 0xffffffff]}}) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = syz_open_dev$vcsu(&(0x7f00000004c0)='/dev/vcsu#\x00', 0x3, 0x0) getsockopt$ax25_int(r5, 0x101, 0x7, &(0x7f0000001540), &(0x7f0000001580)=0x4) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r6, r4) 03:38:22 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x0, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1108.648807] binder_alloc: 27914: binder_alloc_buf, no vma [ 1108.662627] binder: 27914:27919 ioctl c0306201 20000080 returned -14 03:38:22 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0xedd1de7813b07314, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[], 0xcb78, 0x7ff, 0x2, 0x4, 0x6, r3}) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) [ 1108.724426] binder: 27921:27923 ioctl c0306201 20000240 returned -11 03:38:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x3f000000, 0xffffff7f, 0x0}) 03:38:22 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000033000505d25a80648c63940d0424fc60100010400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) dup2(r0, r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x90000800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c000000010805090000000c0000050900010073797a300000000006000240000c0000050003002f0000000900010073797a3100000000050003002100000005000300880000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) [ 1108.835071] input: syz0 as /devices/virtual/input/input130 03:38:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x111881, 0x0) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)=0x1e4c) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x1) 03:38:22 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x0, 0x6, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)={0x5, 0x9, 0xfffffff9, 0x0, 0x11, "1e7021c2495850b486de27a735499c85966736"}) dup2(r1, r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$uinput_user_dev(r3, &(0x7f0000000540)={'syz0\x00', {0x2, 0x8, 0x0, 0x6}, 0x3b, [0x7, 0x2, 0x8, 0x400, 0x8, 0x28000000, 0xffffffa9, 0x8001, 0x2b3, 0x7, 0x6, 0x20, 0x6, 0x8001, 0x4, 0x7, 0x20, 0x1, 0x2, 0x4, 0x6, 0x7, 0x3, 0x3, 0x8, 0x0, 0x0, 0x4, 0x5, 0x3, 0xffffffff, 0x4, 0x9, 0x1f, 0x8, 0x2, 0x80000001, 0x0, 0x3, 0x2, 0x4, 0x9, 0x3db, 0x401, 0x3f, 0x6, 0x6, 0x10001, 0x9dc6, 0x6, 0x5, 0x8, 0x1, 0x0, 0x8, 0x7f, 0xffffff80, 0x80000000, 0x3f, 0x6351, 0x9, 0x7, 0x5, 0x81], [0x7, 0x4, 0x0, 0x8, 0x4, 0x2, 0x93b6, 0x1ff, 0x7, 0x1ff, 0x1, 0x81, 0x0, 0x0, 0x72, 0xb1d, 0x2, 0x4, 0x401, 0x7f, 0x5, 0x10000, 0x62, 0x4, 0x5, 0x96f, 0x6, 0x1, 0x5, 0x6, 0x80000001, 0x5, 0x8, 0x1f, 0x0, 0x9689, 0x6, 0x8d20, 0x8, 0xb74, 0x4, 0x5, 0x9, 0x800, 0x81, 0x1, 0x13a32f29, 0x8, 0x4, 0x20, 0x860c, 0x1, 0x7f, 0xbf3, 0x4, 0x805, 0x52, 0xffffffff, 0x200, 0x2, 0x1, 0x3, 0x1ff, 0x91], [0x2, 0x1, 0x4, 0x1, 0x3, 0x6, 0x4, 0x23f933ae, 0xaa, 0x7fff, 0x4, 0xba, 0xffff691f, 0x3, 0x4, 0x5, 0x1f, 0xbc5, 0xe1, 0xfff, 0xfffff800, 0x8001, 0x0, 0x7, 0x9, 0x3, 0x3, 0xe7, 0xed2, 0x4, 0x2, 0x10000, 0x7fff, 0x8, 0xb3f, 0x8, 0x1ff, 0x0, 0xa97e, 0x7c0, 0xfffffff9, 0x200, 0x7, 0x7, 0xfffffff9, 0x5, 0x101, 0x8000, 0x8, 0x2, 0x3, 0x5, 0x3, 0x8f, 0x70, 0x7fff, 0x1, 0x1ff, 0x6, 0x4, 0x20, 0xfffffff8, 0xfffffff9, 0x3], [0x0, 0xffffffff, 0x367, 0x0, 0x8e, 0x7ff, 0x8, 0x4, 0x3, 0x80000000, 0x4, 0x400, 0x4, 0x56053c74, 0x3ff, 0x5, 0x1, 0xffff0001, 0x1ff, 0xffffffff, 0x3, 0x9, 0x6, 0x7, 0x8, 0x3, 0x200, 0xffff, 0x1000, 0x1, 0x3b8, 0x1, 0x0, 0x8, 0x8, 0x4, 0x8, 0x1, 0x80000000, 0x40, 0x67, 0xfffffbff, 0x1f, 0x3, 0x906, 0x5d1a, 0x2, 0x10001, 0x9, 0x50b0, 0x7, 0x1, 0x9, 0x0, 0x2, 0x8001, 0xf800, 0x0, 0x401, 0x2, 0xda2b, 0x657, 0x0, 0x9]}, 0x45c) [ 1109.085489] binder_alloc: 27942: binder_alloc_buf, no vma [ 1109.123847] openvswitch: netlink: Message has 5 unknown bytes. 03:38:23 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0902000000000000ff0f02"], 0x3}}, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x48, r3, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 03:38:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x26040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x939}, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x80122, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) [ 1109.139193] binder: 27942:27947 ioctl c0306201 20000080 returned -14 [ 1109.165197] input: syz0 as /devices/virtual/input/input131 [ 1109.171780] binder: 27945:27951 ioctl c0306201 20000240 returned -11 03:38:23 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x48000000, 0xffffff7f, 0x0}) 03:38:23 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1109.212355] openvswitch: netlink: Message has 5 unknown bytes. [ 1109.307122] input: syz0 as /devices/virtual/input/input132 03:38:23 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U-', 0x8f}, 0x16, 0x0) fchdir(0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r4, 0x10f, 0x83, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000100)={0x101, 0x8}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) 03:38:23 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x8, 0xffffffff}, 0xc) r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) sendfile(r0, r1, &(0x7f0000000040)=0x220f75db, 0x8) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000080)=0x4) [ 1109.462873] binder_alloc: 27967: binder_alloc_buf, no vma [ 1109.538749] binder: 27967:27981 ioctl c0306201 20000080 returned -14 03:38:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x1a0c40, 0x0) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000080)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x7, 0x5, 0x1, "525672a9765f8eecc67d0bfbc32404bbc49ef8d08938af7bacac94573f3be4d4", 0x49299814}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xd0, 0x0, 0x0) 03:38:23 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x4c000000, 0xffffff7f, 0x0}) [ 1109.601951] binder: 28062:28127 ioctl c0306201 20000240 returned -11 03:38:23 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$caif(r2, &(0x7f00000000c0)=@rfm={0x25, 0x1, "26a274ac5b8a46f4309c823d19601c2e"}, 0x18) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r0) 03:38:23 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='\x00'}) 03:38:23 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000000)) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) [ 1109.805054] binder_alloc: 28192: binder_alloc_buf, no vma [ 1109.839215] binder: 28192:28197 ioctl c0306201 20000080 returned -14 03:38:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) r1 = gettid() sendmsg(r0, &(0x7f00000014c0)={&(0x7f0000000100)=@in={0x2, 0x4e22, @broadcast}, 0x80, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x12d0}, 0x2000c884) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000080)={0xffffff17, 0x2, 0x4, 0x40000, 0xfffffff9, {0x77359400}, {0x3, 0xc, 0x0, 0x80, 0x6, 0x20, "6b58f193"}, 0x77634282, 0x3, @offset=0x5, 0x5a3, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x9, 0x4, 0x9, 0x80, 0x0, 0x4, 0x4c4c0, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7f, 0x0, @perf_config_ext={0x0, 0x101}, 0x12804, 0x800, 0x3f, 0x6, 0x0, 0x125a, 0x6}, r1, 0x4, r4, 0xa) keyctl$restrict_keyring(0x1d, 0xffffffffffffffff, 0x0, &(0x7f0000000180)='\x00') [ 1109.873666] input: syz0 as /devices/virtual/input/input133 [ 1109.892720] binder: 28199:28205 ioctl c0306201 20000240 returned -11 03:38:23 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x60000000, 0xffffff7f, 0x0}) 03:38:23 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:23 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) r1 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x2, 0xb, 0x2}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={0x0, @nfc={0x27, 0x1, 0x1, 0x1}, @xdp={0x2c, 0x6, 0x0, 0x18}, @llc={0x1a, 0x338, 0x6f, 0x4, 0x44, 0x1f, @random="7ed5df458c42"}, 0x2f4, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000280)='batadv_slave_0\x00', 0xfffffffffffffe00, 0x1f, 0x431}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', r5}) r6 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) read$alg(r6, &(0x7f0000000080)=""/89, 0x59) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f0000000040)) 03:38:24 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = shmget(0x0, 0x2000, 0x80, &(0x7f0000ffe000/0x2000)=nil) personality(0x0) shmctl$SHM_LOCK(r1, 0xb) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) [ 1110.159974] binder: BINDER_SET_CONTEXT_MGR already set [ 1110.175105] binder: 28294:28332 ioctl c0306201 20000240 returned -11 03:38:24 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') accept4(r2, &(0x7f0000000540)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000004c0)=0x80, 0x800) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f00000006c0)=0xe8) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r3, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5c7024c294c59f70}, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) fsetxattr$trusted_overlay_redirect(r4, &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x1) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video2\x00', 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000033000505d25a80648c63940d0424fc60100010400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x20001, 0x0) dup2(r7, r8) 03:38:24 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r1, 0x40184150, &(0x7f00000001c0)={0x0, &(0x7f0000000100)="978d45bd634dfce1ab740ea1d9188b0f0666c4772936163a4eb63b27b55adc1db5b9b15464323629954b40edff4c0d11586159f1ac2bccc83f5d7f37c6df8c40fb2c6259d63e93c1d9d544a9757d833543ae0001d70c5793f209f2567e8608cd609883378c73392ebfa3d956d0c36b4e92c273bd22ad1d57681be397386e77e095b1fa404f959baa3f", 0x89}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x7, 0x3, 0x4, 0x0, 0x7, {0x77359400}, {0x5, 0x1, 0x3, 0x1, 0x1f, 0x40, "d6e51649"}, 0x48, 0x2, @planes=&(0x7f0000000000)={0xffff, 0x0, @fd}, 0x4, 0x0, 0xffffffffffffffff}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x808, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xd0, 0x0, 0x0) [ 1110.217338] binder: 28271:28333 ioctl c0306201 20000080 returned -14 [ 1110.222248] binder: 28271:28321 ioctl 40046207 0 returned -16 03:38:24 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x68000000, 0xffffff7f, 0x0}) [ 1110.342187] input: syz0 as /devices/virtual/input/input135 03:38:24 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1110.416098] openvswitch: netlink: Message has 5 unknown bytes. 03:38:24 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000000)={0x81, 0x1d, [{0x9, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0xf}, {0x5}, {0x9}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0xf}, {0xb, 0x1}, {0xf}, {0x5}, {0xd}, {0xe}, {0x1, 0x1}, {0x3}, {0x4}, {0xe}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0xb}, {0xf, 0x1}, {0x7}, {0x3}]}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x4000, 0x0) write$P9_RMKNOD(r3, &(0x7f0000000080)={0x14, 0x13, 0x2, {0x4, 0x3, 0x2}}, 0x14) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) [ 1110.478404] input: syz0 as /devices/virtual/input/input136 03:38:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) [ 1110.546258] binder_alloc: 28352: binder_alloc_buf, no vma [ 1110.589805] binder: 28352:28356 ioctl c0306201 20000080 returned -14 03:38:24 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r4, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r0) 03:38:24 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x6c000000, 0xffffff7f, 0x0}) [ 1110.798046] binder_alloc: 28368: binder_alloc_buf, no vma [ 1110.851757] binder: 28368:28372 ioctl c0306201 20000080 returned -14 [ 1110.882691] binder: BINDER_SET_CONTEXT_MGR already set [ 1110.915829] binder: 28368:28372 ioctl 40046207 0 returned -16 03:38:24 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000040)=0x7fffffff, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) 03:38:24 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x101400, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_bp={&(0x7f0000000040), 0x2}}, 0x0, 0x0, r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xd0, 0x0, 0x0) 03:38:24 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000000, 0x5, 0x15a9492c1c8e63a1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:38:24 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e20, @remote}, {0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x8}) dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000140)={0x20, 0x4, 0x2, 0x3f, 0x8}) 03:38:24 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x74000000, 0xffffff7f, 0x0}) [ 1111.083243] input: syz0 as /devices/virtual/input/input139 [ 1111.107827] binder_alloc: 28383: binder_alloc_buf, no vma 03:38:25 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r1, 0x10e, 0x2, &(0x7f0000000000)=""/23, &(0x7f0000000040)=0x17) [ 1111.146923] binder: 28383:28395 ioctl c0306201 20000080 returned -14 [ 1111.162578] binder: 28391:28399 ioctl c0306201 20000240 returned -11 [ 1111.170718] binder: BINDER_SET_CONTEXT_MGR already set [ 1111.170736] binder: 28383:28395 ioctl 40046207 0 returned -16 [ 1111.191834] input: syz0 as /devices/virtual/input/input140 03:38:25 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) fcntl$getown(r0, 0x9) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:38:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x7a000000, 0xffffff7f, 0x0}) 03:38:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000040)=0x7fff) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000000)=0x7) [ 1111.377147] binder: 28494:28506 ioctl c0306201 20000080 returned -14 03:38:25 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x632c, 0x2, 0x4, 0x1, 0x6, {0x0, 0x2710}, {0x2, 0x0, 0x1, 0xfe, 0x1, 0x1, "951cf611"}, 0x40000, 0x1, @planes=&(0x7f0000000040)={0xf7bf, 0x101, @mem_offset=0x3, 0xabd}, 0x50e8e310, 0x0, r0}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) 03:38:25 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg$kcm(r3, &(0x7f0000000880)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000140)=""/127, 0x7f}, {&(0x7f00000001c0)=""/72, 0x48}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000280)=""/88, 0x58}, {&(0x7f0000000300)=""/32, 0x20}, {&(0x7f0000000340)=""/87, 0x57}, {&(0x7f00000003c0)=""/72, 0x48}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000540)=""/163, 0xa3}, {&(0x7f0000000600)=""/214, 0xd6}], 0xa, &(0x7f00000007c0)=""/150, 0x96}, 0x10001) 03:38:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0xa0008000, 0xffffff7f, 0x0}) 03:38:25 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x20, 0x0, 0x0, 0x41bf, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x424}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000), 0x80000) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9, 0x0, 0x2, 0xfffd, 0x5}, 0xc) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8000, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) 03:38:25 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1111.618410] binder: 28530:28536 ioctl c0585609 20000080 returned -22 [ 1111.621668] binder: 28534:28538 ioctl c0306201 20000080 returned -14 [ 1111.657324] input: syz0 as /devices/virtual/input/input141 03:38:25 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) 03:38:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0xa0010000, 0xffffff7f, 0x0}) 03:38:25 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xcc, 0xb, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1f}, @IPSET_ATTR_ADT={0x74, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x2}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x2}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'vlan1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x77}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x98}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x3}}]}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8eda}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x7}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x4081) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:38:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in=@local, @in=@broadcast}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xd0, 0x0, 0x0) 03:38:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x100, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000200)={0x8, 0x5, 0x4, 0x400, 0x1, {}, {0x2, 0x0, 0x0, 0x3f, 0x7, 0xab, "02fb50e3"}, 0x8000, 0x2, @fd=r3, 0x679e, 0x0, r4}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r0) r6 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) personality(0x6) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000180)={0x980000, 0x800000, 0x10000, r0, 0x0, &(0x7f0000000140)={0x99096c, 0x9, [], @p_u16=&(0x7f0000000100)=0xff0}}) [ 1111.861462] binder: 28553:28555 ioctl c0306201 20000240 returned -11 [ 1111.876142] binder: 28552:28554 ioctl c0306201 20000080 returned -14 03:38:25 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:25 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000000)={0xd5dc, 0x401, 0x3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xd0, 0x0, 0x0) 03:38:25 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x408000, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x28, &(0x7f0000000080)}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000100)={0xc, @output={0x1000, 0x0, {0x48c56e9d, 0x4}, 0x6, 0x3}}) [ 1111.990387] input: syz0 as /devices/virtual/input/input143 03:38:25 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000080)={0xf000000, 0xa40, 0x401, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9c0a5e, 0xa6d, [], @p_u16=&(0x7f0000000000)=0x1}}) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x1, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8011}, 0x50) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:38:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0xfdfdffff, 0xffffff7f, 0x0}) 03:38:26 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1112.189467] binder: 28577:28580 ioctl c0306201 20000240 returned -11 [ 1112.214181] binder: 28575:28583 ioctl c0306201 20000080 returned -14 03:38:26 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x6b, 0x210800) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$unix(0x1, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r4) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) 03:38:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x101000, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) getpeername$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x35) r6 = msgget(0x3, 0x8) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0xa8, r7, 0x4, 0x70bd28, 0x25dfdbfb, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) ioctl$SNDRV_PCM_IOCTL_XRUN(r3, 0x4148, 0x0) msgctl$MSG_STAT(r6, 0xb, &(0x7f0000000300)=""/156) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000080)={'veth0_virt_wifi\x00', {0x2, 0x4e23, @multicast2}}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYPTR=&(0x7f0000000700)=ANY=[@ANYRES16, @ANYPTR, @ANYRES16]], 0x3}, 0x1, 0x0, 0x0, 0x81}, 0x10) 03:38:26 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0xfffffdfd, 0xffffff7f, 0x0}) 03:38:26 executing program 5: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syslog(0x3, &(0x7f0000000340)=""/111, 0x6f) dup(r2) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000080)={0x1, 0x3, 0x4, 0x40000822, 0x9, {0x77359400}, {0x4, 0x0, 0x80, 0xb9, 0x87, 0x8, "1500"}, 0x81, 0x2, @planes=&(0x7f0000000140)={0x4, 0x9, @fd, 0x7ff}, 0x7}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) 03:38:26 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:26 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$kcm(0x10, 0x2, 0x10) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f00000002c0)={0x5, 0x1000, 0x1, 0x401}) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000033000505d25a80648c63940d0424fc60100010400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000200)={0x8, 0xb, 0x4, 0x40, 0x7fffffff, {}, {0x2, 0x2, 0x40, 0x40, 0x53, 0x2, "d80297e8"}, 0x5, 0x2, @fd=r3, 0x5dc, 0x0, r4}) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000280), 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TUNSETCARRIER(r7, 0x400454e2, &(0x7f00000001c0)=0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000300)={0x5, 0x9, 0x100, 0x7, 0x4, 0x7ac, 0x9, 0x400}, &(0x7f0000000340)={0x2, 0x7, 0x2, 0x100000001, 0x1, 0xffffffff, 0x9}, &(0x7f0000000380)={0x3, 0x4, 0x5, 0xffff, 0x1, 0x8, 0x8e35, 0x7}, &(0x7f0000000400)={r11, r12/1000+10000}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r10, 0xc0205648, &(0x7f0000000080)={0x9d0000, 0xbb0d, 0x80000001, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x4e0480, 0x8, [], @p_u8}}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r13, 0x84, 0x74, &(0x7f0000000140)=""/60, &(0x7f0000000180)=0x3c) setsockopt$inet6_MRT6_ADD_MIF(r8, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) [ 1112.504758] binder: 28599:28600 ioctl c0306201 20000080 returned -14 03:38:26 executing program 0: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x20040, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = getpid() r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x4) stat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000800)={{{@in=@empty, @in6=@rand_addr="145aa42cbb9cfcaef0efe41b7c92a063", 0x4e21, 0x8001, 0x4e21, 0x7, 0x2, 0x80, 0x20, 0x67, r5, r6}, {0x848d, 0x7fffffff, 0x4ba1, 0x75, 0x3, 0x15e3, 0x7fff, 0x8}, {0x2, 0x0, 0x47, 0x1f}, 0x2, 0x6e6bbc, 0x1, 0x0, 0x1, 0x2}, {{@in6=@mcast1, 0x4d3, 0x3c}, 0x2, @in=@empty, 0x3507, 0x1, 0x2, 0x0, 0x0, 0xffff0000, 0x3}}, 0xe8) r7 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmmsg$unix(r7, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x1}], 0x1, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}], 0x1, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) connect$ax25(r0, &(0x7f0000000240)={{0x3, @bcast, 0x4}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}, 0x48) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000033000505d25a80648c63940d0424fc60100010400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) dup2(r8, r0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000100)=r1) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r9, 0x5501) socket(0x2b, 0x5, 0xae) ptrace$getregset(0x4204, r1, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=""/82, 0x52}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r10, r9) 03:38:26 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0xffffff7f, 0xffffff7f, 0x0}) [ 1112.638579] openvswitch: netlink: Message has 5 unknown bytes. [ 1112.668731] openvswitch: netlink: Message has 5 unknown bytes. [ 1112.684309] input: syz0 as /devices/virtual/input/input144 03:38:26 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) write$9p(r3, &(0x7f0000001400)="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", 0x600) sendfile(r3, r4, 0x0, 0x10000) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000080)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}], 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x0, @remote}], 0x10) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000001c0)={0x401, 0x9, 0x4, 0x20000, 0x80000001, {0x0, 0x7530}, {0x1, 0x0, 0xfc, 0x5, 0x34, 0x10, "9290b9b1"}, 0x8, 0x3, @fd=r3, 0x1, 0x0, r5}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={r7, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x2, @remote, 0x3}, @in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x80000000}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e24, 0x6, @loopback, 0xe7f3}]}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000002c0)={r7, 0x3ff}, &(0x7f0000000300)=0x8) r8 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x20cdc, 0x1}, r0, 0x1000000000, 0xffffffffffffffff, 0x0) fsync(r8) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000140)={0x8000, 0x1, 0x4, 0x200000, 0x22f6, {r9, r10/1000+30000}, {0x3, 0x2, 0x1f, 0x29, 0x45, 0x2, "58094112"}, 0x5, 0x1, @fd, 0xffff0001, 0x0, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x13, 0x0, "75f27fa3b259c0e09fe087ee6c6acdeaef910c54fce0cbd76cc1856d4b9b5e211d54e4986eca87d0977b61b442d38e61a75650048101711ecea8fd1b9d4b76baa3d387436c475e2e3a951a2cccfe6d04"}, 0xd8) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r12, 0x29, 0xd0, 0x0, 0x0) 03:38:26 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1112.806301] input: syz0 as /devices/virtual/input/input145 [ 1112.853498] openvswitch: netlink: Message has 5 unknown bytes. [ 1112.854008] binder_alloc_new_buf_locked: 5 callbacks suppressed [ 1112.854016] binder_alloc: 28618: binder_alloc_buf, no vma [ 1112.969375] audit: type=1804 audit(2000000306.820:454): pid=28629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir863204981/syzkaller.mz5nJd/1821/file0" dev="sda1" ino=17433 res=1 [ 1112.989272] binder: BINDER_SET_CONTEXT_MGR already set 03:38:26 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0xc8c0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/269], 0x7c}, 0x1, 0x0, 0x0, 0x880}, 0x8001) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x397) r4 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'dummy0\x00', {0x2, 0x4e20, @multicast1}}) r5 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x11, r5, r3, r7) getresgid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = socket$kcm(0x29, 0x5, 0x0) fgetxattr(r12, &(0x7f00000001c0)=@known='trusted.overlay.nlink\x00', &(0x7f0000000280)=""/121, 0x79) r13 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_DEVMASK(r13, 0x80044dfe, &(0x7f00000005c0)) dup(r10) r14 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r14, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000033000505d25a80648c63940d0424fc60100010400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) dup(r14) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000a00)={0x14c, 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1063084000000000000000000963104000000000000000000000000000000000086310400300000000000000000000000000000010630840000000000000000012634840030000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000663044001000000086310400200000000000000000000000000000012634840000000000000000000000000000000000000000001000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB="8561646600000000010000000000000001000000000000000500000000000000852a646600000000", @ANYRES32=r9, @ANYBLOB="000000000000000000000000852a6273020000000300"/36], @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x008\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000011634840010000000000000000000000000000000000000010000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="856164660000000005000000000000000103000000000000000000852a747000000000", @ANYPTR=&(0x7f0000000640)=ANY=[@ANYBLOB='\x00'/212], @ANYBLOB="d40000000000000000000000000000003e00000000000000852a68730b0100"/48], @ANYPTR=&(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0010000000000000"], 0xab, 0x0, &(0x7f0000000940)="4cb1fe6aa345bf1d56c4770069ba701921addfe969b9d7d594b666861ce991a000a78b1b8014cce57d921c3af937f1c9a42542c87a701055ba5a106068d7b45e120b53646a90ef06ea2dc44c930fc5d4a84638ec18c6ad9b82ee308a0077264c5dffde2b1385f3d62cfcf9f3e3c66eb2bb5f8c8acd678d1c0b25d5934c54b05aaf386b92d7a8ce866be456e8ac8be4b5e129161de729815cedf6ba3eba8c4cb2cc87c86e94d101b0046813"}) fchown(r1, r3, r8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) [ 1113.028027] binder: 28618:28620 ioctl 40046207 0 returned -16 03:38:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0x3, 0x0, 0xfffd}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$kcm(0x10, 0x0, 0x10) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000033000505d25a80648c63940d0424fc60100010400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) dup2(r4, r0) 03:38:26 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000000)={0x0, 0x2, 0x4, 0x0, 0x4, {0x77359400}, {0x5, 0x2, 0x1, 0x1f, 0x8, 0xee, "442eeebf"}, 0x7, 0x2, @fd=r3, 0x5, 0x0, 0xffffffffffffffff}) setsockopt$inet_udp_int(r4, 0x11, 0xb, &(0x7f0000000080)=0x1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:38:26 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1113.105537] audit: type=1800 audit(2000000306.820:455): pid=28629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17433 res=0 03:38:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x1a0ffffffff, 0xffffff7f, 0x0}) [ 1113.193390] input: syz0 as /devices/virtual/input/input146 [ 1113.201886] openvswitch: netlink: Message has 5 unknown bytes. [ 1113.233555] binder: 28635:28636 ioctl c0306201 20000240 returned -11 03:38:27 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:27 executing program 2: pause() bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x454700, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) [ 1113.272596] audit: type=1400 audit(2000000306.980:456): avc: denied { ioctl } for pid=28635 comm="syz-executor.5" path="socket:[190354]" dev="sockfs" ino=190354 ioctlcmd=0x8916 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 03:38:27 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x8101, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000080)={0x4, @raw_data="c6e9590b76b27ff2f4712e0734da6e53ad5a5ed8c928a1bc5bd96a132bda53d85ac3cb049f37453b6bb5595a1948430a5d34f6fa59944ff5f3384ff87e127ddbed413e0f106d616d448f73de5a453490cf40f918555a95903a2d408e8eed520b7778a6ed604932aec16207d39e6ddcce3b40c3e06a8060bad73015163b4c9f945baba1348f70d750222175a83be02e0aa6e447083da6fed330b32c3fb27ce7a30d071f79b0efc6646ee1705edc381192092194b905a83309ff32af9a0feb2150ebeea5fea5df792a"}) [ 1113.375417] binder_alloc: 28648: binder_alloc_buf, no vma [ 1113.400529] binder: 28648:28650 ioctl c0306201 20000080 returned -14 [ 1113.481367] audit: type=1800 audit(2000000307.120:457): pid=28629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17433 res=0 [ 1113.489996] binder: BINDER_SET_CONTEXT_MGR already set 03:38:27 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000033000505d25a80648c63940d0424fc60100010400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r2}) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000080)=0x1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x8, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000100)=0xfffffffffffffff9) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xd0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x1}) [ 1113.540449] binder: 28734:28741 ioctl c0306201 20000240 returned -11 [ 1113.561076] binder: 28648:28650 ioctl 40046207 0 returned -16 03:38:27 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x141000, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d04, &(0x7f0000000100)=0x59) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r0) 03:38:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x8000a0ffffffff, 0xffffff7f, 0x0}) [ 1113.640440] openvswitch: netlink: Message has 5 unknown bytes. 03:38:27 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x3a6a, 0x101000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x66e, 0x101, &(0x7f0000000240)="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"}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000b, 0x11, 0xffffffffffffffff, 0x7a109000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) dup2(0xffffffffffffffff, r2) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f0000001240)=0x91003) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RCREATE(r4, &(0x7f0000000040)={0x18, 0x73, 0x1, {{0x8, 0x0, 0x5}, 0x101}}, 0x18) [ 1113.779337] binder_alloc: 28777: binder_alloc_buf, no vma [ 1113.807578] binder: 28777:28778 ioctl c0306201 20000080 returned -14 03:38:27 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1113.870956] input: syz0 as /devices/virtual/input/input148 03:38:27 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f00000000c0)=0x1b, 0x4) 03:38:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x100000000000000, 0xffffff7f, 0x0}) 03:38:27 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:28 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0xa) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xd0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000033000505d25a80648c63940d0424fc60100010400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r7 = dup2(r5, r6) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000040)=0x7) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x8}, 0xc) [ 1114.192584] binder: 28796:28797 ioctl c0306201 20000240 returned -11 [ 1114.212056] binder_alloc: 28798: binder_alloc_buf, no vma [ 1114.258889] binder: 28798:28799 ioctl c0306201 20000080 returned -14 [ 1114.267977] binder: BINDER_SET_CONTEXT_MGR already set [ 1114.298764] binder: 28796:28797 ioctl 40046207 0 returned -16 03:38:28 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000100)={0xa, 0x4, 0x332b7ede111f8088, "f5daaf1278c5b145e48be75e918a658192713b5b07a7d600", 0x4f424752}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r0) 03:38:28 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x1ff, 0x201, 0x81, 0x80000001, 0x0}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000080)=r4, 0x4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) [ 1114.370959] openvswitch: netlink: Message has 5 unknown bytes. [ 1114.449712] openvswitch: netlink: Message has 5 unknown bytes. 03:38:28 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x200000000000000, 0xffffff7f, 0x0}) 03:38:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f00000000c0)={0xffffffffffffffff, 0xb4c}) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r0) 03:38:28 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1114.582001] binder_alloc: 28826: binder_alloc_buf, no vma [ 1114.618788] binder: 28826:28827 ioctl c0306201 20000080 returned -14 03:38:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x80040, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000040)) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000080)=0x92) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f0000000180)) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x8000, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000140)={0x6, 0x31303553, 0x3, @discrete={0x5, 0x9}}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) prctl$PR_MCE_KILL_GET(0x22) [ 1114.686432] binder: BINDER_SET_CONTEXT_MGR already set 03:38:28 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000240)={0x0, 0x0, [0x25a0000, 0x0, 0xfffffffffffffffe, 0x100000000]}) r2 = creat(0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) fallocate(r2, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r3, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0xc000000000000, 0x8, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) io_pgetevents(r3, 0x3c, 0x7, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x77359400}, &(0x7f0000000080)={&(0x7f0000000040)={[0x1ff]}, 0x8}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) [ 1114.741433] binder: 28826:28827 ioctl 40046207 0 returned -16 03:38:28 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x300000000000000, 0xffffff7f, 0x0}) 03:38:28 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x5b}, 'syz0\x00', 0x24}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) [ 1114.991837] binder_alloc: 28849: binder_alloc_buf, no vma [ 1115.022357] binder: 28849:28851 ioctl c0306201 20000080 returned -14 03:38:28 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0xa8000, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000002c0)={@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, {&(0x7f00000001c0)=""/131, 0x83}, &(0x7f0000000280), 0x1}, 0xa0) dup(r0) r2 = fcntl$getown(r0, 0x9) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f00000000c0)={0x2, 0x2, 'client1\x00', 0xffffffff80000002, "c0476a68800374ed", "d9d44d072e49946163f87690ad324a5d57facd5952d11d174abb9fc05c7c0e34", 0x101}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x0, 0x0, 0x0, 0x4}, r2, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xd0, 0x0, 0x0) 03:38:29 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:29 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000040)=0x3) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f0000000140)=0x8) r4 = geteuid() r5 = socket$unix(0x1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) fchown(r5, 0x0, r6) r7 = socket$unix(0x1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) fchown(r7, 0x0, r8) r9 = socket$unix(0x1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) fchown(r9, 0x0, r10) fsetxattr$system_posix_acl(r2, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f00000001c0)={{}, {0x1, 0x2}, [{0x2, 0x3, r4}], {0x4, 0x1}, [{0x8, 0x6, r6}, {0x8, 0x7, r8}, {0x8, 0x2, r10}], {}, {0x20, 0x7}}, 0x44, 0x1) 03:38:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x400000000000000, 0xffffff7f, 0x0}) 03:38:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) write$9p(r2, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600) sendfile(r2, r3, 0x0, 0x10000) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000080)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, 0xffffffffffffffff, &(0x7f0000000540)={0x40000000}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}], 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x0, @remote}], 0x10) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000001c0)={0x401, 0x9, 0x4, 0x20000, 0x80000001, {0x0, 0x7530}, {0x1, 0x0, 0xfc, 0x5, 0x34, 0x10, "9290b9b1"}, 0x8, 0x3, @fd=r2, 0x1, 0x0, r4}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={r8, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x2, @remote, 0x3}, @in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x80000000}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e24, 0x6, @loopback, 0xe7f3}]}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={r8, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xfff, 0x0, 0x7fff, 0xffff, 0x10, 0x0, 0xfe}, &(0x7f0000000180)=0x9c) dup2(r1, r0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(r10, 0xc0585609, &(0x7f00000002c0)={0x9, 0x0, 0x4, 0x4000, 0x101, {0x0, 0x2710}, {0x4, 0x0, 0x8, 0xc, 0x40, 0x3, "844b054b"}, 0x7fff, 0x4, @offset=0x1000, 0x31e, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f0000000440)={0x93b, 0xb025, 0x0, 'queue1\x00', 0x1}) 03:38:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) [ 1115.295047] binder_alloc: 28871: binder_alloc_buf, no vma [ 1115.323451] binder: 28871:28873 ioctl c0306201 20000080 returned -14 03:38:29 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1115.353663] input: syz0 as /devices/virtual/input/input158 [ 1115.448609] audit: type=1804 audit(2000000309.300:458): pid=28876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir902264037/syzkaller.V9eeg1/2024/file0" dev="sda1" ino=16589 res=1 03:38:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x500000000000000, 0xffffff7f, 0x0}) [ 1115.603969] audit: type=1800 audit(2000000309.300:459): pid=28876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16589 res=0 [ 1115.679075] binder: BINDER_SET_CONTEXT_MGR already set 03:38:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x5, 0x7, 0x24, 0x3ff}, {0x800, 0xfb, 0x1, 0x8}, {0x80, 0x58, 0x3, 0x4}, {0x5, 0x80, 0x60, 0xc}, {0x2, 0x7, 0x81, 0x71f}, {0x8000, 0x0, 0x0, 0x1}, {0x87, 0x6, 0x0, 0x4}]}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x400000, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xd0, 0x0, 0x0) 03:38:29 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1115.723303] binder: 28888:28889 ioctl 40046207 0 returned -16 03:38:29 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000140)=""/4096) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400, 0x0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000001140)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x4b4, 0x3, 0x9e0, 0xb290}, 0x8) epoll_create1(0x80000) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) [ 1115.835534] audit: type=1800 audit(2000000309.660:460): pid=28900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16589 res=0 03:38:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) r1 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0372ae1ab138e5ffffffffffffff000000000000"], 0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r5 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x301042) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000280)=0x78) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_SUPPORTED_CPUID(r6, 0xc008ae05, &(0x7f00000000c0)=""/168) dup2(r7, r0) 03:38:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x600000000000000, 0xffffff7f, 0x0}) 03:38:29 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000000)={0x1f, {{0xa, 0x4e23, 0xfffffffa, @empty, 0x1c00}}, 0x0, 0x2, [{{0xa, 0x4e23, 0x1, @local, 0x6}}, {{0xa, 0x4e23, 0x7b2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1f}}]}, 0x190) [ 1116.045202] audit: type=1400 audit(2000000309.870:461): avc: denied { map } for pid=28906 comm="syz-executor.0" path="/root/syzkaller-testdir902264037/syzkaller.V9eeg1/2025/cgroup.controllers" dev="sda1" ino=16543 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 1116.065757] input: syz0 as /devices/virtual/input/input160 03:38:29 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) pselect6(0x40, &(0x7f0000000000)={0x0, 0x800, 0x40, 0x1000, 0x1, 0x1, 0x4, 0xc23}, &(0x7f0000000040)={0x7, 0x3ff, 0x5, 0x7, 0x7, 0x3, 0xfffffffffffffffc, 0x2}, &(0x7f0000000080)={0x9, 0x6, 0x5, 0x7fff, 0x5, 0x7}, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x6]}, 0x8}) [ 1116.096070] binder_alloc: 28910: binder_alloc_buf, no vma [ 1116.141304] binder: 28910:28913 ioctl c0306201 20000080 returned -14 03:38:30 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x700000000000000, 0xffffff7f, 0x0}) 03:38:30 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext, 0x1220, 0x0, 0x400, 0x0, 0x0, 0x80, 0xb0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:38:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x4, 0x80000) write$P9_RLERROR(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="290000000701002000283e766d6e6574303a73656c696e75786d643573756d5b6b657972696e67237d793a444b25888faa7922f9c0e1dbc01d27002fc2ff507ef99f07f08830071b6a3014f781514943eee35b754758f42e61976f218bc85842c12af94d89f1285518119c56abef94227dc8b3e57eb21ed6784f126bb14aee26a9a252ffde23e5b93107e9c19c6024914d6467822eac849b"], 0x29) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$rds(r3, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x5}, 0x10) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) 03:38:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{0xffff}, 'syz0\x00', 0x2e}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000033000505d25a80648c63940d0424fc60100010400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) dup2(r3, r0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000000100)) r8 = dup(r5) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x8000}, 0x8) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, {0x4, 0x3ff, 0x3011, 0x2, 0x9, 0x1, 0x1, 0x1}}) 03:38:30 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1116.471664] binder_alloc: 28935: binder_alloc_buf, no vma [ 1116.528914] binder: 28935:28938 ioctl c0306201 20000080 returned -14 [ 1116.554191] openvswitch: netlink: Message has 5 unknown bytes. 03:38:30 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x6}, 0x8) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) [ 1116.665234] openvswitch: netlink: Message has 5 unknown bytes. 03:38:30 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x1200000000000000, 0xffffff7f, 0x0}) 03:38:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000100)={0x0, 0x2, 0x6, 0x5, 0x101}) socket(0x0, 0x4, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x404440, 0x0) dup(r4) [ 1116.839610] input: syz0 as /devices/virtual/input/input163 [ 1116.858511] binder_alloc: 28961: binder_alloc_buf, no vma 03:38:30 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x29e502, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r1, 0x80304d65, &(0x7f0000000040)) [ 1116.900254] binder: 28961:28962 ioctl c0306201 20000080 returned -14 [ 1116.924566] binder: BINDER_SET_CONTEXT_MGR already set 03:38:30 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1116.950155] binder: 28961:28962 ioctl 40046207 0 returned -16 03:38:30 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x352, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000100)=[0x2, 0x8]) r3 = pkey_alloc(0x0, 0x1) pkey_free(r3) pkey_free(r3) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000080)=""/22) 03:38:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvme-fabrics\x00', 0x40000, 0x0) ioctl$KVM_SMI(r1, 0xaeb7) r2 = open(&(0x7f0000000100)='./file0\x00', 0x608101, 0x110) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r2, 0x10f, 0x84, &(0x7f0000000140), &(0x7f0000000180)=0x4) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f00000000c0)=0x7) dup2(r3, r0) 03:38:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x2000000000000000, 0xffffff7f, 0x0}) [ 1117.064190] binder: 28977:28978 ioctl c0306201 20000240 returned -11 03:38:31 executing program 2: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x104) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000000)=0x80000001) [ 1117.126056] input: syz0 as /devices/virtual/input/input165 03:38:31 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x185800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) 03:38:31 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1117.198833] binder: 28984:28985 ioctl c0306201 20000080 returned -14 03:38:31 executing program 3: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r1, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:dpkg_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:udev_rules_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x105643, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r4, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000200)={@empty, 0x0}, &(0x7f0000000240)=0x14) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x960b}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x4c}}, 0x240040c0) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xd0, 0x0, 0x0) 03:38:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x3f00000000000000, 0xffffff7f, 0x0}) 03:38:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [{0xa53, 0x0, 0x10000}, {0x95e}, {0x163, 0x0, 0x6}]}) dup2(r2, r0) 03:38:31 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:31 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x484000, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000200)=0x1) connect$x25(r1, &(0x7f00000001c0)={0x9, @null=' \x00'}, 0x12) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000300)={0x0, @bt={0x7ff, 0x4, 0x1, 0x2, 0x1, 0xe17, 0x6, 0x6, 0xaf8e, 0x1, 0xd2fd, 0x9f7, 0x6, 0x7fffffff, 0x8, 0x7, {0x80000000, 0x3}, 0xa0, 0x1c}}) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000002c0)={0xa20000, 0x1, 0xce8, r4, 0x0, &(0x7f0000000280)={0x990a94, 0x3f, [], @ptr=0xfffffffffffffff8}}) dup(r5) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x11e) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r7, 0xc0305615, &(0x7f00000003c0)={0x0, {0x4, 0x6}}) 03:38:31 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) [ 1117.513883] binder: 29109:29110 ioctl c0306201 20000240 returned -11 [ 1117.521938] input: syz0 as /devices/virtual/input/input167 [ 1117.550919] binder: 29113:29116 ioctl c0306201 20000080 returned -14 03:38:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) r5 = dup2(r4, 0xffffffffffffffff) ioctl$TIOCSCTTY(r5, 0x540e, 0x4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r6, 0x29, 0xd0, 0x0, 0x0) 03:38:31 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@ng={0x4, 0x3, "37b242df86e3ffde0c9636153444137515f5"}, 0x14, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) [ 1117.627709] input: syz0 as /devices/virtual/input/input168 03:38:31 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:31 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x5, @sliced={0x7f, [0x1f, 0x4cfa, 0x2, 0x2, 0x1, 0x6, 0x41, 0x6561, 0x10b, 0x6, 0x6, 0x0, 0x7, 0x95, 0x1ff, 0x8, 0x10, 0x7ff, 0xc7, 0x856a, 0x9, 0x7, 0x1, 0xd1c, 0x469, 0x20, 0x8840, 0x81, 0x9, 0x1, 0x5, 0x41b, 0x8000, 0x0, 0x7f, 0x8, 0xecc, 0x100, 0x6, 0x4, 0xeb89, 0x2, 0x8000, 0x800, 0x1, 0x9, 0x6, 0x1], 0x3}}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:38:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x4800000000000000, 0xffffff7f, 0x0}) [ 1117.771916] binder: 29133:29134 ioctl c0306201 20000240 returned -11 03:38:31 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:31 executing program 5: r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) r1 = geteuid() fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [{0x3f, 0x1ff}, {0x0, 0x6}], r1}, 0x18, 0x3) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r8 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) write$9p(r7, &(0x7f0000001400)="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", 0x600) sendfile(r7, r8, 0x0, 0x10000) ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f0000000080)) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}], 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x0, @remote}], 0x10) ioctl$VIDIOC_QUERYBUF(r7, 0xc0585609, &(0x7f00000001c0)={0x401, 0x9, 0x4, 0x20000, 0x80000001, {0x0, 0x7530}, {0x1, 0x0, 0xfc, 0x5, 0x34, 0x10, "9290b9b1"}, 0x8, 0x3, @fd=r7, 0x1, 0x0, r9}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000280)={r11, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x2, @remote, 0x3}, @in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x80000000}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e24, 0x6, @loopback, 0xe7f3}]}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000001c0)={r11, 0xffffa19d, 0x5, 0x4}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000480)={0x1, 0x1, 0x1, 0x7ff, r12}, &(0x7f0000000500)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x1d0, r13, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xb8, 0xc, [{0x3c, 0xb, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd497}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61038722}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b040a60}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1254f430}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x597f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e9a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd8b8}]}, {0x34, 0xb, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x728fb75a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22c5fe97}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310424a4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x134d448d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ee345ee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8996}]}, {0x44, 0xb, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xac8a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12707e42}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30e447de}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7c7f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x97b5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7a7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2934}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x359a}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, [{0x14, 0xb, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f56f2eb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa8d8}]}, {0x14, 0xb, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9325cbd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32ed0f29}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x60, 0xc, [{0x4}, {0x2c, 0xb, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73f9ca30}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x462d782c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xafd6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1648}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x781278e4}]}, {0x2c, 0xb, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5193}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x35c273ec}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c8135e3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3356}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc339}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x70, 0xc, [{0x2c, 0xb, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6288}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd527e63}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a2089d7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9794013}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a3c220b}]}, {0x24, 0xb, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ddf16a5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7742dff6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9a68}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd17}]}, {0x1c, 0xb, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x116d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62e25003}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fe233b5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) [ 1117.925517] binder_alloc_new_buf_locked: 2 callbacks suppressed [ 1117.925526] binder_alloc: 29144: binder_alloc_buf, no vma 03:38:31 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) [ 1117.988227] binder: 29144:29145 ioctl c0306201 20000080 returned -14 03:38:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffdc1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x10000}, 0x0, 0x1, 0xffffffffffffffff, 0x9) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1d0, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000000), {[{{@arp={@remote, @loopback, 0xffffff00, 0x0, 0xc, 0x0, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0x101, 0x0, 0xff]}}, 0x4, 0x1, 0x1f, 0x2, 0x8000, 0x8, 'veth0_vlan\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x1}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x93, 0xffffff00, 0xffffff00, 0x6, 0x8, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x80a9e546ee827844, 0xff, 0x0, 0xff]}}, 0x3, 0x8000, 0xff16, 0x8001, 0x3, 0x0, 'lo\x00', 'ip6erspan0\x00', {}, {0xff}, 0x0, 0xa0}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x9, @local, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x418) [ 1118.026808] audit: type=1804 audit(2000000311.880:462): pid=29151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir936819723/syzkaller.bDyG7y/1880/file0" dev="sda1" ino=16573 res=1 [ 1118.069978] binder: BINDER_SET_CONTEXT_MGR already set 03:38:32 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1118.108960] binder: 29144:29145 ioctl 40046207 0 returned -16 [ 1118.144394] x_tables: duplicate underflow at hook 1 [ 1118.150356] audit: type=1800 audit(2000000311.920:463): pid=29151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16573 res=0 03:38:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x4c00000000000000, 0xffffff7f, 0x0}) 03:38:32 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() sendmmsg$unix(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x1}], 0x1, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0x40000}], 0x1, 0x0) r3 = getpgid(r2) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x18f200, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r3, r4, 0x0, 0x3, &(0x7f0000000040)='[,\x00'}, 0x30) fcntl$notify(r0, 0x402, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x42, 0x1, 0x0, 0x4, 0x1f, 0x5}, 0x20) 03:38:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000003c0)=ANY=[@ANYBLOB="050000000000000002000000000000006900000000000000", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/105], @ANYBLOB="00000000fa00956400500000000000008700000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/135], @ANYBLOB="000000000000000000001000"/24, @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="000000000000000002000000000000003100000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB='\x00'/49], @ANYBLOB="000000000000000000000100000000002700000000000000", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB='\x00'/39], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) r2 = request_key(&(0x7f00000000c0)='syzkaller\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', r2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000300)=0x101) 03:38:32 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1118.305325] binder_alloc: 29170: binder_alloc_buf, no vma [ 1118.315800] audit: type=1800 audit(2000000312.170:464): pid=29161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16573 res=0 [ 1118.348277] binder: 29170:29171 ioctl c0306201 20000080 returned -14 03:38:32 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x803) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) 03:38:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x6000000000000000, 0xffffff7f, 0x0}) 03:38:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8, 0x0, 0x0, 0x6}, 0x0, 0x400, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x84002, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0x563, 0x343000) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x9, 0x2, 0x30, 0x3, 0x8}, &(0x7f0000000280)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={r4, 0x67, 0x4000}, &(0x7f0000000300)=0x8) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000000c0)={0x100000, &(0x7f0000000040), 0x6, r5, 0x8}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r6, 0x29, 0xd0, 0x0, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x4000}) [ 1118.512327] binder: 29185:29186 ioctl c0306201 20000240 returned -11 03:38:32 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:32 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x0, 0x80, 0xfa, 0x4, 0x0, 0x7fffffff, 0x18000, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x6002, 0x2, 0xc2, 0x8, 0x101, 0x3, 0x101}, r2, 0x5, r0, 0xa) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:38:32 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) r1 = socket$inet(0x2, 0x80003, 0xff) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000000c0)={@rand_addr, @local}, &(0x7f0000000100)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='v'}) [ 1118.612074] binder_alloc: 29189: binder_alloc_buf, no vma [ 1118.656515] binder: 29189:29190 ioctl c0306201 20000080 returned -14 03:38:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0x2000, 0x6}, 'syz0\x00', 0x1d}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) shmdt(r1) shmdt(r1) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r0) 03:38:32 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80100, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000040)={0x9ee2, 0x9}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x41bf, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xd0, 0x0, 0x0) [ 1118.755862] input: syz0 as /devices/virtual/input/input169 03:38:32 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x6800000000000000, 0xffffff7f, 0x0}) 03:38:32 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) 03:38:32 executing program 2: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r5) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xc0800, 0x4e) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r7) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000140)={0x100000000, 0x7, 0x9, 0x0, 0x0, [{{r1}, 0xff}, {{r0}, 0x6}, {{r1}, 0x7}, {{r1}, 0x7fff}, {{r5}, 0x8}, {{r6}, 0x8}, {{r1}, 0x7}, {{}, 0x7}, {{r7}, 0x4}]}) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) [ 1118.874756] input: syz0 as /devices/virtual/input/input170 [ 1118.979556] binder_alloc: 29224: binder_alloc_buf, no vma [ 1118.989047] binder: 29227:29228 ioctl c0306201 20000240 returned -11 [ 1119.014209] binder: 29224:29226 ioctl c0306201 20000080 returned -14 03:38:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x80401, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x3, 0x1, 0x7f, 0x80}, {0x9, 0x2, 0x6, 0x8000}, {0xa8e9, 0xc, 0x3, 0x7fff}, {0x0, 0x10, 0x2, 0x4}]}) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) 03:38:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x600) sendfile(r1, r2, 0x0, 0x10000) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000080)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}], 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x0, @remote}], 0x10) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x401, 0x9, 0x4, 0x20000, 0x80000001, {0x0, 0x7530}, {0x1, 0x0, 0xfc, 0x5, 0x34, 0x10, "9290b9b1"}, 0x8, 0x3, @fd=r1, 0x1, 0x0, r3}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000092f19354928ba806ec2de28d10fa8c5139ea24e94cebf68038415dbcf59703ecc63d0bded6df6a0b3d8ec74483e3ee6245207ec945b31be4b04c926681d93bc5d21d7441465bc6cd7256705800", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={r5, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x2, @remote, 0x3}, @in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x80000000}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e24, 0x6, @loopback, 0xe7f3}]}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={r5, @in6={{0xa, 0x4e20, 0x1, @loopback, 0x401}}, 0xf000, 0x401}, &(0x7f0000000180)=0x90) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r6, r0) 03:38:32 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:32 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f0000000540)=0xe8) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x100, 0x5, &(0x7f00000003c0)=[{&(0x7f0000000080)="262bcff6b69e3d90", 0x8, 0x7}, {&(0x7f0000000140)="70aa306eade1471bfec3", 0xa, 0x682d}, {&(0x7f0000000640)="3556578771c40c870ed58a166dcec93e5540abe0ad2db251888a7832e037ac02fe73971a4a4d374bb73e36f4830cf96fe45139ae5c648f07eaa1dc512b73587025b3d5605eefba2ac53a18667e373ea3ceb6e5ad3d405a4f27a2a54c280e63227fc4fd337c2d488670c62586f2ed87d1f290", 0x72, 0x2}, {&(0x7f0000000200)="ece9fe8f5e4378158e4370ddb3e79d78fdc3e80d2d3435f8d6c560fc2612f8721f25b060caddf135ae830344e08466f0972aa2659303a73c16c5901980ff1b4a7d5c394f0e55684d6b788f7c2d9bc6bf15c9902a0712a2bc04f56c9e933108bb158f4e8e0cc80dee082cf61d86402b8109533cd358e3f1ba5edcd170c93657bc9ace4486fe2294ab3c0dbbb5bebecda271581c3921e76a12276a937e0b412701040d6c536fdc26b4c832baaf5238ec220339b5b9d167720256ad358cbbff0b91cd14670e582e", 0xc6}, {&(0x7f0000000300)="603ff50ef929b728ea02168a469b80469d22c6b511b95ac3ad66366b4195a62f7deb76b858b6d1238b411f48229804068436a88696583bfe4816cc9c0a90af3ef7e10e4f370d705d626313731c81b8b03ebd0252b9452c0256563e4180cbe42f9694fd0023add1d9da13fab229654759d937583dbba21e1a74e974a687b00c617d304202e5e33ca6fbf2ed12", 0x8c, 0xe2}], 0x200000, &(0x7f0000000580)={[], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@dont_measure='dont_measure'}, {@fowner_eq={'fowner', 0x3d, r1}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x32, 0x66, 0x35, 0x36, 0x65, 0x36, 0x38], 0x2d, [0x5ce0207ce7ab6d57, 0x66, 0x37, 0x62], 0x2d, [0x39, 0x30, 0x64, 0x34], 0x2d, [0x66, 0x38, 0x66, 0x31], 0x2d, [0x32, 0x64, 0x65, 0x63, 0x31, 0x33, 0x31, 0x38]}}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@pcr={'pcr', 0x3d, 0x23}}, {@subj_user={'subj_user'}}]}) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:38:33 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f0000000040)={0x1}) [ 1119.145702] audit: type=1804 audit(2000000313.000:465): pid=29238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir902264037/syzkaller.V9eeg1/2031/file0" dev="sda1" ino=16604 res=1 03:38:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x6c00000000000000, 0xffffff7f, 0x0}) [ 1119.254095] binder: 29244:29246 ioctl c0306201 20000240 returned -11 [ 1119.267409] input: syz0 as /devices/virtual/input/input171 [ 1119.323747] audit: type=1800 audit(2000000313.030:466): pid=29238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16604 res=0 03:38:33 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:33 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x1c, 0x17, {0x15, 0x4, @l2={'eth', 0x3a, 'veth0_vlan\x00'}}}}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c200, 0x0, @perf_bp={&(0x7f0000000180), 0x3}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:38:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() sendmmsg$unix(r0, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9701}], 0xa, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}], 0x198, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpid() sendmmsg$unix(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9701}], 0xa, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {r5}}}], 0x20}], 0x198, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r8) pwrite64(r8, &(0x7f0000000180)="bfbc15380e75eefac0b6cc36527457e5a8e19c79327f40fb9c845e33f15cd1d15d5c0abb30938da192f1de7b9f4773312ef2409f312d5905c722c169a694dea75be140bc6c3c3ddc33bf2deca411a4d0d737cac4d8a3ff148ff7dd3554cd7b56648195a2caba63a4105230587e6d6ca116ebf648c4b615e1e36b7aca66ba70f1b16520003bc06a5016383bb17e32029e3b4a2503399d75a4594285bce0ba269f9350ecf3ebaa3c16b220e41c3441103d1d593606deddd95a4167a8e0207f120d2ae235f9c3d185420bc5282bd1099c18b953f6f13038eab2d97fd769201385fd4fbc1403ea", 0xe5, 0x3ff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r5, r7, 0x0, 0x6, &(0x7f0000000040)='proc\xf6\x00', 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r3, 0x0, 0xd, &(0x7f0000000000)='systemsystem\x00', r9}, 0x30) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r10, 0x29, 0xd0, 0x0, 0x0) [ 1119.411638] binder_alloc: 29255: binder_alloc_buf, no vma [ 1119.450267] binder: 29255:29257 ioctl c0306201 20000080 returned -14 03:38:33 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) [ 1119.532770] input: syz0 as /devices/virtual/input/input172 [ 1119.540368] binder: BINDER_SET_CONTEXT_MGR already set [ 1119.583373] audit: type=1800 audit(2000000313.380:467): pid=29238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16604 res=0 03:38:33 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1119.634564] binder: 29255:29257 ioctl 40046207 0 returned -16 03:38:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$FICLONE(r1, 0x40049409, 0xffffffffffffffff) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) write$input_event(r2, &(0x7f0000000100)={{0x0, 0x7530}, 0xd, 0xcb, 0x4}, 0x18) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r0) 03:38:33 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000140)=0x3) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000033000505d25a80648c63940d0424fc60100010400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UI_SET_SWBIT(r5, 0x4004556d, 0xf) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000000)={r2}) sendmsg$unix(r6, &(0x7f00000001c0)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140), 0x0, &(0x7f0000000180), 0x0, 0x400c080}, 0x40040) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) 03:38:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x7400000000000000, 0xffffff7f, 0x0}) 03:38:33 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x1, 0x5, 0x100, 0x4000, 0xffffffffffffffff}) r6 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x100, 0x8081) poll(&(0x7f0000000280)=[{r4, 0x1}, {r2, 0x200}, {0xffffffffffffffff, 0x20}, {r0, 0x9280}, {r5, 0x1060}, {r6, 0x1}], 0x6, 0x9) r7 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$kcm(0x10, 0x2, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x30, r9, 0xa995953144e8a667, 0x0, 0x0, {{}, {0x0, 0x3}, {0x14, 0x18, {0xe00, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xa, r9, 0x200, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x40044) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) [ 1119.874196] input: syz0 as /devices/virtual/input/input173 03:38:33 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:33 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x5) [ 1119.921485] binder_alloc: 29291: binder_alloc_buf, no vma [ 1119.991460] openvswitch: netlink: Message has 5 unknown bytes. [ 1120.022989] binder: 29291:29292 ioctl c0306201 20000080 returned -14 [ 1120.118463] binder: 29323:29327 ioctl c0306201 20000240 returned -11 03:38:34 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:34 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x44, r4, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x48, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffa1}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x10) 03:38:34 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x7a00000000000000, 0xffffff7f, 0x0}) 03:38:34 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x6) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) 03:38:34 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x24800, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="3ea28ca8be03c3f3fffb7a2b06a88b61", 0x10) 03:38:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 03:38:34 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x44, r4, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x48, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffa1}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x10) [ 1120.474487] binder: BINDER_SET_CONTEXT_MGR already set [ 1120.493972] binder: 29419:29420 ioctl 40046207 0 returned -16 [ 1120.515639] binder: 29419:29420 ioctl c0306201 20000080 returned -14 [ 1120.531648] input: syz0 as /devices/virtual/input/input174 03:38:34 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0xfdfdffff00000000, 0xffffff7f, 0x0}) 03:38:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000000)=""/50) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x80000000, 0xa, &(0x7f0000001540)=[{&(0x7f00000000c0)="38c576343b61557756100281b1a834cfe56487abd62a9ce83a89a2dddfa3d9fad93136aa592e8b608a0a4894914703697cd415cf7b0502a1", 0x38, 0x8}, {&(0x7f0000000100)="c3e29ea5db38fb95e5f0302864c1677cd325365f13d1e9f0d64ebe1def9493491fdd6736da043caf349e83c033b7901c1a3667a38df6431c06f7fd15fa6cb77442f284de75c0842be8c62d751796c5bb0778c961b40ab91ac6f063cf", 0x5c, 0x3}, {&(0x7f0000000180)="2adc2100bf632d3f0e60a6ec7bc07402bf62a3b98b41352b5b037d38db7005bba4597a2571283a84d3b7117889048f52aad21e060c9ef29398dd2eaf8b552efbe4a27c40e9e9be1770f9a33370c237874d98265d74c37e9b64fa94e8d6d824f80de13055b7228dffa681ffa4f9a49860122e67719454fc45589f0c12815f73e46cae0774bc22b56b30a1db21beb697b9c3b962105ae2ce734d274679b3c5ebb745f4320a258eb4eae921821c4d9be7d2d68fb54a", 0xb4, 0xba}, {&(0x7f0000000240)="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", 0x1000, 0x7}, {&(0x7f0000001240)="733722ad5803b98dbc0fdcda7440c415f81d1e38f4477fb43253d438cda45b5e520b8570", 0x24, 0x1}, {&(0x7f0000001280)="444dc2c77bb64cf22967aae231e77b96f9425359458e2b9f54bbeb20e542bd6f46970982ad6766ef9b0c84a57c0b6734732e10ac1be28a4dd185e3a5d313beac91eeb958ecc2b5e08dd90bc897724319de3037b1f09151d554d7a8ca6e14960b3fc35d2846aa3c2ecf3667919a357a53dc0b4e63ac278d69bd766ef68c8985ec51a603a3006e3ad7a2d9cd8265d8ef79135f31f33477c94bd0999f2411c04e5b93", 0xa1, 0x71b7}, {&(0x7f0000001340)="4b4b78c266748e0995fe73438e0de19577bd520cfcbe00286e1b7519f5919f48ed716327953dc1dbdbf7d6366b18b6b163ff1a5bb4fe8d0e4ecac898aa94941571b84e1cdc78f90aa7c29dcb43bd8680c95680185d2f7ec779c7d15c1d8ca66e134c2ef11c", 0x65, 0x4}, {&(0x7f00000013c0)="550a4466207991beadbdfb", 0xb, 0x2}, {&(0x7f0000001400)="95eecc70e50a963ee23d5ce065014a0affee073e2b2dc1fe9e3ed91df9e75fd26643e9a34b5b7370b9b2187581984a98fc4f7ea1bbad68246355b12f744d150ce92e830fcfbbf734a50f0042954c661a58bef1519474de2630bf71db878b2bd3d2a43ad117bc177008ca8c8ecb67905147454210cb901da74fdb09c1d7350c8592de618dd8b4159373064feb85a9d38c638f379be1024cdacf27494a50f2ec9cca53584e18712b3120facff0c29b89468c0ec6c715eca074ab73400f4201d819e641eab7a01f75d5e9b652129f4c965478ede7266d39e8f09933f8da07462e235f836fb2d8cf90a52b6a6d006403", 0xee, 0x4}, {&(0x7f0000001500)="bb", 0x1, 0x6}], 0x0, 0x0) 03:38:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) io_setup(0x29, &(0x7f0000000100)=0x0) io_submit(r3, 0x2, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0xffffff87, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000040), 0x354}]) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r4, 0x5501) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r0) 03:38:34 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x80401, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x3, 0x1, 0x7f, 0x80}, {0x9, 0x2, 0x6, 0x8000}, {0xa8e9, 0xc, 0x3, 0x7fff}, {0x0, 0x10, 0x2, 0x4}]}) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) [ 1120.854997] binder: BINDER_SET_CONTEXT_MGR already set [ 1120.871046] binder: 29447:29449 ioctl 40046207 0 returned -16 [ 1120.899347] binder: 29447:29449 ioctl c0306201 20000080 returned -14 [ 1120.908882] input: syz0 as /devices/virtual/input/input176 [ 1120.912224] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. 03:38:34 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1121.074585] input: syz0 as /devices/virtual/input/input177 03:38:35 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)='v'}) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000040)=0x100000000001000) 03:38:35 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, 0x0, &(0x7f0000000040)) 03:38:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0xffffff7f00000000, 0xffffff7f, 0x0}) 03:38:35 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, r0, 0x0, 0x2, &(0x7f0000000000)='{\x00'}, 0x30) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyprintk\x00', 0x800, 0x0) r3 = mq_open(&(0x7f0000000100)='/dev/ttyprintk\x00', 0x40, 0x181, &(0x7f0000000140)={0x10000, 0x5, 0x3a66, 0x200}) vmsplice(r3, &(0x7f0000000480)=[{&(0x7f0000000180)="110f78a6b7f97da8abd1c9f58d426e59409b19deb8852aa9c055593f6c5a972b0cb55001f3f799177772bcb9b08b1a54df3b1efdc4b2eebd0e9b3d7b4fd6b30d695a9357dcdd3a6a182fd521680ac7647457c8f1e7b64029", 0x58}, {&(0x7f0000000200)="dfea0a5a139a773df70139133434d17f818cf6587bf86dbac3385fe8d3ae77fa2f326c1e95540fb8d741c2bfd58e91ce9a85e21a5994ea08831e66fc97f996a61c393349e4bf5ffc2e6c98eb89a1cddea2ebfd928a18828d19daf9f82a3878e1a9bad345425b7c", 0x67}, {&(0x7f0000000500)="a2bdc393792dd45b95c6d6d4d90ba429da19cc38ed4c1de92f49961ef0659c8361885a87677f682559c1a44dd771d1ecf8ee1a2d91c865c5763eee60c48b5d9f6e7383f5f18690cf993a9c00"/89, 0x59}, {&(0x7f00000002c0)="52e30ad7856187ff9782bc2470bdb5455a9aa7c8b7e472ec7c4068b97244b69df0f940564a1553353e1334db687c3a58dac712f5864707412dac699be3882b785361490354f1186584e16b0edab9f13ceb977f733392cd24aa0a6fe0a8ac37f6e3d310c2b3904b1d81bdfc45d8806f38fa0f4f5826cde43f5aaf56d762dfe03cfecd28f39a52da20f962af347158b5bb9c0a02b3475ed09bad71a1c23f67982d569e85d9ee29c7a7d7ce6d129f2c075bfcf25e196235ae7d9e437a835f0a321f6210255933ea06af8b9d8a487da39f20f9ce4a34539c0ba40ae62c7c3521fda5a1e7e60db7615e8a8430b48a4a", 0xed}, {&(0x7f00000003c0)="6f74404733e01ad2abda84c1197365bbff8104e2710315bfe39bd429668d7f8c9a55b80c935a2cc941f49534cb190880b1d82a7c6bf7b4c60cb03a493c60bd5fbf9bd48d17c9ec552d748c32795e0dc40bfc22255982ad613ebe920c052a6cfb35fcf58e92fc26509aec46d3b8dbad6c6b2291b728234e4bcd8ee73ea9b0ad64c654138fd706910370f8242e76316c2f", 0x90}], 0x5, 0x0) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000000c0)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xd0, 0x0, 0x0) 03:38:35 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x60000000, 0xffffff7f, 0x0}) 03:38:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) recvfrom$x25(0xffffffffffffffff, &(0x7f00000000c0)=""/231, 0xe7, 0x21, &(0x7f00000001c0)={0x9, @remote={[], 0x1}}, 0x12) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) [ 1121.359117] binder_alloc: 29485: binder_alloc_buf, no vma [ 1121.363593] input: syz0 as /devices/virtual/input/input178 [ 1121.375197] binder_alloc: 29482: binder_alloc_buf, no vma 03:38:35 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x8800, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000080)=""/62, &(0x7f00000000c0)=0x3e) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000140)) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffa000/0x4000)=nil) 03:38:35 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, 0x0, &(0x7f0000000040)) [ 1121.420366] binder: 29485:29487 ioctl c0306201 20000080 returned -14 [ 1121.427391] binder: 29482:29484 ioctl c0306201 20000080 returned -14 03:38:35 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) [ 1121.473998] input: syz0 as /devices/virtual/input/input179 [ 1121.486483] binder: BINDER_SET_CONTEXT_MGR already set [ 1121.491865] binder: 29482:29484 ioctl 40046207 0 returned -16 03:38:35 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x48000000, 0xffffff7f, 0x0}) 03:38:35 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x12000000, 0xffffff7f, 0x0}) 03:38:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x20000, 0x0) ioctl$VIDIOC_RESERVED(r1, 0x5601, 0x0) 03:38:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) dup2(r1, r0) 03:38:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0xffffffffa0008000, 0xffffff7f, 0x0}) 03:38:35 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, 0x0, &(0x7f0000000040)) [ 1121.733328] binder_alloc: 29515: binder_alloc_buf, no vma [ 1121.754580] binder: 29515:29516 ioctl c0306201 20000080 returned -14 03:38:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x80000001, 0x41) [ 1121.811570] binder_alloc: 29517: binder_alloc_buf, no vma [ 1121.821202] input: syz0 as /devices/virtual/input/input180 [ 1121.829605] binder: 29517:29518 ioctl c0306201 20000080 returned -14 [ 1121.850646] binder: 29524:29527 ioctl c0306201 20000080 returned -14 03:38:35 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, 0x0) 03:38:35 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffe, r1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'vcan0\x00', 0x100}) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000033000505d25a80648c63940d0424fc60100010400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r5 = dup2(r4, r2) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) bind$isdn_base(r7, &(0x7f0000000240)={0x22, 0x9, 0x2, 0x3f, 0x6}, 0x6) recvfrom$l2tp6(r5, &(0x7f0000000000)=""/28, 0x1c, 0x10100, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xd0, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0xb, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x1e4a}, @IPSET_ATTR_IFACE={0x14, 0x17, 'batadv0\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000010}, 0x40884) 03:38:35 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x6c00, 0xffffff7f, 0x0}) [ 1121.934101] binder: BINDER_SET_CONTEXT_MGR already set [ 1121.939485] binder: 29524:29527 ioctl 40046207 0 returned -16 [ 1121.966318] input: syz0 as /devices/virtual/input/input181 [ 1122.034676] openvswitch: netlink: Message has 5 unknown bytes. 03:38:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) 03:38:36 executing program 5: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0x400, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x840, 0x0) r3 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) linkat(r3, &(0x7f00000000c0)='\x00', r4, &(0x7f00000002c0)='./file1\x00', 0x1000) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) r6 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r6, 0xc08c5335, &(0x7f0000000100)={0x0, 0x81, 0x0, 'queue0\x00'}) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$GIO_UNIMAP(r9, 0x4b66, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{}]}) getuid() setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast2, @in6=@empty, 0x4e23, 0xfff, 0x4e23, 0x0, 0x2, 0x0, 0x80, 0x3a, r7, 0xee00}, {0x40, 0x5, 0x7, 0x3, 0x5, 0x20, 0xdbe3, 0x3}, {0x9, 0x401, 0x5b, 0x3}, 0x0, 0x6e6bbd, 0x1, 0x1, 0x2, 0x3}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d6, 0x33}, 0xa, @in6=@remote, 0x3502, 0x1, 0x2, 0x40, 0x7f, 0x71f, 0x4}}, 0xe8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f0000000580)={0x0, 0x6, 0x1, 'queue0\x00', 0x8001}) ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, &(0x7f0000000400)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000540)={r10, &(0x7f0000000440)=""/212}) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000140)={r10, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000040)={r10, 0x2}) ioctl$TIOCCBRK(r5, 0x5428) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) [ 1122.135520] binder: 29549:29551 ioctl c0306201 20000080 returned -14 [ 1122.153802] openvswitch: netlink: Message has 5 unknown bytes. 03:38:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0xffffffffa0010000, 0xffffff7f, 0x0}) [ 1122.176250] input: syz0 as /devices/virtual/input/input182 03:38:36 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, 0x0) 03:38:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) 03:38:36 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x7a, 0xffffff7f, 0x0}) [ 1122.390056] binder: 29563:29567 ioctl c0306201 20000080 returned -14 03:38:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000000c0)={{0xffff, 0xf33, 0x0, 0x8}, 'syz1\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r2, 0x5501) socket(0x1f, 0x2, 0x3) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) r14 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r15 = dup(r14) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) r16 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r15, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="000428bd7000fbdbff2501000000003b980fe9c79e7249d151f9ddfe8a0000000c410000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x26d2564c5a1efc82}, 0x4000) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r13, 0x110, 0x3) dup2(r11, r0) 03:38:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = eventfd(0x3) preadv(r4, &(0x7f0000000600)=[{&(0x7f0000000140)=""/145, 0x91}, {&(0x7f0000000040)=""/38, 0x26}, {&(0x7f0000000340)=""/201, 0xc9}, {&(0x7f0000000240)=""/67, 0x43}, {&(0x7f00000002c0)}, {&(0x7f0000000440)=""/179, 0xb3}, {&(0x7f0000000500)=""/224, 0xe0}], 0x7, 0xffff) syz_open_dev$sndtimer(&(0x7f00000002c0)='/dev/snd/timer\x00', 0x0, 0x400400) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0xffffff7f, 0x0}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_S_TUNER(r6, 0x4054561e, &(0x7f00000000c0)={0x1, "36bf93faeef7064bf6f214f64051a39101a570f0f5137b632f353a05b2645f22", 0x1, 0x20, 0x8, 0x200, 0x2, 0x1, 0x6, 0x9}) syslog(0x3, &(0x7f0000000040), 0x0) [ 1122.518536] binder: 29628:29632 ioctl c0306201 20000080 returned -14 03:38:36 executing program 5: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) init_module(&(0x7f0000000000)='##selinux#$\x00', 0xc, &(0x7f0000000040)='vmnet0wlan0mime_type-$/\x00') r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x10) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0x9}, 0xc) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x400100, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000001c0), 0x2) sysfs$3(0x3) 03:38:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) r1 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000001440), 0x80000) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000001480)=0x8, &(0x7f00000014c0)=0x1) 03:38:36 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, 0x0) 03:38:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xcb, 0x0, 0x0) 03:38:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000280)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x7, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xc53}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xdba}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xda8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x92cf7369b2fde3ce) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r4, r0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x20100) sendmsg$NFNL_MSG_ACCT_DEL(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x3, 0x7, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x46218c59}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10001}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xb226}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffffffff}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0xffffff7f, 0x0}) 03:38:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) 03:38:36 executing program 5 (fault-call:2 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) 03:38:36 executing program 2 (fault-call:2 fault-nth:0): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) [ 1122.948002] FAULT_INJECTION: forcing a failure. [ 1122.948002] name failslab, interval 1, probability 0, space 0, times 0 [ 1122.962426] CPU: 1 PID: 29705 Comm: syz-executor.5 Not tainted 4.19.97-syzkaller #0 [ 1122.970493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1122.979890] Call Trace: [ 1122.982517] dump_stack+0x197/0x210 [ 1122.986286] should_fail.cold+0xa/0x1b [ 1122.990224] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1122.995394] ? lock_downgrade+0x880/0x880 [ 1122.999569] __should_failslab+0x121/0x190 [ 1123.003829] should_failslab+0x9/0x14 [ 1123.007644] __kmalloc+0x2e2/0x750 [ 1123.011207] ? mutex_trylock+0x18e/0x1e0 [ 1123.015354] ? tty_write_lock+0x23/0x90 [ 1123.019378] ? tty_write+0x542/0x7a0 [ 1123.023105] tty_write+0x542/0x7a0 [ 1123.026759] ? n_hdlc_tty_poll+0x370/0x370 [ 1123.031016] __vfs_write+0x114/0x810 [ 1123.034734] ? tty_read+0x2a0/0x2a0 [ 1123.038382] ? kernel_read+0x120/0x120 [ 1123.042293] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1123.047853] ? __inode_security_revalidate+0xda/0x120 [ 1123.053065] ? avc_policy_seqno+0xd/0x70 [ 1123.057142] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1123.062167] ? selinux_file_permission+0x92/0x550 [ 1123.067149] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1123.072711] ? security_file_permission+0x89/0x230 [ 1123.077657] ? rw_verify_area+0x118/0x360 [ 1123.081822] vfs_write+0x20c/0x560 [ 1123.085537] ksys_write+0x14f/0x2d0 [ 1123.089186] ? __ia32_sys_read+0xb0/0xb0 [ 1123.093359] ? do_syscall_64+0x26/0x620 [ 1123.097348] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1123.102716] ? do_syscall_64+0x26/0x620 [ 1123.106715] __x64_sys_write+0x73/0xb0 [ 1123.110625] do_syscall_64+0xfd/0x620 [ 1123.114444] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1123.119647] RIP: 0033:0x45b159 [ 1123.122849] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1123.141765] RSP: 002b:00007f81cfa34c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1123.149501] RAX: ffffffffffffffda RBX: 00007f81cfa356d4 RCX: 000000000045b159 [ 1123.156779] RDX: 00000000fffffe00 RSI: 0000000020000040 RDI: 0000000000000003 [ 1123.164081] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1123.171351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1123.178632] R13: 0000000000000be7 R14: 00000000004c8747 R15: 0000000000000000 [ 1123.196391] FAULT_INJECTION: forcing a failure. [ 1123.196391] name failslab, interval 1, probability 0, space 0, times 0 [ 1123.209246] CPU: 1 PID: 29708 Comm: syz-executor.2 Not tainted 4.19.97-syzkaller #0 [ 1123.217085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1123.226586] Call Trace: [ 1123.229218] dump_stack+0x197/0x210 [ 1123.232893] should_fail.cold+0xa/0x1b [ 1123.236833] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1123.241977] ? lock_downgrade+0x880/0x880 [ 1123.246184] __should_failslab+0x121/0x190 [ 1123.250456] should_failslab+0x9/0x14 [ 1123.254427] kmem_cache_alloc_node+0x26c/0x710 [ 1123.259057] __alloc_skb+0xd5/0x5f0 [ 1123.262727] ? skb_trim+0x190/0x190 [ 1123.266396] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1123.271965] ? netlink_autobind.isra.0+0x228/0x310 [ 1123.276937] netlink_sendmsg+0x97b/0xd70 [ 1123.281169] ? netlink_unicast+0x730/0x730 [ 1123.285441] ? selinux_socket_sendmsg+0x36/0x40 [ 1123.285609] input: syz0 as /devices/virtual/input/input184 03:38:37 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x44000, 0x0) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000080)={0x8, 'veth1_to_bond\x00', {'erspan0\x00'}, 0x8}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xd0, 0x0, 0x0) 03:38:37 executing program 4 (fault-call:7 fault-nth:0): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = msgget(0x2, 0x0) msgctl$MSG_STAT(r3, 0xb, 0x0) msgctl$MSG_STAT_ANY(r3, 0xd, &(0x7f00000002c0)=""/142) r4 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x88000}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e74e7dea10617fba419820b8179343a3e37bb0f3f6b37da452e667aae5", @ANYRES16=r5, @ANYBLOB="000025bd7000fddbdf25130000003400050007000100696200001c000200080003000000500008000300ede1000008000200000000000c00020008000200ffffffff1c0006800400020008000100ffffff7f040002000400020004000200180005000c000200080003000000000008000100"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x104, r5, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x20, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xefe}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x88, 0x4, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe55}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x219}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r6, r0) [ 1123.290399] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1123.290420] ? security_socket_sendmsg+0x8d/0xc0 [ 1123.290440] ? netlink_unicast+0x730/0x730 [ 1123.290461] sock_sendmsg+0xd7/0x130 [ 1123.290485] ___sys_sendmsg+0x803/0x920 [ 1123.318512] ? copy_msghdr_from_user+0x430/0x430 [ 1123.323439] ? lock_downgrade+0x880/0x880 [ 1123.327639] ? kasan_check_read+0x11/0x20 [ 1123.331843] ? __fget+0x367/0x540 [ 1123.335332] ? iterate_fd+0x360/0x360 [ 1123.339177] ? __fget_light+0x1a9/0x230 [ 1123.343192] ? __fdget+0x1b/0x20 03:38:37 executing program 5 (fault-call:2 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 1123.346583] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1123.352276] __sys_sendmsg+0x105/0x1d0 [ 1123.356197] ? __ia32_sys_shutdown+0x80/0x80 [ 1123.360834] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1123.366195] ? do_syscall_64+0x26/0x620 [ 1123.370201] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1123.372557] FAULT_INJECTION: forcing a failure. [ 1123.372557] name failslab, interval 1, probability 0, space 0, times 0 [ 1123.375589] ? do_syscall_64+0x26/0x620 [ 1123.375619] __x64_sys_sendmsg+0x78/0xb0 [ 1123.375639] do_syscall_64+0xfd/0x620 [ 1123.375659] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1123.375672] RIP: 0033:0x45b159 [ 1123.375697] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1123.426294] RSP: 002b:00007fd7b2aadc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1123.429207] FAULT_INJECTION: forcing a failure. [ 1123.429207] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1123.434129] RAX: ffffffffffffffda RBX: 00007fd7b2aae6d4 RCX: 000000000045b159 [ 1123.453331] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 1123.460735] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1123.468033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1123.475329] R13: 00000000000008c9 R14: 00000000004c9fbd R15: 0000000000000000 [ 1123.482676] CPU: 0 PID: 29721 Comm: syz-executor.5 Not tainted 4.19.97-syzkaller #0 [ 1123.490496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1123.500527] Call Trace: [ 1123.500551] dump_stack+0x197/0x210 [ 1123.500576] should_fail.cold+0xa/0x1b [ 1123.505700] binder_alloc_new_buf_locked: 5 callbacks suppressed [ 1123.505708] binder_alloc: 29712: binder_alloc_buf, no vma [ 1123.506981] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1123.527869] ? mark_held_locks+0x100/0x100 [ 1123.532136] __alloc_pages_nodemask+0x1ee/0x750 [ 1123.537392] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1123.542586] cache_grow_begin+0x91/0x8c0 [ 1123.546676] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1123.552457] __kmalloc+0x68b/0x750 [ 1123.556029] ? mutex_trylock+0x18e/0x1e0 [ 1123.560121] ? tty_write+0x542/0x7a0 [ 1123.563883] tty_write+0x542/0x7a0 [ 1123.567568] ? n_hdlc_tty_poll+0x370/0x370 [ 1123.571860] __vfs_write+0x114/0x810 [ 1123.575607] ? tty_read+0x2a0/0x2a0 [ 1123.579355] ? kernel_read+0x120/0x120 [ 1123.583273] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1123.588838] ? __inode_security_revalidate+0xda/0x120 [ 1123.594080] ? avc_policy_seqno+0xd/0x70 [ 1123.598188] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1123.603366] ? selinux_file_permission+0x92/0x550 [ 1123.606660] FAULT_INJECTION: forcing a failure. [ 1123.606660] name failslab, interval 1, probability 0, space 0, times 0 [ 1123.608470] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1123.608496] ? security_file_permission+0x89/0x230 [ 1123.608524] ? rw_verify_area+0x118/0x360 [ 1123.634405] vfs_write+0x20c/0x560 [ 1123.638002] ksys_write+0x14f/0x2d0 [ 1123.641668] ? __ia32_sys_read+0xb0/0xb0 [ 1123.645945] ? do_syscall_64+0x26/0x620 03:38:37 executing program 2 (fault-call:2 fault-nth:1): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) [ 1123.649943] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1123.655624] ? do_syscall_64+0x26/0x620 [ 1123.659778] __x64_sys_write+0x73/0xb0 [ 1123.663705] do_syscall_64+0xfd/0x620 [ 1123.667540] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1123.672745] RIP: 0033:0x45b159 [ 1123.675962] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1123.695001] RSP: 002b:00007f81cfa34c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1123.702738] RAX: ffffffffffffffda RBX: 00007f81cfa356d4 RCX: 000000000045b159 [ 1123.710195] RDX: 00000000fffffe00 RSI: 0000000020000040 RDI: 0000000000000003 [ 1123.717481] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1123.724880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1123.732159] R13: 0000000000000be7 R14: 00000000004c8747 R15: 0000000000000001 [ 1123.739478] CPU: 1 PID: 29780 Comm: syz-executor.2 Not tainted 4.19.97-syzkaller #0 [ 1123.747302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1123.756869] Call Trace: [ 1123.759497] dump_stack+0x197/0x210 [ 1123.763167] should_fail.cold+0xa/0x1b [ 1123.767224] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1123.772586] ? lock_downgrade+0x880/0x880 [ 1123.776780] __should_failslab+0x121/0x190 [ 1123.781224] should_failslab+0x9/0x14 [ 1123.785034] kmem_cache_alloc_node_trace+0x274/0x720 [ 1123.790339] ? __alloc_skb+0xd5/0x5f0 [ 1123.794176] __kmalloc_node_track_caller+0x3d/0x80 [ 1123.799144] __kmalloc_reserve.isra.0+0x40/0xf0 [ 1123.803856] __alloc_skb+0x10b/0x5f0 [ 1123.807776] ? skb_trim+0x190/0x190 [ 1123.811421] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1123.816990] ? netlink_autobind.isra.0+0x228/0x310 [ 1123.822064] netlink_sendmsg+0x97b/0xd70 [ 1123.826189] ? netlink_unicast+0x730/0x730 [ 1123.830561] ? selinux_socket_sendmsg+0x36/0x40 [ 1123.835256] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1123.840807] ? security_socket_sendmsg+0x8d/0xc0 [ 1123.845589] ? netlink_unicast+0x730/0x730 [ 1123.849875] sock_sendmsg+0xd7/0x130 [ 1123.853703] ___sys_sendmsg+0x803/0x920 [ 1123.857697] ? copy_msghdr_from_user+0x430/0x430 [ 1123.862476] ? lock_downgrade+0x880/0x880 [ 1123.866726] ? kasan_check_read+0x11/0x20 [ 1123.870912] ? __fget+0x367/0x540 [ 1123.874387] ? iterate_fd+0x360/0x360 [ 1123.878207] ? __fget_light+0x1a9/0x230 [ 1123.882200] ? __fdget+0x1b/0x20 [ 1123.885581] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1123.891145] __sys_sendmsg+0x105/0x1d0 [ 1123.895184] ? __ia32_sys_shutdown+0x80/0x80 [ 1123.899730] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1123.904505] ? do_syscall_64+0x26/0x620 [ 1123.908504] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1123.913883] ? do_syscall_64+0x26/0x620 [ 1123.917888] __x64_sys_sendmsg+0x78/0xb0 [ 1123.921977] do_syscall_64+0xfd/0x620 [ 1123.925898] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1123.931109] RIP: 0033:0x45b159 [ 1123.934314] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1123.953541] RSP: 002b:00007fd7b2aadc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1123.961263] RAX: ffffffffffffffda RBX: 00007fd7b2aae6d4 RCX: 000000000045b159 [ 1123.968688] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 1123.975971] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1123.983250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1123.990603] R13: 00000000000008c9 R14: 00000000004c9fbd R15: 0000000000000001 03:38:37 executing program 5 (fault-call:2 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 1123.997917] CPU: 0 PID: 29718 Comm: syz-executor.4 Not tainted 4.19.97-syzkaller #0 [ 1124.005843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1124.015215] Call Trace: [ 1124.017932] dump_stack+0x197/0x210 [ 1124.021601] should_fail.cold+0xa/0x1b [ 1124.025535] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1124.030677] ? lock_downgrade+0x880/0x880 [ 1124.035012] __should_failslab+0x121/0x190 [ 1124.039291] should_failslab+0x9/0x14 [ 1124.043274] kmem_cache_alloc_trace+0x2cc/0x760 [ 1124.047988] ? kasan_check_read+0x11/0x20 03:38:37 executing program 2 (fault-call:2 fault-nth:2): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) [ 1124.052273] ip_rt_ioctl+0xbef/0x1260 [ 1124.056113] ? fib_validate_source+0x600/0x600 [ 1124.060759] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1124.066332] ? _copy_from_user+0xdd/0x150 [ 1124.070519] inet_ioctl+0x2ea/0x370 [ 1124.074181] ? inet_stream_connect+0xa0/0xa0 [ 1124.078648] ? avc_has_extended_perms+0x8e7/0x10f0 [ 1124.083630] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1124.089296] ? avc_has_extended_perms+0xa78/0x10f0 [ 1124.094280] sock_do_ioctl+0xd8/0x2f0 [ 1124.098112] ? compat_ifr_data_ioctl+0x160/0x160 [ 1124.102925] ? kasan_check_read+0x11/0x20 [ 1124.107110] ? mark_held_locks+0x100/0x100 [ 1124.110838] FAULT_INJECTION: forcing a failure. [ 1124.110838] name failslab, interval 1, probability 0, space 0, times 0 [ 1124.111373] sock_ioctl+0x325/0x610 [ 1124.111394] ? dlci_ioctl_set+0x40/0x40 [ 1124.111410] ? __fget+0x340/0x540 [ 1124.111437] ? __might_sleep+0x95/0x190 [ 1124.111457] ? dlci_ioctl_set+0x40/0x40 [ 1124.111477] do_vfs_ioctl+0xd5f/0x1380 [ 1124.111494] ? selinux_file_ioctl+0x46f/0x5e0 [ 1124.111508] ? selinux_file_ioctl+0x125/0x5e0 [ 1124.111527] ? ioctl_preallocate+0x210/0x210 [ 1124.111542] ? selinux_file_mprotect+0x620/0x620 [ 1124.111565] ? iterate_fd+0x360/0x360 [ 1124.111583] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1124.111600] ? fput+0x128/0x1a0 [ 1124.111622] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1124.111643] ? security_file_ioctl+0x8d/0xc0 [ 1124.111662] ksys_ioctl+0xab/0xd0 [ 1124.111682] __x64_sys_ioctl+0x73/0xb0 [ 1124.111702] do_syscall_64+0xfd/0x620 [ 1124.111723] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1124.111736] RIP: 0033:0x45b159 [ 1124.111753] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1124.111763] RSP: 002b:00007f6b9f391c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1124.111786] RAX: ffffffffffffffda RBX: 00007f6b9f3926d4 RCX: 000000000045b159 [ 1124.111797] RDX: 0000000020000200 RSI: 000000000000890b RDI: 0000000000000005 [ 1124.111814] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1124.111824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1124.111834] R13: 0000000000000695 R14: 00000000004c7e4e R15: 0000000000000000 [ 1124.151566] FAULT_INJECTION: forcing a failure. [ 1124.151566] name failslab, interval 1, probability 0, space 0, times 0 [ 1124.151804] CPU: 1 PID: 29834 Comm: syz-executor.5 Not tainted 4.19.97-syzkaller #0 [ 1124.290477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1124.299835] Call Trace: [ 1124.302439] dump_stack+0x197/0x210 [ 1124.306089] should_fail.cold+0xa/0x1b [ 1124.309990] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1124.315247] __should_failslab+0x121/0x190 [ 1124.319614] should_failslab+0x9/0x14 [ 1124.323434] __kmalloc+0x71/0x750 [ 1124.326898] ? perf_trace_lock+0x510/0x510 [ 1124.331153] ? find_held_lock+0x35/0x130 [ 1124.335393] ? __tty_buffer_request_room+0x1fb/0x5c0 [ 1124.340514] __tty_buffer_request_room+0x1fb/0x5c0 [ 1124.345479] tty_insert_flip_string_fixed_flag+0x93/0x1f0 [ 1124.351035] ? do_raw_spin_lock+0xd7/0x250 [ 1124.355381] pty_write+0x133/0x200 [ 1124.359046] ? pty_unthrottle+0x50/0x50 [ 1124.363054] n_hdlc_send_frames+0x271/0x450 [ 1124.367408] n_hdlc_tty_write+0x5c8/0x6c0 [ 1124.371585] ? n_hdlc_tty_poll+0x370/0x370 [ 1124.375845] ? wake_up_q+0x100/0x100 [ 1124.379641] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1124.385205] ? _copy_from_user+0xdd/0x150 [ 1124.389488] tty_write+0x458/0x7a0 [ 1124.393038] ? n_hdlc_tty_poll+0x370/0x370 [ 1124.397420] __vfs_write+0x114/0x810 [ 1124.401152] ? tty_read+0x2a0/0x2a0 [ 1124.404937] ? kernel_read+0x120/0x120 [ 1124.408834] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1124.414526] ? __inode_security_revalidate+0xda/0x120 [ 1124.419843] ? avc_policy_seqno+0xd/0x70 [ 1124.424019] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1124.429046] ? selinux_file_permission+0x92/0x550 [ 1124.434601] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1124.440157] ? security_file_permission+0x89/0x230 [ 1124.445112] ? rw_verify_area+0x118/0x360 [ 1124.449268] vfs_write+0x20c/0x560 [ 1124.452820] ksys_write+0x14f/0x2d0 [ 1124.456473] ? __ia32_sys_read+0xb0/0xb0 [ 1124.460553] ? do_syscall_64+0x26/0x620 [ 1124.464562] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1124.469947] ? do_syscall_64+0x26/0x620 [ 1124.474084] __x64_sys_write+0x73/0xb0 [ 1124.477988] do_syscall_64+0xfd/0x620 [ 1124.481822] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1124.487024] RIP: 0033:0x45b159 [ 1124.490319] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1124.509321] RSP: 002b:00007f81cfa34c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1124.517062] RAX: ffffffffffffffda RBX: 00007f81cfa356d4 RCX: 000000000045b159 [ 1124.524477] RDX: 00000000fffffe00 RSI: 0000000020000040 RDI: 0000000000000003 [ 1124.531886] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1124.539169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1124.546447] R13: 0000000000000be7 R14: 00000000004c8747 R15: 0000000000000002 03:38:38 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1124.553760] CPU: 0 PID: 29836 Comm: syz-executor.2 Not tainted 4.19.97-syzkaller #0 [ 1124.553763] [ 1124.553773] ====================================================== [ 1124.553778] WARNING: possible circular locking dependency detected [ 1124.553781] 4.19.97-syzkaller #0 Not tainted [ 1124.553785] ------------------------------------------------------ [ 1124.553789] syz-executor.5/29834 is trying to acquire lock: [ 1124.553792] 000000007446f256 (console_owner){-.-.}, at: vprintk_emit+0x3d5/0x6d0 [ 1124.553806] [ 1124.553810] but task is already holding lock: [ 1124.553812] 00000000e700a9b7 (&(&port->lock)->rlock){-.-.}, at: pty_write+0xff/0x200 [ 1124.553825] [ 1124.553830] which lock already depends on the new lock. [ 1124.553832] [ 1124.553834] [ 1124.553839] the existing dependency chain (in reverse order) is: [ 1124.553841] [ 1124.553843] -> #2 (&(&port->lock)->rlock){-.-.}: [ 1124.553857] _raw_spin_lock_irqsave+0x95/0xcd [ 1124.553860] tty_port_tty_get+0x22/0x90 [ 1124.553865] tty_port_default_wakeup+0x16/0x40 [ 1124.553869] tty_port_tty_wakeup+0x57/0x70 [ 1124.553873] uart_write_wakeup+0x46/0x70 [ 1124.553876] serial8250_tx_chars+0x495/0xaf0 [ 1124.553881] serial8250_handle_irq.part.0+0x261/0x2b0 [ 1124.553886] serial8250_default_handle_irq+0xc0/0x150 [ 1124.553890] serial8250_interrupt+0xfc/0x1e0 [ 1124.553894] __handle_irq_event_percpu+0x144/0x8f0 [ 1124.553899] handle_irq_event_percpu+0x74/0x160 [ 1124.553902] handle_irq_event+0xa7/0x134 [ 1124.553906] handle_edge_irq+0x25e/0x8d0 [ 1124.553909] handle_irq+0x39/0x50 [ 1124.553913] do_IRQ+0x99/0x1d0 [ 1124.553916] ret_from_intr+0x0/0x1e [ 1124.553921] _raw_spin_unlock_irqrestore+0x95/0xe0 [ 1124.553924] uart_write+0x3a9/0x6e0 [ 1124.553928] n_tty_write+0x3f9/0x1140 [ 1124.553932] tty_write+0x458/0x7a0 [ 1124.553936] redirected_tty_write+0xb2/0xc0 [ 1124.553939] __vfs_write+0x114/0x810 [ 1124.553943] vfs_write+0x20c/0x560 [ 1124.553946] ksys_write+0x14f/0x2d0 [ 1124.553950] __x64_sys_write+0x73/0xb0 [ 1124.553954] do_syscall_64+0xfd/0x620 [ 1124.553958] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1124.553960] [ 1124.553962] -> #1 (&port_lock_key){-.-.}: [ 1124.553976] _raw_spin_lock_irqsave+0x95/0xcd [ 1124.553980] serial8250_console_write+0x7ca/0x9f0 [ 1124.553985] univ8250_console_write+0x5f/0x70 [ 1124.553989] console_unlock+0xbdf/0x10d0 [ 1124.553992] vprintk_emit+0x280/0x6d0 [ 1124.553996] vprintk_default+0x28/0x30 [ 1124.554000] vprintk_func+0x7e/0x189 [ 1124.554003] printk+0xba/0xed [ 1124.554007] register_console+0x77f/0xb90 [ 1124.554011] univ8250_console_init+0x3e/0x4b [ 1124.554015] console_init+0x4f7/0x761 [ 1124.554019] start_kernel+0x59c/0x8c5 [ 1124.554023] x86_64_start_reservations+0x29/0x2b [ 1124.554027] x86_64_start_kernel+0x77/0x7b [ 1124.554031] secondary_startup_64+0xa4/0xb0 [ 1124.554033] [ 1124.554035] -> #0 (console_owner){-.-.}: [ 1124.554048] lock_acquire+0x16f/0x3f0 [ 1124.554051] vprintk_emit+0x412/0x6d0 [ 1124.554055] vprintk_default+0x28/0x30 [ 1124.554059] vprintk_func+0x7e/0x189 [ 1124.554062] printk+0xba/0xed [ 1124.554065] should_fail+0x6f1/0x85c [ 1124.554069] __should_failslab+0x121/0x190 [ 1124.554073] should_failslab+0x9/0x14 [ 1124.554077] __kmalloc+0x71/0x750 [ 1124.554081] __tty_buffer_request_room+0x1fb/0x5c0 [ 1124.554086] tty_insert_flip_string_fixed_flag+0x93/0x1f0 [ 1124.554089] pty_write+0x133/0x200 [ 1124.554093] n_hdlc_send_frames+0x271/0x450 [ 1124.554097] n_hdlc_tty_write+0x5c8/0x6c0 [ 1124.554101] tty_write+0x458/0x7a0 [ 1124.554104] __vfs_write+0x114/0x810 [ 1124.554108] vfs_write+0x20c/0x560 [ 1124.554111] ksys_write+0x14f/0x2d0 [ 1124.554115] __x64_sys_write+0x73/0xb0 [ 1124.554119] do_syscall_64+0xfd/0x620 [ 1124.554124] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1124.554126] [ 1124.554130] other info that might help us debug this: [ 1124.554132] [ 1124.554135] Chain exists of: [ 1124.554136] console_owner --> &port_lock_key --> &(&port->lock)->rlock [ 1124.554153] [ 1124.554157] Possible unsafe locking scenario: [ 1124.554159] [ 1124.554163] CPU0 CPU1 [ 1124.554167] ---- ---- [ 1124.554169] lock(&(&port->lock)->rlock); [ 1124.554178] lock(&port_lock_key); [ 1124.554187] lock(&(&port->lock)->rlock); [ 1124.554194] lock(console_owner); [ 1124.554201] [ 1124.554204] *** DEADLOCK *** [ 1124.554206] [ 1124.554210] 3 locks held by syz-executor.5/29834: [ 1124.554212] #0: 0000000043902d2a (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1124.554228] #1: 00000000a4cc209f (&tty->atomic_write_lock){+.+.}, at: tty_write_lock+0x23/0x90 [ 1124.554244] #2: 00000000e700a9b7 (&(&port->lock)->rlock){-.-.}, at: pty_write+0xff/0x200 [ 1124.554259] [ 1124.554262] stack backtrace: [ 1124.554268] CPU: 1 PID: 29834 Comm: syz-executor.5 Not tainted 4.19.97-syzkaller #0 [ 1124.554275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1124.554278] Call Trace: [ 1124.554282] dump_stack+0x197/0x210 [ 1124.554286] print_circular_bug.isra.0.cold+0x1cc/0x28f [ 1124.554290] __lock_acquire+0x2e19/0x49c0 [ 1124.554294] ? mark_held_locks+0x100/0x100 [ 1124.554298] ? debug_smp_processor_id+0x1c/0x20 [ 1124.554302] ? vprintk_emit+0x3ed/0x6d0 [ 1124.554305] lock_acquire+0x16f/0x3f0 [ 1124.554309] ? vprintk_emit+0x3d5/0x6d0 [ 1124.554312] vprintk_emit+0x412/0x6d0 [ 1124.554316] ? vprintk_emit+0x3d5/0x6d0 [ 1124.554320] vprintk_default+0x28/0x30 [ 1124.554323] vprintk_func+0x7e/0x189 [ 1124.554326] printk+0xba/0xed [ 1124.554331] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 1124.554335] ? check_noncircular+0x20/0x20 [ 1124.554339] ? is_bpf_text_address+0xac/0x170 [ 1124.554343] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1124.554347] ? ___ratelimit+0x60/0x595 [ 1124.554351] should_fail+0x6f1/0x85c [ 1124.554355] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1124.554359] __should_failslab+0x121/0x190 [ 1124.554362] should_failslab+0x9/0x14 [ 1124.554366] __kmalloc+0x71/0x750 [ 1124.554369] ? perf_trace_lock+0x510/0x510 [ 1124.554373] ? find_held_lock+0x35/0x130 [ 1124.554378] ? __tty_buffer_request_room+0x1fb/0x5c0 [ 1124.554382] __tty_buffer_request_room+0x1fb/0x5c0 [ 1124.554387] tty_insert_flip_string_fixed_flag+0x93/0x1f0 [ 1124.554390] ? do_raw_spin_lock+0xd7/0x250 [ 1124.554394] pty_write+0x133/0x200 [ 1124.554398] ? pty_unthrottle+0x50/0x50 [ 1124.554402] n_hdlc_send_frames+0x271/0x450 [ 1124.554405] n_hdlc_tty_write+0x5c8/0x6c0 [ 1124.554409] ? n_hdlc_tty_poll+0x370/0x370 [ 1124.554413] ? wake_up_q+0x100/0x100 [ 1124.554418] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1124.554421] ? _copy_from_user+0xdd/0x150 [ 1124.554425] tty_write+0x458/0x7a0 [ 1124.554429] ? n_hdlc_tty_poll+0x370/0x370 [ 1124.554432] __vfs_write+0x114/0x810 [ 1124.554436] ? tty_read+0x2a0/0x2a0 [ 1124.554439] ? kernel_read+0x120/0x120 [ 1124.554444] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1124.554448] ? __inode_security_revalidate+0xda/0x120 [ 1124.554452] ? avc_policy_seqno+0xd/0x70 [ 1124.554457] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1124.554461] ? selinux_file_permission+0x92/0x550 [ 1124.554465] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1124.554469] ? security_file_permission+0x89/0x230 [ 1124.554473] ? rw_verify_area+0x118/0x360 [ 1124.554477] vfs_write+0x20c/0x560 [ 1124.554480] ksys_write+0x14f/0x2d0 [ 1124.554484] ? __ia32_sys_read+0xb0/0xb0 [ 1124.554488] ? do_syscall_64+0x26/0x620 [ 1124.554493] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1124.554496] ? do_syscall_64+0x26/0x620 [ 1124.554500] __x64_sys_write+0x73/0xb0 [ 1124.554504] do_syscall_64+0xfd/0x620 [ 1124.554508] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1124.554511] RIP: 0033:0x45b159 [ 1124.554525] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1124.554529] RSP: 002b:00007f81cfa34c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1124.554539] RAX: ffffffffffffffda RBX: 00007f81cfa356d4 RCX: 000000000045b159 [ 1124.554544] RDX: 00000000fffffe00 RSI: 0000000020000040 RDI: 0000000000000003 [ 1124.554550] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1124.554556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1124.554561] R13: 0000000000000be7 R14: 00000000004c8747 R15: 0000000000000002 [ 1125.382826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1125.392182] Call Trace: [ 1125.394817] dump_stack+0x197/0x210 [ 1125.398472] should_fail.cold+0xa/0x1b [ 1125.402416] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1125.407525] ? mark_held_locks+0x100/0x100 [ 1125.411762] __should_failslab+0x121/0x190 [ 1125.416066] should_failslab+0x9/0x14 [ 1125.419896] kmem_cache_alloc+0x47/0x700 [ 1125.423994] ? lock_acquire+0x16f/0x3f0 [ 1125.427979] ? netlink_deliver_tap+0x146/0xc20 [ 1125.432569] skb_clone+0x156/0x3e0 [ 1125.436109] netlink_deliver_tap+0x97b/0xc20 [ 1125.440562] netlink_unicast+0x5ae/0x730 [ 1125.444677] ? netlink_attachskb+0x770/0x770 [ 1125.449098] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1125.454841] netlink_sendmsg+0x8ae/0xd70 [ 1125.459027] ? netlink_unicast+0x730/0x730 [ 1125.463556] ? selinux_socket_sendmsg+0x36/0x40 [ 1125.468236] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1125.473790] ? security_socket_sendmsg+0x8d/0xc0 [ 1125.478566] ? netlink_unicast+0x730/0x730 [ 1125.482826] sock_sendmsg+0xd7/0x130 [ 1125.486544] ___sys_sendmsg+0x803/0x920 [ 1125.490621] ? copy_msghdr_from_user+0x430/0x430 [ 1125.495421] ? lock_downgrade+0x880/0x880 [ 1125.499605] ? __fget+0x9d/0x540 [ 1125.502992] ? __fget+0x367/0x540 [ 1125.506513] ? iterate_fd+0x360/0x360 [ 1125.510306] ? fsnotify+0x8ba/0xf00 [ 1125.514092] ? __fget_light+0x1a9/0x230 [ 1125.518237] ? __fdget+0x1b/0x20 [ 1125.521605] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1125.529627] __sys_sendmsg+0x105/0x1d0 [ 1125.533535] ? __ia32_sys_shutdown+0x80/0x80 [ 1125.537967] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1125.543423] __x64_sys_sendmsg+0x78/0xb0 [ 1125.547485] do_syscall_64+0xfd/0x620 [ 1125.551287] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1125.556491] RIP: 0033:0x45b159 [ 1125.559770] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1125.578925] RSP: 002b:00007fd7b2aadc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1125.587289] RAX: ffffffffffffffda RBX: 00007fd7b2aae6d4 RCX: 000000000045b159 [ 1125.594566] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 1125.601859] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1125.609143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1125.616622] R13: 00000000000008c9 R14: 00000000004c9fbd R15: 0000000000000002 03:38:39 executing program 5 (fault-call:2 fault-nth:3): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) 03:38:39 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x2, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0x31}, 0x66}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000564f73a9acdcd79de66d946a249b8558e443ea33fd341c855609754235d5e5f1b1e35a1b6943d58c8ac47a5e0992978da25e1f9938b8dc48636551a0225670bc7de8cc4c3eec3d96a21515f45e2ac390c33009431dd75902dc12ceb2e97adf46b0ca28bf57829a1efea75cf5edfc4b55ff60038b049be9ada9905d220b60414db76dfd0f76d870b6566c19177c2456f9abcb0fdef9c27adff58e89c676deb737411bbe74d303fb0106", @ANYRES16=r5, @ANYBLOB="00042dbd7000ffdbdf250d00000008003a007f000000080032000400000008003100ffffffff"], 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) 03:38:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0) unlink(&(0x7f0000000000)='./file0\x00') ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 03:38:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) 03:38:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) dup2(r0, r0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r6 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r5, r6, 0x0, 0x10000) ioctl$BLKROTATIONAL(r5, 0x127e, &(0x7f0000000080)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040), 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x0, @remote}], 0x10) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f00000001c0)={0x401, 0x9, 0x4, 0x0, 0x80000001, {0x0, 0x7530}, {0x1, 0x0, 0xfc, 0x5, 0x34, 0x10, "9290b9b1"}, 0x8, 0x3, @planes=&(0x7f0000000040)={0x9, 0x3f8, @fd=r9, 0x4}, 0x1, 0x0, r7}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000280)={r11, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x2, @remote, 0x3}, @in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x80000000}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e24, 0x6, @loopback, 0xe7f3}]}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000380)={r11, @in={{0x2, 0x4e21, @local}}}, 0x84) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$DRM_IOCTL_DMA(r13, 0xc0406429, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)=[0x9, 0x200, 0xf53, 0x40000000, 0x7fffffff, 0x800, 0xffffffff], 0x20, 0x8, 0x7fffffff, &(0x7f0000000100)=[0x9, 0x4, 0x4, 0x2, 0x200, 0x874f, 0x6, 0xfa], &(0x7f0000000140)=[0x2, 0xaf, 0x5, 0x1, 0x101, 0x2, 0x10000]}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r14 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r15 = dup(r14) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) r16 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) ioctl$VIDIOC_S_EXT_CTRLS(r15, 0xc0205648, &(0x7f0000000280)={0xa10000, 0x0, 0x0, r16, 0x0, &(0x7f0000000240)={0x1421265, 0x5, [], @string=&(0x7f00000001c0)}}) getsockname$llc(r17, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000340)=0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0xffffff7f, 0x0}) [ 1125.802842] input: syz0 as /devices/virtual/input/input185 [ 1125.838165] FAULT_INJECTION: forcing a failure. [ 1125.838165] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1125.850179] CPU: 1 PID: 29959 Comm: syz-executor.5 Not tainted 4.19.97-syzkaller #0 [ 1125.854423] audit: type=1804 audit(2000000319.710:468): pid=29964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir549291058/syzkaller.vsty08/2033/file0" dev="sda1" ino=16656 res=1 [ 1125.857983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1125.857989] Call Trace: [ 1125.858014] dump_stack+0x197/0x210 [ 1125.858037] should_fail.cold+0xa/0x1b [ 1125.891775] binder: BINDER_SET_CONTEXT_MGR already set [ 1125.895075] ? mark_held_locks+0x100/0x100 [ 1125.895147] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1125.895162] ? perf_trace_lock_acquire+0xf5/0x580 [ 1125.895188] __alloc_pages_nodemask+0x1ee/0x750 [ 1125.897913] binder: 29960:29964 ioctl 40046207 0 returned -16 [ 1125.901412] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1125.901437] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1125.901463] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1125.951942] ? bpf_prog_kallsyms_find+0x50/0x2c0 [ 1125.956968] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1125.962102] cache_grow_begin+0x91/0x8c0 [ 1125.966208] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1125.971779] __kmalloc+0x68b/0x750 [ 1125.975470] ? __tty_buffer_request_room+0x1fb/0x5c0 [ 1125.976568] audit: type=1800 audit(2000000319.740:469): pid=29964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16656 res=0 [ 1125.980612] __tty_buffer_request_room+0x1fb/0x5c0 [ 1125.980636] tty_insert_flip_string_fixed_flag+0x93/0x1f0 [ 1125.980650] ? do_raw_spin_lock+0xd7/0x250 [ 1125.980669] pty_write+0x133/0x200 [ 1126.021794] ? pty_unthrottle+0x50/0x50 [ 1126.025808] n_hdlc_send_frames+0x271/0x450 [ 1126.030169] n_hdlc_tty_write+0x5c8/0x6c0 [ 1126.034347] ? n_hdlc_tty_poll+0x370/0x370 [ 1126.038707] ? __might_fault+0xfb/0x1e0 [ 1126.042732] ? wake_up_q+0x100/0x100 [ 1126.046471] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1126.052165] ? _copy_from_user+0xdd/0x150 [ 1126.056349] tty_write+0x458/0x7a0 [ 1126.059915] ? n_hdlc_tty_poll+0x370/0x370 [ 1126.063491] binder: BINDER_SET_CONTEXT_MGR already set [ 1126.064620] __vfs_write+0x114/0x810 [ 1126.064638] ? tty_read+0x2a0/0x2a0 [ 1126.064656] ? kernel_read+0x120/0x120 [ 1126.073435] binder: 29972:29973 ioctl 40046207 0 returned -16 [ 1126.074708] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1126.074728] ? __inode_security_revalidate+0xda/0x120 [ 1126.074742] ? avc_policy_seqno+0xd/0x70 [ 1126.074761] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1126.108366] ? selinux_file_permission+0x92/0x550 [ 1126.113239] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1126.118809] ? security_file_permission+0x89/0x230 [ 1126.123767] ? rw_verify_area+0x118/0x360 [ 1126.127944] vfs_write+0x20c/0x560 [ 1126.131622] ksys_write+0x14f/0x2d0 [ 1126.135278] ? __ia32_sys_read+0xb0/0xb0 [ 1126.139477] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1126.144861] __x64_sys_write+0x73/0xb0 [ 1126.148811] do_syscall_64+0xfd/0x620 [ 1126.152642] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1126.157853] RIP: 0033:0x45b159 [ 1126.161074] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1126.180458] RSP: 002b:00007f81cfa34c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1126.188182] RAX: ffffffffffffffda RBX: 00007f81cfa356d4 RCX: 000000000045b159 [ 1126.195599] RDX: 00000000fffffe00 RSI: 0000000020000040 RDI: 0000000000000003 03:38:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) 03:38:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, 0xffffffffffffffff) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0xffffff7f, 0x0}) 03:38:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000480)={0x0, 0x2, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) 03:38:40 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xffff}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x3) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f0000000140)={0x0, 0x3, 0xae, &(0x7f0000000100)=0x3ff}) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xd0, 0x0, 0x0) ioctl(r0, 0x5, &(0x7f0000000000)="8481f589dde65d7fb83354f2cb503c44739f69afb6a8cdd84950d477a679a5ac0edc5012d8874a02f2eeb3acd98dfd10a379a4c6d40d28da996d3c438da82db65b240be1843f203f3bda1125ea93399742bd0a0a19a5f18103a9de98f8bdde6bb5b9e5800209a2c73c60207a9e51aebf33b69ab2bf9cf9a80cf5adf28029e581e8c6f7d0892e246327f39d753f0a1caf2160f4c6d3b281fb7f1e99341965e62d63b47cba9419098676dd4d34a1731aa025ade671b85e0dac9ce73d4465f7c5a8309e54d61b9038b916d45526e22fc02af0e1b076922c0e7a2ccf402691640d6f6a") 03:38:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xe000000000000) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f00000000c0)={0x7ff}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0xffffff7f, 0x0}) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r5, 0x40044104, &(0x7f0000000040)=0x80000000) [ 1126.203032] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1126.210370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1126.217670] R13: 0000000000000be7 R14: 00000000004c8747 R15: 0000000000000003 03:38:40 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x4b47, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1126.263577] binder_alloc: 29985: binder_alloc_buf, no vma [ 1126.269845] input: syz0 as /devices/virtual/input/input186 03:38:40 executing program 5 (fault-call:2 fault-nth:4): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) 03:38:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = dup2(r2, r0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000033000505d25a80648c63940d0424fc60100010400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) fstatfs(r5, &(0x7f0000000040)=""/3) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05332a14ed"], 0x0, 0xffffff7f, 0x0}) 03:38:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000480)={0x0, 0x3, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) 03:38:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000100)) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00', 0x2000}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x4cab8f8c}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000240)={r6, 0x7fffffff}, &(0x7f0000000280)=0x8) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r7, r0) 03:38:40 executing program 3: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x8, 0x9, 0x4, 0x400, 0x6, {}, {0x2, 0x0, 0xa1, 0xff, 0x0, 0x4, "2144f40d"}, 0x8, 0x6, @userptr=0x5, 0x1, 0x0, 0xffffffffffffffff}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x7, 0x1, 0x2}) r3 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000001, r3) write$P9_RUNLINKAT(r0, &(0x7f0000000080)={0x7, 0x4d, 0x1}, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xd0, 0x0, 0x0) [ 1126.419791] openvswitch: netlink: Message has 5 unknown bytes. [ 1126.439885] binder: 29998:30001 unknown command 338309893 [ 1126.464400] FAULT_INJECTION: forcing a failure. [ 1126.464400] name failslab, interval 1, probability 0, space 0, times 0 [ 1126.476786] CPU: 1 PID: 30027 Comm: syz-executor.5 Not tainted 4.19.97-syzkaller #0 [ 1126.484607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1126.489767] input input187: cannot allocate more than FF_MAX_EFFECTS effects [ 1126.494403] Call Trace: [ 1126.494433] dump_stack+0x197/0x210 [ 1126.494458] should_fail.cold+0xa/0x1b [ 1126.494477] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1126.494499] __should_failslab+0x121/0x190 [ 1126.494515] should_failslab+0x9/0x14 [ 1126.494527] __kmalloc+0x71/0x750 [ 1126.494548] ? perf_trace_lock+0x510/0x510 [ 1126.506037] binder: 29998:30001 ioctl c0306201 20000080 returned -22 [ 1126.508250] ? mark_held_locks+0x100/0x100 [ 1126.508270] ? __tty_buffer_request_room+0x1fb/0x5c0 [ 1126.508286] __tty_buffer_request_room+0x1fb/0x5c0 [ 1126.508309] tty_insert_flip_string_fixed_flag+0x93/0x1f0 [ 1126.559383] ? do_raw_spin_lock+0xd7/0x250 [ 1126.563638] pty_write+0x133/0x200 [ 1126.567317] ? pty_unthrottle+0x50/0x50 [ 1126.571307] n_hdlc_send_frames+0x271/0x450 [ 1126.575648] n_hdlc_tty_write+0x5c8/0x6c0 [ 1126.579826] ? n_hdlc_tty_poll+0x370/0x370 [ 1126.584075] ? __might_fault+0xfb/0x1e0 [ 1126.588065] ? wake_up_q+0x100/0x100 [ 1126.591805] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1126.597418] ? _copy_from_user+0xdd/0x150 [ 1126.601587] tty_write+0x458/0x7a0 [ 1126.605144] ? n_hdlc_tty_poll+0x370/0x370 [ 1126.609415] __vfs_write+0x114/0x810 [ 1126.613143] ? tty_read+0x2a0/0x2a0 [ 1126.616773] ? kernel_read+0x120/0x120 [ 1126.620678] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1126.626337] ? __inode_security_revalidate+0xda/0x120 [ 1126.631760] ? avc_policy_seqno+0xd/0x70 [ 1126.635829] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1126.640916] ? selinux_file_permission+0x92/0x550 [ 1126.645884] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1126.651438] ? security_file_permission+0x89/0x230 [ 1126.656380] ? rw_verify_area+0x118/0x360 [ 1126.660548] vfs_write+0x20c/0x560 [ 1126.664194] ksys_write+0x14f/0x2d0 [ 1126.667837] ? __ia32_sys_read+0xb0/0xb0 [ 1126.671924] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1126.677322] __x64_sys_write+0x73/0xb0 [ 1126.681214] do_syscall_64+0xfd/0x620 [ 1126.685040] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1126.690337] RIP: 0033:0x45b159 [ 1126.693555] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1126.712496] RSP: 002b:00007f81cfa34c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 03:38:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000480)={0x0, 0x4, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) [ 1126.720311] RAX: ffffffffffffffda RBX: 00007f81cfa356d4 RCX: 000000000045b159 [ 1126.727687] RDX: 00000000fffffe00 RSI: 0000000020000040 RDI: 0000000000000003 [ 1126.735167] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1126.742642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1126.749970] R13: 0000000000000be7 R14: 00000000004c8747 R15: 0000000000000004 03:38:40 executing program 3: syz_extract_tcp_res(&(0x7f0000000040), 0x80000000, 0x200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4}, 0x0, 0x6, 0x0, 0x1, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xd0, 0x0, 0x0) link(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video2\x00', 0x2, 0x0) r4 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)={0x81, 0xb, 0x4, 0x200000, 0x8, {0x77359400}, {0x1, 0x1, 0x7, 0x0, 0x80, 0x1, "9870d46a"}, 0xbffc, 0x4, @fd, 0x4, 0x0, r4}) dup(r2) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=0x0) fcntl$setown(r2, 0x8, r5) 03:38:40 executing program 5 (fault-call:2 fault-nth:5): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) 03:38:40 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x4b49, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1126.831042] input input188: cannot allocate more than FF_MAX_EFFECTS effects 03:38:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000480)={0x0, 0xa, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) 03:38:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f00000000c0)={'raw\x00', 0xcd, "e45581ad28e176bcd2e3bbdbb92879af4191f165d4ebaaa4a425a4ab3646337ae462dcd5bcc3266da8715a0678c4bcaaf3e236cca8b185ca463f8a9bef9418b13d6efd39fe4272f161f51e5a1bd6e777d71c460cdce866b8c9b3531acd83e17b3cfb2a8ee1234be69614b5f7045e8bf664af07ff30f41cce137cf27e1dfb7828d5c8039ede686a136d21495620901771929b875cd601e519998d80d9bfb1bc8d51cdb57f3309a105619aca826895bb209b2ead98726cf25050221fef9cf6dd5460493d0b3b76827f9996d2d70e"}, &(0x7f00000001c0)=0xf1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="05000440d23425266adb39c273a4a0b7ce5e656ddbcc7b195418b670f0a132f297175ff8be5b89b4802fe36e49ff46863c83b2c120ce7c16c0753de9d71444e0a1cb01f2769f89dd512f00af8cc53c229b85352bde57a7faef473a29259edb5327b47685da52cfab14955f6d16597d5b7b75ce953de6e9a20d7fef33b91d49edaa637e6cab4defcb67fdd1ec8b93d6d57151b3c66d29dddd76d534028b44c32320ab211056eaac15932f60fa701c0767898640c098bfbf5c7f597b1c4c1df3f8085ee050"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r5, r0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000000240)=0x1) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="057f044000c030b9b5270000000063404001bc6842afe8942b2b3d16e72497e2e6630ff08adb1afacc5578ce9083ed31f93d3d3969da39d1aa4accbfd76099ca3f06a9cbcea111323fb4491fc519c0e454a54c5295a8c997522ecd21d4911c2952da39ffeb4d7f639a7cb1c2e7c20a48e461bd9a71432b965d273f3b1b747b15e75290d4390223c76cad6d318e1caff42b07bb8104edc3a62ccd80067fb17e8b9e9196f181605caefa389cc33aefa4cd3a99f6dd73425d9b4e6b83c50b6217335746bb8f51d2055ccd9bc42b0d1ef10abc6a34ab3e796978268a45de64741149ccd832c223e240bab9"], 0x0, 0xffffff7f, 0x0}) 03:38:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xd0, 0x0, 0x0) 03:38:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f00000000c0)=0x3, &(0x7f0000000100)=0x1) dup2(r1, r0) 03:38:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000480)={0x0, 0xe, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) [ 1126.970408] binder: 30231:30237 unknown command 1074003973 [ 1126.988107] binder: 30231:30237 ioctl c0306201 20000200 returned -22 03:38:40 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x541b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1127.057828] input: syz0 as /devices/virtual/input/input189 03:38:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0xffffff7f, 0x0}) 03:38:41 executing program 3: perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x9}, 0x0, 0x0, 0x9, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000033000505d25a80648c63940d0424fc60100010400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$sock_ifreq(r1, 0x8995, &(0x7f0000000000)={'batadv0\x00', @ifru_hwaddr=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000033000505d25a80648c63940d0424fc60100010400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f00000001c0)={0x3, 'team_slave_0\x00', {0x9a}, 0x1}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000180)=0x1b, 0x4) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000200)={0x5, 0x3b, 0x1, 0x0, 0x401, 0x3, 0x7, 0x3f, 0x0, 0x5, 0x80, 0x4, 0x0, 0x2, 0x3ebb, 0x1, 0x5, 0xad, 0x8, [], 0x8, 0x1}) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xd0, 0x0, 0x0) 03:38:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000480)={0x0, 0xf, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) [ 1127.165631] input: syz0 as /devices/virtual/input/input190 [ 1127.216887] openvswitch: netlink: Message has 5 unknown bytes. [ 1127.237548] binder_alloc: 30425: binder_alloc_buf, no vma [ 1127.254378] openvswitch: netlink: Message has 5 unknown bytes. [ 1127.266962] FAULT_INJECTION: forcing a failure. [ 1127.266962] name failslab, interval 1, probability 0, space 0, times 0 [ 1127.278350] CPU: 0 PID: 30430 Comm: syz-executor.5 Not tainted 4.19.97-syzkaller #0 [ 1127.281430] openvswitch: netlink: Message has 5 unknown bytes. [ 1127.286242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1127.286249] Call Trace: [ 1127.286277] dump_stack+0x197/0x210 [ 1127.286300] should_fail.cold+0xa/0x1b [ 1127.286322] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1127.299757] openvswitch: netlink: Message has 5 unknown bytes. [ 1127.301776] __should_failslab+0x121/0x190 [ 1127.301796] should_failslab+0x9/0x14 [ 1127.332062] __kmalloc+0x71/0x750 [ 1127.335537] ? perf_trace_lock+0x510/0x510 [ 1127.339796] ? mark_held_locks+0x100/0x100 [ 1127.344058] ? __tty_buffer_request_room+0x1fb/0x5c0 [ 1127.349192] __tty_buffer_request_room+0x1fb/0x5c0 [ 1127.354158] tty_insert_flip_string_fixed_flag+0x93/0x1f0 [ 1127.359731] pty_write+0x133/0x200 [ 1127.363294] ? pty_unthrottle+0x50/0x50 03:38:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) write$9p(r3, &(0x7f0000001400)="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", 0x600) sendfile(r3, r4, 0x0, 0x10000) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000080)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}], 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x0, @remote}], 0x10) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000001c0)={0x401, 0x9, 0x4, 0x20000, 0x80000001, {0x0, 0x7530}, {0x1, 0x0, 0xfc, 0x5, 0x34, 0x10, "9290b9b1"}, 0x8, 0x3, @fd=r3, 0x1, 0x0, r5}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={r7, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x2, @remote, 0x3}, @in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x80000000}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e24, 0x6, @loopback, 0xe7f3}]}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000000)={r7, @in={{0x2, 0x4e20, @remote}}, [0x7, 0xfffffffffffff49c, 0xfff, 0x3f, 0x6, 0x1000, 0x1, 0x0, 0x100000000, 0x10000, 0x19, 0x96, 0x81, 0x95, 0x5]}, &(0x7f0000000100)=0x100) [ 1127.367295] n_hdlc_send_frames+0x271/0x450 [ 1127.371656] n_hdlc_tty_write+0x5c8/0x6c0 [ 1127.375998] ? n_hdlc_tty_poll+0x370/0x370 [ 1127.380377] ? __might_fault+0xfb/0x1e0 [ 1127.384376] ? wake_up_q+0x100/0x100 [ 1127.388112] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1127.393684] ? _copy_from_user+0xdd/0x150 [ 1127.397866] tty_write+0x458/0x7a0 [ 1127.401467] ? n_hdlc_tty_poll+0x370/0x370 [ 1127.405734] __vfs_write+0x114/0x810 [ 1127.409572] ? tty_read+0x2a0/0x2a0 [ 1127.413222] ? kernel_read+0x120/0x120 [ 1127.417228] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1127.422873] ? __inode_security_revalidate+0xda/0x120 [ 1127.428088] ? avc_policy_seqno+0xd/0x70 [ 1127.432522] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1127.437652] ? selinux_file_permission+0x92/0x550 [ 1127.442669] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1127.446323] audit: type=1804 audit(2000000321.120:470): pid=30477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir863204981/syzkaller.mz5nJd/1854/file0" dev="sda1" ino=16631 res=1 [ 1127.448349] ? security_file_permission+0x89/0x230 [ 1127.448369] ? rw_verify_area+0x118/0x360 [ 1127.475538] audit: type=1800 audit(2000000321.120:471): pid=30477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16631 res=0 [ 1127.480338] vfs_write+0x20c/0x560 [ 1127.480362] ksys_write+0x14f/0x2d0 [ 1127.514315] ? __ia32_sys_read+0xb0/0xb0 [ 1127.518441] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1127.523839] __x64_sys_write+0x73/0xb0 [ 1127.527735] do_syscall_64+0xfd/0x620 [ 1127.531541] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1127.536740] RIP: 0033:0x45b159 [ 1127.539936] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1127.559236] RSP: 002b:00007f81cfa34c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1127.567219] RAX: ffffffffffffffda RBX: 00007f81cfa356d4 RCX: 000000000045b159 [ 1127.574486] RDX: 00000000fffffe00 RSI: 0000000020000040 RDI: 0000000000000003 [ 1127.581754] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1127.589028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1127.596410] R13: 0000000000000be7 R14: 00000000004c8747 R15: 0000000000000005 03:38:41 executing program 5 (fault-call:2 fault-nth:6): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) 03:38:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x3, 0x8, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x84f}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000050}, 0x2000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r4, r0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) preadv(r4, &(0x7f0000000280)=[{&(0x7f0000000340)=""/152, 0x98}, {&(0x7f0000000400)=""/184, 0xb8}], 0x2, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f0000000040)={'netdevsim0\x00', {0x2, 0x4e24, @rand_addr=0x5d}}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r6], 0x0, 0xffffff7f, 0x0}) 03:38:41 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x5421, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0x1}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x1, 0x480000) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000100)={0x1, 0x4}, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r4, 0x40140921, &(0x7f0000000100)={0x0, 0x1f, 0x0, 0x0}) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, 0xfffffffffffffffe) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r0) 03:38:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) [ 1127.640400] audit: type=1800 audit(2000000321.490:472): pid=30477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16631 res=0 03:38:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000480)={0x0, 0xf0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) [ 1127.689733] input: syz0 as /devices/virtual/input/input191 03:38:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400202) ioctl$PPPIOCGMRU(r5, 0x80047453, &(0x7f0000000040)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000033000505d25a80648c63940d0424fc60100010400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f00000000c0)={r6, 0x7, 0x0, "3770128a7212063267e5a593fe657b09f182aa73d09b146113fa88ec24799e5024"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="4419f0ddf162098e9346a50000"], 0x0, 0xffffff7f, 0x0}) [ 1127.772710] md: invalid raid superblock magic on mtdblock0 [ 1127.798323] md: mtdblock0 does not have a valid v0.0 superblock, not importing! 03:38:41 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x5450, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:41 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4$nfc_llcp(r3, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x0) ioctl$void(r4, 0xc0045878) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$IP6T_SO_GET_REVISION_MATCH(r6, 0x29, 0x44, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400202) ioctl$TUNGETFILTER(r8, 0x801054db, &(0x7f0000000140)=""/197) setsockopt$inet6_MRT6_ADD_MIF(r6, 0x29, 0xd0, 0x0, 0x0) [ 1127.828161] openvswitch: netlink: Message has 5 unknown bytes. [ 1127.857189] md: md_import_device returned -22 [ 1127.873673] FAULT_INJECTION: forcing a failure. [ 1127.873673] name failslab, interval 1, probability 0, space 0, times 0 [ 1127.887871] CPU: 0 PID: 30608 Comm: syz-executor.5 Not tainted 4.19.97-syzkaller #0 [ 1127.895980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1127.905462] Call Trace: [ 1127.908086] dump_stack+0x197/0x210 [ 1127.911757] should_fail.cold+0xa/0x1b [ 1127.915676] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1127.920813] __should_failslab+0x121/0x190 [ 1127.925069] should_failslab+0x9/0x14 [ 1127.929063] __kmalloc+0x71/0x750 [ 1127.932529] ? perf_trace_lock+0x510/0x510 [ 1127.936929] ? mark_held_locks+0x100/0x100 [ 1127.941185] ? __tty_buffer_request_room+0x1fb/0x5c0 [ 1127.946330] __tty_buffer_request_room+0x1fb/0x5c0 [ 1127.951542] tty_insert_flip_string_fixed_flag+0x93/0x1f0 [ 1127.957122] ? do_raw_spin_lock+0xd7/0x250 [ 1127.961378] pty_write+0x133/0x200 [ 1127.964951] ? pty_unthrottle+0x50/0x50 [ 1127.968932] n_hdlc_send_frames+0x271/0x450 [ 1127.973378] n_hdlc_tty_write+0x5c8/0x6c0 [ 1127.977546] ? n_hdlc_tty_poll+0x370/0x370 [ 1127.981791] ? __might_fault+0xfb/0x1e0 [ 1127.985787] ? wake_up_q+0x100/0x100 [ 1127.989518] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1127.995218] ? _copy_from_user+0xdd/0x150 [ 1127.999390] tty_write+0x458/0x7a0 [ 1128.003037] ? n_hdlc_tty_poll+0x370/0x370 [ 1128.007366] __vfs_write+0x114/0x810 [ 1128.011084] ? tty_read+0x2a0/0x2a0 [ 1128.014722] ? kernel_read+0x120/0x120 [ 1128.018622] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1128.024318] ? __inode_security_revalidate+0xda/0x120 [ 1128.029604] ? avc_policy_seqno+0xd/0x70 [ 1128.033677] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1128.038708] ? selinux_file_permission+0x92/0x550 [ 1128.043593] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1128.049768] ? security_file_permission+0x89/0x230 [ 1128.054800] ? rw_verify_area+0x118/0x360 [ 1128.058969] vfs_write+0x20c/0x560 [ 1128.062619] ksys_write+0x14f/0x2d0 [ 1128.066252] ? __ia32_sys_read+0xb0/0xb0 [ 1128.070327] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1128.076425] __x64_sys_write+0x73/0xb0 [ 1128.080318] do_syscall_64+0xfd/0x620 [ 1128.084129] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1128.089341] RIP: 0033:0x45b159 [ 1128.092543] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1128.111807] RSP: 002b:00007f81cfa34c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1128.119549] RAX: ffffffffffffffda RBX: 00007f81cfa356d4 RCX: 000000000045b159 03:38:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000480)={0x0, 0x1a0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) [ 1128.127000] RDX: 00000000fffffe00 RSI: 0000000020000040 RDI: 0000000000000003 [ 1128.134291] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1128.141565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1128.149459] R13: 0000000000000be7 R14: 00000000004c8747 R15: 0000000000000006 [ 1128.164412] binder: 30597:30598 unknown command -571467452 03:38:42 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x5451, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1128.186105] binder: 30597:30598 ioctl c0306201 20000080 returned -22 [ 1128.198062] uinput: write device info first 03:38:42 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@rc={0x1f, {0xff, 0x81, 0x1, 0x2, 0x3, 0x1}, 0x92}, 0x80, &(0x7f0000000200), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x218}, 0x20000880) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xd0, 0x0, 0x0) 03:38:42 executing program 5 (fault-call:2 fault-nth:7): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) 03:38:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000480)={0x0, 0x300, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) 03:38:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x10000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0xffffff7f, 0x0}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f00000000c0)) 03:38:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x410001, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000100)={{0x34, @multicast2, 0x4e23, 0x2, 'lc\x00', 0x20, 0x8, 0x3c}, {@empty, 0x4e22, 0x10000, 0xffffffff, 0x4bf6, 0x1}}, 0x44) dup2(r3, r0) 03:38:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000480)={0x0, 0x96f, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) [ 1128.403839] binder_alloc: 30831: binder_alloc_buf, no vma 03:38:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = accept4(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000080)=0x80, 0x800) r3 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x88000}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e74e7dea10617fba419820b8179343a3e37bb0f3f6b37da452e667aae5", @ANYRES16=r4, @ANYBLOB="000025bd7000fddbdf25130000003400050007000100696200001c000200080003000000500008000300ede1000008000200000000000c00020008000200ffffffff1c0006800400020008000100ffffff7f040002000400020004000200180005000c000200080003000000000008000100"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x1e8, r4, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @mcast2, 0x2000004}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x5, 0xad, @local, 0xffff504a}}}}]}, @TIPC_NLA_MEDIA={0x84, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe2d5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4f90}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd16}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f00000003c0)={[], 0x0, 0x8, 0x7, 0x0, 0xe554, 0x3000, 0x1000, [], 0x5}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000680)=[@in6={0xa, 0x4e21, 0x2, @mcast2, 0x5}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e21, 0x400, @empty, 0x1}, @in={0x2, 0x4e23, @rand_addr=0x401}, @in6={0xa, 0x4e23, 0xfffffde6, @mcast1, 0x6}], 0x74) [ 1128.463234] input: syz0 as /devices/virtual/input/input193 03:38:42 executing program 1: getuid() r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000040)={r5}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/mls\x00', 0x0, 0x0) sendto$x25(r6, &(0x7f00000000c0)="9c76d866543149081ba0a38f52c730d6a9541f7eb78c5e4a35e153327b554dbc482e88585cbdf61989f7937f4707f3f3cc43e292c317fceb9711d72c960f969a825784fbb9616293aa4b6cf794831bad5f00cfc90f781204cab04402cc9ebe7961d09f1d792a39b8706ee19f766a9c7c2748534cf91768fd749c16e7fd03ff22720499c2e0fd207400b4915110abd03de75e6569a87302319633205c9ea2dbb2e15f5a861c487206109f20bc171d30", 0xaf, 0x40844, &(0x7f0000000180)={0x9, @remote={[], 0x2}}, 0x12) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05740371370440000000000000000000008a88e826168baedf897ec08e954cc9a38fde585a44e9fa32b42d1ca29f4926d4746efcff71a2aa779d748bc2126bb6810b5b3477c7fb70e38670718a96a7bed186ced873f31910b3ecd1a7148f969a8fe6da385a6b7dbc39ecf2ce92569a176d11bab724426c2d49d0d2279059214b57c0b684ff227e29a159e1ed5fa8e06b"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r8 = dup2(r7, r0) syz_open_dev$binderN(0x0, 0x0, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$BINDER_SET_CONTEXT_MGR(r10, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0xffffff7f, 0x0}) ioctl$TUNGETIFF(r8, 0x800454d2, &(0x7f00000001c0)) 03:38:42 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x5452, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000480)={0x0, 0xa00, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) 03:38:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fgetxattr(r1, &(0x7f0000000080)=@known='trusted.overlay.redirect\x00', &(0x7f00000000c0)=""/97, 0x61) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f0000000140)) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xd0, 0x0, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80000) ioctl$VHOST_SET_VRING_NUM(r5, 0x4008af10, &(0x7f0000000040)={0x2, 0xfffffbc2}) [ 1128.604706] uinput: write device info first [ 1128.609968] FAULT_INJECTION: forcing a failure. [ 1128.609968] name failslab, interval 1, probability 0, space 0, times 0 [ 1128.621366] CPU: 0 PID: 30955 Comm: syz-executor.5 Not tainted 4.19.97-syzkaller #0 [ 1128.626163] binder: 30950:30951 unknown command 1896051717 [ 1128.629283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1128.629289] Call Trace: [ 1128.629315] dump_stack+0x197/0x210 [ 1128.629390] should_fail.cold+0xa/0x1b [ 1128.654738] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1128.659884] __should_failslab+0x121/0x190 [ 1128.664281] should_failslab+0x9/0x14 [ 1128.668107] __kmalloc+0x71/0x750 [ 1128.671587] ? perf_trace_lock+0x510/0x510 [ 1128.675966] ? mark_held_locks+0x100/0x100 [ 1128.680226] ? __tty_buffer_request_room+0x1fb/0x5c0 [ 1128.685370] __tty_buffer_request_room+0x1fb/0x5c0 [ 1128.690334] tty_insert_flip_string_fixed_flag+0x93/0x1f0 [ 1128.695917] pty_write+0x133/0x200 [ 1128.698925] binder: 30950:30951 ioctl c0306201 20000200 returned -22 [ 1128.699511] ? pty_unthrottle+0x50/0x50 [ 1128.699526] n_hdlc_send_frames+0x271/0x450 [ 1128.699549] n_hdlc_tty_write+0x5c8/0x6c0 [ 1128.718904] ? n_hdlc_tty_poll+0x370/0x370 [ 1128.723263] ? __might_fault+0xfb/0x1e0 [ 1128.727266] ? wake_up_q+0x100/0x100 [ 1128.731021] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1128.736581] ? _copy_from_user+0xdd/0x150 [ 1128.740752] tty_write+0x458/0x7a0 [ 1128.744319] ? n_hdlc_tty_poll+0x370/0x370 [ 1128.748783] __vfs_write+0x114/0x810 03:38:42 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x5460, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1128.752528] ? tty_read+0x2a0/0x2a0 [ 1128.756196] ? kernel_read+0x120/0x120 [ 1128.760110] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1128.765693] ? __inode_security_revalidate+0xda/0x120 [ 1128.770938] ? avc_policy_seqno+0xd/0x70 [ 1128.775156] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1128.780200] ? selinux_file_permission+0x92/0x550 [ 1128.785069] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1128.790629] ? security_file_permission+0x89/0x230 [ 1128.795587] ? rw_verify_area+0x118/0x360 [ 1128.799761] vfs_write+0x20c/0x560 03:38:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x6, 0x20000, 0x0, 0x7ffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/create\x00', 0x2, 0x0) [ 1128.803586] ksys_write+0x14f/0x2d0 [ 1128.807240] ? __ia32_sys_read+0xb0/0xb0 [ 1128.811456] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1128.816861] __x64_sys_write+0x73/0xb0 [ 1128.820964] do_syscall_64+0xfd/0x620 [ 1128.824809] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1128.830024] RIP: 0033:0x45b159 [ 1128.833247] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1128.852357] RSP: 002b:00007f81cfa34c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1128.860184] RAX: ffffffffffffffda RBX: 00007f81cfa356d4 RCX: 000000000045b159 [ 1128.867484] RDX: 00000000fffffe00 RSI: 0000000020000040 RDI: 0000000000000003 [ 1128.874783] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1128.882220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1128.889511] R13: 0000000000000be7 R14: 00000000004c8747 R15: 0000000000000007 03:38:42 executing program 5 (fault-call:2 fault-nth:8): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) 03:38:42 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x8901, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x8000) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) 03:38:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r2, 0xc0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x7, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x4, 0x2}, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x9, 0x6, 0x800}, &(0x7f0000000140)=0x9, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x4}}, 0x10) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r4, r0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) mount$9p_xen(&(0x7f0000000340)='syz\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x6, &(0x7f0000000400)={'trans=xen,', {[{@version_9p2000='version=9p2000'}, {@access_any='access=any'}], [{@audit='audit'}, {@pcr={'pcr', 0x3d, 0x8}}, {@uid_eq={'uid'}}, {@seclabel='seclabel'}, {@permit_directio='permit_directio'}]}}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0xffffff7f, 0x0}) 03:38:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x200}, 'syz0\x00'}) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) read$snddsp(r5, &(0x7f00000001c0)=""/140, 0x8c) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_DEV_CREATE(r0, 0x5501) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000000c0)={0x6, {{0xa, 0x4e23, 0xffffffc0, @mcast1, 0x9}}}, 0x88) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r6, r0) 03:38:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000480)={0x0, 0xe00, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) 03:38:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x181) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) [ 1129.064480] uinput: write device info first [ 1129.095040] FAULT_INJECTION: forcing a failure. [ 1129.095040] name failslab, interval 1, probability 0, space 0, times 0 [ 1129.106296] CPU: 1 PID: 31353 Comm: syz-executor.5 Not tainted 4.19.97-syzkaller #0 [ 1129.114110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1129.123480] Call Trace: [ 1129.126097] dump_stack+0x197/0x210 [ 1129.129888] should_fail.cold+0xa/0x1b [ 1129.133830] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1129.139089] __should_failslab+0x121/0x190 03:38:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x9) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0xffffff7f, 0x0}) 03:38:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000480)={0x0, 0xf00, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) [ 1129.143356] should_failslab+0x9/0x14 [ 1129.147188] __kmalloc+0x71/0x750 [ 1129.150677] ? perf_trace_lock+0x510/0x510 [ 1129.155048] ? mark_held_locks+0x100/0x100 [ 1129.159307] ? __tty_buffer_request_room+0x1fb/0x5c0 [ 1129.164460] __tty_buffer_request_room+0x1fb/0x5c0 [ 1129.169420] tty_insert_flip_string_fixed_flag+0x93/0x1f0 [ 1129.174985] ? do_raw_spin_lock+0xd7/0x250 [ 1129.179406] pty_write+0x133/0x200 [ 1129.182978] ? pty_unthrottle+0x50/0x50 [ 1129.187001] n_hdlc_send_frames+0x271/0x450 [ 1129.191513] n_hdlc_tty_write+0x5c8/0x6c0 [ 1129.195705] ? n_hdlc_tty_poll+0x370/0x370 [ 1129.199961] ? __might_fault+0xfb/0x1e0 [ 1129.203994] ? wake_up_q+0x100/0x100 [ 1129.207760] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1129.213339] ? _copy_from_user+0xdd/0x150 [ 1129.217633] tty_write+0x458/0x7a0 [ 1129.221206] ? n_hdlc_tty_poll+0x370/0x370 [ 1129.225472] __vfs_write+0x114/0x810 [ 1129.229213] ? tty_read+0x2a0/0x2a0 [ 1129.232860] ? kernel_read+0x120/0x120 [ 1129.236779] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 03:38:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x100000000}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) [ 1129.242459] ? __inode_security_revalidate+0xda/0x120 [ 1129.247683] ? avc_policy_seqno+0xd/0x70 [ 1129.251760] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1129.256800] ? selinux_file_permission+0x92/0x550 [ 1129.261700] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1129.267426] ? security_file_permission+0x89/0x230 [ 1129.272484] ? rw_verify_area+0x118/0x360 [ 1129.276655] vfs_write+0x20c/0x560 [ 1129.280241] ksys_write+0x14f/0x2d0 [ 1129.283893] ? __ia32_sys_read+0xb0/0xb0 [ 1129.287972] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe 03:38:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000480)={0x0, 0x3f00, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) [ 1129.293363] __x64_sys_write+0x73/0xb0 [ 1129.297288] do_syscall_64+0xfd/0x620 [ 1129.301267] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1129.306621] RIP: 0033:0x45b159 [ 1129.309835] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1129.328867] RSP: 002b:00007f81cfa34c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1129.336597] RAX: ffffffffffffffda RBX: 00007f81cfa356d4 RCX: 000000000045b159 03:38:43 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x8902, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1129.344147] RDX: 00000000fffffe00 RSI: 0000000020000040 RDI: 0000000000000003 [ 1129.351439] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1129.358728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1129.366206] R13: 0000000000000be7 R14: 00000000004c8747 R15: 0000000000000008 03:38:43 executing program 5 (fault-call:2 fault-nth:9): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) 03:38:43 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x17, 0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x0, 0xffffff7f, 0x0}) 03:38:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000480)={0x0, 0x6000, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) 03:38:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) write$9p(r3, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600) sendfile(r3, r4, 0x0, 0x10000) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000080)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}], 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x0, @remote}], 0x10) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000001c0)={0x401, 0x9, 0x4, 0x20000, 0x80000001, {0x0, 0x7530}, {0x1, 0x0, 0xfc, 0x5, 0x34, 0x10, "9290b9b1"}, 0x8, 0x3, @fd=r3, 0x1, 0x0, r5}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={r7, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x2, @remote, 0x3}, @in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x80000000}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e24, 0x6, @loopback, 0xe7f3}]}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x7fffffff, 0xff, 0x2, 0x7, 0x2, r7}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={r8, 0x9aed}, &(0x7f00000000c0)=0x8) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) [ 1129.482721] binder: 31460:31468 unknown command 926363952 [ 1129.513653] binder: 31460:31468 ioctl c0306201 20000080 returned -22 [ 1129.531474] FAULT_INJECTION: forcing a failure. [ 1129.531474] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1129.543336] CPU: 1 PID: 31522 Comm: syz-executor.5 Not tainted 4.19.97-syzkaller #0 [ 1129.551142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1129.556977] binder: BINDER_SET_CONTEXT_MGR already set [ 1129.560502] Call Trace: [ 1129.560526] dump_stack+0x197/0x210 [ 1129.560549] should_fail.cold+0xa/0x1b [ 1129.570873] audit: type=1804 audit(2000000323.420:473): pid=31529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir863204981/syzkaller.mz5nJd/1863/file0" dev="sda1" ino=16668 res=1 [ 1129.572190] ? pty_write+0x133/0x200 [ 1129.572210] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1129.572228] ? __x64_sys_write+0x73/0xb0 [ 1129.581176] audit: type=1800 audit(2000000323.430:474): pid=31529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16668 res=0 [ 1129.603340] ? do_syscall_64+0xfd/0x620 [ 1129.603357] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1129.603374] ? debug_smp_processor_id+0x1c/0x20 [ 1129.603389] ? perf_trace_lock_acquire+0xf5/0x580 [ 1129.603409] __alloc_pages_nodemask+0x1ee/0x750 [ 1129.603423] ? perf_trace_lock+0x510/0x510 [ 1129.603441] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1129.603456] ? mark_held_locks+0x100/0x100 [ 1129.603472] ? perf_trace_lock_acquire+0xf5/0x580 [ 1129.603484] ? lock_downgrade+0x880/0x880 [ 1129.603501] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1129.603517] cache_grow_begin+0x91/0x8c0 [ 1129.603531] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1129.603547] __kmalloc+0x68b/0x750 [ 1129.603565] ? __tty_buffer_request_room+0x1fb/0x5c0 [ 1129.603580] __tty_buffer_request_room+0x1fb/0x5c0 [ 1129.603598] tty_insert_flip_string_fixed_flag+0x93/0x1f0 [ 1129.603612] ? do_raw_spin_lock+0xd7/0x250 [ 1129.603630] pty_write+0x133/0x200 [ 1129.603643] ? pty_unthrottle+0x50/0x50 [ 1129.603658] n_hdlc_send_frames+0x271/0x450 [ 1129.603682] n_hdlc_tty_write+0x5c8/0x6c0 [ 1129.603703] ? n_hdlc_tty_poll+0x370/0x370 [ 1129.603714] ? __might_fault+0xfb/0x1e0 [ 1129.603729] ? wake_up_q+0x100/0x100 [ 1129.603746] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1129.603759] ? _copy_from_user+0xdd/0x150 [ 1129.603775] tty_write+0x458/0x7a0 [ 1129.603793] ? n_hdlc_tty_poll+0x370/0x370 [ 1129.603810] __vfs_write+0x114/0x810 [ 1129.603824] ? tty_read+0x2a0/0x2a0 [ 1129.603838] ? kernel_read+0x120/0x120 [ 1129.603851] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1129.603867] ? __inode_security_revalidate+0xda/0x120 [ 1129.603881] ? avc_policy_seqno+0xd/0x70 [ 1129.603892] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1129.603905] ? selinux_file_permission+0x92/0x550 [ 1129.603920] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1129.603937] ? security_file_permission+0x89/0x230 [ 1129.603952] ? rw_verify_area+0x118/0x360 [ 1129.603968] vfs_write+0x20c/0x560 [ 1129.603985] ksys_write+0x14f/0x2d0 [ 1129.604001] ? __ia32_sys_read+0xb0/0xb0 [ 1129.604016] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1129.604033] __x64_sys_write+0x73/0xb0 [ 1129.604049] do_syscall_64+0xfd/0x620 [ 1129.604065] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1129.604076] RIP: 0033:0x45b159 [ 1129.604091] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:38:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 03:38:43 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x8903, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:43 executing program 5 (fault-call:2 fault-nth:10): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) 03:38:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000480)={0x0, 0x6f09, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) [ 1129.604099] RSP: 002b:00007f81cfa34c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1129.604112] RAX: ffffffffffffffda RBX: 00007f81cfa356d4 RCX: 000000000045b159 [ 1129.604120] RDX: 00000000fffffe00 RSI: 0000000020000040 RDI: 0000000000000003 [ 1129.604128] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1129.604135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1129.604143] R13: 0000000000000be7 R14: 00000000004c8747 R15: 0000000000000009 [ 1129.615341] binder: 31460:31468 ioctl 40046207 0 returned -16 03:38:43 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05630440ea6ed776be0e805b71a6651633984f0374d666f3c9f724449843474d4972da3509980b193e19c6f6620c4e4da71df8a5a5c80baf0a1c5a3cae1d7c41feda37de5c01361514b26294e593e77c046a72295b3270f20765b5d5e189ade3d85b4019e5f742218c418d23da27d3ccdf750fab8aa93a12e9aead3cc2b7"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) r4 = dup2(r2, r3) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0xffffff7f, 0x0}) setsockopt$netrom_NETROM_T4(r4, 0x103, 0x6, &(0x7f0000000040), 0x4) 03:38:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 1129.961512] audit: type=1800 audit(2000000323.810:475): pid=31533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16668 res=0 03:38:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TIOCSETD(r0, 0x5437, 0x0) 03:38:43 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x8904, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) [ 1130.047459] input: syz0 as /devices/virtual/input/input196 [ 1130.056962] binder: BINDER_SET_CONTEXT_MGR already set 03:38:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000480)={0x0, 0xf000, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) [ 1130.099741] binder: 31754:31755 ioctl 40046207 0 returned -16 03:38:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x20000000041bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) 03:38:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0xc00) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x1002) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r6 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) write$9p(r5, &(0x7f0000001400)="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", 0x600) sendfile(r5, r6, 0x0, 0x10000) ioctl$BLKROTATIONAL(r5, 0x127e, &(0x7f0000000080)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}], 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x0, @remote}], 0x10) ioctl$VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f00000001c0)={0x401, 0x9, 0x4, 0x20000, 0x80000001, {0x0, 0x7530}, {0x1, 0x0, 0xfc, 0x5, 0x34, 0x10, "9290b9b1"}, 0x8, 0x3, @fd=r5, 0x1, 0x0, r7}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={r9, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x2, @remote, 0x3}, @in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x80000000}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e24, 0x6, @loopback, 0xe7f3}]}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000240)={r9, @in6={{0xa, 0x4e20, 0x6bd, @empty, 0x6}}, 0x7, 0x1, 0x5, 0x4, 0x8e, 0x7, 0x4}, 0x9c) dup2(r2, r0) r10 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r10, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05630440000000000063404001c5f3f43d5dd6e0be6ee65f62345cee1a04be95fe102ceb9b0a566aa2ef16d701000000530daaafe7c9ee08ea7641110beebebbc6bbcc557bbfd1010000000100000010c728ea7ab4725d7cb763a2081554fc8a0488a2def7710757dd1add23fd28f3402eb2953e41b0f68e6502244fc2128d6c35bc73d1b0c26a2269772dc7666ebc9ad757d49d387cae201508de34a21a024f458b29c62e3f55859cba0851d4682d2faa"], 0x0, 0xffffff7f, 0x0}) [ 1130.180854] uinput: write device info first 03:38:44 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x8906, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 03:38:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000480)={0x0, 0x30000, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) 03:38:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe02) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 1130.267459] audit: type=1804 audit(2000000324.120:476): pid=31877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir549291058/syzkaller.vsty08/2047/file0" dev="sda1" ino=16652 res=1 [ 1130.310973] input: syz0 as /devices/virtual/input/input198 03:38:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x7f, 0x10, 0x8, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x28102, 0x2, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) 03:38:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/247, 0xf7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r2, r0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563c98098d155770440000000d90763404001"], 0x0, 0xffffff7f, 0x0}) 03:38:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000480)={0x0, 0x34000, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) [ 1130.425365] input: syz0 as /devices/virtual/input/input199 [ 1130.430474] audit: type=1800 audit(2000000324.180:477): pid=31877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16652 res=0 03:38:44 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x8907, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000480)={0x0, 0x400300, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) [ 1130.566572] binder: 32004:32007 unknown command -2134285563 03:38:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0x11ffffe40) ioctl$TIOCSETD(r0, 0x5437, 0x0) 03:38:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) 03:38:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="6f73322e009ba56935beaeadb5a684d86f66cd4380e6da6e1d94bc332f8422b0083a699c08eb29bce939a5f149f4a40ca326e9a0a0e2a2bda50cfba7be33de353423ab197b72c784a92a8641396e8afa9a79401a7d54785488cc7755e58190b020c97764068452f20ff89c257bec816b30a1df6ad031281718d10a9b68e44667548a57024ded9a6ec7645fe656ee30bf2c"]) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x81) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x30, r5, 0xa995953144e8a667, 0x0, 0x0, {{}, {0x0, 0x3}, {0x14, 0x18, {0xe00, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r5, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x6}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x10) dup2(r1, r0) [ 1130.613490] binder: 32004:32007 ioctl c0306201 20000080 returned -22 03:38:44 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x85, 0x34343452, 0x6, 0x0, 0x3, @discrete={0x40, 0x4}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0xf6c94b6, 0x10000) ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x6, 0x0, [0x1, 0x5, 0x9019, 0x3c93, 0xf452], 0x9}) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @loopback}, 0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='team_slave_1\x00', 0x6, 0x0, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x3c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)={0x2, 'veth0_vlan\x00', {0xb1b}, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 03:38:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$PNPIPE_HANDLE(r6, 0x113, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0xffffff7f, 0x0}) [ 1130.715628] input: syz0 as /devices/virtual/input/input200 03:38:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000480)={0x0, 0x8000a0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) 03:38:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x9, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clock_settime(0x1, &(0x7f0000000000)={0x77359400}) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x0) 03:38:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0